This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/F27C04B8779E11E997C0204AC4F9AE02.roa
File: F27C04B8779E11E997C0204AC4F9AE02.roa (raw, json)
Hash identifier: PC0yewcBGOHCUfaxZkh95BTHNrPHiXnNi3ncb6P6Ep4=
Subject key identifier: 50:7E:BE:60:1E:70:D8:13:10:F3:52:3E:8E:05:92:CF:3E:44:9E:54
Certificate issuer: /CN=A91CE392/serialNumber=5735AB6AAC327954424F9FE8CA85334299DD7BC2
Certificate serial: 0FA8
Authority key identifier: 57:35:AB:6A:AC:32:79:54:42:4F:9F:E8:CA:85:33:42:99:DD:7B:C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/F27C04B8779E11E997C0204AC4F9AE02.roa
Signing time: Tue 28 Oct 2025 17:36:05 +0000
ROA not before: Tue 28 Oct 2025 17:36:05 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 134702
IP address blocks: 103.77.188.0/22 maxlen: 22
103.77.188.0/23 maxlen: 23
103.77.188.0/24 maxlen: 24
103.77.189.0/24 maxlen: 24
103.77.190.0/23 maxlen: 23
103.77.190.0/24 maxlen: 24
103.77.191.0/24 maxlen: 24
2407:9d80::/32 maxlen: 32
2407:9d80::/48 maxlen: 48
2407:9d80:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.crl
rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 16:59:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4008 (0xfa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE392, serialNumber=5735AB6AAC327954424F9FE8CA85334299DD7BC2
Validity
Not Before: Oct 28 17:36:05 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6900ff05-faed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bc:44:39:11:87:94:94:73:9a:1b:9b:5c:ea:
cc:7e:b2:f2:56:04:e0:18:d7:39:14:2d:60:b0:d5:
24:49:25:f6:76:ab:bb:18:d2:78:4d:91:b6:f1:0d:
fb:60:e9:da:33:32:f0:39:76:2f:2a:23:9b:28:23:
91:3a:5f:ef:78:c2:3f:68:88:e7:3e:53:78:7e:21:
35:bb:57:82:00:e4:e1:cd:50:18:86:97:1f:b7:14:
9b:c2:95:9e:b4:92:5b:9f:c0:b1:30:2a:aa:82:20:
c4:ab:3b:59:96:69:e6:ff:23:e2:4b:01:e6:8c:70:
e7:03:7b:4f:11:34:12:0d:7f:ea:51:14:91:73:da:
66:7b:0d:41:93:25:54:09:58:a7:c6:21:d0:ac:94:
30:96:66:36:2f:c6:85:20:31:bc:5c:49:33:5b:f1:
68:89:1e:f8:6a:f6:ed:cd:83:0c:91:8a:5d:d3:7c:
29:90:e4:0f:dd:39:29:88:e5:57:c4:c2:12:83:a2:
2d:c7:67:7d:9f:56:0f:8d:bd:47:36:97:d1:08:2f:
1d:7b:c3:e4:d5:f3:ce:71:6b:70:19:88:bc:61:64:
19:6b:4a:5d:64:ea:bd:8b:64:26:99:52:04:9e:41:
99:01:f1:cb:a2:0c:73:1b:b6:eb:7a:38:42:fb:31:
74:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7E:BE:60:1E:70:D8:13:10:F3:52:3E:8E:05:92:CF:3E:44:9E:54
X509v3 Authority Key Identifier:
keyid:57:35:AB:6A:AC:32:79:54:42:4F:9F:E8:CA:85:33:42:99:DD:7B:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/F27C04B8779E11E997C0204AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.77.188.0/22
