This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/03EE880413F511EA8D120C65C4F9AE02.roa
File: 03EE880413F511EA8D120C65C4F9AE02.roa (raw, json)
Hash identifier: vvKMpwTeyHLp3KookAGl2dqqkQVnCPsxuoWP/y9TOdI=
Subject key identifier: 9A:FA:42:EB:A7:BF:16:5E:62:66:32:35:A1:B8:48:EB:42:BD:90:2B
Certificate issuer: /CN=A91A6BF5/serialNumber=3E845EA84E11030BC2A1061308979F798A12113F
Certificate serial: 0C64
Authority key identifier: 3E:84:5E:A8:4E:11:03:0B:C2:A1:06:13:08:97:9F:79:8A:12:11:3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/03EE880413F511EA8D120C65C4F9AE02.roa
Signing time: Fri 12 Dec 2025 18:35:28 +0000
ROA not before: Fri 12 Dec 2025 18:35:28 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 136007
IP address blocks: 103.78.248.0/24 maxlen: 24
103.78.249.0/24 maxlen: 24
103.78.250.0/24 maxlen: 24
103.78.251.0/24 maxlen: 24
2400:10c0::/32 maxlen: 32
2400:10c0::/35 maxlen: 35
2400:10c0:2000::/35 maxlen: 35
2400:10c0:4000::/35 maxlen: 35
2400:10c0:6000::/35 maxlen: 35
2400:10c0:8000::/35 maxlen: 35
2400:10c0:a000::/35 maxlen: 35
2400:10c0:c000::/35 maxlen: 35
2400:10c0:e000::/35 maxlen: 35
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.crl
rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 31 Dec 2025 17:24:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3172 (0xc64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6BF5, serialNumber=3E845EA84E11030BC2A1061308979F798A12113F
Validity
Not Before: Dec 12 18:35:28 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=693c6070-1c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:4f:7e:37:fc:d3:c6:19:d5:98:4c:e9:41:fe:
9b:f1:3f:53:c5:03:1e:2a:5f:ae:22:44:0b:6b:16:
3e:be:d2:f3:15:cb:64:80:c4:9a:a5:65:1e:24:99:
33:11:b6:2d:52:05:83:fe:8d:76:89:10:b3:a4:4c:
5d:87:2b:70:af:9f:78:6e:c6:2b:81:56:d0:c7:ab:
cc:56:b6:84:ea:12:75:99:3d:4a:1b:4c:6a:34:5d:
9c:ea:ab:f8:58:b3:a6:bd:5e:d7:92:49:71:50:dc:
04:14:1c:2f:b4:a8:cd:66:4d:f0:b5:24:e8:a3:29:
65:62:4c:3a:1c:d4:d9:b2:14:f9:cd:5c:fb:ce:97:
69:c5:45:2d:87:c7:b0:00:20:91:05:ea:c8:2e:ac:
9c:9a:20:eb:bb:7d:d9:2a:12:76:18:be:e6:48:76:
57:32:b5:51:21:62:23:3a:32:91:30:99:70:1b:20:
9e:fa:d2:8e:4c:e2:ae:04:5b:f4:23:ad:04:27:25:
c5:45:15:ef:da:29:67:14:4d:0f:50:35:fb:05:41:
19:dc:70:c7:83:e2:69:c5:98:25:b0:50:73:7c:c2:
41:c4:f2:ab:45:d5:88:36:ba:9b:d1:2d:99:7b:6b:
15:d1:70:cf:aa:68:5c:fa:1a:ff:40:86:14:88:72:
d0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FA:42:EB:A7:BF:16:5E:62:66:32:35:A1:B8:48:EB:42:BD:90:2B
X509v3 Authority Key Identifier:
