This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/5A76CDC2989511EC821F343DC4F9AE02.roa
File: 5A76CDC2989511EC821F343DC4F9AE02.roa (raw, json)
Hash identifier: G5JJTNT4PHPw15mb1pwEFBh3OwjZ888UZyxc9uGXXjk=
Subject key identifier: 5D:B0:AB:30:B3:01:CB:42:42:46:E9:95:97:4C:CA:C7:C4:0C:EC:33
Certificate issuer: /CN=A91D5F2D/serialNumber=A013B1388A3933BE106BEAEDDFE9F3B8346D3748
Certificate serial: 0430
Authority key identifier: A0:13:B1:38:8A:39:33:BE:10:6B:EA:ED:DF:E9:F3:B8:34:6D:37:48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/5A76CDC2989511EC821F343DC4F9AE02.roa
Signing time: Sun 21 Dec 2025 00:20:39 +0000
ROA not before: Sun 21 Dec 2025 00:20:39 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 4755
IP address blocks: 103.82.176.0/24 maxlen: 24
103.82.177.0/24 maxlen: 24
103.82.178.0/24 maxlen: 24
103.82.179.0/24 maxlen: 24
2400:8740:1000::/48 maxlen: 48
2400:8740:2000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl
rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:33:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1072 (0x430)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5F2D, serialNumber=A013B1388A3933BE106BEAEDDFE9F3B8346D3748
Validity
Not Before: Dec 21 00:20:39 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69473d57-29eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0e:ad:82:e1:74:fc:3a:c0:ca:9d:86:22:cf:
13:03:b1:af:9f:66:d5:50:18:68:d1:52:01:d1:1a:
76:47:39:f1:fe:e2:c8:0b:f3:d9:f5:22:8a:41:7b:
96:1f:ca:ad:05:9c:4e:cf:5e:71:d3:14:c0:93:0e:
2f:da:63:35:41:65:5c:35:bd:d5:b8:ea:f4:04:e4:
c2:4b:e1:58:b0:cb:61:b2:0b:01:db:ca:bf:29:d3:
3a:6d:87:d0:41:fd:3f:54:de:9a:42:23:76:40:b5:
16:e7:7d:dc:34:26:20:31:26:0b:e2:d2:44:fc:b8:
2f:6d:d4:7a:ff:d2:07:4e:95:45:59:a1:f2:5b:ef:
dc:3e:0e:95:36:f3:a2:23:52:bd:e7:10:0a:cc:b3:
bd:db:a9:70:79:02:29:df:40:b6:40:24:8a:f7:bf:
f3:15:3e:7f:5b:c5:03:37:9f:06:ee:0b:0e:5a:b8:
a4:e1:b8:de:1d:85:e1:24:0d:8a:e6:90:3e:b3:98:
79:1e:8b:9c:7e:2b:a2:13:46:d3:26:13:a7:77:97:
5c:1d:26:11:10:10:2c:54:19:64:81:d8:f0:29:51:
c4:db:b9:7c:67:1a:30:5e:03:fb:7c:ee:f8:9c:b8:
ad:02:38:ff:94:cf:ed:32:2b:eb:b0:59:84:ba:04:
20:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B0:AB:30:B3:01:CB:42:42:46:E9:95:97:4C:CA:C7:C4:0C:EC:33
X509v3 Authority Key Identifier:
keyid:A0:13:B1:38:8A:39:33:BE:10:6B:EA:ED:DF:E9:F3:B8:34:6D:37:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/5A76CDC2989511EC821F343DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.82.176.0/22
IPv6:
2400:8740:1000::/48
2400:8740:2000::/48
