This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/9F88C3542ADF11F0B3006D40C4F9AE02.roa
File: 9F88C3542ADF11F0B3006D40C4F9AE02.roa (raw, json)
Hash identifier: Qjh0A+c0sfVicMlIaNf0Hn6wI+Wu1NqN2VNp3y6tjFs=
Subject key identifier: 1D:5E:7E:66:1B:9B:8F:0C:21:09:33:8C:B9:8E:0C:50:67:C7:1A:3E
Certificate issuer: /CN=A91D7771/serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3
Certificate serial: 041A
Authority key identifier: 30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/9F88C3542ADF11F0B3006D40C4F9AE02.roa
Signing time: Sat 17 Jan 2026 00:20:08 +0000
ROA not before: Sat 17 Jan 2026 00:20:08 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 151983
IP address blocks: 103.172.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl
rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:45:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1050 (0x41a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7771, serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3
Validity
Not Before: Jan 17 00:20:08 2026 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=696ad5b8-8477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:65:13:0f:86:f7:00:58:34:87:5f:63:00:b6:
89:aa:ea:af:a9:b4:dd:61:f7:7f:43:e0:18:5e:24:
2e:2a:86:73:f0:28:fe:37:f0:c1:7d:58:ad:f8:dd:
fd:23:e5:77:d0:0e:ef:59:64:e5:8a:41:05:d6:aa:
ff:9a:f1:04:01:0e:58:5e:0a:cd:f3:01:0a:0f:5d:
88:b5:ca:de:46:6d:b1:c2:db:0a:c3:c5:b4:6c:b5:
f1:64:7c:fb:54:7c:e9:4b:5a:c5:5b:43:03:6e:b3:
14:c4:6b:39:a3:03:a6:77:b5:9e:91:eb:61:a9:05:
f8:2d:19:bb:e4:79:6d:bb:98:2e:0b:4d:f1:cb:5b:
d8:92:8d:0e:05:14:64:9e:8a:bd:b8:ef:18:39:72:
23:c5:2c:92:db:14:1e:90:f6:93:49:07:3c:36:cc:
d3:01:e9:49:4e:75:1e:b6:6e:8a:b8:df:c1:6f:7f:
0b:7f:9b:32:09:3e:13:c4:58:08:66:f4:30:b4:ad:
06:0d:5e:77:3f:c8:a0:21:da:51:7b:9b:e5:e5:72:
c7:f9:e7:dc:26:0d:5a:8c:e6:f9:30:22:71:f7:e1:
7b:83:df:25:6d:da:db:6a:28:64:34:0a:00:e6:a3:
9f:2e:32:78:ec:b3:9a:0c:ea:2c:1a:a4:6b:2d:d4:
2c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:5E:7E:66:1B:9B:8F:0C:21:09:33:8C:B9:8E:0C:50:67:C7:1A:3E
X509v3 Authority Key Identifier:
keyid:30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/9F88C3542ADF11F0B3006D40C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.172.167.0/24
Signature Algorithm: sha256WithRSAEncryption
60:63:21:43:48:07:92:7c:00:71:c4:75:7d:40:86:02:58:3b:
67:2c:03:46:0c:9e:41:21:a4:7e:87:0b:8c:16:05:d5:72:c0:
d4:ca:bd:ee:4d:64:f2:ab:9e:f5:e2:94:a8:58:21:3a:f0:58:
42:f9:3a:a2:75:8b:c9:8f:d1:02:89:67:79:60:ba:77:3d:2f:
2d:5a:f0:42:23:53:4d:e8:4f:ad:e9:a9:2b:e1:a5:ab:4c:be:
7b:a0:0f:23:56:5e:35:75:6b:ca:56:86:17:49:82:64:52:60:
ae:14:cd:d4:2b:52:fa:ab:ac:45:98:da:a2:51:77:9d:01:44:
66:e9:91:6b:28:22:12:44:c5:33:91:23:42:e7:7a:c8:60:31:
4b:3f:4f:c0:88:86:53:28:07:bf:3b:ca:34:ef:c1:c2:b3:9c:
2d:e7:2f:f9:4f:6c:e4:dd:26:c5:82:99:37:47:89:ce:2f:b5:
2f:64:49:90:06:d8:06:fa:aa:5a:d7:3d:1e:68:3d:99:7f:15:
b6:62:59:8e:2b:37:dc:db:c2:09:61:62:8c:fb:fa:ec:b3:13:
85:cb:d6:88:e8:84:1c:1a:6b:a0:d6:af:e8:01:e5:5e:36:05:
73:fc:cd:2d:3a:87:11:81:ee:d2:59:ce:e3:5d:3f:86:8a:ba:
e0:ff:b0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:27:25 2026 by rpki-client