This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/5D3D752CDBEB11F0A1AC385A536F56BC.roa
File: 5D3D752CDBEB11F0A1AC385A536F56BC.roa (raw, json)
Hash identifier: uYeNFOSniBkkb6Cc56Cb53aZvEwuRUlCfEZxR4PFQpI=
Subject key identifier: 71:33:E4:4D:E6:A2:8F:3E:AF:AC:76:2C:F7:30:5D:54:04:06:0D:43
Certificate issuer: /CN=A91E2EF9/serialNumber=94594AAEC6ED66A680A15BFEB5CDA5782D4C2D88
Certificate serial: 0101
Authority key identifier: 94:59:4A:AE:C6:ED:66:A6:80:A1:5B:FE:B5:CD:A5:78:2D:4C:2D:88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/5D3D752CDBEB11F0A1AC385A536F56BC.roa
Signing time: Thu 18 Dec 2025 08:27:18 +0000
ROA not before: Thu 18 Dec 2025 08:27:18 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 152739
IP address blocks: 103.125.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.crl
rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 04:20:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 257 (0x101)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2EF9, serialNumber=94594AAEC6ED66A680A15BFEB5CDA5782D4C2D88
Validity
Not Before: Dec 18 08:27:18 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6943bae5-45e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:23:25:e9:60:46:0c:b4:97:2b:8e:1e:19:d5:
f3:d7:f5:a9:a4:33:3b:c3:3f:13:6c:7a:bb:45:ff:
c3:82:ff:8b:37:78:71:ec:17:d8:0b:7d:22:56:18:
4b:32:ba:e4:49:dc:c4:70:b3:93:fc:23:d0:e3:f0:
94:02:23:90:e7:32:02:81:89:0d:d8:13:03:cb:29:
fc:4a:2f:fd:10:bb:9d:25:f1:c8:50:73:58:21:8d:
1a:ea:68:2f:12:7c:ff:4c:46:ee:fe:66:d0:20:70:
86:96:56:0d:ae:71:cf:88:8d:c0:b4:d7:98:55:05:
27:5e:5d:10:a9:9a:8d:8a:8c:32:cd:13:dd:d3:0c:
07:04:80:1c:92:73:d7:97:cc:5a:67:03:72:98:28:
53:b0:d6:95:8d:51:80:b7:c0:58:4f:8b:02:fd:e2:
c7:da:cf:57:cf:fc:08:87:b8:18:4b:68:a6:bf:85:
c0:70:0c:4b:15:ab:30:cb:5e:84:8d:3f:4c:7b:ee:
d5:ab:c0:a6:a2:61:8e:7b:eb:7c:bc:7f:a8:93:01:
01:3d:99:6a:33:5d:f1:3d:cc:0b:b4:e2:eb:e9:19:
d5:05:8b:68:98:7e:23:15:cd:d3:98:b2:6b:03:b1:
1e:a1:82:b4:f6:07:3e:71:89:7d:a0:c7:36:4b:f9:
67:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:33:E4:4D:E6:A2:8F:3E:AF:AC:76:2C:F7:30:5D:54:04:06:0D:43
X509v3 Authority Key Identifier:
keyid:94:59:4A:AE:C6:ED:66:A6:80:A1:5B:FE:B5:CD:A5:78:2D:4C:2D:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/5D3D752CDBEB11F0A1AC385A536F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.125.254.0/24
Signature Algorithm: sha256WithRSAEncryption
95:32:3f:12:d9:b5:fe:0f:93:51:c2:72:a3:fb:70:b3:f2:f9:
d6:91:f9:2b:79:57:2d:dd:46:eb:e6:df:34:7a:d4:3b:8d:60:
5d:0f:61:2b:cb:e0:3e:f9:16:75:6a:8b:36:cd:4d:02:99:27:
c0:4a:c0:dd:7a:21:b2:30:bb:6c:25:59:e1:dd:ee:d7:d9:d9:
22:48:c6:73:4c:4f:d2:1c:cb:03:93:1e:de:36:6d:8f:3c:32:
65:82:ba:74:4d:f6:b3:bb:35:ea:75:56:21:0a:5f:85:b7:15:
60:b7:25:94:f0:d3:e3:bd:e4:28:33:3d:23:e0:ca:31:6b:80:
85:b7:7f:6a:41:1f:f6:98:46:31:06:f5:4c:d6:bd:9a:5f:a2:
aa:4e:97:1c:d3:45:ea:5a:39:5c:3b:ed:83:da:07:ed:47:ff:
c9:95:fa:a9:db:ec:33:a6:4d:ff:4a:03:27:05:36:1b:ce:2b:
46:88:a5:f4:5d:e6:46:0a:b3:39:5a:88:a7:d0:4d:25:cb:11:
50:21:20:17:b1:0c:5a:05:65:a3:16:9f:58:29:8b:62:bd:0f:
df:b2:a7:8b:d7:cd:11:90:eb:4a:73:e8:f6:08:6c:b6:04:95:
98:02:9f:7a:de:6f:2c:c4:5f:f1:67:24:f8:91:15:d3:f7:06:
e4:de:fc:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:16:21 2025 by rpki-client