This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/A2EF68E66EAD11EC8796A251C4F9AE02.roa
File: A2EF68E66EAD11EC8796A251C4F9AE02.roa (raw, json)
Hash identifier: Dil3/Uk9eT2zGIdSHil/xOkblPnb6d1LUXZm1Mfn7EY=
Subject key identifier: 9B:66:6B:F4:08:7A:30:22:F0:F1:A9:82:18:8B:69:82:E8:21:66:81
Certificate issuer: /CN=A91D82F4/serialNumber=4BEAEC337C6E89F2794A9744E16D919C9C793B1E
Certificate serial: 0754
Authority key identifier: 4B:EA:EC:33:7C:6E:89:F2:79:4A:97:44:E1:6D:91:9C:9C:79:3B:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/A2EF68E66EAD11EC8796A251C4F9AE02.roa
Signing time: Wed 31 Dec 2025 21:17:55 +0000
ROA not before: Wed 31 Dec 2025 21:17:55 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 138623
IP address blocks: 103.174.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl
rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 20:59:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1876 (0x754)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D82F4, serialNumber=4BEAEC337C6E89F2794A9744E16D919C9C793B1E
Validity
Not Before: Dec 31 21:17:55 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69559303-0d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:64:ac:5d:60:7e:79:5f:95:c7:20:c3:55:18:
9b:21:86:fd:0c:14:38:17:be:99:b9:13:93:a6:13:
d9:4e:16:d1:85:86:71:14:81:6a:a5:cd:17:4d:79:
13:36:70:42:38:84:d4:3b:ed:b3:52:7f:d8:ae:76:
eb:72:d7:33:39:20:ca:78:e5:62:3d:08:0f:90:92:
ce:3c:83:4e:27:84:80:e4:8b:78:ae:83:80:2c:22:
a6:81:de:50:71:5d:82:90:77:b4:67:97:aa:b4:d4:
f0:a3:1b:e9:11:0b:3a:6c:cc:b6:92:42:62:6a:12:
6d:8f:1c:01:ea:a8:15:21:b7:b1:c5:77:af:a4:2b:
10:be:5e:9e:d4:56:18:55:a2:23:07:6d:91:58:cc:
8b:3c:2b:82:e3:75:96:27:c8:10:19:aa:28:38:9b:
e9:cf:b1:54:ab:17:3b:db:a3:57:f5:40:bc:cc:20:
d7:b0:0c:81:5e:1e:dd:f8:35:66:21:5a:b8:68:e8:
9e:f1:dd:97:f5:cf:71:30:de:0f:9d:f4:92:af:28:
90:02:ae:b4:67:55:33:68:78:3f:d3:b5:fa:42:33:
b7:cc:fc:41:ea:77:b2:41:ef:b9:b0:bd:df:08:c3:
49:4e:ea:8c:54:b6:c0:10:48:5f:5b:4e:7e:0f:c1:
a2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:66:6B:F4:08:7A:30:22:F0:F1:A9:82:18:8B:69:82:E8:21:66:81
X509v3 Authority Key Identifier:
keyid:4B:EA:EC:33:7C:6E:89:F2:79:4A:97:44:E1:6D:91:9C:9C:79:3B:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/A2EF68E66EAD11EC8796A251C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.174.20.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:d3:fb:d9:79:c4:07:01:2c:73:d0:ef:8d:c2:82:18:27:40:
23:f8:fe:e0:0b:c3:83:d7:e1:fb:da:4c:42:39:6e:54:63:46:
b5:d5:b2:c5:d2:06:d0:60:3b:c3:e3:56:43:96:8e:e3:6f:ec:
4b:d6:eb:19:a2:b9:77:a0:e2:aa:51:b8:34:9a:bb:37:e0:49:
69:76:f1:c6:6b:90:13:4f:f6:ef:ea:92:92:70:95:a3:56:f3:
11:a0:64:14:8c:69:d1:f5:1f:6b:28:fc:91:43:68:94:81:f7:
c7:2a:10:87:1a:a4:36:6a:cf:a2:03:3a:6f:cc:2a:d7:19:ea:
84:82:fc:ef:b8:f7:b2:7f:5e:1c:bf:93:fa:43:3a:a2:9c:25:
aa:6f:85:0d:62:67:b7:54:d6:d6:aa:12:7e:23:62:d7:3e:6b:
01:f9:32:fd:fc:5f:28:72:1c:87:ee:6e:38:cd:60:3f:a9:39:
4c:55:a7:ac:3c:06:11:cd:67:c2:a3:bd:32:8f:98:f2:4f:8b:
73:28:f5:3a:04:1c:01:2c:4e:41:e6:25:d0:af:41:05:7e:f7:
76:66:a3:0f:52:a7:be:52:cb:b1:b1:e4:60:76:96:d1:72:b2:
a3:fb:b1:2a:5b:7d:14:4f:b9:76:80:7c:aa:e5:e4:a1:4f:83:
75:87:85:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:40:31 2026 by rpki-client