This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/1ED3BAF898A011ED9D31B05CC4F9AE02.roa
File: 1ED3BAF898A011ED9D31B05CC4F9AE02.roa (raw, json)
Hash identifier: GynF0Ay+F7v6ZNuRVcxpGuP9OQi3GMJtHrKy3/D7ZPM=
Subject key identifier: 27:37:22:72:43:70:15:FD:29:BD:09:69:71:42:0A:2F:39:39:3C:44
Certificate issuer: /CN=A91AB8D7/serialNumber=050DC03B5D5945A33EAB951817F1679BD910C6AC
Certificate serial: 022B
Authority key identifier: 05:0D:C0:3B:5D:59:45:A3:3E:AB:95:18:17:F1:67:9B:D9:10:C6:AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/1ED3BAF898A011ED9D31B05CC4F9AE02.roa
Signing time: Wed 17 Dec 2025 02:21:45 +0000
ROA not before: Wed 17 Dec 2025 02:21:45 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 150445
IP address blocks: 103.76.116.0/23 maxlen: 23
2400:d360::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.crl
rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 01:22:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 555 (0x22b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB8D7, serialNumber=050DC03B5D5945A33EAB951817F1679BD910C6AC
Validity
Not Before: Dec 17 02:21:45 2025 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=694213b9-1d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bc:f4:1b:61:00:b8:97:09:a4:bb:bc:8a:b0:
a2:34:32:45:3e:38:1a:5f:74:a2:b5:fc:cf:f5:1a:
4c:49:63:4d:e2:f9:b1:e3:8c:a8:c7:49:c2:e6:24:
81:8e:d4:bd:3f:82:99:e9:4f:e1:63:01:9a:67:46:
7e:34:72:dd:26:9b:50:4a:1b:db:04:ed:30:2f:f1:
1b:5b:3a:75:3e:ec:c4:7a:ab:8e:ac:77:e4:47:59:
01:38:71:b8:9e:69:b2:3a:27:c4:2d:51:6e:5f:91:
a7:d7:36:24:3a:0e:3e:f6:7c:7e:13:65:22:73:0b:
48:0b:24:db:f4:a4:5e:2e:2b:93:b1:39:0e:85:b9:
2d:e5:50:d8:0e:40:68:86:a8:a8:33:eb:ba:81:9d:
ab:35:ff:40:14:2e:99:75:06:ba:4b:bc:b3:3e:36:
60:69:f6:64:f6:80:e3:84:cd:fa:4f:c4:ba:01:f2:
a3:74:f4:32:fc:ab:91:00:99:70:4b:d7:ae:8e:24:
b1:c1:ed:91:04:8e:e7:d6:87:f5:04:43:b1:1b:6f:
56:50:c7:4d:d9:92:00:5c:98:ab:9a:f4:83:fe:9d:
97:65:3b:31:10:d2:7e:4c:2a:93:71:48:c4:1a:ba:
5d:89:8b:04:da:5f:0c:7d:b3:4c:c8:93:59:61:ab:
1b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:37:22:72:43:70:15:FD:29:BD:09:69:71:42:0A:2F:39:39:3C:44
X509v3 Authority Key Identifier:
keyid:05:0D:C0:3B:5D:59:45:A3:3E:AB:95:18:17:F1:67:9B:D9:10:C6:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/1ED3BAF898A011ED9D31B05CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.76.116.0/23
IPv6:
2400:d360::/32
Signature Algorithm: sha256WithRSAEncryption
38:8b:89:53:19:66:87:e6:7a:09:cf:8f:4a:c6:a1:ff:6a:f3:
2f:22:00:4d:64:ec:ef:30:e6:9d:20:6f:04:a2:50:9d:03:6d:
61:4f:98:2f:ee:c6:25:8f:a7:76:9f:47:f8:40:89:d4:36:38:
cb:e2:fb:a1:1c:16:3e:26:f0:c8:7b:b8:c0:3d:f6:79:cc:ad:
26:6b:10:8a:60:a7:0d:6c:ed:c0:de:9b:72:6e:84:aa:75:55:
b1:00:f1:46:a8:e9:3f:ed:7f:1f:fa:4c:bf:99:a3:0d:d8:d9:
75:53:ca:07:5e:81:00:da:21:70:4a:21:c7:9b:cd:79:aa:c7:
c9:3a:be:92:04:52:8e:e8:ed:52:f1:34:93:67:7c:d7:58:ab:
f6:2f:61:ab:81:7f:df:12:4f:7d:33:15:b3:b5:a5:24:b8:e7:
55:f5:a3:6c:d1:87:94:37:07:86:25:fc:8d:91:2f:72:5c:f2:
ac:42:cf:52:1b:9c:8a:ee:2b:84:eb:cb:be:83:91:3c:eb:4a:
c1:93:fc:30:ac:61:ee:e3:ff:77:30:e7:9c:b4:e2:fd:2a:3b:
85:5b:d9:b9:c3:79:3e:a7:d9:2d:a9:9f:50:ad:1f:ca:7a:82:
9c:75:23:a2:b1:85:53:e3:86:89:16:84:8b:a2:65:58:01:37:
41:47:82:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 06:48:18 2025 by rpki-client