This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/5FA1BF8802DD11EE86865A23C4F9AE02.roa
File: 5FA1BF8802DD11EE86865A23C4F9AE02.roa (raw, json)
Hash identifier: wpBZBtNCDLHxBkBL5a29BX4r7aASlL8Pki5MOyVlQBc=
Subject key identifier: D3:C5:F3:31:D4:EA:2F:E0:3D:F8:6A:58:1F:83:18:75:46:81:6D:29
Certificate issuer: /CN=A91E4D3D/serialNumber=C8070FD061A851FF8AEDE0DE0C3607EEB98FF701
Certificate serial: 0646
Authority key identifier: C8:07:0F:D0:61:A8:51:FF:8A:ED:E0:DE:0C:36:07:EE:B9:8F:F7:01
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAcP0GGoUf-K7eDeDDYH7rmP9wE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/5FA1BF8802DD11EE86865A23C4F9AE02.roa
Signing time: Thu 22 Jan 2026 22:19:09 +0000
ROA not before: Thu 22 Jan 2026 22:19:09 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 138627
IP address blocks: 113.30.129.0/24 maxlen: 24
150.195.215.0/24 maxlen: 24
150.195.216.0/24 maxlen: 24
202.75.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.crl
rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAcP0GGoUf-K7eDeDDYH7rmP9wE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 22:08:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1606 (0x646)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4D3D, serialNumber=C8070FD061A851FF8AEDE0DE0C3607EEB98FF701
Validity
Not Before: Jan 22 22:19:09 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6972a25d-64eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a7:1e:b4:09:dc:60:73:13:ea:30:6f:9c:78:
94:43:ad:99:85:e2:d0:09:58:5a:2d:8e:a2:f9:26:
b9:c0:41:93:2b:26:49:4f:71:1e:16:50:47:89:35:
e6:25:32:64:35:1b:64:4a:b4:3f:70:ee:90:04:c9:
aa:b7:a0:80:49:8c:64:77:55:75:e2:17:c1:88:c4:
f8:b6:6a:1e:ec:d2:d7:cc:80:19:54:8c:93:5b:00:
ad:b7:a0:0c:1e:ed:94:8b:3a:ad:67:0a:bb:8a:84:
a6:be:9f:56:26:14:9f:cf:e2:3d:aa:cd:ee:b0:6f:
fd:70:c8:3b:68:25:04:f3:ed:ea:83:78:c2:1a:c4:
c3:81:d8:0b:1b:b2:c9:75:ec:8e:00:72:ce:f4:8a:
80:b1:87:6b:44:e9:a8:2e:b5:a1:5f:08:29:53:07:
8f:64:de:2f:4e:cb:f4:28:f5:a2:c4:87:af:ab:5c:
f5:68:9a:1b:f8:cc:49:bc:8c:39:b3:85:fb:39:e1:
4b:25:7b:9c:71:5c:74:91:c8:b5:7c:ac:7d:b5:a2:
46:db:b7:02:0c:25:e9:96:0c:11:5e:e8:f9:ba:33:
98:78:52:51:15:47:81:64:a6:7b:01:9d:3f:f2:70:
e6:db:3c:c5:4a:68:ff:4d:dc:75:0c:20:52:c6:16:
c1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C5:F3:31:D4:EA:2F:E0:3D:F8:6A:58:1F:83:18:75:46:81:6D:29
X509v3 Authority Key Identifier:
keyid:C8:07:0F:D0:61:A8:51:FF:8A:ED:E0:DE:0C:36:07:EE:B9:8F:F7:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAcP0GGoUf-K7eDeDDYH7rmP9wE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/5FA1BF8802DD11EE86865A23C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.30.129.0/24
