This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/BF6664C04C1211F0949D8B25C4F9AE02.roa
File: BF6664C04C1211F0949D8B25C4F9AE02.roa (raw, json)
Hash identifier: lCqRypmcyufFMEJ4cnLuBUW5AuH/Kafi4Z5xUeKeudA=
Subject key identifier: 53:94:35:8A:F1:83:2F:EB:47:66:0D:27:06:71:CC:14:82:12:05:AD
Certificate issuer: /CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
Certificate serial: 2949
Authority key identifier: 7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/BF6664C04C1211F0949D8B25C4F9AE02.roa
Signing time: Sat 10 Jan 2026 16:12:45 +0000
ROA not before: Sat 10 Jan 2026 16:12:45 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 209181
IP address blocks: 103.254.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl
rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:27:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10569 (0x2949)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F13B9, serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
Validity
Not Before: Jan 10 16:12:45 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69627a7d-c239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a6:5f:53:cc:e2:c6:a8:ef:32:d3:cc:4b:8f:
53:6e:c8:28:0f:ee:d0:7a:fc:7d:c1:67:80:a6:4e:
3e:97:d2:7d:cb:5f:b1:89:7d:25:91:2e:30:98:4c:
57:9a:08:87:04:8c:c3:3f:41:07:7e:d1:89:ec:5b:
41:f3:d5:38:31:b2:5f:10:a7:f3:d5:7e:0c:18:82:
95:71:37:1b:61:4a:d7:fa:20:21:ed:23:0a:46:4c:
a1:83:dc:aa:ff:e2:b8:b4:8b:ef:fd:75:39:01:62:
49:eb:57:20:f1:be:ad:34:ad:df:17:bd:65:86:63:
bd:53:7d:19:02:82:e2:c1:40:ef:7d:76:11:77:21:
b5:03:1c:10:87:29:f7:65:09:ac:f2:7a:67:1f:80:
42:05:c7:10:d2:42:98:34:01:e0:cd:7a:00:34:36:
d0:ec:69:39:09:9e:72:1b:5a:2c:0e:9d:b3:3f:d9:
1f:d0:36:b4:85:b3:22:33:1f:f9:6c:05:0f:4d:75:
98:2a:ac:78:34:65:6e:21:33:91:99:2f:b1:f2:c9:
1f:14:df:79:cc:bb:24:5e:6c:f7:1c:fb:d2:47:16:
d7:e4:29:aa:2c:97:ef:b1:91:c1:ba:21:b6:08:eb:
13:80:21:be:07:5b:40:73:77:ba:d1:7a:40:74:c0:
cd:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:94:35:8A:F1:83:2F:EB:47:66:0D:27:06:71:CC:14:82:12:05:AD
X509v3 Authority Key Identifier:
keyid:7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/BF6664C04C1211F0949D8B25C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.254.123.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:2c:6a:b7:54:48:96:7b:5b:52:de:b0:3b:51:97:1e:62:c3:
38:3c:bc:0f:49:bd:38:6f:5d:eb:3d:40:e6:02:32:b4:2a:f5:
73:ec:ce:3f:b7:a0:49:18:27:27:a1:f7:cd:d6:56:be:7e:4b:
92:b9:08:67:b4:4d:61:a6:fd:21:2a:23:2a:f9:c6:42:63:ef:
b1:9d:4f:17:8d:37:32:0c:0b:f4:9b:83:94:70:e6:61:56:72:
17:68:f9:67:a2:14:64:b8:b9:0d:9b:a5:86:16:a6:0c:1b:e7:
6c:c3:66:1f:e3:41:68:e8:e8:49:c3:ba:2d:d2:33:ba:e7:1a:
60:5f:f7:82:06:92:55:c4:71:a6:56:84:0b:1e:8b:eb:d7:99:
92:8a:67:15:30:55:7b:15:66:be:6b:79:4e:95:30:92:a6:32:
72:8e:76:22:bd:27:31:b1:a8:48:85:6f:e8:f4:65:12:25:cb:
f5:cf:3d:dc:3e:aa:13:ba:2b:dd:3e:ee:22:ca:5c:97:86:01:
e1:39:a9:a8:5c:8a:48:30:2f:2d:47:d4:fa:0c:52:5a:68:f7:
8c:21:34:31:8c:fd:11:6c:46:43:e6:6e:c7:fc:b5:a3:5a:e8:
fb:3d:8e:49:b6:df:8b:b5:a2:68:aa:dc:13:c2:3f:6c:d4:87:
d8:cc:ec:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:36:53 2026 by rpki-client