This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/3636BCD2937011EA8A795583C4F9AE02.roa
File: 3636BCD2937011EA8A795583C4F9AE02.roa (raw, json)
Hash identifier: N8ceN2VkS27MkISIt7fRZouPAXOPromcPpkIZGqnWrI=
Subject key identifier: 3C:F5:A8:6D:FB:C3:62:93:80:13:EA:C3:F1:57:AC:5A:3B:D6:B4:5E
Certificate issuer: /CN=A91ACFEB/serialNumber=5385E13A1B5845FB44CEEB6BED8DEB4E89AF3829
Certificate serial: 09FD
Authority key identifier: 53:85:E1:3A:1B:58:45:FB:44:CE:EB:6B:ED:8D:EB:4E:89:AF:38:29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/3636BCD2937011EA8A795583C4F9AE02.roa
Signing time: Fri 30 Jan 2026 20:16:45 +0000
ROA not before: Fri 30 Jan 2026 20:16:45 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 55361
IP address blocks: 103.6.4.0/24 maxlen: 24
103.6.5.0/24 maxlen: 24
103.6.6.0/24 maxlen: 24
103.6.7.0/24 maxlen: 24
113.20.20.0/24 maxlen: 24
113.20.21.0/24 maxlen: 24
113.20.22.0/24 maxlen: 24
113.20.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.crl
rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Feb 2026 15:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2557 (0x9fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ACFEB, serialNumber=5385E13A1B5845FB44CEEB6BED8DEB4E89AF3829
Validity
Not Before: Jan 30 20:16:45 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=697d11ad-4347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:95:7f:d4:c9:23:a2:d9:cf:40:a9:57:d8:cf:
6e:91:bd:88:64:04:08:b4:2e:b7:41:f3:c1:59:7b:
69:3c:7e:38:af:2b:53:d6:c0:cf:a0:2c:df:8d:89:
55:f0:8a:ef:10:37:18:85:16:4a:ba:8b:aa:67:e1:
97:cb:cf:8d:42:08:0d:47:67:41:32:53:24:13:74:
86:ae:7f:47:ec:c5:fd:9b:0a:c7:d7:78:09:d3:15:
df:42:31:4b:81:e0:db:bc:f1:1c:eb:cd:c4:82:14:
47:54:67:4d:0c:01:33:21:06:5f:5f:98:31:61:dc:
e7:40:cf:bd:f4:c8:b3:e8:41:58:87:b7:ae:71:0d:
70:b7:ac:52:76:8a:42:63:df:a6:68:4e:42:e3:e9:
40:90:7d:ce:6f:82:c8:81:e0:31:ce:47:3c:07:e0:
4e:da:8d:d5:dd:9a:1b:d2:0e:3c:f0:64:52:da:ce:
c4:cd:af:53:74:c3:98:24:6f:ae:2c:ff:30:61:b7:
85:4e:b8:d7:cd:b3:bb:22:6f:09:39:aa:70:68:b1:
5f:63:20:56:ec:b6:5b:cf:c2:3d:d1:51:4b:fc:7c:
8a:5a:14:57:07:01:38:b5:68:6c:2e:63:c2:99:ef:
6f:48:41:9c:8f:c7:88:fa:44:82:45:df:5f:35:9a:
29:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F5:A8:6D:FB:C3:62:93:80:13:EA:C3:F1:57:AC:5A:3B:D6:B4:5E
X509v3 Authority Key Identifier:
keyid:53:85:E1:3A:1B:58:45:FB:44:CE:EB:6B:ED:8D:EB:4E:89:AF:38:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/3636BCD2937011EA8A795583C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.6.4.0/22
113.20.20.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:c2:66:e9:2e:5a:98:a8:c5:88:f0:5b:e1:7e:c5:57:b7:4b:
36:38:75:b9:f1:28:24:ab:65:58:30:cd:3c:e2:cb:65:e7:f5:
51:32:83:62:54:d6:b1:af:ad:e0:c2:c5:fe:63:42:f4:45:19:
04:4c:33:73:bb:0c:03:0b:d7:44:09:bd:0a:f5:14:8a:04:e7:
58:e6:70:04:28:40:8d:0f:bb:86:98:d8:a4:c8:fa:9c:0c:ab:
59:20:d8:c3:06:de:5a:68:78:4a:17:7d:33:14:70:cb:96:41:
e7:14:be:88:99:14:0d:20:16:ac:6b:ce:4d:47:45:38:59:a4:
50:42:f4:02:73:8b:64:f9:67:f1:0c:c7:a9:91:98:a5:f1:42:
e8:82:01:86:37:10:33:e5:e8:56:27:54:1f:08:9b:5b:84:0c:
5d:03:e1:ec:23:17:44:61:20:7d:87:67:7a:73:c4:3d:90:63:
34:06:a9:41:0e:82:4d:e2:fb:d6:74:a6:96:50:8b:f3:ab:a0:
72:d5:43:49:a0:4f:83:3e:ba:fe:91:53:f9:28:ab:09:5e:24:
3b:3d:1e:2c:7f:12:9e:bb:f3:c5:c9:4d:c9:a8:42:46:88:f2:
3f:32:7f:d0:de:b0:e0:d4:3a:59:f3:3d:72:88:59:be:05:9d:
4e:78:b1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 21:46:26 2026 by rpki-client