This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/EBFFB63C31A011EE90E4FA4CC4F9AE02.roa
File: EBFFB63C31A011EE90E4FA4CC4F9AE02.roa (raw, json)
Hash identifier: 5MB2PDcakDg/26VL0TUZlY6MMrD+mZ34XPyyIZou81c=
Subject key identifier: E5:F9:25:CF:DC:D9:0C:91:ED:1F:8B:98:EE:4F:76:0F:5B:D4:FA:1A
Certificate issuer: /CN=A91F0FC6/serialNumber=66E6F6F8FDCE3D954A77E5B0A3E250CC262E5D5D
Certificate serial: 0231
Authority key identifier: 66:E6:F6:F8:FD:CE:3D:95:4A:77:E5:B0:A3:E2:50:CC:26:2E:5D:5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/EBFFB63C31A011EE90E4FA4CC4F9AE02.roa
Signing time: Sat 03 Jan 2026 01:21:05 +0000
ROA not before: Sat 03 Jan 2026 01:21:05 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 63962
IP address blocks: 103.41.112.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl
rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:20:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 561 (0x231)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0FC6, serialNumber=66E6F6F8FDCE3D954A77E5B0A3E250CC262E5D5D
Validity
Not Before: Jan 3 01:21:05 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69586f01-15aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:48:77:71:b3:97:99:91:af:28:7b:10:8f:89:
e0:5e:31:10:ef:40:21:aa:5e:3b:ec:14:36:53:9a:
83:a2:ab:13:54:a0:24:71:55:99:54:a7:80:cc:19:
81:39:71:cd:a9:85:33:7b:69:d9:af:f4:0d:56:01:
80:e0:5d:75:e4:4f:2d:af:5c:52:95:28:e1:32:5a:
ad:27:28:b1:ea:25:a8:5c:f9:44:5c:70:c6:23:f7:
a7:fa:b1:fe:46:1c:fe:e7:f9:b3:12:b6:fa:f8:f4:
53:4b:0f:9e:f3:4e:71:0e:c0:74:a4:62:de:c8:3c:
9e:0d:f2:db:68:1d:af:31:3a:ec:cc:e9:de:24:9c:
a6:f4:95:69:9b:9c:ad:df:29:17:2e:ee:4f:2d:71:
44:b0:4f:a5:c9:ee:44:9b:b5:28:ec:e5:b2:38:4a:
18:30:31:01:ef:7f:0d:3c:82:44:1f:e7:2f:bf:c1:
3a:01:e0:6e:df:94:ff:1a:85:2b:6c:78:fb:b2:7c:
6a:82:1f:72:fb:8c:59:bf:79:8e:74:56:ea:a0:c5:
5d:fa:c4:9e:19:85:14:ca:b0:a5:a7:eb:a9:6c:4a:
7b:cb:ca:f6:1e:ff:86:2c:7f:d1:d7:2c:7c:ad:76:
70:3b:d1:7f:da:e9:55:79:fb:73:9d:5e:1b:3c:ec:
19:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F9:25:CF:DC:D9:0C:91:ED:1F:8B:98:EE:4F:76:0F:5B:D4:FA:1A
X509v3 Authority Key Identifier:
keyid:66:E6:F6:F8:FD:CE:3D:95:4A:77:E5:B0:A3:E2:50:CC:26:2E:5D:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/EBFFB63C31A011EE90E4FA4CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.41.112.0/23
Signature Algorithm: sha256WithRSAEncryption
88:d4:12:86:0d:0e:22:1e:16:d7:f9:d8:c9:32:d7:03:d5:5b:
66:1b:19:af:bd:3f:d4:56:7e:ce:c8:55:f6:ef:c6:b4:40:6e:
89:07:64:38:04:85:1d:6c:e0:76:31:fd:07:36:05:24:46:c4:
5c:53:fa:8e:f0:f9:90:6c:08:93:2c:a8:fc:96:bd:fa:fd:e9:
08:e8:e8:f8:44:a2:9c:23:18:4d:ae:af:a3:18:d0:55:10:e5:
00:9f:ad:07:05:e7:ad:8d:0b:c2:97:26:9c:30:7a:a8:14:f8:
43:17:27:99:af:06:41:3b:9a:5e:6c:c1:f9:21:03:5c:09:7f:
92:72:d8:60:98:f1:ca:1a:24:31:17:6f:45:fd:33:3a:ee:63:
57:32:b4:fa:f0:ba:d3:35:23:27:19:0a:20:43:2d:86:0e:aa:
89:c2:d5:07:2b:00:bc:71:3f:7e:61:3d:25:60:22:46:99:bd:
38:4d:ae:21:59:ca:d1:03:63:60:6f:08:27:49:ff:56:3c:88:
8a:5e:1c:e2:b3:e2:0a:a8:0f:41:b9:f0:7d:ac:f7:63:89:36:
e5:ed:d9:eb:7b:6e:0f:7a:03:6e:52:d6:6a:2b:7b:b5:97:7f:
cf:80:e1:ec:3c:86:4a:1d:3f:eb:37:e7:cc:0a:f9:d9:8a:8d:
46:c6:2c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:31:12 2026 by rpki-client