This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/89FFAC1AF26B11F092350A59636F56BC.roa
File: 89FFAC1AF26B11F092350A59636F56BC.roa (raw, json)
Hash identifier: ZvP240ZoZJfCP22YEzJLM6jEHj1GbimihvvIWNHs9dc=
Subject key identifier: 2A:A6:45:CD:C3:93:D8:2D:A1:E3:56:9A:D0:FC:EF:3A:EC:50:FA:43
Certificate issuer: /CN=A91D4786/serialNumber=578C8D02AEF0B43E29FECEA1895DCC9D10663535
Certificate serial: DD
Authority key identifier: 57:8C:8D:02:AE:F0:B4:3E:29:FE:CE:A1:89:5D:CC:9D:10:66:35:35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4yNAq7wtD4p_s6hiV3MnRBmNTU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/89FFAC1AF26B11F092350A59636F56BC.roa
Signing time: Thu 15 Jan 2026 23:40:14 +0000
ROA not before: Thu 15 Jan 2026 23:40:14 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 2764
IP address blocks: 203.22.108.0/23 maxlen: 23
203.22.108.0/24 maxlen: 24
203.22.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.crl
rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4yNAq7wtD4p_s6hiV3MnRBmNTU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 04:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 221 (0xdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4786, serialNumber=578C8D02AEF0B43E29FECEA1895DCC9D10663535
Validity
Not Before: Jan 15 23:40:14 2026 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69697ade-ba75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:95:05:74:46:a8:0f:e9:20:76:9a:40:df:ae:
73:a6:7e:b1:6b:62:21:87:2f:58:f3:2c:bd:f0:ea:
9a:50:96:0a:5b:a1:71:b4:37:5b:67:05:e3:bf:a6:
67:da:df:0d:05:d3:c3:d5:96:2b:8e:84:cd:a1:ce:
c4:b4:c5:74:a6:16:8e:39:bb:0a:e5:cc:d3:b4:2c:
a7:8b:3e:f3:97:e8:10:86:70:20:59:88:e9:84:df:
1f:9f:44:9e:9c:65:21:cf:63:0d:7e:f0:6f:34:2c:
fb:54:24:35:aa:e4:d3:4c:3a:ba:82:b1:8c:10:ce:
86:31:dc:13:3f:5e:08:0b:68:18:d5:f7:8a:a7:dc:
ab:ae:4b:0f:9e:f1:ba:e6:ae:5a:3e:30:f6:7e:44:
da:00:a1:fc:6c:80:c0:a6:3c:9c:d2:ed:73:37:b1:
01:7d:74:26:ee:62:c8:b4:d3:e2:83:34:a5:4a:33:
98:54:59:79:52:cb:ff:06:c1:7c:a7:32:76:4f:ae:
5d:af:c3:ad:99:92:35:6b:e2:b8:28:04:40:a4:42:
9a:b8:11:50:6e:cd:33:1c:87:c7:60:aa:bf:b3:40:
bb:90:1e:25:c7:6b:93:00:d5:d0:22:c9:15:a4:ce:
61:9e:06:5a:6b:85:73:6e:bf:fe:68:f2:67:d6:e9:
d4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A6:45:CD:C3:93:D8:2D:A1:E3:56:9A:D0:FC:EF:3A:EC:50:FA:43
X509v3 Authority Key Identifier:
keyid:57:8C:8D:02:AE:F0:B4:3E:29:FE:CE:A1:89:5D:CC:9D:10:66:35:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4yNAq7wtD4p_s6hiV3MnRBmNTU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/89FFAC1AF26B11F092350A59636F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.22.108.0/23
Signature Algorithm: sha256WithRSAEncryption
22:fc:86:0e:13:59:f0:db:3e:c2:ba:58:60:a0:e6:ac:d2:3b:
cc:03:0d:a2:e3:b2:d2:d2:6c:6f:55:3e:1e:98:1c:96:b2:58:
5e:a5:21:71:a5:2e:41:1b:fa:e6:62:7c:e1:b5:ac:ce:2d:0f:
b9:b1:b6:45:57:f8:cb:3c:70:fd:f4:78:0c:90:b8:b7:f9:71:
5e:5f:c1:ca:48:8a:8d:e5:6c:71:d8:2c:06:f4:c4:4c:41:23:
f4:ff:d9:bb:75:23:46:7e:78:66:5c:7f:a5:7d:4c:d3:51:f0:
b6:1c:28:44:ca:93:89:bb:bc:3d:b0:96:2e:a9:36:e2:83:fd:
ba:50:62:28:d7:da:5b:77:04:67:33:01:1c:ee:66:85:60:0a:
6b:7f:cd:11:a0:ae:4e:4a:35:b7:fc:0e:cc:46:1b:74:25:89:
b7:e9:00:a7:df:34:bc:f3:a1:15:62:54:e2:1f:17:09:ba:bc:
b8:30:72:f6:48:10:33:1d:97:9b:c4:9c:93:b1:6a:91:1c:2a:
c2:ab:59:b8:e8:c5:81:6e:68:64:c3:1e:58:58:dd:7f:56:ec:
73:a3:fb:41:8e:f5:78:bf:c7:60:38:1c:19:6e:52:d0:8a:26:
05:69:c6:ef:5e:8b:d5:9b:d0:2f:71:b6:fb:f7:4a:8a:59:a1:
b8:df:d9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:15:33 2026 by rpki-client