This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/F6714DD6C69711F0A13E891EC4F9AE02.roa
File: F6714DD6C69711F0A13E891EC4F9AE02.roa (raw, json)
Hash identifier: UZaqS26DC1nA/+p1uPfwjTjffQi/JnVfd0FrTswFSkE=
Subject key identifier: 5F:7D:1C:A5:66:ED:8B:0D:1B:3E:AA:C6:A2:B2:73:3E:F9:BB:23:31
Certificate issuer: /CN=A91E1887/serialNumber=E0E9B9399B8A4A5FDCDE209FC5BEC078AF95CF7B
Certificate serial: 0791
Authority key identifier: E0:E9:B9:39:9B:8A:4A:5F:DC:DE:20:9F:C5:BE:C0:78:AF:95:CF:7B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/F6714DD6C69711F0A13E891EC4F9AE02.roa
Signing time: Fri 21 Nov 2025 05:07:23 +0000
ROA not before: Fri 21 Nov 2025 05:07:22 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 136907
IP address blocks: 103.215.0.0/24 maxlen: 24
103.215.1.0/24 maxlen: 24
103.215.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.crl
rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 20:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1937 (0x791)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1887, serialNumber=E0E9B9399B8A4A5FDCDE209FC5BEC078AF95CF7B
Validity
Not Before: Nov 21 05:07:22 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=691ff38a-6ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2a:f0:be:36:44:b1:11:66:c7:b7:b9:97:dc:
54:24:dc:fc:3c:3c:3f:3d:c1:f1:46:08:ed:9d:07:
cc:0c:8b:39:9c:f4:fa:1c:c2:86:68:be:2b:f4:9d:
3f:c6:68:15:5c:35:ae:ed:68:86:8b:55:2a:49:e1:
39:70:c8:8d:36:01:a4:aa:e2:60:80:53:ff:c7:09:
63:51:de:05:ce:0b:94:db:e6:2f:f7:be:18:a8:5d:
30:0a:23:f5:31:3f:d4:68:70:28:40:c7:7f:65:73:
ad:c2:d7:dd:ff:e4:d9:1e:2f:68:5c:f3:43:e4:ad:
ee:f8:b2:5e:ed:a2:07:b5:39:91:a6:74:b1:c6:e8:
50:8a:81:c1:79:a2:e2:6d:66:b1:58:45:45:77:18:
9f:e6:06:2f:0e:9c:4c:e0:12:e5:c0:fb:73:7d:d4:
0f:c2:5d:5d:0b:5c:a3:fe:ce:64:a7:57:b6:9d:77:
54:f9:f9:64:a0:9c:d2:de:83:54:40:e0:3f:44:f5:
83:f5:53:1d:f4:71:9f:e4:34:57:ed:1f:1a:af:f7:
fc:39:ba:d8:f7:7e:b1:85:98:5c:03:c3:00:34:3a:
11:d9:c9:32:2a:ae:75:4b:37:6b:d6:75:60:f9:74:
1f:67:9b:b9:bf:b4:eb:8c:a8:e7:94:ce:b7:fb:7a:
77:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:7D:1C:A5:66:ED:8B:0D:1B:3E:AA:C6:A2:B2:73:3E:F9:BB:23:31
X509v3 Authority Key Identifier:
keyid:E0:E9:B9:39:9B:8A:4A:5F:DC:DE:20:9F:C5:BE:C0:78:AF:95:CF:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/F6714DD6C69711F0A13E891EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.215.0.0/23
103.215.3.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:6a:3a:b5:63:bc:15:67:15:f4:da:a6:bf:c5:a8:96:d4:9e:
3e:cc:96:a8:b1:68:b1:99:5a:f8:f7:b4:84:c5:92:8d:0f:ef:
06:fa:d1:50:6f:ec:f9:43:14:2f:d4:31:c4:03:ed:df:db:c8:
25:21:8a:7c:6c:12:08:4e:fe:7b:f7:a0:a2:e5:40:79:78:e2:
c9:95:15:75:1f:49:86:fc:a0:dc:05:ae:ed:56:31:ad:14:8d:
5c:28:69:2b:87:9d:75:59:ac:6e:0f:53:06:7f:30:dc:f1:8b:
b1:87:fc:f8:f3:58:ec:22:cf:c2:b6:5b:47:99:93:b7:a5:e4:
ea:5c:89:cf:07:26:7d:83:9e:31:21:9b:ed:b9:f4:89:2b:9d:
7b:7f:3d:cc:95:d3:5f:56:75:58:9a:a3:2c:c9:ac:a4:8f:da:
8a:2f:97:6b:97:87:99:0c:dc:a0:d5:5a:54:4e:7b:1e:9b:f9:
14:98:c7:7b:59:20:f0:80:0d:53:66:28:14:df:44:0a:b0:15:
0b:ad:a8:bf:90:18:50:88:7b:37:87:64:4a:d8:b4:04:dd:4c:
50:b4:f9:f7:f3:99:7e:dc:2e:a2:30:57:c0:8e:54:c6:a1:87:
92:2b:da:b7:c3:a7:f9:03:64:0a:85:9e:e5:f2:6a:ac:6a:c4:
0a:e2:4d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:13:29 2025 by rpki-client