This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/6A3FA88A693C11EF8B032237C4F9AE02.roa
File: 6A3FA88A693C11EF8B032237C4F9AE02.roa (raw, json)
Hash identifier: xlsUk+nBjbtHnwZ4MERgcwqdT/rxsOcTBiheef/VMVI=
Subject key identifier: 8D:0B:1D:C4:3E:1D:11:91:99:64:FC:04:07:E8:54:F7:BE:84:E7:7B
Certificate issuer: /CN=A91F7D74/serialNumber=D3DCE17143F9CF5DF8004F8C6597FB2C8CCC7046
Certificate serial: 85
Authority key identifier: D3:DC:E1:71:43:F9:CF:5D:F8:00:4F:8C:65:97:FB:2C:8C:CC:70:46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09zhcUP5z134AE-MZZf7LIzMcEY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/6A3FA88A693C11EF8B032237C4F9AE02.roa
Signing time: Tue 29 Apr 2025 06:43:19 +0000
ROA not before: Tue 29 Apr 2025 06:43:19 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 135319
IP address blocks: 103.214.56.0/22 maxlen: 22
103.214.56.0/24 maxlen: 24
103.214.57.0/24 maxlen: 24
103.214.58.0/24 maxlen: 24
103.214.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.crl
rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09zhcUP5z134AE-MZZf7LIzMcEY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133 (0x85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7D74, serialNumber=D3DCE17143F9CF5DF8004F8C6597FB2C8CCC7046
Validity
Not Before: Apr 29 06:43:19 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=68107507-204f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:dd:08:f5:fa:71:d8:ed:01:1b:ca:23:7e:fa:
95:5e:75:42:b2:e0:bd:77:fb:a9:7e:76:b2:4c:34:
f1:95:48:56:36:78:2e:ab:1c:c3:27:ae:8f:3e:b8:
6f:e4:67:07:c2:d2:08:1e:b8:ad:31:d2:05:39:56:
b0:95:10:63:2e:11:ca:f2:da:bd:b7:0d:56:a1:44:
50:dd:d1:ec:bc:24:dd:98:aa:7c:17:e3:f4:65:ff:
f2:86:89:20:23:42:da:f9:7b:05:02:3a:64:50:46:
ee:48:3f:6f:62:f8:e3:1d:c5:ce:ef:ce:07:c0:60:
7c:68:70:40:fc:c7:9d:e4:24:9d:3e:05:bd:03:7d:
02:ee:c2:c6:b1:22:fb:c8:b9:49:11:6f:d0:94:19:
d5:6b:68:ba:90:b3:88:cd:eb:5b:32:58:b8:6d:fc:
24:7a:54:93:ca:41:9a:3e:76:6e:00:71:ab:a9:07:
88:38:fa:02:7f:ae:53:60:32:ff:48:ca:a3:5f:7b:
22:b1:86:7b:41:1f:49:76:e1:ce:c2:55:2b:eb:da:
7a:4b:1c:84:3d:27:63:0f:b9:1f:8f:d0:91:38:1d:
5d:50:00:7b:5f:b4:cc:f1:1b:2b:2d:2e:e6:0c:33:
5c:2c:a5:88:dc:88:41:f6:0e:39:b3:b3:38:63:8e:
d4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0B:1D:C4:3E:1D:11:91:99:64:FC:04:07:E8:54:F7:BE:84:E7:7B
X509v3 Authority Key Identifier:
keyid:D3:DC:E1:71:43:F9:CF:5D:F8:00:4F:8C:65:97:FB:2C:8C:CC:70:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09zhcUP5z134AE-MZZf7LIzMcEY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/6A3FA88A693C11EF8B032237C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.214.56.0/22
