This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/65051AB6BF3C11EAAF328582C4F9AE02.roa
File: 65051AB6BF3C11EAAF328582C4F9AE02.roa (raw, json)
Hash identifier: /EUui9huVpIRoLTcO4HqS0awnaP4yrnOLCUlQInLVOU=
Subject key identifier: 57:3C:0D:24:15:E1:E1:F7:1C:07:00:12:FA:2E:79:C3:87:F0:C8:BA
Certificate issuer: /CN=A91DEA56/serialNumber=BBE49FCB41F5026A35BF6C93B91FDFF3C88C736E
Certificate serial: 090C
Authority key identifier: BB:E4:9F:CB:41:F5:02:6A:35:BF:6C:93:B9:1F:DF:F3:C8:8C:73:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/65051AB6BF3C11EAAF328582C4F9AE02.roa
Signing time: Fri 02 Jan 2026 20:17:18 +0000
ROA not before: Fri 02 Jan 2026 20:17:18 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 10021
IP address blocks: 103.23.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.crl
rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:43:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2316 (0x90c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEA56, serialNumber=BBE49FCB41F5026A35BF6C93B91FDFF3C88C736E
Validity
Not Before: Jan 2 20:17:18 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=695827ce-efed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:35:c5:ee:a9:ae:b7:90:a9:9c:cc:04:e9:9b:
95:7d:5c:3b:d4:2c:16:4f:58:29:1a:3c:ee:9e:47:
48:91:ff:dc:e1:73:5b:90:19:10:a4:9f:a1:75:28:
07:7d:0c:35:07:2d:15:9b:5a:6c:31:47:4d:e5:09:
c8:af:ec:97:b1:69:f6:30:0e:7f:d1:75:9e:d9:55:
c7:77:65:5c:ef:22:76:69:08:fe:0c:33:f5:f0:29:
ff:5b:3c:e3:fd:49:45:e2:7c:aa:f6:c9:53:23:fd:
e6:e6:26:25:ed:9d:0f:77:01:46:09:9e:fe:1c:f2:
de:ab:a1:ad:f1:8a:5c:78:65:86:0c:a9:c2:a8:d8:
db:36:6a:45:ed:65:2d:5b:54:2c:6d:eb:04:9f:57:
ef:4a:60:70:97:25:3f:80:ff:fa:69:5e:13:bc:63:
be:ab:d4:24:a4:89:a7:97:df:68:78:67:81:1d:ec:
9f:c7:58:6e:21:fe:36:08:18:0f:e8:26:34:85:c9:
e4:43:73:12:37:63:7c:7c:3e:69:83:36:31:c1:67:
38:76:15:da:08:8a:f2:df:ca:55:2e:6d:45:6a:a1:
60:d3:32:33:af:69:46:75:56:a1:04:cc:46:c1:dd:
ea:39:1b:7b:f3:3c:94:84:f0:2c:cf:0b:a4:6c:24:
f1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3C:0D:24:15:E1:E1:F7:1C:07:00:12:FA:2E:79:C3:87:F0:C8:BA
X509v3 Authority Key Identifier:
keyid:BB:E4:9F:CB:41:F5:02:6A:35:BF:6C:93:B9:1F:DF:F3:C8:8C:73:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/65051AB6BF3C11EAAF328582C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.23.222.0/24
Signature Algorithm: sha256WithRSAEncryption
69:08:5b:48:71:31:c5:c4:a6:7e:47:d7:b3:02:b8:de:5b:fd:
8f:c6:c2:9a:2b:e4:ca:0f:b0:fb:48:d8:e9:66:ca:dc:3f:97:
58:b8:d1:cf:ab:aa:ce:ae:9f:d9:bb:aa:9c:25:d7:b1:fc:00:
1f:51:4c:ad:e1:b4:21:18:12:64:41:5b:02:e8:74:6c:ed:97:
6a:5b:32:4e:47:9c:b1:75:8e:18:dc:d6:1a:c5:1c:17:4b:fc:
44:ed:74:40:de:6e:e3:f1:23:dc:1a:a4:9c:e8:55:9c:fc:5a:
ad:47:2b:a0:ec:3f:cd:06:7b:14:ba:0f:e8:8a:53:02:43:7f:
c0:bc:60:72:f5:ad:9c:36:c2:f6:ee:23:de:54:2f:29:11:35:
06:2e:53:31:82:0e:ff:fc:82:23:73:ec:d1:b7:40:4d:44:43:
6c:1b:46:23:c9:de:c3:43:65:4d:1b:92:07:6f:e9:22:d8:a8:
28:22:78:31:7b:75:c1:97:c5:e7:76:23:9e:5a:d5:11:3c:62:
e9:8b:b8:6e:99:9c:45:21:07:8f:96:3c:6c:73:e8:57:6c:db:
d7:13:50:eb:81:3b:fd:c6:f7:9c:09:8a:5a:c0:1c:20:7f:64:
a4:f1:b2:97:1c:ea:8e:dd:fc:54:f3:d1:44:f9:ef:06:e5:1e:
6e:cb:af:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:38:02 2026 by rpki-client