This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/B90B58FCD97211ED8C2F1263C4F9AE02.roa
File: B90B58FCD97211ED8C2F1263C4F9AE02.roa (raw, json)
Hash identifier: 8ZU922WlfqbDCFA7+sGqs+X/ZJnzDKijBbgzR74c6fQ=
Subject key identifier: AA:1E:7F:3C:49:B9:C7:DA:47:0C:38:F4:60:73:56:4B:D5:F9:63:B4
Certificate issuer: /CN=A91E83FE/serialNumber=A14CA078C85E46535D9204382B84974F13B0C93C
Certificate serial: 054B
Authority key identifier: A1:4C:A0:78:C8:5E:46:53:5D:92:04:38:2B:84:97:4F:13:B0:C9:3C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/B90B58FCD97211ED8C2F1263C4F9AE02.roa
Signing time: Sun 30 Nov 2025 22:25:16 +0000
ROA not before: Sun 30 Nov 2025 22:25:16 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 208392
IP address blocks: 103.173.126.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.crl
rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 22:15:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1355 (0x54b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E83FE, serialNumber=A14CA078C85E46535D9204382B84974F13B0C93C
Validity
Not Before: Nov 30 22:25:16 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=692cc44c-b256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:36:30:61:99:4a:98:1d:5c:f7:07:d9:cb:79:
1f:cd:e1:82:b5:35:68:6d:de:f9:21:07:da:50:af:
fd:9a:bd:49:c3:ba:97:32:ac:34:1a:79:f0:27:6b:
4f:91:f4:ba:95:d7:c6:04:b9:a9:df:76:17:09:1a:
84:0e:32:09:c9:23:ed:e5:ab:a7:ac:2c:b2:eb:94:
e9:09:c3:94:3f:8a:13:ac:29:a7:68:9a:41:a4:12:
15:58:3a:23:42:b3:32:a9:f9:da:3a:b3:66:90:a4:
c8:d9:d3:ec:02:af:c2:e2:e5:c1:ef:4a:fd:39:d6:
22:c2:26:96:62:ad:c0:c9:6c:d1:4f:0e:93:bc:90:
7a:ed:f8:79:7b:0a:a3:a7:7d:2e:8e:36:06:cf:b3:
b0:31:06:05:ea:db:ea:de:84:32:62:a9:82:71:13:
52:1a:4c:a8:bf:04:b1:69:9f:56:04:12:3e:fa:85:
c7:7b:21:ff:a5:f1:17:e0:a6:34:20:59:77:70:ca:
89:c7:0f:20:93:fb:42:61:41:99:7e:29:79:d4:af:
52:6b:b7:b2:14:52:3e:88:51:bf:d1:fc:5a:69:8c:
a5:77:ea:71:d7:d5:16:5e:8c:89:de:d6:32:ca:d2:
b3:e1:e0:c2:3d:54:f5:77:c9:ae:59:09:25:0c:f7:
c6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1E:7F:3C:49:B9:C7:DA:47:0C:38:F4:60:73:56:4B:D5:F9:63:B4
X509v3 Authority Key Identifier:
keyid:A1:4C:A0:78:C8:5E:46:53:5D:92:04:38:2B:84:97:4F:13:B0:C9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/B90B58FCD97211ED8C2F1263C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.173.126.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:e7:e6:d9:10:b3:f8:b3:b1:e6:ef:4f:d7:cd:58:e2:05:9e:
07:a9:11:8f:c2:7b:2b:49:b2:90:89:54:64:61:4b:34:8e:ec:
ba:87:0c:d3:22:1a:bc:68:e9:ff:59:41:6f:01:2a:f9:da:05:
34:33:80:26:e8:c7:1d:95:80:d7:21:64:1a:97:b2:97:5c:b3:
aa:d3:bd:44:c9:af:33:0a:4e:3b:ac:08:07:01:a9:c4:e7:88:
2c:97:32:ca:4a:9f:b3:b8:ac:11:15:b9:ae:df:15:37:7d:75:
3d:37:49:eb:18:b4:09:0b:db:7c:2d:43:22:11:d4:d5:72:98:
2e:de:6a:a0:5f:bf:ae:9d:0a:31:da:33:28:75:9e:ca:32:4e:
23:44:53:02:ac:f0:b1:e2:99:42:3f:4f:24:21:8c:85:7a:45:
fc:3b:e6:96:49:41:18:de:a9:49:71:75:61:b3:17:7d:74:90:
6a:06:57:4e:d2:5d:57:04:8c:12:f5:47:56:0d:2b:b1:65:34:
2e:ba:a6:23:99:75:11:f3:7a:ed:71:d3:0d:1d:2c:6a:97:14:
81:43:db:5d:32:20:01:31:6d:d9:fe:c3:1c:54:5c:55:9d:87:
f9:a8:e2:fa:1e:ed:6a:4e:9f:91:e4:31:3b:c7:0a:6e:8a:c0:
e3:bf:4d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:59:23 2025 by rpki-client