150.195.215.0-150.195.216.255
202.75.245.0/24
Signature Algorithm: sha256WithRSAEncryption
14:94:48:89:9f:8f:4b:65:1f:0e:a8:a1:3e:5a:8d:81:d9:4c:
47:00:eb:4d:7b:79:09:1b:dd:ef:9f:ea:35:f1:ba:0a:c7:41:
21:3f:f3:24:47:42:cc:50:80:5b:97:1c:67:86:6f:81:ac:67:
9b:3f:58:70:76:e5:f8:cd:1e:bd:5f:30:2d:9d:d4:8e:c2:20:
1a:c4:77:30:bc:b3:15:46:3b:7c:bb:ed:44:5b:3b:51:eb:63:
ca:72:e0:6f:25:6d:cd:84:ee:96:a8:39:5e:df:41:f7:0b:4c:
8c:d6:36:d2:ef:f6:f2:f3:e2:97:7a:c5:6e:2e:b7:31:d4:61:
ce:b1:dc:88:32:78:ce:6f:dc:98:38:73:b4:7d:2a:8c:0b:28:
56:13:60:96:d9:d2:25:d7:1e:c8:85:b8:e7:70:d6:ab:2a:7e:
67:e5:2b:b8:6d:d3:e0:5b:17:bf:ab:ba:56:b2:71:3f:ce:8c:
36:6d:fd:de:b5:40:70:e1:74:05:0a:61:92:a5:9d:c8:5a:52:
42:e4:6c:f4:30:35:34:17:69:b3:bb:c8:fb:ca:b6:df:5f:44:
43:2e:ef:89:d7:f6:75:1e:4a:5f:d4:7a:7b:23:78:b8:c8:77:
b7:eb:fc:5f:1f:2a:4c:ee:dc:62:3c:26:45:f8:71:c4:94:f6:
d6:cb:98:2d
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgICBkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
RTREM0QxMTAvBgNVBAUTKEM4MDcwRkQwNjFBODUxRkY4QUVERTBERTBDMzYwN0VF
Qjk4RkY3MDEwHhcNMjYwMTIyMjIxOTA5WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTcyYTI1ZC02NGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApKcetAncYHMT6jBvnHiUQ62ZheLQCVhaLY6i+Sa5wEGTKyZJT3EeFlBHiTXm
JTJkNRtkSrQ/cO6QBMmqt6CASYxkd1V14hfBiMT4tmoe7NLXzIAZVIyTWwCtt6AM
Hu2UizqtZwq7ioSmvp9WJhSfz+I9qs3usG/9cMg7aCUE8+3qg3jCGsTDgdgLG7LJ
deyOAHLO9IqAsYdrROmoLrWhXwgpUwePZN4vTsv0KPWixIevq1z1aJob+MxJvIw5
s4X7OeFLJXuccVx0kci1fKx9taJG27cCDCXplgwRXuj5ujOYeFJRFUeBZKZ7AZ0/
8nDm2zzFSmj/Tdx1DCBSxhbBnwIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFNPF8zHU
6i/gPfhqWB+DGHVGgW0pMB8GA1UdIwQYMBaAFMgHD9BhqFH/iu3g3gw2B+65j/cB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEQzRC9CMDIwMkQzMkQ4
QjkxMUVCQUJDMUY0ODVDNEY5QUUwMi95QWNQMEdHb1VmLUs3ZURlRERZSDdybVA5
d0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lBY1AwR0dvVWYtSzdlRGVERFlIN3JtUDl3RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTREM0QvQjAyMDJEMzJEOEI5MTFFQkFCQzFGNDg1QzRGOUFFMDIvNUZBMUJGODgw
MkREMTFFRTg2ODY1QTIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMwYIKwYBBQUHAQcBAf8E
JDAiMCAEAgABMBoDBABxHoEwDAMEAJbD1wMEAJbD2AMEAMpL9TANBgkqhkiG9w0B
AQsFAAOCAQEAFJRIiZ+PS2UfDqihPlqNgdlMRwDrTXt5CRvd75/qNfG6CsdBIT/z
JEdCzFCAW5ccZ4Zvgaxnmz9YcHbl+M0evV8wLZ3UjsIgGsR3MLyzFUY7fLvtRFs7
UetjynLgbyVtzYTulqg5Xt9B9wtMjNY20u/28vPil3rFbi63MdRhzrHciDJ4zm/c
mDhztH0qjAsoVhNgltnSJdceyIW453DWqyp+Z+UruG3T4FsXv6u6VrJxP86MNm39
3rVAcOF0BQphkqWdyFpSQuRs9DA1NBdps7vI+8q2319EQy7vidf2dR5KX9R6eyN4
uMh3t+v8Xx8qTO7cYjwmRfhxxJT21suYLQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:42:51 2026 by rpki-client