IPv6:
2407:9d80::/32
Signature Algorithm: sha256WithRSAEncryption
2e:d3:d4:4a:2d:6b:bc:3c:31:1d:d4:9b:a2:54:76:85:52:ef:
14:8a:6d:11:0a:c8:b7:e8:82:d4:83:ad:23:b5:dd:3b:2b:db:
e4:b6:44:e7:44:72:bb:c1:b2:c9:88:92:6e:ab:d3:2f:cf:a8:
52:b7:cd:fe:58:13:9d:aa:6a:4b:3f:78:a8:80:a9:19:ef:1f:
91:5c:c5:be:99:a3:6d:1b:4f:50:26:4f:6d:1c:96:c9:26:f4:
90:6a:f9:2a:3c:1f:6c:dc:14:bd:96:5e:29:0c:99:99:eb:28:
1e:9a:02:14:14:c2:2e:5f:73:3c:2e:2c:c0:af:cf:69:0c:a2:
fb:49:d5:9c:64:f3:09:5a:16:66:9a:6e:ff:bf:b3:b6:ef:55:
a5:cb:bd:ae:8f:17:6a:9f:5c:d4:60:2e:a6:c8:cc:f0:32:b2:
5a:30:c0:10:3b:bb:fb:27:a5:3c:5d:48:68:9d:68:f9:a6:b2:
a2:43:04:bd:ef:f6:af:ff:d7:a8:cb:71:c9:cd:17:68:5d:c7:
49:9f:7d:96:9d:4d:1b:dd:29:23:49:83:22:87:13:16:a9:6b:
7f:22:9a:b8:71:ff:1b:00:ee:03:a2:d2:63:df:8d:93:17:2e:
ef:e7:7b:1f:6b:c3:f5:50:60:72:ce:c1:1b:b5:bb:52:69:9f:
b0:33:8b:d6
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICD6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0UzOTIxMTAvBgNVBAUTKDU3MzVBQjZBQUMzMjc5NTQ0MjRGOUZFOENBODUzMzQy
OTlERDdCQzIwHhcNMjUxMDI4MTczNjA1WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTAwZmYwNS1mYWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1rxEORGHlJRzmhubXOrMfrLyVgTgGNc5FC1gsNUkSSX2dqu7GNJ4TZG28Q37
YOnaMzLwOXYvKiObKCOROl/veMI/aIjnPlN4fiE1u1eCAOThzVAYhpcftxSbwpWe
tJJbn8CxMCqqgiDEqztZlmnm/yPiSwHmjHDnA3tPETQSDX/qURSRc9pmew1BkyVU
CVinxiHQrJQwlmY2L8aFIDG8XEkzW/FoiR74avbtzYMMkYpd03wpkOQP3TkpiOVX
xMISg6Itx2d9n1YPjb1HNpfRCC8de8Pk1fPOcWtwGYi8YWQZa0pdZOq9i2QmmVIE
nkGZAfHLogxzG7brejhC+zF0EQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFFB+vmAe
cNgTEPNSPo4Fks8+RJ5UMB8GA1UdIwQYMBaAFFc1q2qsMnlUQk+f6MqFM0KZ3XvC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTM5Mi82RDZBMkEyODZD
RDgxMUU5Qjk5RkUzMjlDNEY5QUUwMi9WeldyYXF3eWVWUkNUNV9veW9VelFwbmRl
OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Z6V3JhcXd5ZVZSQ1Q1X295b1V6UXBuZGU4SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0UzOTIvNkQ2QTJBMjg2Q0Q4MTFFOUI5OUZFMzI5QzRGOUFFMDIvRjI3QzA0Qjg3
NzlFMTFFOTk3QzAyMDRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAJnTbwwDQQCAAIwBwMFACQHnYAwDQYJKoZIhvcNAQELBQAD
ggEBAC7T1Eota7w8MR3Um6JUdoVS7xSKbREKyLfogtSDrSO13Tsr2+S2ROdEcrvB
ssmIkm6r0y/PqFK3zf5YE52qaks/eKiAqRnvH5Fcxb6Zo20bT1AmT20clskm9JBq
+So8H2zcFL2WXikMmZnrKB6aAhQUwi5fczwuLMCvz2kMovtJ1Zxk8wlaFmaabv+/
s7bvVaXLva6PF2qfXNRgLqbIzPAyslowwBA7u/snpTxdSGidaPmmsqJDBL3v9q//
16jLccnNF2hdx0mffZadTRvdKSNJgyKHExapa38imrhx/xsA7gOi0mPfjZMXLu/n
ex9rw/VQYHLOwRu1u1Jpn7Azi9Y=
-----END CERTIFICATE-----
Generated at Sun Dec 7 07:30:47 2025 by rpki-client