This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D18AC/D4BA3D9896CC11EF8EFCB849C4F9AE02/34BA37F6976E11EFAEB6A258C4F9AE02.roa
File: 34BA37F6976E11EFAEB6A258C4F9AE02.roa (raw, json)
Hash identifier: nKG4pPwKWtrVlHpKnIMkHJCkL5Hz+5bCetWpaXSTQbk=
Subject key identifier: 20:1D:5B:57:7F:69:E7:76:CD:96:E5:B9:77:64:36:3C:61:23:E3:C9
Certificate issuer: /CN=A91D18AC/serialNumber=1B07549B250CFC03DDAD7B54443DA838891811CA
Certificate serial: C7
Authority key identifier: 1B:07:54:9B:25:0C:FC:03:DD:AD:7B:54:44:3D:A8:38:89:18:11:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwdUmyUM_APdrXtURD2oOIkYEco.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D18AC/D4BA3D9896CC11EF8EFCB849C4F9AE02/34BA37F6976E11EFAEB6A258C4F9AE02.roa
Signing time: Tue 11 Nov 2025 03:51:19 +0000
ROA not before: Tue 11 Nov 2025 03:51:18 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 139265
IP address blocks: 103.140.150.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D18AC/D4BA3D9896CC11EF8EFCB849C4F9AE02/GwdUmyUM_APdrXtURD2oOIkYEco.crl
rsync://rpki.apnic.net/member_repository/A91D18AC/D4BA3D9896CC11EF8EFCB849C4F9AE02/GwdUmyUM_APdrXtURD2oOIkYEco.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwdUmyUM_APdrXtURD2oOIkYEco.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:37:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 199 (0xc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D18AC, serialNumber=1B07549B250CFC03DDAD7B54443DA838891811CA
Validity
Not Before: Nov 11 03:51:18 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6912b2b6-c476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:22:37:09:5e:19:35:e1:9d:e4:64:a0:d3:4f:
5d:d5:1d:8b:8b:0a:1a:ae:b9:6e:fd:36:4b:8c:a5:
94:5e:a5:ef:7d:b5:68:7c:4b:45:fb:55:58:22:1a:
c0:4e:01:25:44:cb:34:c8:4d:d9:37:09:a2:64:60:
67:95:d5:83:e3:5f:92:c1:e6:7b:ee:43:08:93:89:
d7:ca:d6:02:26:4a:df:3a:37:d4:b0:fd:da:62:7c:
4e:ea:5b:cf:8a:c2:f1:ec:d1:49:69:89:13:41:d8:
b8:6a:d1:39:2f:02:de:16:e4:3d:95:cf:5a:20:ee:
c0:d6:9d:f9:0a:18:37:bd:27:b1:60:aa:45:1a:88:
7a:68:fc:28:db:80:a5:16:b3:d3:9c:1a:e6:34:e7:
90:a6:8e:0c:fa:b0:9c:91:20:a5:ef:f4:84:e8:22:
6a:34:bd:78:6a:b2:bd:ca:ae:60:24:77:72:9b:19:
46:50:e1:e2:0d:5b:d7:88:e5:9d:53:23:36:10:95:
4e:97:ac:a0:9c:34:08:25:dd:1b:a8:78:1f:1c:7c:
16:8a:68:73:ec:c3:26:7d:48:4b:12:b9:24:57:43:
6b:a9:20:49:2e:89:a8:66:b4:84:32:91:e7:e1:7b:
70:7b:0e:12:fa:84:21:db:cd:e2:b6:b8:ee:09:c6:
7e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:1D:5B:57:7F:69:E7:76:CD:96:E5:B9:77:64:36:3C:61:23:E3:C9
X509v3 Authority Key Identifier:
keyid:1B:07:54:9B:25:0C:FC:03:DD:AD:7B:54:44:3D:A8:38:89:18:11:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D18AC/D4BA3D9896CC11EF8EFCB849C4F9AE02/GwdUmyUM_APdrXtURD2oOIkYEco.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwdUmyUM_APdrXtURD2oOIkYEco.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D18AC/D4BA3D9896CC11EF8EFCB849C4F9AE02/34BA37F6976E11EFAEB6A258C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.140.150.0/23
Signature Algorithm: sha256WithRSAEncryption
37:66:64:7b:46:48:d9:35:2d:11:75:03:0b:7c:12:5f:c3:6f:
e6:ab:95:d0:ab:dc:19:9d:86:58:da:9d:34:c5:4b:83:6c:d9:
42:7c:5a:51:b6:c5:81:02:c2:12:8a:d3:c8:8d:14:5b:c8:12:
cd:ca:3c:a6:fa:3c:e5:6a:7a:ec:ff:9c:a8:c3:25:76:6a:98:
3d:e3:11:f2:43:e0:ac:6c:c9:ed:36:a6:13:2c:a6:ff:2b:bd:
f0:78:5f:d9:b0:09:b2:4b:d5:e8:e2:24:b5:9b:8d:64:65:76:
ee:9b:27:d6:4f:ee:45:fa:2d:9e:ea:93:c5:b4:9a:fa:18:93:
29:49:2c:f9:69:3e:22:29:0f:23:34:8f:b5:38:55:cf:70:68:
4d:b6:9a:a2:f2:3b:6d:58:ea:a9:1b:e2:d3:30:b9:79:bf:d6:
8b:71:1a:bc:a8:9a:99:e1:d5:83:30:0a:a4:72:70:9e:77:67:
fe:54:d5:7d:77:6a:de:7a:a2:53:90:44:cf:ad:18:ce:93:02:
b1:9d:f2:56:b6:88:50:2c:f5:ca:5a:6e:04:41:03:52:60:d3:
98:a2:08:fb:1e:ca:0e:56:50:61:0c:f1:d8:4d:3c:e6:54:86:
4e:12:4d:af:48:89:ef:ff:e2:7b:f1:80:b1:0d:7f:f3:fc:ac:
13:55:e0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:44:44 2025 by rpki-client