This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/81BA905AB5E811EDA7091163C4F9AE02.roa
File: 81BA905AB5E811EDA7091163C4F9AE02.roa (raw, json)
Hash identifier: LvDhuBV9OYoKfRS1xByIzkOdD7zHQM+mOdm9kvTAXeA=
Subject key identifier: 25:54:7A:F2:DB:A7:29:07:E5:AB:A8:BC:12:A0:2F:10:13:E7:57:F0
Certificate issuer: /CN=A91EDA20/serialNumber=962C2C9D5EDFDACEFDB1387E30BEC3FFBEFA5CD0
Certificate serial: 022A
Authority key identifier: 96:2C:2C:9D:5E:DF:DA:CE:FD:B1:38:7E:30:BE:C3:FF:BE:FA:5C:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/81BA905AB5E811EDA7091163C4F9AE02.roa
Signing time: Sun 21 Dec 2025 09:37:15 +0000
ROA not before: Sun 21 Dec 2025 09:37:15 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 150778
IP address blocks: 103.93.140.0/24 maxlen: 24
2402:2c20::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.crl
rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:24:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 554 (0x22a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EDA20, serialNumber=962C2C9D5EDFDACEFDB1387E30BEC3FFBEFA5CD0
Validity
Not Before: Dec 21 09:37:15 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=6947bfcb-65e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cc:d6:bf:54:c2:86:0d:22:5f:f2:95:01:a0:
46:72:22:9d:aa:6f:59:86:7d:44:3e:d5:96:a6:f9:
8a:fc:e4:d4:a5:99:fb:29:ee:f1:5f:6e:1f:b8:9e:
ad:d1:35:f7:88:7c:8f:ab:96:b0:22:45:0c:d0:8d:
ea:f5:2d:7c:9c:eb:7a:a4:68:b0:b1:ea:fe:e1:3d:
fd:3a:59:3b:6a:80:e0:1b:c0:a4:2d:07:da:27:7c:
1a:49:45:6b:74:54:fa:3d:a7:71:b1:cb:cf:3c:c4:
ce:3e:ac:88:3c:cb:57:c0:27:93:4a:da:81:77:6e:
0d:78:86:19:41:2b:45:6e:40:41:b8:70:24:d3:66:
d6:4c:c0:f9:bb:0b:7d:b4:fa:e9:ad:31:6a:13:58:
aa:7c:30:c8:44:04:98:cf:15:85:2e:26:58:0b:16:
33:c1:77:65:03:ad:d8:39:29:e7:1b:f4:b0:cc:c9:
0b:58:9a:bb:f2:85:83:f6:08:de:ab:45:57:97:51:
46:25:9a:da:85:25:ce:85:74:f7:37:b5:e0:2e:66:
60:63:ed:6d:c2:70:06:50:91:91:dc:4e:a1:f1:7f:
a4:c6:25:17:e2:68:bc:b1:6f:18:a1:33:87:3e:13:
03:14:13:81:38:04:36:79:5e:b5:11:71:b6:e3:25:
f3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:54:7A:F2:DB:A7:29:07:E5:AB:A8:BC:12:A0:2F:10:13:E7:57:F0
X509v3 Authority Key Identifier:
keyid:96:2C:2C:9D:5E:DF:DA:CE:FD:B1:38:7E:30:BE:C3:FF:BE:FA:5C:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/81BA905AB5E811EDA7091163C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.93.140.0/24
IPv6:
2402:2c20::/32
Signature Algorithm: sha256WithRSAEncryption
