This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/891E633CB7F111EFA500D67CC4F9AE02.roa
File: 891E633CB7F111EFA500D67CC4F9AE02.roa (raw, json)
Hash identifier: LTcicvfv3IJWcv6JZp6Nd1fOIiAIhRfyt9Hb+xPEuzk=
Subject key identifier: 65:DF:50:73:91:B8:D8:6B:A0:CF:ED:16:DE:E4:3B:FA:DF:C4:F5:B7
Certificate issuer: /CN=A91EFAFF/serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8
Certificate serial: 023E
Authority key identifier: 51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/891E633CB7F111EFA500D67CC4F9AE02.roa
Signing time: Mon 05 Jan 2026 05:20:44 +0000
ROA not before: Mon 05 Jan 2026 05:20:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151048
IP address blocks: 103.121.6.0/24 maxlen: 24
103.121.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl
rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:33:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 574 (0x23e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EFAFF, serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8
Validity
Not Before: Jan 5 05:20:44 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=695b4a2c-e3f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f3:82:91:95:38:78:aa:5a:00:16:c0:14:4b:
28:88:ab:83:d9:94:14:73:dc:b8:e2:a1:fb:48:c0:
5c:92:75:d5:f8:22:25:15:56:c1:17:5c:15:2a:15:
12:8c:54:ff:50:2b:f5:d3:f8:ab:7b:2d:fb:85:d7:
ca:1d:a7:71:76:07:9f:65:36:f8:55:c1:a4:a9:41:
7d:b9:34:75:37:9d:fc:b8:c3:0d:2e:35:32:d3:ab:
15:ce:06:2d:a6:ee:12:65:a4:f1:aa:d4:83:84:d3:
ac:05:fb:20:15:92:5b:ab:56:c7:1f:68:c9:dd:6d:
fe:1d:00:59:74:52:94:be:11:43:5e:73:38:16:8a:
6b:ea:14:06:cd:f0:fd:4d:a3:77:48:12:28:36:51:
29:69:c8:b3:93:50:55:17:c9:92:71:68:2c:01:e7:
df:8f:58:33:4e:3f:3f:97:c8:76:16:50:48:66:86:
53:1f:ef:d9:5c:79:f4:0f:cc:1f:72:39:2b:1a:de:
1a:50:67:e8:59:75:7c:b9:44:8a:82:44:09:fa:13:
02:fb:9c:86:f5:ba:a2:14:e5:f2:e4:6d:a5:f8:96:
fe:05:01:c9:d7:8b:a2:46:e8:62:42:8a:32:b6:65:
7a:38:c6:7b:ef:75:4e:aa:ff:d6:e0:51:83:ca:6c:
e3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DF:50:73:91:B8:D8:6B:A0:CF:ED:16:DE:E4:3B:FA:DF:C4:F5:B7
X509v3 Authority Key Identifier:
keyid:51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/891E633CB7F111EFA500D67CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.121.6.0/23
Signature Algorithm: sha256WithRSAEncryption
97:3c:c1:20:45:f3:a2:db:77:b9:e0:a2:bd:8d:e5:e5:0e:2e:
50:08:77:07:9c:92:bb:84:29:b2:f0:48:d0:ad:ac:53:5b:58:
b5:92:87:c6:df:b5:43:b3:51:5b:27:a8:fd:67:3d:26:c6:b8:
57:63:73:a6:20:a5:be:ac:b4:fa:ce:48:cd:a5:20:33:1f:18:
66:05:bb:3a:4c:a5:15:46:45:c7:82:f6:7d:fe:c5:47:f8:bd:
10:e7:bd:8e:da:f3:36:98:78:8f:6b:fe:e3:99:2f:df:63:90:
3e:59:c9:aa:f9:d4:3d:f9:34:4e:93:3c:a5:12:66:c5:98:63:
aa:42:04:9a:3b:52:2e:14:3a:7e:2a:64:5c:d4:39:0c:ce:95:
36:f1:4b:63:e0:08:f3:1d:6e:7b:ee:a3:9a:70:4d:b3:ba:92:
d2:f0:8a:c2:ca:2a:32:40:21:35:44:c5:4c:92:25:7e:d7:e6:
48:cf:e6:ba:f2:67:cd:be:ef:70:b7:cb:92:68:cc:5c:3c:a2:
04:9a:c4:75:87:28:3a:2d:64:62:24:3b:e5:b3:a5:80:5d:b0:
e0:7e:9b:e3:cd:1c:3b:82:a1:23:c5:7f:89:95:8c:e3:31:a2:
35:ac:49:55:58:2f:3d:11:a0:55:72:85:15:de:70:11:44:b8:
18:d4:6c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:52:31 2026 by rpki-client