This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/E2256F74D97011F0A26925FA9AD3641D.roa
File: E2256F74D97011F0A26925FA9AD3641D.roa (raw, json)
Hash identifier: diBgUHCuWxCsrUKo2z8nkKuYx+/V0PX1Z2jBaelCkhc=
Subject key identifier: 84:3B:ED:F7:A3:3A:92:66:B1:11:A7:7B:07:21:28:9C:2D:B9:38:0D
Certificate issuer: /CN=A91E0D87/serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7
Certificate serial: 059D
Authority key identifier: 72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/E2256F74D97011F0A26925FA9AD3641D.roa
Signing time: Wed 31 Dec 2025 23:19:07 +0000
ROA not before: Wed 31 Dec 2025 23:19:07 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 31715
IP address blocks: 103.204.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl
rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 22:38:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1437 (0x59d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0D87, serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7
Validity
Not Before: Dec 31 23:19:07 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6955af6b-089d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:99:5f:e7:b4:a2:af:09:50:c1:5b:31:51:c3:
82:b8:6a:7e:99:44:93:46:42:ef:8d:58:e0:87:cd:
4b:bd:ae:ad:6f:20:59:2d:e6:3c:5e:75:be:ae:f8:
63:f7:66:c0:c4:0c:c1:ca:f2:19:45:5c:51:fd:86:
2f:4a:7c:cf:3f:03:03:8c:73:a7:b9:f5:78:03:00:
b9:01:b2:25:9b:74:9c:7d:a1:66:61:e9:67:90:52:
b3:d2:a3:3b:f5:11:7f:8e:8b:34:0b:36:af:96:2f:
a1:80:ba:84:c9:ab:38:e4:8d:b8:c3:f7:83:cf:d0:
f5:7f:a8:0f:c8:12:47:f5:40:f3:fb:f2:42:5f:15:
a1:a9:d3:fd:6f:89:b1:95:e0:0f:e8:a0:5d:72:9e:
dd:ae:fb:f1:58:51:8b:57:26:0d:38:f8:42:4f:c9:
0b:49:1b:b7:33:56:ed:b7:f5:08:4e:35:40:1a:86:
16:d6:cc:26:c1:71:cd:4f:5d:9d:70:ee:f9:91:12:
20:0d:fd:78:8c:44:51:09:90:0b:55:0c:27:41:e5:
39:78:b2:64:db:12:94:eb:a3:bd:21:8c:83:3e:92:
02:cd:12:d1:b5:01:b6:79:38:54:38:0c:9b:49:9b:
8f:88:ff:4c:9f:aa:98:00:34:ac:28:a7:c0:c1:48:
cd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:3B:ED:F7:A3:3A:92:66:B1:11:A7:7B:07:21:28:9C:2D:B9:38:0D
X509v3 Authority Key Identifier:
keyid:72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/E2256F74D97011F0A26925FA9AD3641D.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.204.23.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:9e:04:38:89:54:fd:14:e4:0d:b8:d2:ad:8d:3a:e8:78:8d:
2f:5a:2c:2a:35:3d:06:c2:0a:74:9c:31:f6:30:64:e3:19:f8:
69:52:4a:0d:e5:dd:3d:61:09:62:db:70:f5:5f:6a:9f:fe:0b:
87:5c:ad:d4:1e:27:3b:76:30:28:04:f4:52:44:9a:bd:af:40:
5f:fa:88:1f:b4:56:4b:38:1e:46:fb:24:3c:3f:d5:6c:ee:bd:
f5:14:85:f0:56:14:1c:fc:3c:75:b4:79:f4:5a:1b:6e:aa:37:
70:b7:52:01:31:4c:54:a1:ef:a3:ef:8d:be:b7:eb:b6:46:9b:
23:4a:8b:60:ed:4d:dc:17:d0:ef:b7:ae:ef:a6:5b:8b:ed:5e:
92:7c:5b:c4:a2:7a:51:7f:81:c4:78:7f:4f:e8:7d:20:82:6e:
04:d3:4c:d8:4a:af:0a:02:08:4d:cf:d5:e6:bf:ac:75:69:5b:
fb:90:19:00:54:7f:e2:7b:8d:8a:63:42:36:7c:f0:a8:a5:0b:
6b:14:26:28:27:cd:4d:cd:64:25:a6:89:e2:2a:a8:1f:cf:99:
69:38:62:d5:4a:71:ae:d4:82:17:d3:e4:c9:cb:c8:c7:b9:e1:
d9:e1:fa:16:22:0c:dd:89:f0:50:02:42:2e:83:f3:96:d1:99:
3a:a3:ff:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 11:23:53 2026 by rpki-client