99:f8:b3:ef:56:7e:60:87:a0:fd:a0:89:72:7e:5d:2e:78:7f:
bd:b1:e6:46:27:63:c1:76:4f:5c:a1:43:5c:c4:d7:ea:9a:3a:
e0:f2:fd:77:28:20:92:04:13:40:34:ed:5a:d3:21:d6:6e:7f:
62:b8:b9:c9:f4:95:56:8e:70:af:ce:43:9b:10:31:05:a4:b5:
a9:7c:7a:3a:7c:62:87:03:f9:9c:d7:ce:1e:5c:25:de:da:d9:
58:46:62:c0:21:b7:d1:4e:96:cb:8c:39:0d:d2:d5:68:0b:09:
03:77:d5:46:3c:d6:d8:3a:eb:ac:ca:8e:5b:a4:f8:00:1f:30:
51:c4:84:82:b5:bc:b2:87:cc:48:de:b0:68:2b:db:81:0d:cf:
0e:3d:61:1a:07:e8:54:09:fc:34:60:ec:bb:14:cf:18:b8:b5:
35:29:b8:03:fc:d1:86:fe:14:4a:9c:3b:13:e4:19:00:33:63:
d7:be:2b:53:c3:8d:72:66:4f:07:00:05:b2:6a:ef:0c:6e:b6:
87:70:69:d6:8c:43:86:54:e1:52:8d:0e:e5:8c:ff:04:bb:f8:
ce:63:71:0e:4d:ce:35:8e:67:d0:cf:55:32:b4:16:94:51:0d:
49:da:e8:f0:b0:63:c0:1f:29:c3:aa:e7:41:45:be:51:45:be:
23:c2:1c:e1
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RURBMjAxMTAvBgNVBAUTKDk2MkMyQzlENUVERkRBQ0VGREIxMzg3RTMwQkVDM0ZG
QkVGQTVDRDAwHhcNMjUxMjIxMDkzNzE1WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDDA02OTQ3YmZjYi02NWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtczWv1TChg0iX/KVAaBGciKdqm9Zhn1EPtWWpvmK/OTUpZn7Ke7xX24fuJ6t
0TX3iHyPq5awIkUM0I3q9S18nOt6pGiwser+4T39Olk7aoDgG8CkLQfaJ3waSUVr
dFT6PadxscvPPMTOPqyIPMtXwCeTStqBd24NeIYZQStFbkBBuHAk02bWTMD5uwt9
tPrprTFqE1iqfDDIRASYzxWFLiZYCxYzwXdlA63YOSnnG/SwzMkLWJq78oWD9gje
q0VXl1FGJZrahSXOhXT3N7XgLmZgY+1twnAGUJGR3E6h8X+kxiUX4mi8sW8YoTOH
PhMDFBOBOAQ2eV61EXG24yXzeQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFCVUevLb
pykH5auovBKgLxAT51fwMB8GA1UdIwQYMBaAFJYsLJ1e39rO/bE4fjC+w/+++lzQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREEyMC9CNzNCRjM3Q0I1
RTMxMUVEQUI1NDQ1NUFDNEY5QUUwMi9saXdzblY3ZjJzNzlzVGgtTUw3RF83NzZY
TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xpd3NuVjdmMnM3OXNUaC1NTDdEXzc3NlhOQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RURBMjAvQjczQkYzN0NCNUUzMTFFREFCNTQ0NTVBQzRGOUFFMDIvODFCQTkwNUFC
NUU4MTFFREE3MDkxMTYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBABnXYwwDQQCAAIwBwMFACQCLCAwDQYJKoZIhvcNAQELBQAD
ggEBAJn4s+9WfmCHoP2giXJ+XS54f72x5kYnY8F2T1yhQ1zE1+qaOuDy/XcoIJIE
E0A07VrTIdZuf2K4ucn0lVaOcK/OQ5sQMQWktal8ejp8YocD+ZzXzh5cJd7a2VhG
YsAht9FOlsuMOQ3S1WgLCQN31UY81tg666zKjluk+AAfMFHEhIK1vLKHzEjesGgr
24ENzw49YRoH6FQJ/DRg7LsUzxi4tTUpuAP80Yb+FEqcOxPkGQAzY9e+K1PDjXJm
TwcABbJq7wxutodwadaMQ4ZU4VKNDuWM/wS7+M5jcQ5NzjWOZ9DPVTK0FpRRDUna
6PCwY8AfKcOq50FFvlFFviPCHOE=
-----END CERTIFICATE-----
Generated at Mon Jan 26 00:27:03 2026 by rpki-client