This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/6B106380A53111F0A0F3DA52C4F9AE02.roa
File: 6B106380A53111F0A0F3DA52C4F9AE02.roa (raw, json)
Hash identifier: twWAVRWCyGBu4AJbenJKIlIqQ97WQNS4qNYxUhMYIRg=
Subject key identifier: 25:9D:EC:17:37:E9:BE:AC:0C:BA:81:B0:6E:BB:0B:1D:0F:A7:AF:C6
Certificate issuer: /CN=A91E3493/serialNumber=E144A6CCA56AA9312891284D262770624EFCE2EC
Certificate serial: 0503
Authority key identifier: E1:44:A6:CC:A5:6A:A9:31:28:91:28:4D:26:27:70:62:4E:FC:E2:EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/6B106380A53111F0A0F3DA52C4F9AE02.roa
Signing time: Tue 18 Nov 2025 22:44:57 +0000
ROA not before: Tue 18 Nov 2025 22:44:57 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 147304
IP address blocks: 103.174.170.0/23 maxlen: 24
2001:df7:cd80::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.crl
rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 22:33:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1283 (0x503)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3493, serialNumber=E144A6CCA56AA9312891284D262770624EFCE2EC
Validity
Not Before: Nov 18 22:44:57 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=691cf6e8-4336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:df:bd:b5:6d:d3:d6:4a:5b:b9:43:a7:4c:82:
e8:ff:b6:7f:82:17:ae:25:a6:1e:1c:2f:99:0e:ee:
47:16:0d:70:94:3b:ff:90:0c:a9:dd:2d:62:24:a4:
73:d1:9d:b0:0d:bf:15:66:f9:b2:61:59:ad:6e:a1:
cc:76:40:7e:84:43:c6:4b:f7:76:c0:b7:cf:e8:89:
ac:b7:4c:94:6a:70:c6:dd:8a:b4:05:16:dd:ab:ff:
f6:8f:ef:85:7b:73:a4:98:be:1b:81:f8:34:8b:bb:
4d:a3:a9:60:e2:cb:06:9d:38:f5:a6:f0:0d:61:a5:
ff:32:c3:1b:b1:38:e2:9e:3b:d5:ad:95:3f:78:83:
0c:e4:fa:a5:72:24:69:f5:76:13:a9:49:5e:72:fc:
38:3e:64:8e:24:25:aa:c3:77:2a:c8:b5:73:99:84:
e8:05:a2:dd:14:fe:ce:26:da:ff:39:2b:bf:0d:3e:
36:ed:6d:d8:3b:c5:2c:49:79:09:7b:35:22:97:1b:
2c:c0:d0:8f:12:2a:09:db:9a:ed:4a:0e:f0:26:02:
17:1d:ea:c8:d6:ec:e5:e0:39:c9:7f:da:0a:9f:dd:
01:97:c8:99:c7:cb:a1:da:9a:47:d4:cf:39:c0:26:
cc:0e:ad:25:0f:2d:32:41:dc:64:f4:d9:50:d3:5e:
32:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:9D:EC:17:37:E9:BE:AC:0C:BA:81:B0:6E:BB:0B:1D:0F:A7:AF:C6
X509v3 Authority Key Identifier:
keyid:E1:44:A6:CC:A5:6A:A9:31:28:91:28:4D:26:27:70:62:4E:FC:E2:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/6B106380A53111F0A0F3DA52C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.174.170.0/23
IPv6:
2001:df7:cd80::/47
Signature Algorithm: sha256WithRSAEncryption
52:26:f3:fb:90:55:6b:3d:f9:5e:d0:1c:9b:ec:1a:d0:77:ab:
c0:c4:d6:dd:9f:7e:30:5b:6e:52:a2:60:26:ad:28:ad:ea:7f:
05:50:be:64:66:2f:07:62:72:87:91:2d:c4:06:87:f0:ca:74:
17:b1:26:bf:5d:7e:91:df:0d:ab:73:36:d0:e2:0b:b7:6c:8e:
9a:8b:97:6f:ea:6b:6b:7d:ee:c2:c1:f6:aa:da:70:57:33:0c:
ed:70:73:3d:b9:d7:bd:86:96:99:32:19:78:3e:ee:64:d5:06:
19:bd:40:80:a0:a8:3c:ca:76:e4:20:80:6f:f0:43:4f:a8:46:
2b:e8:a4:b2:23:f6:26:b0:4d:98:65:50:27:67:39:04:c5:b9:
38:a5:b2:2e:78:93:bd:0f:e6:2b:b9:52:76:af:f5:9f:a3:4a:
9d:77:0d:78:18:72:9e:8e:c7:22:df:d3:e1:f0:ce:5a:31:d2:
f5:74:81:e2:62:5b:09:17:1e:88:95:bd:2b:5c:fe:c7:bc:a8:
c1:3f:88:81:0f:ac:3a:65:a4:f5:40:12:53:aa:b0:a4:b2:df:
61:b5:b6:7d:bc:90:39:5e:2d:28:3f:64:92:f0:e4:61:78:eb:
90:82:bb:95:25:e0:66:3f:c7:b8:8b:0c:c7:ce:43:51:af:6b:
19:66:ef:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 18:02:12 2025 by rpki-client