This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/3A3E36B6631811F089107C4AC4F9AE02.roa
File: 3A3E36B6631811F089107C4AC4F9AE02.roa (raw, json)
Hash identifier: Kc95KrPSVinTJLRBIl8Mqpr4G21/wGRjTb7/cm+2W7E=
Subject key identifier: 8E:0F:E1:B6:2F:1D:3B:10:9C:AD:29:67:D3:56:B9:F9:85:78:65:5B
Certificate issuer: /CN=A91D7771/serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3
Certificate serial: 0419
Authority key identifier: 30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/3A3E36B6631811F089107C4AC4F9AE02.roa
Signing time: Sat 17 Jan 2026 00:20:07 +0000
ROA not before: Sat 17 Jan 2026 00:20:07 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 142063
IP address blocks: 103.172.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl
rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:45:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1049 (0x419)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7771, serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3
Validity
Not Before: Jan 17 00:20:07 2026 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=696ad5b7-ffee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a5:1a:aa:17:03:08:af:71:71:bc:6e:4e:f9:
6c:a8:a9:b1:eb:88:50:bd:52:2f:9b:ee:2d:90:c0:
f1:2a:73:ec:4a:8f:a8:99:b8:12:a3:4c:5e:09:86:
41:3c:c2:55:ff:06:09:9e:d4:3f:b1:6c:34:e6:6a:
0f:15:dd:00:87:34:8e:5e:7f:2f:ab:9a:c1:d2:b0:
2b:df:16:fc:4d:5d:0d:28:2a:63:ef:04:f6:69:05:
4b:ef:67:31:62:6b:c1:3c:c8:ee:cb:65:70:49:18:
98:80:94:08:2f:f7:dc:f4:78:ff:15:96:ef:ad:0e:
58:72:7c:5f:da:e7:07:a3:c8:46:3d:8f:06:b6:f9:
59:96:2e:bf:3e:14:e9:87:6e:2e:4c:d3:e0:d3:05:
fa:15:02:a6:31:f2:13:9c:52:5d:45:23:3e:61:de:
05:22:8f:bd:97:f5:b8:68:a0:81:9f:08:a2:ac:b8:
4d:ab:da:d2:96:47:fa:62:19:3f:19:e5:13:87:01:
72:4e:26:64:d5:8d:fb:4b:6e:be:bc:1c:2c:59:9c:
29:8e:32:9f:ff:fb:92:26:80:be:72:c8:a4:42:66:
ea:4d:b7:2f:ad:de:f4:da:99:55:57:19:85:60:14:
4e:88:3d:02:b7:5e:fa:cf:ea:af:cf:ec:18:7f:12:
09:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:0F:E1:B6:2F:1D:3B:10:9C:AD:29:67:D3:56:B9:F9:85:78:65:5B
X509v3 Authority Key Identifier:
keyid:30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/3A3E36B6631811F089107C4AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.172.166.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:84:33:83:2b:9e:f9:5c:83:16:70:ca:ce:4c:14:9a:ee:f8:
a7:df:b7:b1:37:0d:48:ec:39:bd:e9:d9:34:10:e7:24:8b:4e:
fe:9e:cf:9d:60:8f:31:52:07:80:0a:14:f6:df:0a:9f:4e:92:
0a:fa:85:94:e7:d8:37:97:2a:8d:ac:2e:b1:e6:f7:90:c9:7d:
d6:31:43:c8:1c:4a:9d:98:54:b3:0a:b3:1c:1a:02:99:3f:16:
3b:66:8c:98:5e:dc:31:70:2e:da:43:7c:05:d4:4e:88:ef:dc:
dc:f8:07:ab:bf:60:1b:4a:91:1c:78:d9:3a:cb:d7:d5:a9:7f:
0e:d5:d2:e0:b6:d7:e4:70:bf:e1:7b:c7:cb:a3:52:65:77:8d:
c5:5a:30:50:a2:5b:b9:87:ab:47:4e:a9:53:49:9a:ac:af:41:
3a:a2:4c:29:59:df:14:60:91:65:f6:ec:32:38:5f:66:ab:c6:
98:d8:f5:c6:c0:4e:0d:e8:67:8b:eb:1d:68:9e:db:22:44:f3:
e8:4c:5b:b2:3a:0b:a6:fc:9e:46:ed:31:7d:26:05:6d:83:fa:
ca:dd:89:22:86:99:c7:f7:67:26:23:08:0e:91:3a:44:68:47:
99:6f:58:2d:c9:97:f6:ec:cf:a2:c0:71:62:3a:d7:66:25:ab:
56:0c:1c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:52:39 2026 by rpki-client