Signature Algorithm: sha256WithRSAEncryption
55:fb:90:bc:71:14:d6:04:cf:fe:cc:cc:62:f5:33:c7:1f:c9:
55:95:a3:f0:c5:ba:53:04:76:ff:2f:69:ec:7f:75:08:2a:46:
4b:77:b1:d2:99:71:04:8e:10:f6:e0:90:db:30:b2:e5:5f:14:
24:de:dc:5d:c1:27:c4:43:3a:d1:28:e4:ff:69:3a:dd:df:ed:
dc:95:20:45:62:a8:2b:70:fd:35:b1:dc:0e:fd:f1:b0:11:a0:
ea:54:b4:b2:03:cd:0a:b9:95:51:32:40:6f:d7:2c:d2:da:eb:
86:e1:be:c1:4e:64:85:a1:07:04:63:d8:f2:cb:94:24:df:f0:
bb:b9:d1:96:93:5f:5f:b2:fc:38:7f:b1:21:27:08:97:1f:4b:
00:ec:ab:bb:e1:67:22:8d:c0:91:9c:92:72:0d:b4:d4:fd:d5:
e1:1e:e3:9f:2f:88:76:66:ca:fd:7a:ce:e3:ec:d9:5b:ec:26:
98:85:8d:02:75:0e:94:3a:1d:90:6c:7a:6b:30:de:54:35:4e:
ad:08:1d:a1:a0:44:6c:20:26:7b:dc:c9:64:5b:93:2f:a8:45:
4a:3a:35:0e:f6:f6:3f:6d:44:99:d8:e5:cd:9d:70:4a:af:73:
4c:2e:f4:77:10:4d:67:69:d0:85:4d:83:ac:b8:ef:4b:0c:a4:
78:00:09:4c
-----BEGIN CERTIFICATE-----
MIIFizCCBHOgAwIBAgICBDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
RDVGMkQxMTAvBgNVBAUTKEEwMTNCMTM4OEEzOTMzQkUxMDZCRUFFRERGRTlGM0I4
MzQ2RDM3NDgwHhcNMjUxMjIxMDAyMDM5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTQ3M2Q1Ny0yOWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyw6tguF0/DrAyp2GIs8TA7Gvn2bVUBho0VIB0Rp2Rznx/uLIC/PZ9SKKQXuW
H8qtBZxOz15x0xTAkw4v2mM1QWVcNb3VuOr0BOTCS+FYsMthsgsB28q/KdM6bYfQ
Qf0/VN6aQiN2QLUW533cNCYgMSYL4tJE/LgvbdR6/9IHTpVFWaHyW+/cPg6VNvOi
I1K95xAKzLO926lweQIp30C2QCSK97/zFT5/W8UDN58G7gsOWrik4bjeHYXhJA2K
5pA+s5h5HoucfiuiE0bTJhOnd5dcHSYREBAsVBlkgdjwKVHE27l8ZxowXgP7fO74
nLitAjj/lM/tMivrsFmEugQgOwIDAQABo4ICrzCCAqswHQYDVR0OBBYEFF2wqzCz
ActCQkbplZdMysfEDOwzMB8GA1UdIwQYMBaAFKATsTiKOTO+EGvq7d/p87g0bTdI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUYyRC9DRDZENkU1Njk4
OTIxMUVDOEY5MzU3M0JDNEY5QUUwMi9vQk94T0lvNU03NFFhLXJ0My1uenVEUnRO
MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29CT3hPSW81TTc0UWEtcnQzLW56dURSdE4wZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDVGMkQvQ0Q2RDZFNTY5ODkyMTFFQzhGOTM1NzNCQzRGOUFFMDIvNUE3NkNEQzI5
ODk1MTFFQzgyMUYzNDNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E
KjAoMAwEAgABMAYDBAJnUrAwGAQCAAIwEgMHACQAh0AQAAMHACQAh0AgADANBgkq
hkiG9w0BAQsFAAOCAQEAVfuQvHEU1gTP/szMYvUzxx/JVZWj8MW6UwR2/y9p7H91
CCpGS3ex0plxBI4Q9uCQ2zCy5V8UJN7cXcEnxEM60Sjk/2k63d/t3JUgRWKoK3D9
NbHcDv3xsBGg6lS0sgPNCrmVUTJAb9cs0trrhuG+wU5khaEHBGPY8suUJN/wu7nR
lpNfX7L8OH+xIScIlx9LAOyru+FnIo3AkZyScg201P3V4R7jny+IdmbK/XrO4+zZ
W+wmmIWNAnUOlDodkGx6azDeVDVOrQgdoaBEbCAme9zJZFuTL6hFSjo1Dvb2P21E
mdjlzZ1wSq9zTC70dxBNZ2nQhU2DrLjvSwykeAAJTA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:46:12 2026 by rpki-client