This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/03ADBBC4194B11EB8C73474DC4F9AE02.roa
File: 03ADBBC4194B11EB8C73474DC4F9AE02.roa (raw, json)
Hash identifier: ib2DoXuoQ2eWeeEfxzG3naQLt5MyqyEn/StzAKuHVrs=
Subject key identifier: 82:94:16:F7:9A:93:F1:26:69:A3:CD:AD:88:18:CF:03:B8:AA:08:15
Certificate issuer: /CN=A91D483A/serialNumber=EDCDF060A6102BFAD06EBA8D6831D2848D1DBDE7
Certificate serial: 07E5
Authority key identifier: ED:CD:F0:60:A6:10:2B:FA:D0:6E:BA:8D:68:31:D2:84:8D:1D:BD:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7c3wYKYQK_rQbrqNaDHShI0dvec.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/03ADBBC4194B11EB8C73474DC4F9AE02.roa
Signing time: Thu 20 Nov 2025 20:41:23 +0000
ROA not before: Thu 20 Nov 2025 20:41:23 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 63961
IP address blocks: 103.157.134.0/23 maxlen: 23
103.157.134.0/24 maxlen: 24
103.157.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.crl
rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7c3wYKYQK_rQbrqNaDHShI0dvec.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 20:12:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2021 (0x7e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D483A, serialNumber=EDCDF060A6102BFAD06EBA8D6831D2848D1DBDE7
Validity
Not Before: Nov 20 20:41:23 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=691f7cf3-93dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f6:c0:a7:a2:cc:8c:46:a1:78:82:63:41:d2:
f4:e5:bd:a3:c4:08:55:61:a2:e9:06:3d:f9:53:8e:
e9:73:1a:95:fc:10:45:66:a6:4c:00:e2:48:35:7a:
f6:f3:4c:8e:97:8c:cb:d0:7a:17:e2:91:4c:34:f5:
c0:4b:bf:31:c4:c0:2b:6c:e7:79:d8:48:b3:ae:d5:
67:e1:6c:91:81:2f:da:4b:0d:8e:e4:a8:6d:fe:53:
44:3e:8c:78:6c:32:b5:b4:9e:4b:1a:e7:b7:2b:ba:
85:c2:99:65:72:19:6c:c1:64:76:63:37:46:6a:71:
69:4e:8d:7d:28:a0:06:3b:e6:ea:f5:1b:f2:9d:61:
c7:45:ae:71:a4:38:0f:81:99:e0:09:1a:4e:4e:eb:
67:92:b1:76:79:09:31:4c:33:69:a2:a9:8b:95:0d:
0d:75:de:67:f0:e6:48:46:dc:da:5f:91:40:f4:bd:
fd:e8:08:ce:2b:f3:be:28:65:fd:8e:cf:c6:56:db:
08:a2:d6:a7:b9:39:59:49:11:a7:dd:3f:91:9c:f7:
ab:0d:28:f6:9b:bb:ac:3e:dd:86:6c:6d:8e:c0:31:
36:6d:88:74:6b:b7:3c:c4:62:4c:17:4c:30:77:d9:
2d:c7:07:50:92:da:7e:5b:e5:56:7d:ca:62:7b:67:
30:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:94:16:F7:9A:93:F1:26:69:A3:CD:AD:88:18:CF:03:B8:AA:08:15
X509v3 Authority Key Identifier:
keyid:ED:CD:F0:60:A6:10:2B:FA:D0:6E:BA:8D:68:31:D2:84:8D:1D:BD:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7c3wYKYQK_rQbrqNaDHShI0dvec.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/03ADBBC4194B11EB8C73474DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.157.134.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:0f:02:e8:5b:57:7f:8f:cd:e7:e9:9f:98:c2:80:60:52:6a:
a6:88:6f:77:3c:1f:bf:8e:d9:56:b3:8b:29:c6:aa:cb:50:4b:
4e:2a:2d:df:0c:bc:55:75:2c:8c:63:9c:d4:c4:b9:39:d6:e9:
95:5c:4b:d4:c9:b4:3d:2d:ad:4e:3d:26:56:c2:e1:44:92:27:
2a:89:41:83:2f:b9:79:71:47:74:70:02:70:25:23:c2:b1:dc:
23:d7:65:19:53:a2:2b:4d:dd:2e:1d:1d:6e:fd:61:01:a3:34:
dc:53:45:13:5d:ce:4e:79:5d:7c:10:ca:44:78:09:ea:1a:a5:
99:21:54:3d:61:21:f4:b8:b2:03:44:17:5a:c2:0b:78:8a:4f:
42:9b:23:4d:71:c8:46:59:7a:97:8e:ce:e8:37:7b:d0:dc:a6:
10:f0:40:d5:bb:05:bd:0c:63:50:d4:e3:f3:03:08:c5:77:b3:
28:d7:bd:56:10:56:b5:41:70:30:a1:6a:a4:53:cd:9d:76:cb:
2e:e6:ac:a5:1e:8c:3a:6d:a1:eb:73:94:7f:ac:d2:a8:ca:69:
96:15:dd:13:e2:64:24:4a:c6:72:1f:f7:3d:af:e5:3d:e9:37:
56:fb:9c:f8:37:bb:51:4f:16:75:8b:3c:09:cd:7e:65:37:b7:
3e:b3:7c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:09:19 2025 by rpki-client