This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/8C21D58ACCFB11F08C34EC45C4F9AE02.roa
File: 8C21D58ACCFB11F08C34EC45C4F9AE02.roa (raw, json)
Hash identifier: zO3eHRQaLoJDtz5i54a8aGSxd9NadRVjZ+xhsPWeZ+c=
Subject key identifier: 70:71:BA:13:68:09:BC:A3:0B:A6:50:61:8B:DA:8D:EE:45:69:F7:FE
Certificate issuer: /CN=A91D983B/serialNumber=B316C01B7B754314E2F18F737A7D7D89ACAB7E68
Certificate serial: 05
Authority key identifier: B3:16:C0:1B:7B:75:43:14:E2:F1:8F:73:7A:7D:7D:89:AC:AB:7E:68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/8C21D58ACCFB11F08C34EC45C4F9AE02.roa
Signing time: Sat 29 Nov 2025 08:15:21 +0000
ROA not before: Sat 29 Nov 2025 08:15:21 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 55803
IP address blocks: 103.80.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.crl
rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:55:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D983B, serialNumber=B316C01B7B754314E2F18F737A7D7D89ACAB7E68
Validity
Not Before: Nov 29 08:15:21 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=692aab99-1cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:19:6d:e0:67:35:0c:aa:93:a0:bb:b1:1c:f5:
19:f8:a1:46:43:b3:ba:e0:bd:5a:36:ba:bb:88:f4:
c9:3a:f8:fb:cb:e8:6f:e1:a5:25:0b:dd:a9:c9:7a:
0d:60:62:d2:14:d1:3a:ac:6a:18:a5:8c:db:b7:e3:
9a:3f:32:1e:c7:49:3e:6d:05:59:48:5d:9d:59:e4:
98:c1:20:7d:14:43:ff:cc:5f:f4:c8:50:ae:8a:26:
e8:55:cd:22:ed:90:04:b2:2e:d9:20:33:2b:81:54:
7d:5f:2f:69:82:e1:c9:a6:ec:f1:11:b5:d9:dc:94:
42:3c:09:eb:2c:7d:03:53:21:92:69:d1:a4:b7:6d:
be:1f:f4:6d:ef:57:28:14:98:e0:e9:a1:23:de:78:
71:ad:43:8c:e1:27:af:55:df:0c:c6:88:99:31:ff:
b6:69:e4:f4:78:48:ba:da:80:10:04:27:23:d8:9a:
00:df:72:8f:14:aa:5f:ed:78:2d:63:8e:5f:ab:78:
ef:f1:98:d5:fc:52:0c:96:9f:d1:10:2f:4a:d2:80:
6c:c6:81:f3:55:03:45:aa:e9:b4:f3:30:2d:42:2d:
36:88:8c:c0:52:0d:8f:9e:76:dc:7f:c8:df:eb:e3:
f7:7c:6c:38:de:b2:f9:0d:8f:bb:9f:87:7f:f9:38:
b9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:71:BA:13:68:09:BC:A3:0B:A6:50:61:8B:DA:8D:EE:45:69:F7:FE
X509v3 Authority Key Identifier:
keyid:B3:16:C0:1B:7B:75:43:14:E2:F1:8F:73:7A:7D:7D:89:AC:AB:7E:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/8C21D58ACCFB11F08C34EC45C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.80.103.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:a8:c4:06:c1:c5:5d:4c:2c:2e:95:80:16:bd:bd:62:36:ee:
f5:2c:7e:c6:42:fd:3b:24:fa:e2:8e:ce:d2:1b:42:49:5b:1f:
41:4c:9a:9e:9e:8e:ea:56:84:cb:f4:58:7d:40:09:e1:17:9b:
29:e8:2a:a8:5d:eb:18:1c:06:4c:9c:fb:68:c2:e1:9f:aa:17:
ac:68:46:38:43:7e:96:5d:d0:f1:b4:90:2d:78:7d:41:b6:46:
6d:95:fc:cf:ce:61:ee:48:78:20:36:34:3e:93:3e:7f:1c:09:
c7:8b:93:eb:aa:69:0f:58:c9:65:cc:2f:ed:24:2e:fb:ea:ef:
9c:93:8e:3f:44:43:f0:b3:e3:21:05:7a:7c:d9:8c:2a:2f:01:
c0:ec:9d:9d:f0:45:37:1f:82:7e:07:20:b7:7c:87:03:b8:a4:
65:ee:c2:3c:25:f2:ca:c2:b9:0d:15:61:f8:a3:fd:94:99:e6:
29:aa:ad:3d:f3:73:6e:7d:b7:2e:10:24:0b:9c:ed:da:bb:31:
2b:eb:38:c9:80:2e:ea:27:c4:88:f1:34:bf:ef:8a:5e:eb:cb:
27:14:f6:9d:f5:be:b4:d5:db:ed:7b:be:68:0a:19:f3:e1:a0:
3e:c8:fa:84:c4:51:66:18:5b:48:4c:5d:da:ae:55:8c:28:4d:
a0:29:4f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:22:26 2025 by rpki-client