This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/E7BA6B5CEE3C11F08BE2E90E4D6F56BC.roa
File: E7BA6B5CEE3C11F08BE2E90E4D6F56BC.roa (raw, json)
Hash identifier: rRlpIuJAMnatI2Dbqg+jUeVqwlRqRNyDFSXM2mGg2Js=
Subject key identifier: 98:F5:AB:EC:9C:B4:35:3C:73:0E:16:23:8B:90:CE:F9:DD:F1:E2:79
Certificate issuer: /CN=A91CEBAA/serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170
Certificate serial: 0240
Authority key identifier: 32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/E7BA6B5CEE3C11F08BE2E90E4D6F56BC.roa
Signing time: Sat 10 Jan 2026 15:56:20 +0000
ROA not before: Sat 10 Jan 2026 15:56:20 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 149870
IP address blocks: 103.189.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl
rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:34:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 576 (0x240)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEBAA, serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170
Validity
Not Before: Jan 10 15:56:20 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=696276a4-da94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:22:d4:db:78:2d:59:04:a9:ed:47:2c:b2:d8:
67:b7:21:80:f9:d6:9a:a3:c3:1c:94:85:f9:5d:a5:
bf:b7:fc:ef:29:a8:06:a6:b4:11:24:1a:06:15:15:
dd:6f:e7:27:74:a3:d9:26:68:0a:4a:42:06:2a:b6:
34:17:e4:ce:27:e7:4b:a3:aa:fe:f4:df:c6:3f:ff:
ac:15:db:93:ba:b6:f7:9e:7d:aa:36:e3:74:77:f3:
da:11:11:b7:33:06:96:81:de:9f:d9:c6:c2:0b:90:
00:b7:39:32:ad:e0:f3:7c:79:57:5d:92:94:06:46:
de:8a:e2:23:bf:d5:79:13:55:ff:12:f7:8a:6f:cb:
0b:9c:88:d3:35:73:5d:dd:bf:b3:84:9c:1f:c3:78:
64:71:a3:1f:6d:42:f2:9c:c4:e0:84:5f:a8:8a:6c:
01:f7:a2:81:86:72:27:45:44:c2:ea:17:23:de:8c:
4e:8e:ac:38:92:26:a5:88:d0:d4:2a:9d:a6:22:e3:
f3:5b:bd:96:b5:4d:44:65:c0:a0:2a:8f:5a:68:58:
4e:6a:0c:22:85:16:39:d3:8c:d1:d7:cc:b7:1d:b7:
8b:44:13:88:50:1a:cc:e8:07:bb:97:a0:47:86:c6:
df:ed:e8:5c:55:21:17:70:e2:a1:df:59:ec:5e:28:
6e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F5:AB:EC:9C:B4:35:3C:73:0E:16:23:8B:90:CE:F9:DD:F1:E2:79
X509v3 Authority Key Identifier:
keyid:32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/E7BA6B5CEE3C11F08BE2E90E4D6F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.189.233.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:98:55:f6:f7:be:11:9c:ae:44:a9:50:6d:4f:ba:82:3d:56:
25:6a:81:b8:ed:80:47:68:3e:65:c3:8c:7f:5f:2b:2a:5d:83:
73:7a:42:5d:6e:5a:9b:e4:89:eb:dd:0f:65:65:04:bb:ce:16:
f3:76:d4:47:1d:bb:9e:e8:28:4a:0d:95:d5:f4:31:ea:b0:67:
92:82:d2:f1:de:7e:91:31:8e:63:05:f3:58:53:1b:d8:f1:12:
93:18:c5:a6:1d:51:99:42:7f:7a:91:22:aa:5d:76:fb:1b:5f:
89:b2:67:54:45:62:e2:60:b5:64:7e:f3:77:e5:74:ae:e1:39:
95:30:23:ac:24:17:d1:28:20:cb:a8:75:69:78:02:21:7d:8c:
d7:67:a5:39:00:e1:45:f0:af:6a:8c:90:3d:64:2f:aa:25:c4:
88:46:d6:c7:cc:fc:d9:33:39:12:b8:4e:08:fb:bc:a0:fd:ec:
bc:db:4a:5f:98:9f:a7:aa:c7:18:fa:dd:16:ee:cd:a7:17:ca:
7a:2d:6f:d4:75:cb:42:2d:d0:aa:53:f8:53:64:cd:ef:3b:f6:
07:f7:97:95:ab:8a:8e:19:98:d4:14:55:59:8b:76:41:fa:4f:
32:60:ec:98:3a:ff:c2:15:6e:4a:dc:27:7d:cf:c4:b5:1d:71:
a2:e2:60:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:28:38 2026 by rpki-client