This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/72F52C962AF511EA8C989441C4F9AE02.roa
File: 72F52C962AF511EA8C989441C4F9AE02.roa (raw, json)
Hash identifier: NQK2jP5eRyYwsuTuPQtjKV7k3gO8QkcM0nqIbV3IUnI=
Subject key identifier: 0E:22:A4:FD:11:6F:32:96:AC:5E:61:70:7A:23:07:87:5B:A8:27:3B
Certificate issuer: /CN=A91F4E89/serialNumber=0DFD801EE96622ED17DF55D7AAA64C71EFF9B7BD
Certificate serial: 0BEA
Authority key identifier: 0D:FD:80:1E:E9:66:22:ED:17:DF:55:D7:AA:A6:4C:71:EF:F9:B7:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Df2AHulmIu0X31XXqqZMce_5t70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/72F52C962AF511EA8C989441C4F9AE02.roa
Signing time: Sun 14 Dec 2025 18:35:37 +0000
ROA not before: Sun 14 Dec 2025 18:35:37 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 139813
IP address blocks: 103.145.134.0/24 maxlen: 24
103.145.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.crl
rsync://rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Df2AHulmIu0X31XXqqZMce_5t70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 18:24:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3050 (0xbea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4E89, serialNumber=0DFD801EE96622ED17DF55D7AAA64C71EFF9B7BD
Validity
Not Before: Dec 14 18:35:37 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=693f0379-832f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:84:f9:aa:87:6c:f8:d3:83:df:6e:81:12:4c:
39:8f:22:7f:b5:51:43:a2:2b:d6:b9:ac:74:e7:82:
53:60:b2:f3:2a:32:63:72:3a:86:01:0a:2b:69:f5:
87:6d:7c:38:eb:0b:90:a4:cf:27:09:32:10:dc:87:
2b:c4:6a:9c:34:b9:f2:d5:24:fd:8c:39:32:1a:f5:
ec:80:64:ee:0e:11:f2:1c:d9:02:3e:65:1c:dd:0f:
37:58:72:ab:cf:94:19:63:3c:61:15:62:d7:19:86:
9f:13:1d:cd:57:d8:f2:f0:6e:e4:c7:2a:d1:a6:5d:
07:73:0e:fa:fb:fc:b9:86:70:cf:b7:07:d6:4f:46:
ee:3a:3c:35:b2:4e:7b:17:dd:28:d6:98:1e:11:e1:
03:a5:f8:3d:08:79:07:60:97:16:9a:1b:fa:63:f5:
48:18:89:c0:63:c6:c9:1f:b2:dc:4b:13:b1:87:1a:
97:1d:57:80:b1:7a:0b:9f:c9:0b:a5:d3:73:f6:1e:
94:61:2c:62:65:6c:6c:bb:99:07:b9:d0:e2:eb:69:
e5:55:80:64:4c:01:fe:43:cd:09:23:90:35:2d:85:
c8:37:e8:14:5b:f2:a1:9e:e0:28:20:f5:64:a5:4f:
71:c0:01:2c:f0:1e:d6:7b:6e:29:7c:6b:e6:13:97:
2b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:22:A4:FD:11:6F:32:96:AC:5E:61:70:7A:23:07:87:5B:A8:27:3B
X509v3 Authority Key Identifier:
keyid:0D:FD:80:1E:E9:66:22:ED:17:DF:55:D7:AA:A6:4C:71:EF:F9:B7:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Df2AHulmIu0X31XXqqZMce_5t70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/72F52C962AF511EA8C989441C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.145.134.0/23
Signature Algorithm: sha256WithRSAEncryption
72:5c:54:08:50:4e:96:73:9b:57:24:a9:7e:a9:9e:fe:7e:31:
d6:35:06:d4:61:fa:ca:5c:9d:98:c9:83:1c:b7:67:b3:36:4e:
b6:ac:18:45:11:e0:e4:c1:b0:8c:e1:35:03:f3:02:ec:88:a0:
3e:25:fe:08:be:6c:f5:34:b5:72:df:30:ba:c5:10:9f:97:99:
72:c1:96:57:6d:12:00:cc:e2:dc:50:dd:af:1f:27:ad:4e:72:
24:42:c6:ea:96:d0:71:a0:a1:64:63:27:ef:33:03:d0:a3:32:
7c:3d:cd:bb:9f:06:7e:73:f0:1f:74:c7:be:e8:41:f6:1e:7d:
28:fb:dc:44:5a:c4:0b:3a:d6:98:d6:ef:d5:10:e4:89:da:d6:
88:5f:b4:5b:53:c7:c2:70:30:6b:1d:27:64:c0:58:2e:11:d4:
fe:20:fd:ab:48:f3:1d:be:b7:da:5d:40:bf:8a:3e:19:f0:a3:
24:be:7f:4d:25:46:a3:5e:0b:da:46:4c:9d:83:0f:b2:8d:7d:
39:9e:02:a2:60:01:3d:4b:10:08:b3:f8:df:1c:6b:5e:79:54:
5c:27:fe:7c:b9:60:c1:39:d1:0a:e2:d6:2b:1a:6a:a5:1a:f4:
56:b1:9c:f8:6c:c2:6d:5a:98:40:2b:41:24:77:8a:e7:fb:4d:
a3:48:50:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 07:56:06 2025 by rpki-client