This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4A20B66AA5FF11F08004B67CC4F9AE02.roa
File: 4A20B66AA5FF11F08004B67CC4F9AE02.roa (raw, json)
Hash identifier: nB1Fc0QMLbcF1uaFMm0p596y3EBZJfglMzsBOCS68V4=
Subject key identifier: A9:5B:E7:83:0E:A1:6D:8E:4B:68:DF:1A:FE:AF:AE:62:D5:6D:09:86
Certificate issuer: /CN=A91E3493/serialNumber=E144A6CCA56AA9312891284D262770624EFCE2EC
Certificate serial: 0504
Authority key identifier: E1:44:A6:CC:A5:6A:A9:31:28:91:28:4D:26:27:70:62:4E:FC:E2:EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4A20B66AA5FF11F08004B67CC4F9AE02.roa
Signing time: Tue 18 Nov 2025 22:44:57 +0000
ROA not before: Tue 18 Nov 2025 22:44:57 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 53766
IP address blocks: 103.48.252.0/22 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.crl
rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 22:33:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1284 (0x504)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3493, serialNumber=E144A6CCA56AA9312891284D262770624EFCE2EC
Validity
Not Before: Nov 18 22:44:57 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=691cf6e9-7fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1f:95:ac:79:2b:6c:77:7f:c5:02:05:a7:5d:
83:da:2e:4d:fd:51:2c:2f:cd:ba:e7:4b:e6:a2:60:
46:86:cf:fb:70:fe:18:62:4d:60:b3:f8:fe:cb:73:
87:29:2a:3f:a2:4e:68:b4:4a:57:8a:97:81:05:d4:
54:9e:3b:09:08:d3:7e:6b:ed:e8:fa:f8:d8:f3:af:
cf:f8:ab:1a:83:f6:3c:4f:51:cf:6c:60:2c:18:e2:
ab:37:7b:bb:60:1b:38:6c:42:3f:fb:44:7b:28:1d:
4a:4c:97:bf:0b:9f:0c:1c:af:7e:9e:22:ee:b3:c2:
7b:98:0c:3d:b2:0d:e8:4d:c8:e3:b2:57:3b:00:0e:
0e:d3:07:cf:e1:3c:ea:94:5e:55:d0:5a:e5:9e:2b:
16:a2:9d:fa:29:df:82:d5:83:92:77:b7:63:84:a8:
fc:ba:60:44:71:c0:36:fb:ef:ca:eb:31:c5:81:55:
97:cc:17:4c:cb:74:35:02:0d:06:94:9c:7d:2f:0c:
4d:d2:5f:80:17:1a:39:d6:72:d1:60:fd:51:e7:07:
43:97:6e:5b:f3:d8:15:b8:5a:4c:87:c5:b6:b0:bf:
f3:81:76:5b:09:08:96:6e:34:e7:57:9e:19:47:f1:
25:61:37:35:82:5c:f7:b2:0e:78:70:6d:53:11:8a:
d9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:5B:E7:83:0E:A1:6D:8E:4B:68:DF:1A:FE:AF:AE:62:D5:6D:09:86
X509v3 Authority Key Identifier:
keyid:E1:44:A6:CC:A5:6A:A9:31:28:91:28:4D:26:27:70:62:4E:FC:E2:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4A20B66AA5FF11F08004B67CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.48.252.0/22
Signature Algorithm: sha256WithRSAEncryption
35:85:7c:6c:55:99:75:b5:cf:65:01:f5:4b:e6:1c:cc:c3:d6:
7d:16:d4:55:40:03:9b:3c:f4:c9:c8:23:3e:ee:7f:5d:ae:7a:
59:6f:70:86:83:0c:95:42:08:16:51:90:0c:a7:f2:0e:28:75:
61:9a:ff:19:a2:5f:31:72:ba:21:2a:32:a5:68:45:f8:7a:a3:
0d:8a:19:f2:2a:82:19:fc:e4:f1:eb:34:85:75:99:e0:48:0f:
0d:6a:1c:71:9e:44:d8:e1:df:de:8e:b0:ad:ad:18:39:3e:7b:
b5:72:4f:2b:2e:3b:2a:69:31:2e:ca:54:09:4b:61:97:c5:2b:
81:55:32:7b:94:62:d3:5f:1f:7a:f2:64:41:fd:77:8a:93:6a:
07:80:7c:50:91:a1:52:e0:61:ee:e1:5c:f1:9c:f7:dc:73:ea:
0b:6c:8b:46:99:bf:4f:d8:8b:c5:c5:14:3b:5a:a4:60:63:2f:
17:15:b5:8a:cb:d4:a1:2d:1d:82:06:63:4c:84:f6:bd:c2:f9:
44:99:58:82:7c:81:fc:09:ee:84:ef:5a:d4:fc:2c:c4:60:37:
3c:5e:9f:c3:19:23:5e:20:16:56:bd:f8:f7:42:b9:8d:07:e4:
8f:ba:55:4d:53:c1:19:61:80:91:50:53:ad:85:4e:d2:d4:a8:
86:ca:fd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:31:54 2025 by rpki-client