This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/621428CE3CFB11EFB0BF040BC4F9AE02.roa
File: 621428CE3CFB11EFB0BF040BC4F9AE02.roa (raw, json)
Hash identifier: CcMzmbCEE24xcvNE3zqONcKn9u4xDYDRcCqHcVACgAs=
Subject key identifier: BC:AF:A8:17:BC:D0:15:1A:40:DD:40:B0:21:FD:C6:11:3C:8D:45:9C
Certificate issuer: /CN=A91E379F/serialNumber=82B4D271DE212E06335C0B45E66517B508B83516
Certificate serial: FE
Authority key identifier: 82:B4:D2:71:DE:21:2E:06:33:5C:0B:45:E6:65:17:B5:08:B8:35:16
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/621428CE3CFB11EFB0BF040BC4F9AE02.roa
Signing time: Sat 01 Nov 2025 05:49:09 +0000
ROA not before: Sat 01 Nov 2025 05:49:09 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 136557
IP address blocks: 103.26.236.0/24 maxlen: 24
103.26.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.crl
rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:03:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254 (0xfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E379F, serialNumber=82B4D271DE212E06335C0B45E66517B508B83516
Validity
Not Before: Nov 1 05:49:09 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69059f55-424d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f9:f0:c9:02:a5:4c:b3:92:bc:2d:f1:83:7c:
39:dc:f7:65:36:65:6c:d8:dd:d5:75:5a:ac:64:16:
6a:19:94:92:e9:4e:10:e4:d8:60:b5:0b:aa:ba:d7:
d8:6f:2a:bc:19:7c:a6:38:dd:e4:74:aa:5a:e4:17:
f6:a8:43:57:30:21:41:f2:de:9f:4b:e0:d4:6a:a8:
9d:cb:0b:41:87:4b:dc:51:6c:1f:04:81:3c:05:5a:
a9:58:a0:5f:53:66:a1:49:c6:47:6f:76:08:d9:9d:
89:27:c1:3c:82:32:30:58:87:36:de:d7:ce:a9:13:
a3:c6:f1:9a:70:82:60:20:ae:b2:a1:99:1a:0c:25:
ed:5f:ad:54:82:c6:8a:27:05:57:00:c5:e2:a3:9b:
e7:2e:c8:80:bd:08:e4:84:ac:7b:b7:5c:3d:a2:12:
b6:6c:84:35:c6:a1:b9:f8:58:3d:4d:26:ac:bf:64:
c2:99:1f:66:f3:89:2a:0e:78:30:60:1c:28:7e:b0:
fa:5c:c5:1c:90:6d:94:c5:6e:44:7d:78:5f:25:66:
61:c5:8b:0e:5a:9d:1e:0a:f9:47:a6:a5:0a:78:95:
fe:f2:d9:b4:70:b4:0d:86:cf:59:39:3f:a0:74:36:
a6:a1:21:98:07:cf:fe:59:54:b4:5e:6a:a5:96:4b:
27:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:AF:A8:17:BC:D0:15:1A:40:DD:40:B0:21:FD:C6:11:3C:8D:45:9C
X509v3 Authority Key Identifier:
keyid:82:B4:D2:71:DE:21:2E:06:33:5C:0B:45:E6:65:17:B5:08:B8:35:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/621428CE3CFB11EFB0BF040BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.26.236.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:ea:3b:e1:d2:5e:13:da:46:f1:87:5a:9f:f0:26:1b:e7:54:
7d:f2:56:38:04:55:a1:32:61:b8:0f:f9:13:b4:d4:1e:62:0c:
5a:44:7e:72:b2:67:9f:80:86:30:76:0a:53:89:aa:b8:32:b2:
6b:4b:a7:9c:be:d2:dd:c4:ad:54:fc:b9:31:45:04:8d:24:29:
e6:4a:9a:11:fb:30:1d:e2:66:cb:fa:62:cc:5a:1a:22:98:17:
28:25:2e:68:08:6c:23:fe:b5:08:bd:58:03:cb:9c:38:2f:6d:
2d:cd:4c:e4:dd:83:9c:8c:03:e4:ab:d5:8e:04:0c:ae:fa:47:
dd:ef:29:1b:38:82:2b:7d:3a:35:22:22:fa:4d:66:53:42:59:
6a:97:bf:2f:52:95:77:7b:d8:36:90:71:b8:be:df:11:4e:e9:
01:b8:20:b8:63:23:90:fa:a6:4b:1e:c0:6f:4e:25:d4:da:80:
97:83:ea:92:20:96:62:9a:27:c2:2a:56:cd:36:59:76:f8:e3:
4c:52:89:21:60:61:14:80:96:88:80:42:8b:6e:06:62:98:dc:
95:c5:0c:c9:7a:46:6b:56:19:8d:b5:b6:5e:b1:66:90:f6:c8:
12:c4:8f:34:ea:bb:d9:63:60:3c:e2:55:68:97:2b:72:fa:54:
94:e3:18:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:47:35 2025 by rpki-client