This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E861E/45CEDF48541E11F0A0CEF478C4F9AE02/C67FDA48541E11F09E0E0C7DC4F9AE02.roa
File: C67FDA48541E11F09E0E0C7DC4F9AE02.roa (raw, json)
Hash identifier: uj1I6wfRXv6mge6FZVxFgGmZIUqBCKrqZmofBW6qi+Q=
Subject key identifier: D1:DF:FD:00:BA:39:C7:93:0D:8D:B1:7F:F7:01:82:60:DC:16:91:57
Certificate issuer: /CN=A91E861E/serialNumber=1226EE122293831B651F15B8BC1F1055DB4289C4
Certificate serial: 57
Authority key identifier: 12:26:EE:12:22:93:83:1B:65:1F:15:B8:BC:1F:10:55:DB:42:89:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EibuEiKTgxtlHxW4vB8QVdtCicQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E861E/45CEDF48541E11F0A0CEF478C4F9AE02/C67FDA48541E11F09E0E0C7DC4F9AE02.roa
Signing time: Mon 01 Dec 2025 06:04:07 +0000
ROA not before: Mon 01 Dec 2025 06:04:07 +0000
ROA not after: Mon 30 Mar 2026 00:00:00 +0000
asID: 141174
IP address blocks: 103.155.154.0/23 maxlen: 23
103.155.154.0/24 maxlen: 24
103.155.155.0/24 maxlen: 24
2001:df4:d280::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E861E/45CEDF48541E11F0A0CEF478C4F9AE02/EibuEiKTgxtlHxW4vB8QVdtCicQ.crl
rsync://rpki.apnic.net/member_repository/A91E861E/45CEDF48541E11F0A0CEF478C4F9AE02/EibuEiKTgxtlHxW4vB8QVdtCicQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EibuEiKTgxtlHxW4vB8QVdtCicQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:04:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87 (0x57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E861E, serialNumber=1226EE122293831B651F15B8BC1F1055DB4289C4
Validity
Not Before: Dec 1 06:04:07 2025 GMT
Not After : Mar 30 00:00:00 2026 GMT
Subject: CN=692d2fd7-9ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:98:b5:7d:c8:22:d4:e7:14:1a:6b:3b:67:3a:
df:f0:35:d6:1d:d1:d3:45:8c:8d:0e:db:1c:86:8a:
89:08:9b:89:9d:98:b8:96:25:f6:89:dd:96:62:53:
65:97:6d:5d:39:7d:67:6f:f7:16:79:23:58:50:f4:
39:b0:6f:ac:2e:62:cc:d8:5b:5d:2b:63:27:95:6f:
f2:d9:db:e1:11:2c:6b:16:a5:b6:6d:d3:58:90:b5:
5a:0c:47:e4:c3:a9:ab:48:b8:db:76:80:be:cb:82:
41:c2:b3:85:24:3f:c4:32:b3:e8:86:d0:4f:b4:02:
79:f9:85:cc:a8:c3:34:7b:14:c2:de:1c:3e:0e:d9:
9a:fb:3d:43:fd:8b:d0:e6:42:cc:5d:14:de:f7:f1:
79:23:22:ea:8e:cb:ce:f3:ad:c5:34:16:98:e7:df:
b7:20:f6:44:c7:3c:90:2a:97:bc:53:09:cc:85:45:
27:35:84:de:ef:5a:e5:c6:2e:ea:f4:77:77:eb:ef:
65:7b:53:c6:81:b8:ea:5a:54:93:be:b8:2f:16:96:
e5:4e:2c:e2:11:72:39:1a:15:7a:d0:c2:fb:b8:33:
6b:6a:3b:56:c3:42:cf:f7:ed:d0:4b:3d:3a:f3:76:
f8:5f:8e:76:18:0d:a7:b0:e0:40:ec:87:21:44:7c:
91:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DF:FD:00:BA:39:C7:93:0D:8D:B1:7F:F7:01:82:60:DC:16:91:57
X509v3 Authority Key Identifier:
keyid:12:26:EE:12:22:93:83:1B:65:1F:15:B8:BC:1F:10:55:DB:42:89:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E861E/45CEDF48541E11F0A0CEF478C4F9AE02/EibuEiKTgxtlHxW4vB8QVdtCicQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EibuEiKTgxtlHxW4vB8QVdtCicQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E861E/45CEDF48541E11F0A0CEF478C4F9AE02/C67FDA48541E11F09E0E0C7DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.155.154.0/23
IPv6:
2001:df4:d280::/48
Signature Algorithm: sha256WithRSAEncryption
40:6f:f9:10:b0:1b:e0:32:e2:ad:93:91:45:0f:0f:34:8e:b7:
5f:4e:04:b8:5d:4f:e8:70:82:8c:23:0c:7a:59:22:26:0c:6d:
8c:f1:1d:8c:bd:48:50:6d:50:1c:0e:75:13:e3:77:1a:ab:e7:
be:5e:1a:8a:0b:af:29:54:39:6a:e2:5a:04:b1:a9:40:ff:ae:
10:a5:be:0c:78:2d:5c:75:2c:c5:b7:69:1d:de:ac:ed:28:cc:
93:07:a2:30:f7:49:d9:9d:c5:a6:38:d5:df:20:25:69:41:57:
43:10:25:40:22:b2:bb:ef:83:36:77:29:e4:1f:e2:2a:d2:dd:
42:04:72:af:a7:05:d9:c2:7f:68:d6:90:20:27:8c:28:63:c6:
4b:61:81:7d:ad:5b:87:51:94:e2:66:00:31:ca:af:08:0a:d6:
14:88:e0:84:f2:25:fd:54:61:94:5a:20:3a:25:ab:b3:6f:82:
2a:7c:19:71:0b:8b:3e:39:5e:22:2a:8b:2a:a2:06:42:eb:07:
33:ee:89:78:d9:d0:d6:b1:1d:94:bb:e8:81:ff:de:b3:13:86:
60:c3:ae:30:00:84:31:e6:0a:1b:0d:8a:2c:b1:dd:29:eb:3f:
3c:9a:83:a3:79:67:b7:23:ae:73:24:77:68:60:68:b0:1d:d5:
28:a6:16:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:42:20 2025 by rpki-client