This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/DB63DD0C511311E998B6E814C4F9AE02.roa
File: DB63DD0C511311E998B6E814C4F9AE02.roa (raw, json)
Hash identifier: C6D3XzDSLt3OsrdqaJczrZOT46rffzR9T87fEcqPayY=
Subject key identifier: 1B:90:4E:7E:C0:47:07:B6:72:8E:19:1F:40:8E:F5:25:98:15:F3:00
Certificate issuer: /CN=A91F7BE4/serialNumber=1E6B3944B6788E90E997D8A8E8067C5969B8898C
Certificate serial: 103E
Authority key identifier: 1E:6B:39:44:B6:78:8E:90:E9:97:D8:A8:E8:06:7C:59:69:B8:89:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/DB63DD0C511311E998B6E814C4F9AE02.roa
Signing time: Wed 26 Nov 2025 17:06:55 +0000
ROA not before: Wed 26 Nov 2025 17:06:55 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 137206
IP address blocks: 103.104.228.0/24 maxlen: 24
103.138.52.0/24 maxlen: 24
2001:df3:5900::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl
rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4158 (0x103e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7BE4, serialNumber=1E6B3944B6788E90E997D8A8E8067C5969B8898C
Validity
Not Before: Nov 26 17:06:55 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=692733af-9052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8e:1e:ac:62:fe:df:8a:c8:50:79:2c:39:ed:
54:8f:ad:87:52:19:89:6b:44:68:ea:23:f6:62:1c:
c2:57:d8:e7:53:cd:2f:fd:77:b9:b4:a2:1c:b2:a0:
8c:7f:23:46:6a:c7:96:47:51:43:0c:28:d5:31:5a:
c4:77:09:3d:bd:ea:2b:bf:ea:17:84:f8:b5:90:10:
13:66:1a:4c:a7:d1:0d:88:25:82:fe:ef:cb:f7:3b:
c9:ce:2f:5c:0d:3e:0d:ae:d9:f3:3f:45:3d:57:d8:
40:77:75:e5:03:1b:05:a9:21:76:1c:6f:dd:81:0f:
26:c1:63:83:5d:3b:fd:f7:0c:6a:e7:6f:00:b0:6b:
87:c2:66:68:f5:5d:f3:2d:4e:0a:9e:1d:8b:f6:67:
13:8b:76:9c:7c:7f:ea:f4:cb:b5:7e:3d:8f:8a:34:
6f:2f:1f:91:8c:11:6b:f4:7d:7d:0e:97:d4:16:90:
3b:f6:ac:59:f7:b1:65:ea:72:0a:7a:cb:bc:d6:9c:
53:84:fe:81:52:c3:62:87:ed:e9:a6:82:60:f3:a4:
59:dd:44:e7:16:9c:99:86:4c:0c:4f:6e:a1:39:37:
57:4a:d0:6a:05:0a:72:4b:5f:53:02:32:4b:76:43:
7f:98:53:12:51:54:21:cf:fb:61:a5:d4:25:c2:4f:
16:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:90:4E:7E:C0:47:07:B6:72:8E:19:1F:40:8E:F5:25:98:15:F3:00
X509v3 Authority Key Identifier:
keyid:1E:6B:39:44:B6:78:8E:90:E9:97:D8:A8:E8:06:7C:59:69:B8:89:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/DB63DD0C511311E998B6E814C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.104.228.0/24
103.138.52.0/24
IPv6:
2001:df3:5900::/48
Signature Algorithm: sha256WithRSAEncryption
59:19:fc:57:36:9f:cc:23:9b:40:b1:de:46:58:7a:9d:7d:1c:
7c:88:9e:a6:fe:cf:34:03:17:61:a1:3f:67:54:86:d0:e8:9c:
0f:ab:bc:b8:ce:60:14:fd:f7:55:b0:47:d5:53:ff:93:cd:23:
e2:58:da:af:d4:57:86:04:98:ea:c0:8c:f2:53:d6:50:8b:e5:
e2:95:19:76:b4:ac:20:1a:ca:53:5a:9e:1f:b2:c0:41:42:41:
66:79:eb:36:5c:3f:f1:28:fa:30:79:56:ce:f3:2a:e1:d9:3b:
76:db:e4:3c:4c:b0:8c:78:16:c7:c6:ea:ba:cd:2c:7d:91:52:
c2:0b:6c:b5:19:49:3a:a1:5c:9c:6e:0c:11:16:3a:ad:de:8f:
32:90:8c:c3:bc:74:c2:c3:9e:08:54:fc:31:c6:6b:e7:fa:d9:
1b:54:0e:b1:56:22:ef:7c:81:f4:a4:0c:1e:00:29:db:d1:48:
eb:17:20:4b:67:7c:df:ba:2b:82:ca:23:8a:d2:da:e1:e6:9e:
42:50:8c:d0:3b:fd:a7:8c:04:2b:c9:7f:86:70:d4:3a:20:c5:
76:09:de:ce:f8:b6:e7:36:6d:92:20:0c:3f:0c:7b:66:80:8d:
5e:a0:2c:f1:fc:ee:e2:22:5c:b9:2a:ce:da:30:14:11:80:30:
ba:7c:4b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:29:13 2025 by rpki-client