This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/004A745EDBB011F0904A453A4D641951.roa
File: 004A745EDBB011F0904A453A4D641951.roa (raw, json)
Hash identifier: AdhWoboxvB3fE2Iwxcb6ADucdBfCgNo/P3RvBt247qE=
Subject key identifier: 77:CB:CA:47:0E:AD:B5:87:FC:7D:9F:5F:DF:4E:81:BE:30:89:11:13
Certificate issuer: /CN=A91BC039/serialNumber=CB6C85E752D569DFCF1DE904C9CBE71E483EF5F2
Certificate serial: 053C
Authority key identifier: CB:6C:85:E7:52:D5:69:DF:CF:1D:E9:04:C9:CB:E7:1E:48:3E:F5:F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2yF51LVad_PHekEycvnHkg-9fI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/004A745EDBB011F0904A453A4D641951.roa
Signing time: Thu 18 Dec 2025 01:22:21 +0000
ROA not before: Thu 18 Dec 2025 01:22:21 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 133120
IP address blocks: 103.40.109.0/24 maxlen: 24
103.80.20.0/23 maxlen: 24
103.243.110.0/24 maxlen: 24
182.161.64.0/23 maxlen: 24
203.31.65.0/24 maxlen: 24
203.55.90.0/24 maxlen: 24
203.55.91.0/24 maxlen: 24
2407:d080::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.crl
rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2yF51LVad_PHekEycvnHkg-9fI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 22:36:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1340 (0x53c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC039, serialNumber=CB6C85E752D569DFCF1DE904C9CBE71E483EF5F2
Validity
Not Before: Dec 18 01:22:21 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6943574d-ce0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b3:5a:3d:9a:fa:bf:65:65:4a:71:bf:40:94:
db:bb:64:d6:e9:60:c2:e9:95:a7:c8:b1:68:19:11:
3f:66:5c:ba:92:c7:80:e1:cf:ea:47:c2:65:a7:5d:
78:d4:fa:12:ed:d4:75:e3:b7:d0:cd:9d:08:f4:90:
7a:9a:9f:8c:8e:96:8e:50:7a:8e:aa:c5:4a:ac:bd:
73:bc:f5:47:44:a3:fa:38:93:da:21:8a:10:10:1b:
7c:10:ec:df:8b:41:38:d9:78:b7:f5:07:f0:77:ff:
c2:32:60:15:16:f7:ae:09:62:8f:25:1d:be:23:9e:
9c:89:32:d7:73:2f:71:a5:0a:4a:27:77:c2:f4:69:
84:60:7e:7d:3a:e8:be:f0:de:a3:af:55:23:cc:39:
2c:c7:a5:0c:2c:11:26:a9:76:72:bd:47:20:66:e7:
3a:3a:d1:da:e1:c8:5e:06:7e:cb:2b:a7:5b:3d:c2:
0d:62:8d:01:6b:0c:b0:2c:1b:e6:8a:b9:a7:d8:7c:
39:68:2c:20:0d:96:a9:e8:d6:a3:f5:b6:dd:b5:b6:
5d:0a:c7:58:0d:57:83:32:f0:9f:80:2e:e9:e0:03:
f3:32:f3:8b:e0:40:86:bd:35:52:88:fa:65:d9:4f:
ce:9b:cd:60:94:34:6b:66:ce:7e:e8:6f:6c:75:8d:
11:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:CB:CA:47:0E:AD:B5:87:FC:7D:9F:5F:DF:4E:81:BE:30:89:11:13
X509v3 Authority Key Identifier:
keyid:CB:6C:85:E7:52:D5:69:DF:CF:1D:E9:04:C9:CB:E7:1E:48:3E:F5:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2yF51LVad_PHekEycvnHkg-9fI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/004A745EDBB011F0904A453A4D641951.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.40.109.0/24
