This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/3B943DB8A12F11EF8A121F33C4F9AE02.roa
File: 3B943DB8A12F11EF8A121F33C4F9AE02.roa (raw, json)
Hash identifier: 1dqO6r+A2uTRxInxtjkWF1ndg9y4kX4fvagqEnUInnM=
Subject key identifier: AF:3C:90:B2:DB:31:26:D9:11:08:AF:A7:E2:B7:F0:B3:DF:B5:DF:D0
Certificate issuer: /CN=A91623B9/serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5
Certificate serial: 0563
Authority key identifier: 98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/3B943DB8A12F11EF8A121F33C4F9AE02.roa
Signing time: Tue 16 Dec 2025 23:19:32 +0000
ROA not before: Tue 16 Dec 2025 23:19:32 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 197537
IP address blocks: 103.174.96.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl
rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 29 Jan 2026 22:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1379 (0x563)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91623B9, serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5
Validity
Not Before: Dec 16 23:19:32 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6941e904-33d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:96:c7:92:f8:38:65:4b:5d:61:03:85:16:60:
91:32:39:80:07:6b:90:36:39:33:59:8f:38:c5:e0:
76:40:8f:c4:7f:2a:d1:fb:e0:eb:ee:07:0d:13:fe:
3a:c8:a0:6a:7d:53:24:91:1f:42:2e:7b:dc:15:2a:
71:fb:80:87:d4:cf:8f:97:9b:55:b1:31:b9:a8:c0:
4f:44:37:0e:2f:dd:10:75:c0:f6:3a:b7:31:e6:2e:
45:bb:c7:ad:6f:db:54:b3:67:31:8e:4e:3b:d0:98:
d6:21:27:66:07:3a:e2:71:69:43:c7:6e:a9:77:d0:
3d:28:bf:eb:be:70:d3:58:8b:11:7b:43:4b:7e:d9:
40:e8:8d:73:bb:44:bd:68:97:6a:bb:1d:1d:ae:b7:
9c:ae:3f:9d:c2:01:66:7c:f3:ea:41:02:db:41:67:
92:61:ce:d1:23:2c:6c:cd:b8:72:51:83:51:ff:f3:
cd:43:67:99:8f:eb:03:76:10:d3:34:59:61:c7:bb:
ec:e9:5c:cb:c9:3e:a9:e3:ba:41:f3:7b:a9:12:ba:
54:ad:c8:3f:cb:d1:e7:5f:0c:56:fc:b2:80:19:52:
1e:09:1e:e6:d6:37:aa:f8:f2:24:06:36:9f:7a:96:
81:10:9d:e8:cc:04:21:e2:15:5c:32:53:da:bc:b1:
72:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:3C:90:B2:DB:31:26:D9:11:08:AF:A7:E2:B7:F0:B3:DF:B5:DF:D0
X509v3 Authority Key Identifier:
keyid:98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/3B943DB8A12F11EF8A121F33C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.174.96.0/23
Signature Algorithm: sha256WithRSAEncryption
39:9f:86:a2:38:ce:45:83:7d:df:39:99:16:c3:5e:fb:21:8d:
95:58:53:63:93:b3:b2:49:9d:a4:de:c0:84:00:9e:ae:59:fb:
0d:b2:ef:3b:84:a9:51:7e:ea:43:0c:a3:34:8f:35:91:e3:41:
b8:a9:e3:62:12:9e:b3:a2:58:ed:28:33:5b:df:8f:1c:61:91:
14:54:cb:bb:df:cc:00:7b:b6:2e:ec:4e:6b:ce:b2:b8:e3:b7:
d2:73:96:bd:3e:9f:45:0a:1a:eb:ba:63:bf:22:36:5c:5c:d4:
79:32:82:e2:41:e0:3c:bc:b6:e3:40:b4:19:88:d1:b9:54:cb:
db:da:1f:3a:54:ab:77:9e:44:6d:19:5c:55:01:34:7e:d9:8c:
fe:df:26:6c:53:77:eb:f8:32:0d:ab:ba:87:2d:74:2d:2c:ce:
fa:d8:ba:3b:83:a0:01:35:17:35:09:a3:d8:75:c1:d9:79:d4:
b6:8b:17:89:fe:b7:f1:98:0b:86:60:e6:18:d3:c1:0e:67:a7:
9e:34:32:da:ac:84:11:39:c5:05:04:b4:0f:2b:ce:91:7f:c3:
b8:34:05:2b:12:86:7f:83:7c:71:75:98:c1:03:d3:ef:2a:ac:
f4:0f:81:06:28:c9:20:5b:64:21:da:9f:67:b3:ca:f5:6e:82:
f4:73:bc:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 14:07:14 2026 by rpki-client