This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/C443D86A55A311E7896BED09C4F9AE02.roa
File: C443D86A55A311E7896BED09C4F9AE02.roa (raw, json)
Hash identifier: Md7FGHYItHQGM6UAMc/mZeAi1jZyh5HUwbkDmuddpAE=
Subject key identifier: B8:5A:BD:4E:CD:2C:44:2B:21:DA:72:4A:B2:23:BB:7E:54:88:F7:1F
Certificate issuer: /CN=A91B53A5/serialNumber=D9FC155B6FDA106C699A569B12038490958AA32F
Certificate serial: 1AD1
Authority key identifier: D9:FC:15:5B:6F:DA:10:6C:69:9A:56:9B:12:03:84:90:95:8A:A3:2F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/C443D86A55A311E7896BED09C4F9AE02.roa
Signing time: Fri 06 Feb 2026 14:27:48 +0000
ROA not before: Fri 06 Feb 2026 14:27:48 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 8360
IP address blocks: 103.85.135.0/24 maxlen: 24
103.119.72.0/23 maxlen: 23
103.119.72.0/24 maxlen: 24
103.119.73.0/24 maxlen: 24
103.233.172.0/23 maxlen: 24
103.233.174.0/23 maxlen: 23
103.233.174.0/24 maxlen: 24
103.233.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.crl
rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Feb 2026 16:10:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6865 (0x1ad1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B53A5, serialNumber=D9FC155B6FDA106C699A569B12038490958AA32F
Validity
Not Before: Feb 6 14:27:48 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=6985fa64-7888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:74:56:b2:58:25:34:f7:04:df:51:0d:97:62:
91:d4:5b:1d:33:50:90:58:03:2a:d8:b9:1e:ad:db:
33:4d:27:b5:32:66:a0:3e:60:3f:94:9d:71:6c:bf:
7a:f5:8f:76:b8:51:de:c4:1b:cb:1c:aa:93:6b:b0:
0e:8c:33:5e:0d:07:c9:09:a6:c7:f2:14:8f:fa:51:
5d:5f:5d:4c:3c:db:d3:73:8a:d8:40:a0:54:48:ac:
80:ac:50:71:4a:74:fa:88:94:f4:a5:02:83:81:3c:
7a:00:94:93:c0:5d:6f:af:35:ff:0f:76:f6:2e:4b:
6c:cf:55:82:c8:c2:99:9b:fd:87:74:64:58:1e:fc:
6c:c1:59:cc:4a:9b:93:ed:ac:2f:6e:ac:9a:85:62:
1d:01:98:5f:3e:c6:e5:10:d1:07:8c:79:6e:cd:aa:
81:a0:98:1e:99:3d:77:c1:38:98:c0:2d:ca:54:e0:
35:80:f8:20:c4:89:4f:66:cf:2d:f7:f4:9b:04:26:
c9:17:6d:6e:c0:34:ab:5d:9b:3c:f4:6f:dd:09:85:
e0:b3:37:4d:df:84:b0:6d:5e:a1:a2:3a:a4:50:63:
47:c0:88:76:a2:93:45:1e:d3:a2:82:82:96:58:8d:
27:d0:d9:8c:2c:25:85:ac:b9:f4:ac:10:2a:cf:6b:
0b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:5A:BD:4E:CD:2C:44:2B:21:DA:72:4A:B2:23:BB:7E:54:88:F7:1F
X509v3 Authority Key Identifier:
keyid:D9:FC:15:5B:6F:DA:10:6C:69:9A:56:9B:12:03:84:90:95:8A:A3:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/C443D86A55A311E7896BED09C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.85.135.0/24
103.119.72.0/23
103.233.172.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:b7:e4:57:61:97:aa:44:3a:24:20:e3:a1:8f:88:fa:d1:dd:
e3:00:11:a9:1c:dc:5e:31:8f:30:c1:31:59:e8:e5:05:07:60:
8e:d6:16:53:ac:f2:98:d1:de:df:1c:8a:33:bc:42:83:13:d2:
2c:8a:c9:51:c8:ad:46:85:44:db:9b:ee:4c:87:42:19:a3:c5:
6f:82:ab:f2:09:5c:cd:c4:e3:1d:ff:d5:bc:cb:b7:41:59:ca:
b2:55:ff:b8:0c:d3:13:97:f3:e2:14:26:8c:50:65:22:ba:dd:
c5:38:49:57:2c:a3:84:a4:7a:6a:a2:d6:05:18:a2:d7:eb:d0:
ee:06:88:c4:ac:69:15:4f:89:3b:19:2e:c1:f3:9b:9d:47:05:
8f:8d:cd:55:2d:4a:3b:29:23:3d:15:bb:3b:44:2a:d3:bb:ce:
3b:c0:0e:0b:df:4e:a4:2c:dd:f8:dc:90:0a:ca:c2:dd:b3:b4:
0f:ed:d2:64:7e:5a:3d:c9:dd:6b:45:09:2a:a8:29:36:65:b4:
48:df:33:35:e5:be:59:e2:67:ed:6d:39:f1:2c:f6:ee:e0:15:
d9:83:ce:6a:3b:f6:b3:42:22:c7:45:da:0f:9d:2d:71:ff:a8:
e6:0a:8d:78:2d:12:90:47:4e:d1:d6:ad:33:a3:28:f9:1c:36:
22:4c:b9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:22:52 2026 by rpki-client