This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/E0C5B7148F2C11EEA361B22FC4F9AE02.roa
File: E0C5B7148F2C11EEA361B22FC4F9AE02.roa (raw, json)
Hash identifier: 42aOXbG5FIwZfCJXzkNli7qHwYEm7Q+WQBfK6Y8ohK0=
Subject key identifier: DD:DF:5B:32:9C:E5:C6:DD:D0:E5:D2:78:35:F9:FC:D8:44:71:7A:12
Certificate issuer: /CN=A91DEB81/serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892
Certificate serial: 04CA
Authority key identifier: 77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/E0C5B7148F2C11EEA361B22FC4F9AE02.roa
Signing time: Tue 30 Dec 2025 23:19:49 +0000
ROA not before: Tue 30 Dec 2025 23:19:49 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 136038
IP address blocks: 103.254.72.0/22 maxlen: 22
103.254.72.0/24 maxlen: 24
103.254.73.0/24 maxlen: 24
103.254.74.0/24 maxlen: 24
103.254.75.0/24 maxlen: 24
192.51.188.0/24 maxlen: 24
192.197.113.0/24 maxlen: 24
199.212.57.0/24 maxlen: 24
204.52.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl
rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:16:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1226 (0x4ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEB81, serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892
Validity
Not Before: Dec 30 23:19:49 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69545e15-6a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:46:7e:ab:d4:38:74:67:60:b4:9d:18:2b:a2:
58:96:54:9d:74:9e:e2:b2:d4:41:e5:83:e5:e6:16:
67:1d:71:3d:e2:37:8f:12:3b:d4:71:5a:ee:c8:a3:
85:94:3b:58:fe:df:bd:14:c1:b3:15:52:cb:18:9c:
af:00:5c:23:eb:a5:e1:7b:03:8f:75:c1:ff:94:33:
8a:7a:6f:71:b6:e4:10:62:4b:f1:c0:7a:3d:23:63:
3f:0f:28:92:cb:48:32:c6:20:0c:74:06:f3:ff:7b:
99:f8:41:a0:e9:e4:51:5a:1f:b5:a8:37:0e:89:e7:
1c:15:4c:2a:df:53:11:e4:6e:3f:b1:c7:9d:7e:41:
06:21:9e:5b:eb:a1:fa:4d:d1:80:7a:e0:c7:7f:03:
2d:d6:78:80:f3:40:a7:16:ca:b5:8c:81:de:ce:b0:
65:fd:e0:6f:7d:86:b2:49:e2:56:51:64:49:8a:3e:
f1:a1:ef:20:4b:ef:51:e4:f2:0a:5e:fc:34:fb:24:
21:7b:59:74:d8:4a:58:10:7b:c4:79:e7:c6:af:44:
6a:47:41:e0:98:79:ae:e2:55:8d:99:13:62:4e:72:
35:57:3b:d3:0f:f5:16:5b:32:8a:28:b1:c4:ae:27:
28:c4:bf:ce:dd:1f:f1:f4:71:1a:0f:dc:94:aa:91:
d4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:DF:5B:32:9C:E5:C6:DD:D0:E5:D2:78:35:F9:FC:D8:44:71:7A:12
X509v3 Authority Key Identifier:
keyid:77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/E0C5B7148F2C11EEA361B22FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.254.72.0/22
192.51.188.0/24
192.197.113.0/24
199.212.57.0/24
204.52.191.0/24
Signature Algorithm: sha256WithRSAEncryption
90:c9:02:77:96:34:b5:33:55:b5:b5:66:71:83:1c:69:a5:de:
3e:73:b6:b1:0a:f7:aa:27:41:20:84:c3:51:3a:98:a4:d4:2b:
af:70:ed:13:71:cc:ed:46:bf:5f:cb:dd:f5:e5:93:87:de:06:
47:50:a2:b4:f9:0d:47:8b:f4:8f:4d:4f:62:2a:80:8f:e6:53:
0d:15:f4:3d:f5:85:57:06:fa:e8:0c:3e:d9:68:51:f3:64:cd:
10:12:25:5e:ff:5e:fa:db:0f:a0:01:b4:19:04:87:e5:3b:02:
eb:73:59:53:c6:b1:83:9c:36:79:54:71:42:b4:0e:66:06:26:
db:01:7a:0a:bd:ff:f4:0c:63:ac:65:13:9d:7c:1b:d7:5e:65:
f1:92:d8:f0:70:ec:3e:a9:0f:f7:f7:f6:bd:21:f9:f1:0e:35:
32:60:01:63:25:95:12:ac:7f:5e:b0:41:63:3d:7a:3f:08:6e:
01:79:e8:90:12:49:07:4c:08:93:3a:95:02:34:8a:42:10:4c:
89:c5:bb:b5:68:da:7d:5f:a0:91:df:01:92:da:a1:18:23:56:
af:ca:da:1d:25:f6:e2:af:4a:cf:98:1c:41:24:42:6e:6e:d3:
05:d6:09:da:8d:05:5a:92:af:6b:31:c9:a1:07:0a:55:72:63:
89:7b:07:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:52:54 2026 by rpki-client