This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/6C153768CE5511EB9DD80C30C4F9AE02.roa
File: 6C153768CE5511EB9DD80C30C4F9AE02.roa (raw, json)
Hash identifier: FB/I0gTgEb20qtL8a4Y3PnJsdj8cSocHpg/e5FisnJk=
Subject key identifier: 6E:B7:4B:CA:81:36:19:1E:29:88:DF:C1:C3:A7:B0:99:C5:2A:D8:CD
Certificate issuer: /CN=A91D8E2C/serialNumber=9690C5D609FCE442C35B9916D563F9F187B68AD4
Certificate serial: 0E52
Authority key identifier: 96:90:C5:D6:09:FC:E4:42:C3:5B:99:16:D5:63:F9:F1:87:B6:8A:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpDF1gn85ELDW5kW1WP58Ye2itQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/6C153768CE5511EB9DD80C30C4F9AE02.roa
Signing time: Thu 10 Jul 2025 18:27:11 +0000
ROA not before: Thu 10 Jul 2025 18:27:11 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 142423
IP address blocks: 103.139.208.0/23 maxlen: 23
103.139.208.0/24 maxlen: 24
103.139.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.crl
rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpDF1gn85ELDW5kW1WP58Ye2itQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 17:09:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3666 (0xe52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8E2C, serialNumber=9690C5D609FCE442C35B9916D563F9F187B68AD4
Validity
Not Before: Jul 10 18:27:11 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=687005ff-34b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4f:6e:a1:10:7f:e0:c3:fb:9a:72:72:ef:ed:
fc:4b:0a:59:d3:0e:41:21:4d:d2:79:5d:9f:27:e4:
af:fc:0e:70:36:27:19:20:e5:ed:79:38:54:99:a0:
b3:04:af:d3:d5:53:8c:13:16:0f:93:ee:c0:e6:6c:
dc:70:36:50:1c:c1:13:73:ae:05:2d:8d:82:05:7e:
40:23:be:3f:cc:02:a1:43:29:7a:73:67:5a:5e:4d:
4c:4f:a2:f5:cc:ea:ce:ed:ca:87:11:4c:24:26:03:
93:5f:75:4d:52:2b:4c:60:e7:34:0c:45:70:45:07:
1b:26:d5:13:31:f5:4c:bd:7f:91:7e:74:e6:e9:e4:
88:8e:6f:c9:1f:8b:2a:80:74:cb:b9:e7:bf:76:bf:
4a:ee:0e:6d:d8:e6:fd:a2:1d:4d:bb:9d:42:ae:29:
67:8d:5c:02:9c:cd:a0:41:77:6f:73:1f:55:78:ff:
cf:fc:8d:01:88:6c:57:d8:d6:dc:be:f5:cc:7f:95:
66:13:53:21:d8:7a:0a:77:77:a1:c8:6c:1b:62:ce:
6d:cf:bc:cb:26:d6:a6:64:9b:e5:e9:6d:93:ca:64:
7d:df:32:5b:ad:bc:82:c6:67:0f:71:b6:41:62:76:
ec:01:c4:e1:5a:e5:b7:04:8c:b3:c5:7d:02:f5:bc:
d2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B7:4B:CA:81:36:19:1E:29:88:DF:C1:C3:A7:B0:99:C5:2A:D8:CD
X509v3 Authority Key Identifier:
keyid:96:90:C5:D6:09:FC:E4:42:C3:5B:99:16:D5:63:F9:F1:87:B6:8A:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpDF1gn85ELDW5kW1WP58Ye2itQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/6C153768CE5511EB9DD80C30C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.139.208.0/23
