This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/C6811EDA5FB811F094135B2FC4F9AE02.roa
File: C6811EDA5FB811F094135B2FC4F9AE02.roa (raw, json)
Hash identifier: 8/V2sHjr42e5N/lR0CoOJsr9Br+b2FymeTwakMM19HI=
Subject key identifier: C6:E6:97:68:98:F5:48:D3:ED:A3:57:43:97:77:C8:37:7D:60:47:91
Certificate issuer: /CN=A91CC0C9/serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620
Certificate serial: 95
Authority key identifier: 47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/C6811EDA5FB811F094135B2FC4F9AE02.roa
Signing time: Sun 18 Jan 2026 17:55:00 +0000
ROA not before: Sun 18 Jan 2026 17:55:00 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 136209
IP address blocks: 103.43.70.0/24 maxlen: 24
103.43.71.0/24 maxlen: 24
103.50.91.0/24 maxlen: 24
103.82.141.0/24 maxlen: 24
103.82.142.0/24 maxlen: 24
103.82.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl
rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 06:07:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149 (0x95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC0C9, serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620
Validity
Not Before: Jan 18 17:55:00 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=696d1e74-97d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c7:89:af:d0:63:b4:b7:2a:46:0b:39:1c:e5:
67:12:77:12:4a:ee:fd:66:b2:f3:53:ad:2b:f7:03:
a7:42:9c:86:24:60:ce:b5:19:7c:2c:7e:97:56:3c:
8d:75:50:27:5f:40:c0:34:61:0a:5a:44:83:af:f2:
04:1b:1c:0d:15:14:55:71:ff:b9:fb:d6:1a:55:3d:
e0:8e:00:b2:0f:28:7c:7c:45:39:93:0d:4c:69:ce:
c0:b6:29:22:be:fc:af:8f:f6:d2:e7:6d:95:3b:07:
9d:75:12:09:43:aa:e8:ce:d6:ea:01:4f:13:10:1a:
51:a7:a8:0a:ab:95:32:bc:b1:f7:c2:26:32:1c:33:
66:2d:41:cc:31:39:e3:00:85:95:86:f4:2a:6b:91:
48:6f:a1:b1:57:cc:a7:6a:5c:28:19:a5:51:51:43:
6c:71:40:06:12:69:bb:02:ae:ac:e1:6d:21:11:21:
75:f5:15:6f:8b:02:01:51:d9:97:47:0d:b1:f4:c5:
85:1c:dc:da:48:29:32:ff:36:ed:73:90:35:83:05:
78:2b:32:95:e4:33:6e:0d:ed:22:1b:35:75:85:c5:
e5:e5:4d:c5:26:45:4b:f7:80:a9:7d:d7:74:7a:e4:
6e:41:71:c5:d7:37:fa:a0:ce:fd:2c:b1:98:63:36:
6a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E6:97:68:98:F5:48:D3:ED:A3:57:43:97:77:C8:37:7D:60:47:91
X509v3 Authority Key Identifier:
keyid:47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/C6811EDA5FB811F094135B2FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.43.70.0/23
103.50.91.0/24
103.82.141.0-103.82.143.255
Signature Algorithm: sha256WithRSAEncryption
