This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/5A9E4C18BC8F11F0B6A8C33AC4F9AE02.roa
File: 5A9E4C18BC8F11F0B6A8C33AC4F9AE02.roa (raw, json)
Hash identifier: x1YZSbnHVSB9vf0KM0Zv8idFOE+2Et1DhusaghYZVU4=
Subject key identifier: AA:E0:A8:1B:11:42:51:DF:BD:AD:81:0A:29:C5:38:A6:C3:FB:97:81
Certificate issuer: /CN=A91EAB64/serialNumber=20ED0AAB20750B8B27A86DF989A754BF5726DD7E
Certificate serial: 0223
Authority key identifier: 20:ED:0A:AB:20:75:0B:8B:27:A8:6D:F9:89:A7:54:BF:57:26:DD:7E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/5A9E4C18BC8F11F0B6A8C33AC4F9AE02.roa
Signing time: Sun 11 Jan 2026 10:45:15 +0000
ROA not before: Sun 11 Jan 2026 10:45:15 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 138346
IP address blocks: 103.179.126.0/24 maxlen: 24
103.179.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.crl
rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:29:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 547 (0x223)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAB64, serialNumber=20ED0AAB20750B8B27A86DF989A754BF5726DD7E
Validity
Not Before: Jan 11 10:45:15 2026 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=69637f3b-fe90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:93:01:7f:d7:12:bf:b7:d3:12:fc:36:44:1b:
9e:86:57:b6:86:dd:34:e9:94:02:26:6c:4c:cd:e9:
dc:c0:19:1a:3d:16:44:73:fd:cf:88:ff:34:6a:9f:
15:82:96:3c:39:41:7b:e6:73:16:dd:f7:74:25:d4:
6e:7b:e1:17:53:54:de:26:db:14:3c:42:8e:fd:9e:
90:2f:69:1e:28:88:0d:24:f3:da:6f:1b:5f:4c:3e:
29:c9:e5:33:48:7b:51:f1:5e:4c:0e:53:71:09:b8:
ca:ff:7c:a0:8a:12:64:29:4d:68:d6:99:9b:b9:b2:
49:88:5d:28:a9:45:02:5e:23:bf:70:fe:b4:ec:e5:
ff:3b:79:1c:66:da:1c:ec:b3:20:7a:9e:ab:f9:76:
4e:c1:1d:b8:86:48:49:c5:4d:09:08:bf:6f:ac:c6:
6f:0c:ba:17:d3:46:a2:23:16:3b:e6:9c:cc:06:ad:
ee:d5:9f:51:a3:a7:84:67:db:df:e3:8a:82:3d:db:
40:0c:c6:3f:af:47:d5:d4:1d:6b:67:5f:18:d7:66:
eb:54:ff:3c:dc:a7:1b:f9:85:5a:58:da:54:f9:1e:
7a:86:54:bd:04:e4:41:0b:cd:da:d1:c7:12:b4:7c:
ad:62:60:0e:3f:5b:f8:83:02:28:4f:b1:63:a7:24:
78:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E0:A8:1B:11:42:51:DF:BD:AD:81:0A:29:C5:38:A6:C3:FB:97:81
X509v3 Authority Key Identifier:
keyid:20:ED:0A:AB:20:75:0B:8B:27:A8:6D:F9:89:A7:54:BF:57:26:DD:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/5A9E4C18BC8F11F0B6A8C33AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.126.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:4b:97:a6:e6:ed:bb:fa:69:8c:86:86:90:05:23:f4:c4:57:
8f:e9:aa:75:74:f9:c5:ef:cc:db:a1:29:60:32:f7:c1:a5:62:
7d:b4:1d:6d:6e:aa:ab:ea:34:09:85:50:46:10:18:37:8e:eb:
e5:73:4b:0c:d9:ad:0d:b9:9f:ff:f7:85:e6:c3:c5:72:cb:02:
0c:fb:c3:1c:7e:2f:20:f0:86:ff:1f:55:04:05:7b:aa:4f:99:
2d:85:53:50:b5:c0:8b:aa:3b:2f:89:52:49:46:f9:81:b8:9a:
0d:7e:6e:fa:6e:00:d0:e7:8c:9f:a2:eb:72:46:52:a2:22:79:
2f:43:ff:77:a0:90:7e:26:30:46:2b:4e:ab:66:e4:4e:ca:45:
9c:ef:7a:eb:e9:fc:40:3b:95:6e:9c:32:83:90:9e:dd:6d:eb:
74:85:e6:fb:7b:29:b1:2e:06:d1:b6:19:3d:ef:f0:ee:dc:8f:
4a:1f:af:da:e2:d2:71:eb:f8:69:e3:e2:e9:7d:75:25:3d:3b:
e1:7b:86:3b:a1:6f:a9:8e:16:22:eb:c7:e9:8e:64:0e:4a:0a:
58:13:92:4a:bc:23:0c:e0:cb:1f:05:14:6c:82:cf:27:ef:c5:
5f:8f:5c:29:6a:3d:f7:7e:fd:17:eb:6c:34:ad:74:b9:79:cd:
93:1e:f4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:58:14 2026 by rpki-client