Signature Algorithm: sha256WithRSAEncryption
24:ff:78:08:7a:33:de:7a:18:7e:16:d4:f2:78:94:50:77:4f:
93:fa:34:4c:df:88:a9:be:ba:4b:87:de:e4:59:5d:93:2f:eb:
17:3c:9e:83:b4:ff:9d:60:c9:10:f6:6f:7d:bd:b9:ef:81:f9:
ae:16:65:39:8f:81:19:69:69:db:a9:39:5d:9c:97:52:75:4b:
05:2c:5e:fe:4e:ca:d9:52:33:c0:e8:79:4a:ba:66:e7:ae:b7:
ca:cd:12:25:a7:5f:6e:99:41:e2:cf:5d:c1:4c:bb:11:a8:0b:
fc:79:0f:a7:50:d2:2e:34:98:4a:00:f4:be:2a:cd:82:a5:e2:
29:f2:7c:1a:b4:be:50:dc:80:67:1c:23:c3:1b:a8:e0:48:04:
11:9b:bd:eb:b9:cf:32:0e:d4:a9:a2:ac:57:81:63:39:5c:35:
8b:06:b6:bb:b3:34:79:18:2c:a0:81:3c:5a:35:36:3d:af:ef:
0d:c2:7d:72:bf:de:e2:cc:64:63:c6:ef:f8:da:f1:76:f2:51:
0a:45:f8:9a:bc:9f:a6:82:50:9d:65:ff:10:f8:08:ed:58:c6:
f5:b4:a9:70:cb:aa:6c:b0:1b:eb:29:6d:e2:e1:06:0f:d5:87:
40:66:c0:55:08:36:2c:e8:cf:d2:c8:85:04:ed:07:4d:7e:37:
5f:f8:bf:a8
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICDlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDhFMkMxMTAvBgNVBAUTKDk2OTBDNUQ2MDlGQ0U0NDJDMzVCOTkxNkQ1NjNGOUYx
ODdCNjhBRDQwHhcNMjUwNzEwMTgyNzExWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODcwMDVmZi0zNGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqk9uoRB/4MP7mnJy7+38SwpZ0w5BIU3SeV2fJ+Sv/A5wNicZIOXteThUmaCz
BK/T1VOMExYPk+7A5mzccDZQHMETc64FLY2CBX5AI74/zAKhQyl6c2daXk1MT6L1
zOrO7cqHEUwkJgOTX3VNUitMYOc0DEVwRQcbJtUTMfVMvX+RfnTm6eSIjm/JH4sq
gHTLuee/dr9K7g5t2Ob9oh1Nu51CrilnjVwCnM2gQXdvcx9VeP/P/I0BiGxX2Nbc
vvXMf5VmE1Mh2HoKd3ehyGwbYs5tz7zLJtamZJvl6W2TymR93zJbrbyCxmcPcbZB
YnbsAcThWuW3BIyzxX0C9bzStwIDAQABo4IClTCCApEwHQYDVR0OBBYEFG63S8qB
NhkeKYjfwcOnsJnFKtjNMB8GA1UdIwQYMBaAFJaQxdYJ/ORCw1uZFtVj+fGHtorU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEUyQy8wRkUxRUQwNkEy
RkIxMUU5QTUyNkE1N0VDNEY5QUUwMi9scERGMWduODVFTERXNWtXMVdQNThZZTJp
dFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xwREYxZ244NUVMRFc1a1cxV1A1OFllMml0US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDhFMkMvMEZFMUVEMDZBMkZCMTFFOUE1MjZBNTdFQzRGOUFFMDIvNkMxNTM3NjhD
RTU1MTFFQjlERDgwQzMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFni9AwDQYJKoZIhvcNAQELBQADggEBACT/eAh6M956GH4W
1PJ4lFB3T5P6NEzfiKm+ukuH3uRZXZMv6xc8noO0/51gyRD2b329ue+B+a4WZTmP
gRlpadupOV2cl1J1SwUsXv5OytlSM8DoeUq6Zueut8rNEiWnX26ZQeLPXcFMuxGo
C/x5D6dQ0i40mEoA9L4qzYKl4inyfBq0vlDcgGccI8MbqOBIBBGbveu5zzIO1Kmi
rFeBYzlcNYsGtruzNHkYLKCBPFo1Nj2v7w3CfXK/3uLMZGPG7/ja8XbyUQpF+Jq8
n6aCUJ1l/xD4CO1YxvW0qXDLqmywG+spbeLhBg/Vh0BmwFUINizoz9LIhQTtB01+
N1/4v6g=
-----END CERTIFICATE-----
Generated at Sun Dec 7 04:45:24 2025 by rpki-client