This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/EC7311FEE5C311EEBF217685C4F9AE02.roa
File: EC7311FEE5C311EEBF217685C4F9AE02.roa (raw, json)
Hash identifier: WXs23PC9oNPUDjoMufc2iqduojTIGtlpeP1luMoHhDc=
Subject key identifier: 51:7B:17:84:28:6C:77:59:0A:BC:7B:DB:F3:5B:0B:E2:13:E1:90:B5
Certificate issuer: /CN=A91DDFF2/serialNumber=F83DC3A246D12151AC87A772CECA0EDD215F862A
Certificate serial: 013B
Authority key identifier: F8:3D:C3:A2:46:D1:21:51:AC:87:A7:72:CE:CA:0E:DD:21:5F:86:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D3DokbRIVGsh6dyzsoO3SFfhio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/EC7311FEE5C311EEBF217685C4F9AE02.roa
Signing time: Tue 11 Nov 2025 04:53:32 +0000
ROA not before: Tue 11 Nov 2025 04:53:32 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 133760
IP address blocks: 45.115.50.0/23 maxlen: 23
45.115.50.0/24 maxlen: 24
45.115.51.0/24 maxlen: 24
103.41.58.0/23 maxlen: 23
103.41.59.0/24 maxlen: 24
103.55.54.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.crl
rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D3DokbRIVGsh6dyzsoO3SFfhio.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:30:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 315 (0x13b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DDFF2, serialNumber=F83DC3A246D12151AC87A772CECA0EDD215F862A
Validity
Not Before: Nov 11 04:53:32 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6912c14b-dafa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:25:58:9a:a8:c3:65:dd:0c:0c:05:e9:8f:9a:
ff:b9:56:c3:03:54:d6:9c:c9:04:f4:12:8e:9b:20:
ed:d6:b8:03:fe:1b:a9:0f:44:e5:f5:b0:8c:9c:cf:
43:c0:c9:b2:ca:1e:bf:e8:85:95:73:ac:ba:aa:7b:
99:7f:42:a8:70:58:d6:25:0d:b2:eb:aa:18:27:ba:
04:27:d1:2a:37:dc:8d:c7:2f:2d:e0:c0:7f:8b:48:
4c:c0:fc:5a:11:88:c6:84:1e:1b:4e:17:90:5e:63:
16:c5:e3:58:90:f0:62:4a:1c:af:66:f6:8d:f5:8f:
d2:15:36:27:f8:24:03:65:1d:6b:86:54:51:4c:68:
e1:7e:b7:d9:43:75:11:84:4a:ad:d3:cd:c4:80:0a:
5a:c1:dd:52:a5:04:66:7e:62:de:63:a0:84:d1:87:
8a:ea:d1:b7:e5:d6:4b:bd:fb:77:29:2d:b0:70:6d:
46:4b:d5:e7:5e:38:72:5a:0b:fa:f2:59:75:10:58:
89:56:41:3d:1b:5d:b5:f8:9d:eb:e8:1f:f0:4e:91:
9f:b6:93:96:aa:53:ea:bd:71:11:e0:c7:df:15:a9:
98:b3:4e:90:8c:0c:ed:33:91:4a:a0:a0:02:ea:5f:
b3:43:6d:71:5a:61:29:34:e8:f7:c6:18:1d:da:84:
4a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:7B:17:84:28:6C:77:59:0A:BC:7B:DB:F3:5B:0B:E2:13:E1:90:B5
X509v3 Authority Key Identifier:
keyid:F8:3D:C3:A2:46:D1:21:51:AC:87:A7:72:CE:CA:0E:DD:21:5F:86:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D3DokbRIVGsh6dyzsoO3SFfhio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/EC7311FEE5C311EEBF217685C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.115.50.0/23
103.41.58.0/23
103.55.54.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:5a:a0:9c:e1:1e:98:a9:e8:32:f1:50:ad:b0:79:86:e9:0c:
39:02:7c:e6:f4:16:45:f5:d8:cd:04:48:55:f0:d6:cb:e7:14:
20:14:f5:aa:1b:8e:21:b5:15:04:a9:c2:36:6d:ca:cc:18:cc:
b7:47:e5:7c:91:bf:0d:fa:0e:aa:64:70:62:d9:58:3f:95:e8:
88:e2:ff:7c:b6:0b:a5:39:21:df:56:1b:3e:dc:af:e9:10:50:
84:c1:9f:a5:4b:63:2e:e1:4c:9e:66:83:ad:32:8f:6d:d0:c7:
9e:1b:30:b4:c2:32:08:48:ae:3d:ff:f1:98:b3:dc:8c:27:7a:
2f:e7:69:3c:34:d2:9e:a8:20:50:58:f6:38:cc:6d:92:9a:1c:
99:af:09:f9:c2:00:30:c6:54:17:b8:31:09:50:97:e2:35:e2:
01:07:fe:dd:f2:ad:11:6a:d6:09:d9:9b:42:84:9e:54:e0:95:
29:47:35:da:f7:f0:10:99:f5:bf:86:05:e1:f3:16:ad:53:f8:
bc:a9:2c:cf:50:01:22:14:fc:24:8d:07:f9:15:31:8c:22:f2:
bb:b6:cf:e6:09:7e:b4:2b:16:95:e8:77:65:d8:ad:be:b9:05:
a2:a6:a2:e8:1e:f9:e6:73:79:c5:29:8c:61:00:c3:dc:2b:42:
1e:65:2f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:33:26 2025 by rpki-client