This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/4821776AD9A211F092913C6268D3641D.roa
File: 4821776AD9A211F092913C6268D3641D.roa (raw, json)
Hash identifier: cKf3TaoYAlPwDB+K3qIkWpJNLCSUjbzcobiZY86mFj8=
Subject key identifier: 79:E7:F3:E0:F4:7F:CC:A5:A7:13:79:FD:F1:B1:92:AB:F2:E0:97:84
Certificate issuer: /CN=A91597E8/serialNumber=C9C28F990B627412C97C2DCEC7C906E61AD325AC
Certificate serial: 34FB
Authority key identifier: C9:C2:8F:99:0B:62:74:12:C9:7C:2D:CE:C7:C9:06:E6:1A:D3:25:AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/4821776AD9A211F092913C6268D3641D.roa
Signing time: Mon 15 Dec 2025 10:39:07 +0000
ROA not before: Mon 15 Dec 2025 10:39:07 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 64050
IP address blocks: 103.1.41.0/24 maxlen: 24
121.127.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl
rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 14:42:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13563 (0x34fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91597E8, serialNumber=C9C28F990B627412C97C2DCEC7C906E61AD325AC
Validity
Not Before: Dec 15 10:39:07 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=693fe54b-a84e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f7:d0:3d:87:5e:39:ea:5f:93:40:35:99:8c:
a0:92:86:02:f8:f3:d9:0c:e8:14:14:20:92:89:3a:
0c:99:c0:e7:1a:73:62:68:c5:1b:05:87:27:46:36:
1c:01:56:eb:e7:09:0c:24:8c:9c:19:6f:24:91:33:
2a:d5:be:6a:9d:33:42:85:6e:87:dd:f9:2e:74:37:
04:a2:66:52:0a:2d:eb:cd:ea:60:96:8e:f5:74:17:
ee:ab:c1:98:db:3b:25:e3:27:8d:c5:f5:96:0d:0d:
35:8f:e0:c8:fc:84:b3:2e:26:62:65:96:9a:09:f0:
6c:21:f4:27:8f:4f:2c:8f:9c:94:be:a6:cd:a3:8c:
d1:46:27:30:4e:c3:b3:d5:2d:1b:eb:37:13:9b:e8:
61:66:0b:e7:36:a3:9a:72:c8:61:59:64:ab:a9:15:
1f:25:0a:92:6a:90:c5:c1:72:4a:64:0d:90:74:40:
4b:ee:9e:47:ac:0a:5e:b8:6b:4a:52:b2:82:38:bd:
24:46:84:5d:a7:a1:f6:97:0c:6e:35:70:42:00:71:
86:ea:e7:39:d4:58:14:e6:8f:71:77:07:b0:be:a7:
02:19:89:1d:9e:22:c0:27:67:04:92:b0:f7:34:fd:
8b:00:7b:f6:79:0a:a0:97:c3:7b:41:37:d6:5b:37:
3a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E7:F3:E0:F4:7F:CC:A5:A7:13:79:FD:F1:B1:92:AB:F2:E0:97:84
X509v3 Authority Key Identifier:
keyid:C9:C2:8F:99:0B:62:74:12:C9:7C:2D:CE:C7:C9:06:E6:1A:D3:25:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/4821776AD9A211F092913C6268D3641D.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.1.41.0/24
121.127.225.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:fa:4c:e3:ba:b7:40:2f:e4:06:e2:c0:d5:7f:3d:4f:13:c0:
eb:1a:4b:01:15:c6:98:55:72:aa:6c:8b:a4:4c:c7:8b:f3:81:
b8:f2:d7:5b:15:b3:01:1b:f0:61:36:66:c7:33:0b:3c:fa:21:
54:97:e1:f6:1a:cb:43:7b:77:8f:ee:56:88:20:8a:91:ed:f6:
46:0a:f3:9c:9a:5f:16:95:68:46:ae:5a:79:cc:60:c7:5e:f4:
a1:e7:7e:1d:49:63:73:8e:aa:b3:f3:72:68:e9:61:9d:03:34:
1f:7c:2a:85:0a:1b:cd:5f:55:5b:9c:58:a8:83:55:85:8c:0b:
68:5d:1e:97:78:53:ad:fc:11:68:7b:3a:8e:26:e7:14:2f:fc:
ab:56:27:2d:92:1f:cb:e5:43:f0:62:30:77:16:e0:83:2d:5f:
c2:4f:e3:57:18:a0:5f:32:b4:84:bc:17:9f:3c:ce:69:72:53:
52:24:6b:6e:bc:12:21:f6:13:86:1a:ea:85:55:b8:8b:8c:6b:
bb:51:c1:db:56:c7:e1:74:7d:82:ed:71:94:d5:64:31:1f:f9:
1f:45:67:bf:a8:b1:40:c8:77:56:a7:4e:91:67:66:00:e3:ff:
1c:f3:36:f0:ab:e1:4b:99:20:3b:df:60:cb:d7:83:f3:9e:5e:
0b:7a:6b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 11:14:36 2025 by rpki-client