This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/C08A3ED6E03C11EF991E147AC4F9AE02.roa
File: C08A3ED6E03C11EF991E147AC4F9AE02.roa (raw, json)
Hash identifier: 2yxooHg2J0c3MSXXKFuW6gpFsAXkYNwDiL8UbiBNepU=
Subject key identifier: 95:0E:E4:C3:28:9A:02:10:65:0C:6E:D4:0B:2A:4E:9B:75:D0:F9:97
Certificate issuer: /CN=A91E29CB/serialNumber=A07AF0CCB29835CC7642974BAC9E1502B9CF82D0
Certificate serial: 0303
Authority key identifier: A0:7A:F0:CC:B2:98:35:CC:76:42:97:4B:AC:9E:15:02:B9:CF:82:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHrwzLKYNcx2QpdLrJ4VArnPgtA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/C08A3ED6E03C11EF991E147AC4F9AE02.roa
Signing time: Thu 04 Dec 2025 23:39:06 +0000
ROA not before: Thu 04 Dec 2025 23:39:06 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 138358
IP address blocks: 103.159.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.crl
rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHrwzLKYNcx2QpdLrJ4VArnPgtA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 23:39:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 771 (0x303)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E29CB, serialNumber=A07AF0CCB29835CC7642974BAC9E1502B9CF82D0
Validity
Not Before: Dec 4 23:39:06 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69321b9a-7b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a8:f4:f4:5e:2a:1c:88:63:5b:b6:7f:72:e5:
16:07:b1:15:2e:ca:cc:ae:e9:cf:75:35:c9:3f:c6:
6f:5b:38:00:fe:7a:12:8d:c2:8c:05:79:20:94:af:
c1:a5:cc:40:1c:b5:4e:e1:76:23:9b:c5:e8:91:74:
21:5d:c8:e0:b6:88:42:85:9f:fc:74:88:6c:02:78:
0f:b4:df:92:b1:92:03:5c:cf:0f:88:63:7d:05:8c:
69:41:5c:f9:ab:89:3b:92:a8:af:6a:f1:8b:34:11:
74:ad:c6:9d:af:17:1e:02:00:bc:0d:6b:ed:95:a9:
80:16:32:41:54:b5:04:30:f8:08:04:60:2e:d4:76:
6a:52:05:d7:9c:40:d5:f0:97:2a:c6:9d:19:e8:e1:
dd:4a:24:af:91:b8:34:7d:8a:ba:49:89:4d:76:d1:
15:20:05:70:4a:3f:3d:c0:a9:f5:51:83:f2:e3:d4:
58:15:05:df:30:04:e6:20:69:3f:db:3b:81:87:60:
51:b9:e2:c6:3c:d0:aa:16:6e:64:38:9a:25:e2:5d:
42:1a:c9:58:fe:7c:df:6d:ff:87:63:b4:38:6c:d2:
de:35:b1:e0:cb:e8:97:0c:e9:71:ca:b2:18:6e:db:
60:51:67:38:86:32:79:68:a2:4d:62:0e:d1:25:9e:
ec:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:0E:E4:C3:28:9A:02:10:65:0C:6E:D4:0B:2A:4E:9B:75:D0:F9:97
X509v3 Authority Key Identifier:
keyid:A0:7A:F0:CC:B2:98:35:CC:76:42:97:4B:AC:9E:15:02:B9:CF:82:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHrwzLKYNcx2QpdLrJ4VArnPgtA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/C08A3ED6E03C11EF991E147AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.159.36.0/24
Signature Algorithm: sha256WithRSAEncryption
18:4a:55:03:0c:31:eb:6f:3a:1c:d6:cc:e8:61:b3:5d:ea:bc:
b2:db:be:83:dc:be:89:d6:ee:27:ab:e1:c7:ab:55:5e:7c:5e:
54:e5:57:15:03:0a:52:dc:a6:a0:9c:41:91:9e:34:71:a3:7b:
bd:cf:6a:c0:c5:76:53:f1:de:e4:5d:a9:41:17:6c:eb:c6:29:
ae:dc:22:29:42:86:a9:39:dc:f6:9e:a2:b6:dd:fc:a6:0b:f6:
cb:dd:25:d3:c1:3a:96:ba:97:78:8a:98:15:e0:24:c6:89:fb:
43:4d:95:06:de:01:59:c4:dc:ab:c0:d4:d3:7c:db:6f:82:40:
4d:3f:43:cd:bb:ad:2e:14:5c:c1:35:66:36:35:c0:c0:57:19:
32:b4:39:7d:80:a0:6f:57:dd:a3:8f:17:25:bc:1d:28:d5:df:
0e:0d:11:17:25:30:cd:53:3b:11:33:af:70:c3:4c:49:9b:89:
7b:29:a4:14:75:52:24:ad:d0:a5:db:d9:9f:fa:08:e2:a8:3a:
ec:53:0a:1c:7f:4c:f6:ea:fb:e4:00:ea:c7:97:39:6e:73:a5:
3d:b3:33:ba:89:76:5e:04:2b:3b:7c:06:95:b7:3a:93:86:32:
86:30:dd:78:10:01:65:63:7c:97:84:94:81:76:6e:bb:fd:c2:
0f:b0:18:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:33:20 2025 by rpki-client