This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/0D2573FA173E11EA947B2976C4F9AE02.roa
File: 0D2573FA173E11EA947B2976C4F9AE02.roa (raw, json)
Hash identifier: rye/vsaOUj66vGp57/X5s/x49eVAPsN1yMEMAoZJ8dk=
Subject key identifier: E1:72:A8:94:73:64:24:59:20:34:BB:A1:63:C1:74:D9:0F:92:2A:BA
Certificate issuer: /CN=A91F2046/serialNumber=894809630956924382CC39D460FA4764B0175934
Certificate serial: 0C68
Authority key identifier: 89:48:09:63:09:56:92:43:82:CC:39:D4:60:FA:47:64:B0:17:59:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/0D2573FA173E11EA947B2976C4F9AE02.roa
Signing time: Wed 31 Dec 2025 19:15:23 +0000
ROA not before: Wed 31 Dec 2025 19:15:22 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 139832
IP address blocks: 103.146.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.crl
rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 18:10:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3176 (0xc68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2046, serialNumber=894809630956924382CC39D460FA4764B0175934
Validity
Not Before: Dec 31 19:15:22 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6955764a-e0b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d4:87:6d:61:e9:a4:cd:11:17:df:c5:d8:55:
7e:09:41:c0:c8:77:10:90:2d:00:3d:b2:4e:b6:6b:
4e:40:1e:33:78:65:3f:b0:32:0e:e3:af:55:fe:d7:
ee:53:ed:e5:0a:c4:4e:54:2b:04:fb:75:51:63:4f:
f2:31:99:ad:4e:4f:ce:e4:83:09:78:2f:01:92:9e:
06:3d:b8:e3:fa:3f:65:45:ad:97:ed:e5:c4:3b:94:
aa:e2:6b:05:1d:f9:a7:1f:34:4d:5b:f1:c8:fe:31:
6d:5c:fb:ce:79:3a:82:a9:d1:b2:c3:a8:2d:df:53:
9e:20:1d:7b:3d:fb:6d:dd:b7:02:2b:12:24:8a:7f:
8d:e0:1a:86:6e:e9:ac:25:2a:8b:9f:f0:33:4f:21:
30:a8:ce:54:1a:5c:ea:e5:9b:d1:5e:3c:98:be:f9:
b7:95:38:ad:a5:60:42:3e:b5:f7:a0:83:75:3c:c7:
5a:fe:26:32:9e:3b:3d:f0:2b:8c:b0:c0:4c:7c:96:
97:a9:49:23:5d:9a:69:cc:30:47:9d:9c:13:f6:7d:
b6:3e:a3:01:b2:b0:56:98:c5:d3:89:63:d5:a6:14:
ff:a0:4c:e3:9e:5a:80:ef:08:07:4a:63:a3:d1:33:
71:38:41:08:e3:35:7c:56:45:3e:be:a0:cf:37:67:
aa:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:72:A8:94:73:64:24:59:20:34:BB:A1:63:C1:74:D9:0F:92:2A:BA
X509v3 Authority Key Identifier:
keyid:89:48:09:63:09:56:92:43:82:CC:39:D4:60:FA:47:64:B0:17:59:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/0D2573FA173E11EA947B2976C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.146.2.0/23
Signature Algorithm: sha256WithRSAEncryption
19:cc:e2:e9:6c:11:bb:22:ef:9e:75:4b:c7:e4:03:0e:36:e7:
09:7b:5a:56:1f:86:f7:3f:1b:17:ff:19:06:07:44:74:b9:3a:
ac:63:4c:17:fb:cc:c1:e2:87:e7:1f:54:92:f8:64:79:8d:9c:
23:ea:76:28:c6:ce:b9:76:71:47:c1:70:ae:a2:48:c6:1b:23:
24:d3:f2:4d:64:12:a7:ef:91:ac:07:d8:8b:37:68:07:20:a1:
fd:c0:58:7d:2e:84:ce:96:32:59:c9:53:8d:6c:16:8f:21:c2:
2e:3e:9c:33:1b:d5:9c:37:b8:82:70:3d:a1:e6:19:d0:8b:20:
a8:b2:9f:22:e7:83:14:19:b2:7a:84:8a:28:c4:0e:f7:1d:7b:
06:cf:0b:38:be:cb:5f:2c:59:41:38:91:bf:82:ed:2f:0c:26:
13:82:c2:d7:88:a9:b9:fa:8b:79:6d:93:91:c2:33:09:fd:55:
60:c4:41:8c:31:29:39:d1:55:45:68:f4:44:e8:07:06:48:3e:
51:b6:c6:03:70:2b:19:a4:b4:28:99:5b:15:e2:7b:42:00:3a:
6e:bc:20:93:2d:99:94:26:98:e9:01:2e:dc:89:d9:0f:8a:f8:
2e:de:2f:75:07:d6:c1:7d:0e:a9:78:ad:b2:99:37:91:99:2d:
46:00:3d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:28:11 2026 by rpki-client