This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa
File: 3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa (raw, json)
Hash identifier: SM0+cgtb00YjXMGrcRALmni4Gyl+2LXulcXvQtwP6Xc=
Subject key identifier: 87:1F:37:E4:13:36:44:26:83:5B:A5:44:BC:FF:69:29:0B:34:27:86
Certificate issuer: /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1
Certificate serial: 10A62105B96553DD8E9B9C4C682F0CACB1F03883
Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
Subject info access: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa
Signing time: Tue 27 Jan 2026 12:00:01 +0000
ROA not before: Tue 27 Jan 2026 11:55:01 +0000
ROA not after: Tue 26 Jan 2027 12:00:01 +0000
asID: 45163
IP address blocks: 203.147.108.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl
rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 12:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:a6:21:05:b9:65:53:dd:8e:9b:9c:4c:68:2f:0c:ac:b1:f0:38:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1
Validity
Not Before: Jan 27 11:55:01 2026 GMT
Not After : Jan 26 12:00:01 2027 GMT
Subject: CN=871F37E413364426835BA544BCFF69290B342786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:29:e2:8c:29:1b:42:22:61:c6:c7:01:93:24:
1e:42:6a:bc:6c:a1:d6:36:38:8a:4d:41:84:4f:8e:
aa:cf:c1:79:1b:5d:96:67:5f:6a:9a:48:a9:96:99:
ca:6b:d6:d6:47:eb:85:e7:e6:e2:e9:01:f7:bf:60:
0f:78:12:fe:39:8d:f8:e8:ee:c1:35:bf:14:84:04:
7a:a7:2d:1a:26:74:86:da:fb:da:98:4e:00:4f:0b:
11:ed:98:c3:83:d9:68:27:e6:cb:96:57:4e:09:7a:
2f:1b:cd:b0:c7:9e:7b:4d:79:b8:28:39:c2:f8:bd:
0d:a7:8b:ec:96:e2:35:b8:e9:72:a1:e2:f4:b6:58:
6a:61:b7:6f:e0:b3:31:77:1e:72:58:0c:59:27:58:
82:23:c0:2a:38:c9:9d:f4:6d:0e:94:e0:12:7e:f8:
88:d0:10:dc:12:bf:e7:31:39:d5:d8:0d:ea:33:e9:
3e:bb:71:30:4c:ef:61:59:6d:40:bf:d9:68:2f:9e:
07:25:a4:44:0c:3b:0b:71:02:eb:ab:e6:8e:c0:ad:
d5:8c:5f:17:92:28:75:17:a4:56:0f:e1:7e:4e:80:
b6:3e:4e:82:67:fa:52:d3:37:ad:c5:f8:a1:48:4c:
cf:fc:2a:d7:e4:6b:28:8c:c8:58:a3:03:6f:ea:12:
f2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:1F:37:E4:13:36:44:26:83:5B:A5:44:BC:FF:69:29:0B:34:27:86
X509v3 Authority Key Identifier:
keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.147.108.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:fb:f4:22:ba:a8:de:23:8c:b3:35:98:56:ce:87:60:4e:5b:
49:11:97:a7:c5:76:de:dc:85:00:62:20:a8:02:36:2e:d9:2a:
b2:8f:35:73:41:df:d9:47:61:73:a3:7b:a9:e5:cc:d6:82:00:
6d:63:b7:9d:97:7b:dd:46:34:b6:d0:39:57:af:0a:0f:c4:a5:
2c:6d:24:59:d1:ca:53:0d:8c:e5:d8:32:47:cf:2f:ad:45:41:
df:ab:f9:c0:a7:ed:c9:2a:08:07:cc:c4:d9:cf:88:76:9a:b6:
33:a2:a4:dd:f7:cc:a3:01:65:da:e2:02:60:57:94:d4:bc:0a:
05:b1:c5:b1:96:35:7b:4f:04:89:74:aa:42:24:70:a1:3b:c1:
fd:c8:b2:c5:70:6f:84:f8:fa:fd:a3:2e:86:77:b0:65:5c:14:
4f:48:54:8f:81:42:8e:3a:db:f0:a1:20:6e:47:e2:e2:40:39:
19:64:29:30:e0:24:89:7b:05:e1:66:28:8d:49:1c:17:b4:a7:
74:7d:d0:01:20:93:d1:89:76:fe:89:ef:55:ea:b6:16:21:58:
cb:31:d8:73:04:68:ea:9e:ae:8a:4e:98:dc:7c:e2:53:8c:c6:
52:fb:68:de:73:7c:11:df:12:61:6b:b1:ae:17:2d:bb:0f:39:
67:e7:cd:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIUEKYhBbllU92Om5xMaC8MrLHwOIMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODcyRUQwMDAxMTEwLwYDVQQFEyhDMDkwNkExOUE3
REUzNDlCRkEyQjMyQjNDM0VCNEMyRDE3NzYwQ0UxMB4XDTI2MDEyNzExNTUwMVoX
DTI3MDEyNjEyMDAwMVowMzExMC8GA1UEAxMoODcxRjM3RTQxMzM2NDQyNjgzNUJB
NTQ0QkNGRjY5MjkwQjM0Mjc4NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMwp4owpG0IiYcbHAZMkHkJqvGyh1jY4ik1BhE+Oqs/BeRtdlmdfappIqZaZ
ymvW1kfrhefm4ukB979gD3gS/jmN+OjuwTW/FIQEeqctGiZ0htr72phOAE8LEe2Y
w4PZaCfmy5ZXTgl6LxvNsMeee015uCg5wvi9DaeL7JbiNbjpcqHi9LZYamG3b+Cz
MXceclgMWSdYgiPAKjjJnfRtDpTgEn74iNAQ3BK/5zE51dgN6jPpPrtxMEzvYVlt
QL/ZaC+eByWkRAw7C3EC66vmjsCt1YxfF5IodRekVg/hfk6Atj5Ogmf6UtM3rcX4
oUhMz/wq1+RrKIzIWKMDb+oS8ssCAwEAAaOCAgkwggIFMB0GA1UdDgQWBBSHHzfk
EzZEJoNbpUS8/2kpCzQnhjAfBgNVHSMEGDAWgBTAkGoZp940m/orMrPD60wtF3YM
4TAOBgNVHQ8BAf8EBAMCB4AwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtp
LnJhbmQuYXBuaWMubmV0L3JlcG8vQTkxODcyRUQwMDAxLzAvQzA5MDZBMTlBN0RF
MzQ5QkZBMkIzMkIzQzNFQjRDMkQxNzc2MENFMS5jcmwwfgYIKwYBBQUHAQEEcjBw
MG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkv
QjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd0pCcUdhZmVOSnY2S3pL
enctdE1MUmQyRE9FLmNlcjCBiAYIKwYBBQUHAQsEfDB6MHgGCCsGAQUFBzALhmxy
c3luYzovL3Jwa2kucmFuZC5hcG5pYy5uZXQvcmVwby9BOTE4NzJFRDAwMDEvMC8z
MjMwMzMyZTMxMzQzNzJlMzEzMDM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzQz
NTMxMzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAcuTbDANBgkqhkiG9w0BAQsFAAOCAQEAL/v0Irqo
3iOMszWYVs6HYE5bSRGXp8V23tyFAGIgqAI2Ltkqso81c0Hf2Udhc6N7qeXM1oIA
bWO3nZd73UY0ttA5V68KD8SlLG0kWdHKUw2M5dgyR88vrUVB36v5wKftySoIB8zE
2c+Idpq2M6Kk3ffMowFl2uICYFeU1LwKBbHFsZY1e08EiXSqQiRwoTvB/ciyxXBv
hPj6/aMuhnewZVwUT0hUj4FCjjrb8KEgbkfi4kA5GWQpMOAkiXsF4WYojUkcF7Sn
dH3QASCT0Yl2/onvVeq2FiFYyzHYcwRo6p6uik6Y3HziU4zGUvto3nN8Ed8SYWux
rhctuw85Z+fNJg==
-----END CERTIFICATE-----
Generated at Tue Jan 27 16:42:41 2026 by rpki-client