103.80.20.0/23
103.243.110.0/24
182.161.64.0/23
203.31.65.0/24
203.55.90.0/23
IPv6:
2407:d080::/32
Signature Algorithm: sha256WithRSAEncryption
7c:56:3a:26:14:93:a9:25:37:a3:24:5c:2d:ac:93:d4:5c:cc:
30:cf:99:98:d5:29:60:77:9d:c7:8d:6b:95:ed:d5:f5:7d:ec:
72:cb:49:bd:60:2d:63:81:34:6a:50:e3:36:a4:57:76:b8:fd:
ff:f2:1c:c8:82:a2:3b:3a:de:40:42:25:37:e8:00:b1:8b:d7:
7b:37:8c:44:38:df:17:56:0e:1f:f2:6a:b8:a1:a4:fa:ed:f1:
a6:cd:85:0e:84:54:0f:6f:a2:83:83:a5:c1:0d:71:ae:8f:9f:
de:23:36:dc:67:ed:19:5f:72:72:67:74:fe:aa:45:0c:38:7b:
90:77:aa:62:f3:8d:aa:ed:7c:e7:36:ba:45:a8:82:75:cf:35:
ca:84:fc:d8:6a:b8:fd:9e:48:44:5a:65:c8:b9:35:31:85:c8:
08:df:61:47:7b:e5:42:7e:72:d7:58:52:06:45:26:4d:d6:56:
58:3a:a3:f8:09:01:50:b2:06:6a:4d:d0:6e:19:32:fc:57:9f:
99:e3:b6:0c:dd:18:d6:f2:d9:34:21:51:98:61:55:59:ab:e9:
d4:7d:0c:75:5a:91:0f:91:f4:44:4e:3b:37:9b:c0:24:89:38:
62:ed:08:82:4d:55:5b:38:48:29:b9:e5:94:51:4a:9b:3d:ea:
0d:a6:28:cc
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgICBTwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkMwMzkxMTAvBgNVBAUTKENCNkM4NUU3NTJENTY5REZDRjFERTkwNEM5Q0JFNzFF
NDgzRUY1RjIwHhcNMjUxMjE4MDEyMjIxWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTQzNTc0ZC1jZTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5LNaPZr6v2VlSnG/QJTbu2TW6WDC6ZWnyLFoGRE/Zly6kseA4c/qR8Jlp114
1PoS7dR147fQzZ0I9JB6mp+MjpaOUHqOqsVKrL1zvPVHRKP6OJPaIYoQEBt8EOzf
i0E42Xi39Qfwd//CMmAVFveuCWKPJR2+I56ciTLXcy9xpQpKJ3fC9GmEYH59Oui+
8N6jr1UjzDksx6UMLBEmqXZyvUcgZuc6OtHa4cheBn7LK6dbPcINYo0BawywLBvm
irmn2Hw5aCwgDZap6Naj9bbdtbZdCsdYDVeDMvCfgC7p4APzMvOL4ECGvTVSiPpl
2U/Om81glDRrZs5+6G9sdY0RpwIDAQABo4ICwjCCAr4wHQYDVR0OBBYEFHfLykcO
rbWH/H2fX99Ogb4wiRETMB8GA1UdIwQYMBaAFMtshedS1Wnfzx3pBMnL5x5IPvXy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzAzOS9CQjUzMjNFODI1
QzIxMUVDQjQ5OUQxNThDNEY5QUUwMi95MnlGNTFMVmFkX1BIZWtFeWN2bkhrZy05
ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3kyeUY1MUxWYWRfUEhla0V5Y3ZuSGtnLTlmSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkMwMzkvQkI1MzIzRTgyNUMyMTFFQ0I0OTlEMTU4QzRGOUFFMDIvMDA0QTc0NUVE
QkIwMTFGMDkwNEE0NTNBNEQ2NDE5NTEucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTAYIKwYBBQUHAQcBAf8E
PTA7MCoEAgABMCQDBABnKG0DBAFnUBQDBABn824DBAG2oUADBADLH0EDBAHLN1ow
DQQCAAIwBwMFACQH0IAwDQYJKoZIhvcNAQELBQADggEBAHxWOiYUk6klN6MkXC2s
k9RczDDPmZjVKWB3nceNa5Xt1fV97HLLSb1gLWOBNGpQ4zakV3a4/f/yHMiCojs6
3kBCJTfoALGL13s3jEQ43xdWDh/yarihpPrt8abNhQ6EVA9vooODpcENca6Pn94j
Ntxn7RlfcnJndP6qRQw4e5B3qmLzjartfOc2ukWognXPNcqE/NhquP2eSERaZci5
NTGFyAjfYUd75UJ+ctdYUgZFJk3WVlg6o/gJAVCyBmpN0G4ZMvxXn5njtgzdGNby
2TQhUZhhVVmr6dR9DHVakQ+R9EROOzebwCSJOGLtCIJNVVs4SCm55ZRRSps96g2m
KMw=
-----END CERTIFICATE-----
Generated at Wed Dec 24 22:55:13 2025 by rpki-client