This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/36B587404B0F11F0A2359B4EC4F9AE02.roa
File: 36B587404B0F11F0A2359B4EC4F9AE02.roa (raw, json)
Hash identifier: 0tAJU23FvpmwHToSwKHDbcdyjTNi9HpIYl7MTwLrwkw=
Subject key identifier: 6D:0E:AB:EE:B3:14:B5:5F:3F:78:9A:04:03:D9:A3:3D:93:2C:6F:91
Certificate issuer: /CN=A91C5CA9/serialNumber=55DD6C1BF1C447DF3CC8640D1112A96ACAE1F80C
Certificate serial: 5D
Authority key identifier: 55:DD:6C:1B:F1:C4:47:DF:3C:C8:64:0D:11:12:A9:6A:CA:E1:F8:0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd1sG_HER988yGQNERKpasrh-Aw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/36B587404B0F11F0A2359B4EC4F9AE02.roa
Signing time: Tue 09 Dec 2025 05:14:23 +0000
ROA not before: Tue 09 Dec 2025 05:14:23 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 135672
IP address blocks: 103.78.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.crl
rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd1sG_HER988yGQNERKpasrh-Aw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 05:56:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93 (0x5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5CA9, serialNumber=55DD6C1BF1C447DF3CC8640D1112A96ACAE1F80C
Validity
Not Before: Dec 9 05:14:23 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6937b02f-522f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:52:a6:48:da:e5:16:c4:69:80:2c:72:43:a6:
04:32:69:1f:e9:22:b8:b3:48:5d:a6:40:42:a1:ab:
d7:05:5f:52:f8:73:e5:9d:32:d0:3d:44:d4:a0:3c:
14:1d:9e:07:bb:e1:1c:97:aa:b0:bc:5a:59:09:ed:
66:3c:41:ea:42:0c:55:7b:6b:df:5e:33:83:d4:da:
53:1c:06:9e:81:5b:84:c2:84:bd:73:a1:98:71:67:
db:c6:ee:80:d4:01:0f:c0:81:3b:81:07:d0:89:2e:
51:17:7d:f7:18:d7:38:f9:fd:c7:0a:ad:fa:a2:a3:
f1:c0:ff:2a:48:ae:0f:90:f2:1e:a9:db:2c:93:8a:
75:d4:05:46:00:26:be:ae:a9:16:33:07:39:98:4c:
81:e6:a5:93:24:fc:a8:06:61:c3:de:7f:e4:09:a8:
3c:a6:78:e0:9d:1b:81:9f:21:a6:79:47:e1:6d:4b:
ad:b5:28:d3:aa:bf:a3:aa:47:0f:a9:ec:9c:66:70:
b9:09:6b:fa:8f:ea:5e:36:e1:66:a6:ad:c7:f1:5f:
f1:b5:36:49:6f:5f:ed:67:bd:79:0a:3e:37:71:40:
3e:06:d9:3f:9c:d4:ad:91:36:49:1f:eb:33:f1:ca:
39:99:73:fd:4c:0d:4b:9d:be:0a:57:ea:81:c1:4b:
c0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:0E:AB:EE:B3:14:B5:5F:3F:78:9A:04:03:D9:A3:3D:93:2C:6F:91
X509v3 Authority Key Identifier:
keyid:55:DD:6C:1B:F1:C4:47:DF:3C:C8:64:0D:11:12:A9:6A:CA:E1:F8:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd1sG_HER988yGQNERKpasrh-Aw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/36B587404B0F11F0A2359B4EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.78.153.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:44:fa:cf:dd:76:a5:b5:e7:3e:11:0f:2b:82:23:8a:74:d0:
79:8f:8a:84:5e:78:4f:64:fe:66:9e:88:b4:ee:24:26:6e:85:
75:63:bf:fb:0c:fc:33:1e:a1:67:58:0f:5b:93:57:97:ee:2b:
f9:dc:36:48:cf:ad:8e:1e:3a:9f:b0:da:74:e5:23:72:91:b3:
dd:d1:de:58:26:8d:0e:e1:67:17:2d:04:7f:e3:e2:23:2d:42:
55:a6:c9:bb:30:14:fb:f0:8b:bb:0b:b0:49:bd:f9:92:c5:da:
68:1e:90:ca:73:55:17:36:60:20:28:46:65:4b:e9:10:e6:79:
60:3b:62:41:5c:50:db:2a:c8:1f:78:f5:0f:5b:be:61:82:08:
e7:48:df:d5:dd:02:ce:ee:42:6a:9a:0d:d2:b6:d0:97:3c:78:
29:c1:f4:02:9d:af:29:aa:61:b4:a2:60:17:8e:0b:ec:ef:81:
95:37:5c:a6:6b:7c:6f:c3:1f:be:d8:86:85:ff:cf:a3:a8:8b:
37:45:09:52:61:2f:9a:97:4e:18:4c:2b:56:54:a7:aa:29:29:
74:c7:d4:c6:7c:5d:05:e3:b6:e8:dd:c6:2c:1e:70:a3:5d:5a:
37:d4:58:8e:64:ec:24:b7:fb:4c:43:31:ec:c1:d0:c7:c3:c7:
2f:00:d6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 17:39:56 2025 by rpki-client