This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/34B484F49B0D11EEB69D6B1CC4F9AE02.roa
File: 34B484F49B0D11EEB69D6B1CC4F9AE02.roa (raw, json)
Hash identifier: TVKTtzpzpeYfKDOorkYv4AZpiLcewzklm4UrasaCbeA=
Subject key identifier: 05:8F:C1:2A:5B:76:B6:11:8A:68:B1:05:69:52:E0:FF:C0:7E:2B:9D
Certificate issuer: /CN=A91D9A6E/serialNumber=4CAD272BAD1D8709B16E9975006E12255205C8F6
Certificate serial: 01A8
Authority key identifier: 4C:AD:27:2B:AD:1D:87:09:B1:6E:99:75:00:6E:12:25:52:05:C8:F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/34B484F49B0D11EEB69D6B1CC4F9AE02.roa
Signing time: Fri 23 Jan 2026 03:23:42 +0000
ROA not before: Fri 23 Jan 2026 03:23:42 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 137443
IP address blocks: 103.79.120.0/24 maxlen: 24
103.79.122.0/24 maxlen: 24
202.91.36.0/24 maxlen: 24
202.91.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.crl
rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 02:52:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 424 (0x1a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9A6E, serialNumber=4CAD272BAD1D8709B16E9975006E12255205C8F6
Validity
Not Before: Jan 23 03:23:42 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6972e9be-e960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c9:a9:3b:2c:50:91:22:50:ba:e0:7f:4a:e6:
12:2c:e7:4e:28:c1:a2:32:47:51:27:6c:07:61:01:
c4:0c:b2:71:1a:3a:66:db:53:48:db:ef:33:9a:45:
18:af:c6:3a:30:e3:44:38:ed:b9:00:e5:a4:39:67:
3c:96:1f:4d:03:07:71:94:49:d1:d2:fd:68:c2:bb:
47:a6:a7:19:c1:94:70:31:c5:bf:6a:c1:91:b9:ee:
62:0c:aa:47:18:00:27:7c:67:f4:ff:03:bf:7c:cc:
b1:32:8d:41:dc:68:42:d8:7f:af:3d:0b:d8:0a:3b:
23:0a:b2:d5:86:56:48:12:41:42:41:d1:a1:ae:49:
b0:5f:fe:42:92:46:ff:5d:59:e7:22:d1:79:29:5d:
5b:09:67:d5:cd:84:31:71:5c:ae:bd:c2:3e:7f:c6:
14:98:6b:eb:84:34:c3:f9:6f:9d:da:46:56:78:f9:
d0:d1:27:3c:1c:5a:24:0e:c5:24:55:87:8c:81:70:
2e:58:99:7e:47:0c:f5:5e:51:ed:23:23:9e:96:bc:
ab:d6:c1:46:c1:8b:63:80:f2:69:a1:22:46:66:a8:
1a:fd:20:46:15:1c:bd:6b:98:f8:f0:04:35:3a:73:
a0:3d:8c:d2:17:d3:52:25:c6:ef:cf:2f:fd:46:50:
d8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:8F:C1:2A:5B:76:B6:11:8A:68:B1:05:69:52:E0:FF:C0:7E:2B:9D
X509v3 Authority Key Identifier:
keyid:4C:AD:27:2B:AD:1D:87:09:B1:6E:99:75:00:6E:12:25:52:05:C8:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/34B484F49B0D11EEB69D6B1CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.79.120.0/24
103.79.122.0/24
202.91.36.0/24
202.91.38.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:6c:8e:27:a9:e1:74:21:87:15:a0:ad:3c:8f:55:26:df:5b:
91:47:3b:9a:5a:b9:79:93:61:4e:cd:40:6c:7c:bd:5c:9d:9a:
15:8a:83:df:dc:4f:a4:a8:72:33:55:73:df:bd:fe:a9:21:ba:
2d:37:8b:2a:83:aa:58:75:8d:0a:e2:d1:0c:04:5e:38:c5:55:
69:0b:24:ec:2b:d7:25:96:5d:55:0a:f6:34:5e:e1:67:f4:ca:
e7:ff:65:ce:91:7f:21:46:5b:46:74:f8:46:89:bc:fc:40:1b:
fd:32:07:f3:70:4b:aa:be:a7:81:b1:91:7d:a9:e6:7b:b4:3c:
b9:85:a7:e3:25:32:8c:ff:8d:8e:61:4d:ac:9d:cf:c7:87:5a:
f7:b1:25:4a:a2:85:ea:4a:83:9e:d8:4c:d1:1a:cb:23:d4:89:
8c:6d:47:ff:6e:c3:27:72:78:62:9e:71:99:d2:23:ed:7d:32:
c1:bc:f5:97:6b:70:ed:68:29:8d:26:e4:34:ef:b5:35:99:64:
d5:df:b9:d1:f0:60:8d:69:f9:b2:52:07:9c:71:f4:61:93:e3:
49:d5:dd:2c:80:a3:62:ec:5c:ed:43:74:c6:ec:99:0e:3d:3e:
14:2f:73:e4:26:47:d7:16:91:f2:c8:88:e4:31:7e:04:25:c1:
f9:6e:9b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:37:38 2026 by rpki-client