This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/95BF687CEDE511F0AFD0F13E766F56BC.roa
File: 95BF687CEDE511F0AFD0F13E766F56BC.roa (raw, json)
Hash identifier: zmWDQ6MXVf7Ws4JCdCiFHc/NRo6v2SNX8TvU2l+Qkt0=
Subject key identifier: E7:AE:AA:F2:3B:B6:14:6E:1C:16:4F:63:7E:5D:49:F4:C6:F5:19:E2
Certificate issuer: /CN=A91A78C2/serialNumber=036D734AA630264A18EC564DD6AB416461C6A46A
Certificate serial: 02
Authority key identifier: 03:6D:73:4A:A6:30:26:4A:18:EC:56:4D:D6:AB:41:64:61:C6:A4:6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A21zSqYwJkoY7FZN1qtBZGHGpGo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/95BF687CEDE511F0AFD0F13E766F56BC.roa
Signing time: Sat 10 Jan 2026 05:31:16 +0000
ROA not before: Sat 10 Jan 2026 05:31:16 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 140096
IP address blocks: 103.116.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.crl
rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A21zSqYwJkoY7FZN1qtBZGHGpGo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 07:09:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A78C2, serialNumber=036D734AA630264A18EC564DD6AB416461C6A46A
Validity
Not Before: Jan 10 05:31:16 2026 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=6961e424-ec0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a1:14:95:38:32:e6:a0:de:e1:84:14:8c:cf:
0c:30:99:00:31:59:26:3a:7a:de:bf:6b:5a:ba:84:
3f:2c:4f:20:1d:ff:94:1c:d2:a2:66:f7:de:c2:bd:
e3:bc:e3:3a:a5:63:3a:8a:4f:dc:5d:8f:12:e7:aa:
8f:d8:a2:97:9a:f0:db:16:dc:29:f0:e0:4d:a8:58:
de:bd:02:d2:75:af:3b:7f:6d:de:16:4b:fd:39:ca:
44:13:dd:7d:7c:b7:ae:e5:7a:79:55:5f:40:0c:0a:
4a:44:83:b2:c7:6d:3d:9c:d2:18:06:9d:ca:01:ca:
e4:fe:bb:a7:c6:9b:ff:3d:75:fa:bb:5e:a2:40:34:
15:6c:4a:38:64:21:27:48:7f:46:b7:51:26:15:15:
2a:7d:2f:42:d4:81:2d:9f:6a:3c:04:68:3b:0a:f8:
02:75:eb:9a:bf:55:55:b6:69:6b:01:a6:fe:fc:e6:
4d:5f:d7:ab:d8:0b:cd:d5:ba:b2:3a:40:0f:b9:b8:
87:cc:a4:21:8a:66:f9:59:4c:e0:f8:ce:e1:ab:28:
d4:11:ce:47:ab:36:18:af:56:99:84:c5:05:ef:0f:
a1:68:1c:0c:f9:b5:c5:e6:9d:f9:8b:cc:49:88:0d:
10:bd:11:07:80:71:9c:cf:e0:1f:2d:b7:ff:09:91:
94:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:AE:AA:F2:3B:B6:14:6E:1C:16:4F:63:7E:5D:49:F4:C6:F5:19:E2
X509v3 Authority Key Identifier:
keyid:03:6D:73:4A:A6:30:26:4A:18:EC:56:4D:D6:AB:41:64:61:C6:A4:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A21zSqYwJkoY7FZN1qtBZGHGpGo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/95BF687CEDE511F0AFD0F13E766F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.116.72.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:26:88:01:42:de:d8:bc:7e:c3:31:e5:5a:5c:92:7c:a2:5b:
c2:8f:b9:fb:9e:e1:a1:d9:57:41:46:b6:87:05:48:ca:95:bc:
76:dd:90:45:62:ae:c0:1a:55:af:24:4e:70:8a:3e:4f:b3:b3:
fa:63:be:65:93:d8:8c:9d:ff:54:a1:48:9f:48:0e:32:f7:5c:
5d:73:33:e2:35:71:2f:d1:d5:c9:76:24:c8:49:f2:b9:b8:fb:
16:12:51:0b:14:a3:20:15:3d:01:d6:9f:65:8d:4d:73:ee:ce:
c1:f2:52:6b:a2:f3:3f:37:d9:d2:fd:6a:e6:57:90:2f:5c:ea:
31:e3:30:1d:98:25:e0:92:73:23:36:49:b1:0a:ff:f3:9b:a5:
27:95:bf:86:38:67:c7:bb:cd:f9:b4:ad:67:74:82:90:52:85:
6a:a9:9f:29:99:3d:4c:6d:c1:a5:5b:b5:cc:4d:17:52:cf:18:
ba:d0:04:d7:88:d2:e6:5f:f7:b6:8a:cd:0d:66:dd:18:19:93:
1e:77:48:08:17:06:43:8d:09:4e:a5:b8:d3:5d:e1:67:53:27:
73:04:80:a6:aa:0f:4b:db:09:28:97:0b:36:00:28:dc:e1:c0:
6e:2c:c9:1c:44:58:37:80:0f:63:4d:e4:e2:40:34:02:96:52:
83:46:56:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 13:48:06 2026 by rpki-client