This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/C6EC548E5FB811F094135B2FC4F9AE02.roa
File: C6EC548E5FB811F094135B2FC4F9AE02.roa (raw, json)
Hash identifier: frUV51xgwJHDP9sfI313TvVwPhZXKfHwjiLygmgb5q4=
Subject key identifier: F5:35:75:CF:E2:8D:1D:AD:1A:65:93:A8:83:C9:D7:EC:93:15:EE:35
Certificate issuer: /CN=A91CC0C9/serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620
Certificate serial: 8F
Authority key identifier: 47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/C6EC548E5FB811F094135B2FC4F9AE02.roa
Signing time: Sun 11 Jan 2026 06:24:47 +0000
ROA not before: Sun 11 Jan 2026 06:24:47 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 20118
IP address blocks: 103.43.70.0/24 maxlen: 24
103.43.71.0/24 maxlen: 24
103.82.142.0/24 maxlen: 24
103.82.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl
rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 06:07:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143 (0x8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC0C9, serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620
Validity
Not Before: Jan 11 06:24:47 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6963422f-eb30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a5:5f:ad:4f:13:32:b9:9a:65:61:b8:85:0b:
3b:84:5c:cd:ac:42:cd:3a:33:77:82:84:51:02:6f:
18:0a:f0:4d:b7:02:17:36:92:66:1b:ae:ae:d1:62:
13:1d:74:44:f2:85:e7:22:c3:1b:79:66:a6:0a:27:
5b:c5:d2:44:b2:bd:d3:9f:74:9a:d4:79:dc:80:3b:
b1:33:50:39:98:1e:9c:e6:57:3c:48:1a:1e:62:29:
50:4f:63:eb:1b:7b:af:b8:15:59:fd:a2:bc:14:f3:
b8:08:85:98:66:00:31:9e:79:65:2f:6d:b8:b1:1b:
00:ca:00:16:36:68:12:db:c3:24:96:6f:24:c0:3e:
4e:d1:c4:fb:d6:8d:79:06:dd:b8:1d:8c:b7:10:a7:
ea:46:47:5c:ab:ba:bd:d9:0e:31:41:6c:70:de:98:
b6:d6:68:a2:d4:fc:08:b3:5d:f5:6c:83:1a:fe:64:
0f:19:66:05:47:9c:e4:19:63:89:f9:56:87:16:4d:
da:fe:2a:3d:03:e3:73:08:e3:83:01:f4:57:c3:a2:
28:83:c9:1c:c0:35:2a:4b:f0:15:a1:2a:35:27:e9:
13:41:02:aa:3b:45:c9:be:77:e7:80:f0:be:47:c6:
f7:7e:95:f7:d4:cc:ac:86:85:f1:24:95:3d:69:20:
6a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:35:75:CF:E2:8D:1D:AD:1A:65:93:A8:83:C9:D7:EC:93:15:EE:35
X509v3 Authority Key Identifier:
keyid:47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/C6EC548E5FB811F094135B2FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.43.70.0/23
103.82.142.0/23
Signature Algorithm: sha256WithRSAEncryption
94:c3:15:44:85:27:a9:68:6e:be:1c:0c:67:29:bb:2f:ed:f8:
7b:fd:90:86:94:89:a3:17:3c:b4:14:71:de:ac:68:e4:ef:80:
1a:0f:e8:99:21:ae:bd:ba:98:0c:76:56:c6:1d:eb:de:ef:ad:
ee:c4:a9:60:5c:a4:33:5a:cc:34:a0:e4:68:70:d1:6e:9b:f9:
3c:30:d2:d4:1d:87:75:93:d5:69:f2:26:1c:da:e4:d6:c3:8a:
9a:4d:ee:5e:03:86:4e:14:83:7d:fc:8f:25:2c:cc:56:f4:ba:
a4:a4:bc:72:68:0f:00:05:91:f4:35:d0:d9:b6:dc:3c:8e:4b:
fb:5d:06:28:aa:e4:ee:68:8a:17:72:aa:d8:12:05:7c:f5:a9:
d1:70:8f:ba:e0:21:57:67:2c:4a:8a:f7:85:79:d0:63:d9:31:
ec:8f:64:e6:de:ba:2b:86:e7:16:07:84:1b:c2:86:8a:47:2c:
75:7e:9e:5e:fb:0e:01:4c:8b:5a:30:5d:82:50:d1:1a:64:07:
09:a0:0b:80:fa:e3:9a:17:9e:db:03:3b:fb:df:56:55:4d:f1:
50:c3:d8:af:ea:5c:3e:e1:1e:de:10:06:7a:83:78:fd:20:31:
c6:83:18:c2:c1:83:1e:3c:ef:39:85:8e:37:27:6f:8b:82:55:
27:01:db:68
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
Q0MwQzkxMTAvBgNVBAUTKDQ3QjU3N0I5QzhBQkUyQzM2MDBDNUI0RTc5M0ZGNEQ0
N0I2NTA2MjAwHhcNMjYwMTExMDYyNDQ3WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTYzNDIyZi1lYjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlKVfrU8TMrmaZWG4hQs7hFzNrELNOjN3goRRAm8YCvBNtwIXNpJmG66u0WIT
HXRE8oXnIsMbeWamCidbxdJEsr3Tn3Sa1HncgDuxM1A5mB6c5lc8SBoeYilQT2Pr
G3uvuBVZ/aK8FPO4CIWYZgAxnnllL224sRsAygAWNmgS28Mklm8kwD5O0cT71o15
Bt24HYy3EKfqRkdcq7q92Q4xQWxw3pi21mii1PwIs131bIMa/mQPGWYFR5zkGWOJ
+VaHFk3a/io9A+NzCOODAfRXw6Iog8kcwDUqS/AVoSo1J+kTQQKqO0XJvnfngPC+
R8b3fpX31MyshoXxJJU9aSBqGwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFPU1dc/i
jR2tGmWTqIPJ1+yTFe41MB8GA1UdIwQYMBaAFEe1d7nIq+LDYAxbTnk/9NR7ZQYg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzBDOS9DNURBQkVFQTVG
QjQxMUYwODIwMzQ0N0RDNEY5QUUwMi9SN1YzdWNpcjRzTmdERnRPZVRfMDFIdGxC
aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1I3VjN1Y2lyNHNOZ0RGdE9lVF8wMUh0bEJpQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0MwQzkvQzVEQUJFRUE1RkI0MTFGMDgyMDM0NDdEQzRGOUFFMDIvQzZFQzU0OEU1
RkI4MTFGMDk0MTM1QjJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAFnK0YDBAFnUo4wDQYJKoZIhvcNAQELBQADggEBAJTDFUSF
J6lobr4cDGcpuy/t+Hv9kIaUiaMXPLQUcd6saOTvgBoP6Jkhrr26mAx2VsYd697v
re7EqWBcpDNazDSg5Ghw0W6b+Tww0tQdh3WT1WnyJhza5NbDippN7l4Dhk4Ug338
jyUszFb0uqSkvHJoDwAFkfQ10Nm23DyOS/tdBiiq5O5oihdyqtgSBXz1qdFwj7rg
IVdnLEqK94V50GPZMeyPZObeuiuG5xYHhBvChopHLHV+nl77DgFMi1owXYJQ0Rpk
BwmgC4D645oXntsDO/vfVlVN8VDD2K/qXD7hHt4QBnqDeP0gMcaDGMLBgx487zmF
jjcnb4uCVScB22g=
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:05:57 2026 by rpki-client