Signature Algorithm: sha256WithRSAEncryption
c8:dc:b7:5b:19:13:c0:c6:50:83:f7:1d:b9:7e:d7:2d:7d:d0:
41:41:39:ed:e3:2d:19:8d:ac:08:d5:62:e0:e4:a3:03:8c:ae:
07:a0:f4:95:11:0c:7d:25:cc:90:5d:20:6e:a1:8e:a2:2f:d9:
f6:84:03:6d:4a:93:f2:69:28:e0:60:10:df:fe:65:29:89:42:
c0:91:18:b3:5e:2d:c2:d4:f9:74:09:67:e6:b1:03:38:00:bb:
ab:a9:be:d1:53:e4:79:83:61:e3:b9:33:18:d5:fd:2e:ef:b1:
aa:01:42:be:7b:ca:af:bf:dd:8b:10:95:af:03:24:98:1b:76:
0d:48:e9:51:b0:9c:cc:0c:f1:55:29:eb:31:da:13:7a:1f:11:
13:af:bc:6c:64:22:6f:1c:95:9b:7d:5c:d3:76:e4:74:f2:74:
ed:84:27:d2:d9:12:c5:d8:93:f1:6e:12:4c:c1:9a:59:9e:02:
b3:a7:e2:a5:c6:28:7a:a0:1a:2c:ed:d7:38:6f:ab:6c:00:1d:
88:4f:bd:cc:df:5a:e4:01:8e:cd:21:f1:5a:36:e7:6e:6f:55:
4a:25:e5:ea:8c:3a:bc:eb:66:14:ed:72:c8:98:d1:70:e5:ed:
50:90:05:a9:b4:61:69:e1:e1:86:02:1d:19:8f:53:42:81:90:
dc:ee:1a:2a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjdENzQxMTAvBgNVBAUTKEQzRENFMTcxNDNGOUNGNURGODAwNEY4QzY1OTdGQjJD
OENDQzcwNDYwHhcNMjUwNDI5MDY0MzE5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODEwNzUwNy0yMDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz90I9fpx2O0BG8ojfvqVXnVCsuC9d/upfnayTDTxlUhWNnguqxzDJ66PPrhv
5GcHwtIIHritMdIFOVawlRBjLhHK8tq9tw1WoURQ3dHsvCTdmKp8F+P0Zf/yhokg
I0La+XsFAjpkUEbuSD9vYvjjHcXO784HwGB8aHBA/Med5CSdPgW9A30C7sLGsSL7
yLlJEW/QlBnVa2i6kLOIzetbMli4bfwkelSTykGaPnZuAHGrqQeIOPoCf65TYDL/
SMqjX3sisYZ7QR9JduHOwlUr69p6SxyEPSdjD7kfj9CROB1dUAB7X7TM8RsrLS7m
DDNcLKWI3IhB9g45s7M4Y47UzQIDAQABo4IClTCCApEwHQYDVR0OBBYEFI0LHcQ+
HRGRmWT8BAfoVPe+hOd7MB8GA1UdIwQYMBaAFNPc4XFD+c9d+ABPjGWX+yyMzHBG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0Q3NC8zNzhEOUEwQTY5
MjgxMUVGQUY3MTE0ODdDNEY5QUUwMi8wOXpoY1VQNXoxMzRBRS1NWlpmN0xJek1j
RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzA5emhjVVA1ejEzNEFFLU1aWmY3TEl6TWNFWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjdENzQvMzc4RDlBMEE2OTI4MTFFRkFGNzExNDg3QzRGOUFFMDIvNkEzRkE4OEE2
OTNDMTFFRjhCMDMyMjM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJn1jgwDQYJKoZIhvcNAQELBQADggEBAMjct1sZE8DGUIP3
Hbl+1y190EFBOe3jLRmNrAjVYuDkowOMrgeg9JURDH0lzJBdIG6hjqIv2faEA21K
k/JpKOBgEN/+ZSmJQsCRGLNeLcLU+XQJZ+axAzgAu6upvtFT5HmDYeO5MxjV/S7v
saoBQr57yq+/3YsQla8DJJgbdg1I6VGwnMwM8VUp6zHaE3ofEROvvGxkIm8clZt9
XNN25HTydO2EJ9LZEsXYk/FuEkzBmlmeArOn4qXGKHqgGizt1zhvq2wAHYhPvczf
WuQBjs0h8Vo2525vVUol5eqMOrzrZhTtcsiY0XDl7VCQBam0YWnh4YYCHRmPU0KB
kNzuGio=
-----END CERTIFICATE-----
Generated at Sat Dec 6 23:04:26 2025 by rpki-client