This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/AA5D86B2381311EA998E103FC4F9AE02.roa
File: AA5D86B2381311EA998E103FC4F9AE02.roa (raw, json)
Hash identifier: Tom7u2KILmaBR19TjEIpuUPoq7F9nKzmH+Ll43MgfGY=
Subject key identifier: E0:A1:77:06:2A:A0:F9:19:E0:BF:B4:FB:02:ED:FB:4C:C9:D5:3D:3C
Certificate issuer: /CN=A91FD38A/serialNumber=B620A9C4963766CC3C58060694922E9F678811DE
Certificate serial: 0CB3
Authority key identifier: B6:20:A9:C4:96:37:66:CC:3C:58:06:06:94:92:2E:9F:67:88:11:DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/AA5D86B2381311EA998E103FC4F9AE02.roa
Signing time: Thu 18 Dec 2025 18:15:57 +0000
ROA not before: Thu 18 Dec 2025 18:15:57 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 136145
IP address blocks: 103.79.224.0/24 maxlen: 24
103.79.225.0/24 maxlen: 24
103.79.226.0/24 maxlen: 24
103.79.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl
rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 31 Dec 2025 17:58:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3251 (0xcb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD38A, serialNumber=B620A9C4963766CC3C58060694922E9F678811DE
Validity
Not Before: Dec 18 18:15:57 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=694444dd-1223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b7:0f:ce:d2:38:3d:3b:0b:a5:a7:93:53:73:
2b:43:71:8b:6b:2f:b7:06:a1:c9:bb:dd:6c:da:e9:
ad:3e:9d:22:cf:d3:94:6d:e2:62:0a:b4:e5:cc:3f:
77:d1:f5:86:4e:4d:75:6a:b6:14:78:b4:3f:48:fa:
52:8e:64:3b:ac:7b:82:90:45:2b:df:49:45:2b:47:
89:71:00:7f:44:5f:1f:af:86:cb:f2:2d:6d:cc:08:
aa:e5:d7:a0:7a:8b:8b:cb:15:f9:41:d6:16:8c:f3:
1c:8a:a4:47:c2:2f:d3:50:f2:59:4e:30:9b:a4:3e:
12:80:60:ce:22:33:c4:bd:f7:5b:a3:e8:65:8b:74:
7d:d0:6d:2d:d9:2a:9e:dd:e6:d9:52:d8:2c:a6:50:
3a:c7:66:d1:1c:56:c2:df:78:fe:73:1d:6b:ea:e9:
07:34:d3:45:d5:70:a0:27:50:c3:28:fc:7b:03:02:
cd:1b:00:95:e7:2b:c2:2e:5e:c2:03:fe:c3:2d:16:
26:3b:8b:89:f2:32:78:d1:d5:a9:00:09:96:08:31:
e9:d3:03:ab:d9:c5:8f:0d:77:4b:73:5e:07:fe:90:
d5:a6:2a:19:8c:14:8f:cf:1a:03:8d:a6:d5:f8:2b:
31:6d:a9:cb:90:d4:53:f6:65:9d:59:b8:e1:a4:52:
cf:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A1:77:06:2A:A0:F9:19:E0:BF:B4:FB:02:ED:FB:4C:C9:D5:3D:3C
X509v3 Authority Key Identifier:
keyid:B6:20:A9:C4:96:37:66:CC:3C:58:06:06:94:92:2E:9F:67:88:11:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/AA5D86B2381311EA998E103FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.79.224.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:7f:3e:26:11:f3:d0:e0:e5:47:62:c0:97:c7:9a:73:fd:c5:
c9:02:6f:6d:5f:44:2d:83:c2:9d:1c:93:4e:16:79:2d:12:40:
59:b0:dc:b2:79:81:ae:9c:4f:d4:3a:17:b3:87:68:9e:d9:63:
f8:aa:70:6d:56:1f:0f:24:f5:f0:29:8b:aa:5c:00:3c:1f:51:
48:4a:3c:e1:17:5b:d3:bf:2e:51:67:cd:69:e8:bd:17:09:97:
08:b9:d6:c1:46:c4:4c:75:5d:14:0c:f6:60:cd:38:c9:95:b4:
98:49:d7:2e:37:ea:11:17:74:de:5c:af:85:73:bc:f3:58:aa:
e1:c3:da:04:5b:ff:67:21:f7:87:9e:73:ac:67:44:e1:b7:36:
81:aa:a3:28:16:cf:29:74:cb:19:0c:44:56:e7:77:22:fc:0f:
e4:ef:c1:1e:74:d6:33:cc:db:cd:fd:01:b4:1e:76:38:a8:d2:
2d:2a:9c:7e:cf:34:c4:61:7d:5c:14:dc:b0:fe:82:66:5f:e8:
11:04:e4:1c:96:91:c0:65:aa:d1:fa:04:ab:9f:13:42:d3:57:
28:22:da:f0:2c:9c:16:65:7a:5a:1a:61:08:c3:cc:d1:07:12:
4f:ad:72:0a:35:60:9c:7a:9d:3e:96:50:ce:55:10:f0:ae:00:
28:5b:61:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 22:57:38 2025 by rpki-client