This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/B1B8588ADAE511F0B4F8D00379D3641D.roa
File: B1B8588ADAE511F0B4F8D00379D3641D.roa (raw, json)
Hash identifier: jJ0R9nlsxr/hD0yE5HWBzoK4P8dusyIdKYfDRYhWQyU=
Subject key identifier: 38:C3:E6:7C:57:F8:F4:AA:7E:4B:AB:29:A4:96:B6:2F:1F:12:FB:E7
Certificate issuer: /CN=A91F9FCC/serialNumber=E01002B37C26B9709915267666F44900C0131E2E
Certificate serial: 0804
Authority key identifier: E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/B1B8588ADAE511F0B4F8D00379D3641D.roa
Signing time: Wed 17 Dec 2025 01:16:47 +0000
ROA not before: Wed 17 Dec 2025 01:16:47 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 197537
IP address blocks: 103.3.167.0/24 maxlen: 24
117.120.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl
rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 24 Dec 2025 01:17:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2052 (0x804)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9FCC, serialNumber=E01002B37C26B9709915267666F44900C0131E2E
Validity
Not Before: Dec 17 01:16:47 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=6942047f-8bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5b:48:23:c9:49:7e:8a:fd:ac:46:d2:4b:25:
c0:c0:cd:87:54:26:5b:e9:91:fc:d4:9b:20:eb:b1:
06:be:cd:d0:13:86:33:19:be:67:fe:99:ad:da:6e:
83:a7:1b:df:c3:54:31:e3:c1:33:da:f1:de:81:31:
f9:97:be:9b:5e:db:58:24:02:2d:b5:b9:c7:05:8e:
c0:b1:18:5d:60:09:63:a1:7a:05:a2:d5:ec:9e:18:
1d:8c:ea:d7:5f:66:8b:44:75:ef:b4:03:ee:2b:80:
78:81:13:02:a4:48:6b:d6:3e:06:38:7f:d6:73:50:
0d:c5:3c:d9:b0:24:7a:23:d7:3e:c2:28:d3:a2:ca:
2b:0f:6a:2e:4a:84:5f:9e:4b:b9:bf:2f:bd:1f:4b:
32:51:9a:70:8d:ef:86:0f:8a:8e:c1:1f:94:5e:d8:
b8:65:f8:5d:8f:0f:b2:f5:a3:08:61:47:4b:89:4b:
93:56:83:84:82:6e:13:23:9f:42:57:b0:85:2c:d5:
38:a7:3c:7c:77:64:a6:43:8a:43:5b:70:b6:be:b1:
5e:ea:65:df:41:b7:02:51:d4:c4:b8:65:4d:0b:1e:
0e:84:63:ce:77:14:bf:73:1b:2b:bd:a5:7f:a9:d9:
26:b6:62:7b:6d:28:d1:be:b0:a4:a7:78:bc:e5:8a:
88:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C3:E6:7C:57:F8:F4:AA:7E:4B:AB:29:A4:96:B6:2F:1F:12:FB:E7
X509v3 Authority Key Identifier:
keyid:E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/B1B8588ADAE511F0B4F8D00379D3641D.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.3.167.0/24
117.120.0.0/24
Signature Algorithm: sha256WithRSAEncryption
38:4b:be:b8:9e:28:37:82:0b:34:2d:a5:09:b1:5c:29:37:fa:
b4:b0:ef:0c:c7:eb:38:f8:b3:00:41:65:80:55:d9:5b:a4:7c:
51:a5:fb:45:e8:94:86:87:00:5e:cb:ce:e7:09:19:8e:0a:90:
ec:dd:a4:0a:03:ef:ea:4c:f8:49:04:d1:82:07:be:79:4d:14:
19:1c:ec:54:c1:7a:3e:39:ee:36:47:38:da:97:4b:79:09:1a:
e8:44:d9:26:5c:75:95:1b:9f:50:3a:7c:3c:6d:25:da:e4:ef:
92:11:4a:ac:bd:8f:c8:62:3d:67:9c:a8:f8:4b:64:c8:97:83:
42:09:0b:f4:8c:dc:50:d8:99:99:0a:eb:b2:9c:ce:1f:45:3f:
fc:e3:26:c1:9e:27:f8:e1:99:b0:06:65:d7:90:32:3c:8a:52:
63:1a:5f:12:40:9e:e0:70:98:d5:38:de:4e:f5:3d:65:e8:70:
c9:12:dc:df:e0:98:e2:b0:a2:dd:b1:ff:d3:f9:17:e7:eb:59:
d6:cb:bb:fd:cd:6a:5e:e5:4f:18:96:68:13:2b:a1:4c:d1:9b:
0f:c1:bc:64:f1:8d:05:bd:e7:59:f3:f9:e3:3c:ae:3d:63:04:
65:ef:52:dc:bb:4c:9d:11:2e:a6:ec:c8:e4:95:ba:4e:2a:cf:
a7:39:45:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 20:08:40 2025 by rpki-client