This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/3E4759ACC8C811F0A19E0642C4F9AE02.roa
File: 3E4759ACC8C811F0A19E0642C4F9AE02.roa (raw, json)
Hash identifier: ZWUUqwfw7EkvOK+3D6M6Ls8tBIP9/iOJHFpcIlGh5RM=
Subject key identifier: EA:12:44:13:33:64:88:0B:CC:A2:E1:46:49:9F:2F:F0:06:55:7D:3D
Certificate issuer: /CN=A91A8D22/serialNumber=A683F6724C02A13F2D39CF2F21500BE00380DDE3
Certificate serial: 353D
Authority key identifier: A6:83:F6:72:4C:02:A1:3F:2D:39:CF:2F:21:50:0B:E0:03:80:DD:E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poP2ckwCoT8tOc8vIVAL4AOA3eM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/3E4759ACC8C811F0A19E0642C4F9AE02.roa
Signing time: Sun 23 Nov 2025 23:58:01 +0000
ROA not before: Sun 23 Nov 2025 23:58:01 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 58731
IP address blocks: 103.112.36.0/22 maxlen: 24
180.189.160.0/20 maxlen: 24
2405:1f00::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.crl
rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poP2ckwCoT8tOc8vIVAL4AOA3eM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 14:41:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13629 (0x353d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8D22, serialNumber=A683F6724C02A13F2D39CF2F21500BE00380DDE3
Validity
Not Before: Nov 23 23:58:01 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69239f89-eb13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:89:64:24:1c:ee:41:8f:be:91:bd:6d:4c:d3:
6e:64:1e:6a:de:08:4e:13:dc:e7:7f:0a:3f:1b:88:
1b:0c:de:8b:2d:36:50:c1:fa:98:1f:87:b5:50:c8:
69:4f:bc:eb:bf:4c:1d:10:3c:da:53:a7:78:36:41:
3a:4a:ff:b1:83:79:c5:9a:67:9e:b9:df:55:d3:c3:
82:8e:60:2a:4d:5b:ee:f5:22:df:48:28:36:64:fb:
5b:61:f9:49:8c:3e:91:ad:f9:7d:c6:bd:bb:41:82:
55:a6:40:56:65:25:50:bc:d9:f7:3b:ac:c5:23:07:
bd:9e:d6:ec:65:d4:39:78:01:77:d4:c2:31:af:01:
5d:da:5d:f1:de:84:83:ab:3a:d0:7c:69:d9:b4:6c:
4a:5e:48:3c:cb:cc:c8:c3:75:63:56:69:3b:d8:7a:
d3:f3:f0:d3:f8:52:35:6a:ad:08:ee:57:f1:7f:26:
23:36:87:55:be:77:a9:d3:d6:26:36:be:54:0f:eb:
cb:f2:78:be:76:8e:73:b8:6f:64:5a:e3:43:15:81:
56:ed:39:7e:88:dd:10:6c:2d:88:97:a7:41:26:79:
0d:cf:b2:e5:9d:79:0e:b1:f9:27:69:0f:33:ef:a6:
76:76:4b:9c:32:e5:0c:75:9d:0a:9a:1b:bf:1d:85:
4d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:12:44:13:33:64:88:0B:CC:A2:E1:46:49:9F:2F:F0:06:55:7D:3D
X509v3 Authority Key Identifier:
keyid:A6:83:F6:72:4C:02:A1:3F:2D:39:CF:2F:21:50:0B:E0:03:80:DD:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poP2ckwCoT8tOc8vIVAL4AOA3eM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/3E4759ACC8C811F0A19E0642C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.112.36.0/22
180.189.160.0/20
IPv6:
2405:1f00::/32
Signature Algorithm: sha256WithRSAEncryption
7d:28:ad:ba:3b:94:93:4d:28:78:3f:92:64:73:69:c4:a7:26:
cf:b8:cb:c9:32:a9:d3:f8:96:31:88:59:9d:fb:27:e7:d7:88:
1c:84:49:b0:d4:a8:ed:75:8b:a8:27:20:83:35:96:d0:da:2b:
a1:89:64:4f:8b:14:ab:48:72:cb:e4:95:4c:cc:22:31:d4:66:
63:e0:29:bd:6c:6c:64:89:04:b2:03:9c:7c:aa:22:50:e6:6f:
aa:5c:07:bf:d1:2c:83:10:36:33:f0:d6:7b:56:3b:46:7e:7c:
e0:08:99:01:95:8d:67:98:59:ab:eb:e4:7d:bd:5c:01:b8:6e:
95:a3:cb:1d:da:5f:cf:af:f7:ce:2d:f7:3b:9e:fb:d2:14:b0:
87:13:e7:a2:12:aa:66:1b:0d:de:18:2d:ff:e8:74:4b:d6:c9:
eb:fe:d5:87:7a:99:49:9c:ef:3e:fb:d7:05:39:e3:ad:c1:70:
1f:8d:62:53:78:ea:51:84:b6:30:b8:1a:26:c9:9d:a9:61:75:
c7:ff:72:f1:ae:6e:31:dd:01:4e:74:6f:04:26:21:3e:05:e6:
03:c0:a1:47:11:d7:eb:0a:7f:27:44:cc:80:13:fe:51:1c:87:
80:a2:c2:ba:c5:7b:91:e3:6a:2b:17:d0:80:83:2c:cc:ed:92:
3d:6a:76:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 03:42:59 2025 by rpki-client