keyid:3E:84:5E:A8:4E:11:03:0B:C2:A1:06:13:08:97:9F:79:8A:12:11:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/03EE880413F511EA8D120C65C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.78.248.0/22
IPv6:
2400:10c0::/32
Signature Algorithm: sha256WithRSAEncryption
69:3b:f8:d9:ec:24:33:eb:67:95:fd:41:c5:75:82:00:9d:3f:
06:e6:61:0b:aa:b6:f6:39:ce:30:01:7e:5b:eb:dd:65:f2:c0:
fa:1c:d0:6c:3e:5b:7c:48:e3:46:af:72:c2:5e:43:5e:32:cb:
c8:a1:1d:4e:12:da:4e:19:48:7f:95:ed:34:86:bf:56:c6:1b:
f3:90:b9:8a:e0:73:42:f3:c1:51:68:4a:c1:6e:58:7b:49:c0:
cd:2c:16:ae:36:51:48:e9:d4:f3:94:d2:3e:f9:09:2d:05:0d:
2d:d1:2e:7e:f3:45:41:2b:8a:e0:95:b3:f8:33:14:93:eb:cd:
11:e6:fb:81:32:e7:1e:93:71:73:bf:2d:f9:0b:f9:20:19:73:
3e:31:cf:2e:9c:83:4a:be:cd:4d:7b:2c:9a:c8:bd:01:5f:60:
17:b1:c3:42:b2:50:64:b3:b4:d2:1a:e9:0f:c1:fa:8a:f6:ba:
85:27:98:7e:cf:69:79:a3:53:c2:18:82:5c:bb:e1:18:08:7d:
f5:98:da:85:02:d4:b1:7b:c5:81:ca:3c:64:f3:7b:95:98:1e:
fa:12:a2:f8:6d:6b:52:0b:4f:41:d5:69:2a:4b:61:ba:0a:81:
45:35:2a:8e:f6:d0:db:07:e1:29:e6:1f:07:55:28:f1:f1:44:
33:7b:26:dc
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTZCRjUxMTAvBgNVBAUTKDNFODQ1RUE4NEUxMTAzMEJDMkExMDYxMzA4OTc5Rjc5
OEExMjExM0YwHhcNMjUxMjEyMTgzNTI4WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTNjNjA3MC0xYzEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8k9+N/zTxhnVmEzpQf6b8T9TxQMeKl+uIkQLaxY+vtLzFctkgMSapWUeJJkz
EbYtUgWD/o12iRCzpExdhytwr594bsYrgVbQx6vMVraE6hJ1mT1KG0xqNF2c6qv4
WLOmvV7XkklxUNwEFBwvtKjNZk3wtSTooyllYkw6HNTZshT5zVz7zpdpxUUth8ew
ACCRBerILqycmiDru33ZKhJ2GL7mSHZXMrVRIWIjOjKRMJlwGyCe+tKOTOKuBFv0
I60EJyXFRRXv2ilnFE0PUDX7BUEZ3HDHg+JpxZglsFBzfMJBxPKrRdWINrqb0S2Z
e2sV0XDPqmhc+hr/QIYUiHLQXQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFJr6Quun
vxZeYmYyNaG4SOtCvZArMB8GA1UdIwQYMBaAFD6EXqhOEQMLwqEGEwiXn3mKEhE/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkJGNS85RDBCNDIyMjEz
RjMxMUVBODBCMzc0NUZDNEY5QUUwMi9Qb1JlcUU0UkF3dkNvUVlUQ0plZmVZb1NF
VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BvUmVxRTRSQXd2Q29RWVRDSmVmZVlvU0VUOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTZCRjUvOUQwQjQyMjIxM0YzMTFFQTgwQjM3NDVGQzRGOUFFMDIvMDNFRTg4MDQx
M0Y1MTFFQThEMTIwQzY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAJnTvgwDQQCAAIwBwMFACQAEMAwDQYJKoZIhvcNAQELBQAD
ggEBAGk7+NnsJDPrZ5X9QcV1ggCdPwbmYQuqtvY5zjABflvr3WXywPoc0Gw+W3xI
40avcsJeQ14yy8ihHU4S2k4ZSH+V7TSGv1bGG/OQuYrgc0LzwVFoSsFuWHtJwM0s
Fq42UUjp1POU0j75CS0FDS3RLn7zRUEriuCVs/gzFJPrzRHm+4Ey5x6TcXO/LfkL
+SAZcz4xzy6cg0q+zU17LJrIvQFfYBexw0KyUGSztNIa6Q/B+or2uoUnmH7PaXmj
U8IYgly74RgIffWY2oUC1LF7xYHKPGTze5WYHvoSovhta1ILT0HVaSpLYboKgUU1
Ko720NsH4SnmHwdVKPHxRDN7Jtw=
-----END CERTIFICATE-----
Generated at Wed Dec 24 19:29:31 2025 by rpki-client