77:85:58:1b:b6:43:49:0e:56:66:e9:50:51:42:07:eb:2a:2a:
ea:b9:ce:e8:63:52:4f:8b:a3:c9:63:68:58:0a:da:84:de:89:
f1:e2:aa:91:5e:f6:82:1d:bc:5d:a9:93:7a:e3:e1:7a:1e:6e:
49:d7:f4:88:42:6d:b3:eb:e4:e5:b0:83:10:56:f6:5d:ff:c1:
d5:8a:62:40:72:02:94:86:0a:7e:b2:22:8f:84:26:6d:c5:e4:
1f:e3:a1:59:24:9a:0e:fe:08:39:c0:0d:13:86:04:f5:1b:7b:
43:4c:fd:7e:e0:24:98:fe:90:85:76:8a:2f:c7:6a:2b:1c:e0:
7a:0d:3b:a3:af:1b:aa:01:ed:30:99:fa:e6:43:22:20:12:8f:
a3:85:6f:80:2d:6d:0f:8b:58:45:00:49:56:1b:44:a9:b5:10:
e0:a5:08:14:7f:df:11:be:ce:86:f3:60:cb:b0:dd:86:8d:62:
e7:75:56:d3:b6:d8:e4:c7:50:ea:81:7b:1a:2a:46:83:2c:e9:
46:8b:b1:15:fe:76:fe:0f:2f:a1:78:e8:53:6c:6b:36:64:40:
9c:fe:04:6c:f0:6f:66:67:79:33:5e:25:00:53:15:c3:87:2f:
3c:57:bb:90:b1:57:be:fa:7c:91:2c:ab:eb:91:db:5b:33:74:
42:2c:a8:2a
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
Q0MwQzkxMTAvBgNVBAUTKDQ3QjU3N0I5QzhBQkUyQzM2MDBDNUI0RTc5M0ZGNEQ0
N0I2NTA2MjAwHhcNMjYwMTE4MTc1NTAwWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTZkMWU3NC05N2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqMeJr9BjtLcqRgs5HOVnEncSSu79ZrLzU60r9wOnQpyGJGDOtRl8LH6XVjyN
dVAnX0DANGEKWkSDr/IEGxwNFRRVcf+5+9YaVT3gjgCyDyh8fEU5kw1Mac7Atiki
vvyvj/bS522VOweddRIJQ6roztbqAU8TEBpRp6gKq5UyvLH3wiYyHDNmLUHMMTnj
AIWVhvQqa5FIb6GxV8ynalwoGaVRUUNscUAGEmm7Aq6s4W0hESF19RVviwIBUdmX
Rw2x9MWFHNzaSCky/zbtc5A1gwV4KzKV5DNuDe0iGzV1hcXl5U3FJkVL94Cpfdd0
euRuQXHF1zf6oM79LLGYYzZqfQIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFMbml2iY
9UjT7aNXQ5d3yDd9YEeRMB8GA1UdIwQYMBaAFEe1d7nIq+LDYAxbTnk/9NR7ZQYg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzBDOS9DNURBQkVFQTVG
QjQxMUYwODIwMzQ0N0RDNEY5QUUwMi9SN1YzdWNpcjRzTmdERnRPZVRfMDFIdGxC
aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1I3VjN1Y2lyNHNOZ0RGdE9lVF8wMUh0bEJpQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0MwQzkvQzVEQUJFRUE1RkI0MTFGMDgyMDM0NDdEQzRGOUFFMDIvQzY4MTFFREE1
RkI4MTFGMDk0MTM1QjJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMwYIKwYBBQUHAQcBAf8E
JDAiMCAEAgABMBoDBAFnK0YDBABnMlswDAMEAGdSjQMEBGdSgDANBgkqhkiG9w0B
AQsFAAOCAQEAd4VYG7ZDSQ5WZulQUUIH6yoq6rnO6GNST4ujyWNoWArahN6J8eKq
kV72gh28XamTeuPheh5uSdf0iEJts+vk5bCDEFb2Xf/B1YpiQHIClIYKfrIij4Qm
bcXkH+OhWSSaDv4IOcANE4YE9Rt7Q0z9fuAkmP6QhXaKL8dqKxzgeg07o68bqgHt
MJn65kMiIBKPo4VvgC1tD4tYRQBJVhtEqbUQ4KUIFH/fEb7OhvNgy7Ddho1i53VW
07bY5MdQ6oF7GipGgyzpRouxFf52/g8voXjoU2xrNmRAnP4EbPBvZmd5M14lAFMV
w4cvPFe7kLFXvvp8kSyr65HbWzN0QiyoKg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:49:07 2026 by rpki-client