This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/3D85B786EF7211F08C9974335B6F56BC.roa
File: 3D85B786EF7211F08C9974335B6F56BC.roa (raw, json)
Hash identifier: Jn6LUQTIm0Dpg1Ko7eo8YNgg7LbdkDyBWUmsJszAx7s=
Subject key identifier: 5E:19:E0:D4:62:B8:C3:7E:8F:5B:E5:66:80:B3:1B:E0:BA:BD:A0:4D
Certificate issuer: /CN=A91688D4/serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
Certificate serial: 0575
Authority key identifier: 9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/3D85B786EF7211F08C9974335B6F56BC.roa
Signing time: Mon 12 Jan 2026 04:50:39 +0000
ROA not before: Mon 12 Jan 2026 04:50:39 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 152179
IP address blocks: 103.73.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl
rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 22:43:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1397 (0x575)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91688D4, serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
Validity
Not Before: Jan 12 04:50:39 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69647d9e-0a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:29:de:31:ce:4d:bc:ce:48:cb:4a:b5:c5:47:
93:4f:87:d3:c7:54:3d:d5:bd:96:40:1b:db:6a:61:
3e:75:59:df:10:b1:e9:8f:3f:c0:33:1a:55:f3:96:
54:cc:30:06:e6:6f:df:fa:bc:62:02:0e:85:3d:f2:
59:cd:48:85:71:1e:c5:0f:52:20:4c:d7:d0:d8:cf:
02:9c:8c:51:a0:7a:61:d0:92:cb:f7:03:8d:86:e3:
4c:66:c4:31:8a:b2:cc:56:69:cd:02:33:58:0b:f2:
75:b5:27:27:41:b4:cb:2e:14:3f:25:ae:09:0d:66:
1d:92:cd:e2:2d:fe:96:8f:ce:80:26:9c:20:f9:63:
03:4e:b7:5f:c1:50:ff:90:3f:90:da:fc:c6:5b:c9:
31:ed:dc:d2:f8:83:be:bf:ac:9c:44:a3:08:36:7d:
a6:77:b7:b2:75:a7:47:11:de:3b:95:79:81:e1:8f:
c5:4c:6f:a3:9c:ac:b7:96:08:c6:9e:77:b0:83:eb:
ca:45:40:0d:95:80:df:8c:eb:5b:0f:cc:af:34:74:
da:3b:08:f9:0a:22:97:8c:d0:df:d7:dd:a7:6f:3f:
0a:fb:cf:50:0c:00:82:22:dd:8a:4a:d3:96:a3:9e:
ae:26:63:77:91:7b:d1:76:90:f1:9b:51:0f:01:44:
88:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:19:E0:D4:62:B8:C3:7E:8F:5B:E5:66:80:B3:1B:E0:BA:BD:A0:4D
X509v3 Authority Key Identifier:
keyid:9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/3D85B786EF7211F08C9974335B6F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.73.221.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:8f:93:6d:03:e3:71:97:dc:30:98:77:91:dc:03:2c:3c:09:
3f:4d:2c:48:fe:1a:42:fc:ac:23:70:0c:60:b1:57:ad:60:5b:
b8:85:b1:69:fd:63:2d:75:93:27:e6:08:51:02:1a:ef:44:56:
64:70:fa:44:03:cb:27:53:47:ff:f9:62:89:da:13:13:b0:4a:
a0:94:eb:f3:d1:6e:e1:6c:69:6c:2f:b7:42:62:02:d0:58:61:
aa:13:8a:f7:be:c4:8a:91:be:f2:19:5d:33:2f:d1:b9:63:a3:
61:69:77:a1:8a:42:ba:9e:5b:21:b8:2f:32:34:22:7f:6f:9e:
52:b2:5e:79:81:6f:3a:04:62:3b:bd:d2:58:3b:46:3d:ba:00:
37:22:93:cb:ad:99:06:ff:40:d5:77:24:7e:b7:4b:f4:af:f7:
bf:4f:7c:bc:f5:33:c2:d8:9c:6e:ac:56:03:aa:7a:52:f4:f8:
47:e8:00:3d:1a:c9:c1:29:17:64:ae:d2:99:49:52:86:3f:25:
4c:f2:c3:9a:82:66:14:86:e4:dc:07:ca:c8:b1:e4:5c:21:5f:
08:99:bb:79:b6:e5:6b:ce:1d:73:40:26:6a:c7:c1:e8:65:e6:
b7:64:5b:41:76:e0:39:78:e9:eb:6b:81:0d:f8:d5:7b:df:a7:
c1:1b:00:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 11:18:06 2026 by rpki-client