This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/A9AB917CDF2A11F092E976D2656F56BC.roa
File: A9AB917CDF2A11F092E976D2656F56BC.roa (raw, json)
Hash identifier: hFybGfFrMHjkE0yROGxNrNMcjfr38O9Z4PJhiWuMpCk=
Subject key identifier: 8C:13:EE:D0:DD:DC:8C:45:38:BE:FB:43:1C:B0:FA:FD:96:DC:56:9A
Certificate issuer: /CN=A91761A9/serialNumber=C47239FFF5CF7885217FC6CA901B7A32780831F0
Certificate serial: 02
Authority key identifier: C4:72:39:FF:F5:CF:78:85:21:7F:C6:CA:90:1B:7A:32:78:08:31:F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHI5__XPeIUhf8bKkBt6MngIMfA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/A9AB917CDF2A11F092E976D2656F56BC.roa
Signing time: Mon 22 Dec 2025 11:37:58 +0000
ROA not before: Mon 22 Dec 2025 11:37:58 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 137386
IP address blocks: 103.51.36.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.crl
rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHI5__XPeIUhf8bKkBt6MngIMfA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 11:38:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91761A9, serialNumber=C47239FFF5CF7885217FC6CA901B7A32780831F0
Validity
Not Before: Dec 22 11:37:58 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69492d95-9e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1a:98:78:17:5e:95:4f:a3:eb:d0:55:7c:62:
75:04:93:78:57:43:7e:4f:59:27:8d:d5:0e:0c:01:
d7:87:10:33:d6:94:68:c0:52:41:db:5d:52:56:8d:
92:3c:70:3d:d7:f5:49:46:4b:06:cc:26:1c:1c:e4:
c3:53:75:f0:9b:0a:6a:6c:77:d7:94:fa:29:58:39:
37:d5:d2:d0:55:27:5e:e7:e6:dd:d2:9b:7c:dd:8b:
0c:9f:30:9a:d7:62:9a:c3:c2:98:96:3b:ae:9c:f3:
71:4d:66:53:b2:44:cc:92:48:1d:0a:86:5c:dd:d8:
07:2d:3c:b1:0d:17:24:41:41:67:35:ec:8b:9c:15:
98:b1:38:6c:53:28:a0:b1:23:ed:65:ca:26:70:61:
69:a8:74:55:fa:d2:77:30:6a:85:74:ad:22:47:7a:
c8:14:24:ca:f2:78:a4:cd:91:2b:19:8f:60:ee:ed:
ac:25:da:8e:54:fd:8f:e3:40:9b:e7:87:97:0d:01:
57:82:08:5c:c2:7d:24:0b:dc:ad:d2:1c:1a:b7:4e:
6c:aa:2b:20:99:14:93:67:13:6b:48:eb:32:c3:56:
91:ec:e5:0e:b2:f1:71:25:87:8f:6e:64:4e:fb:a3:
42:99:2f:76:28:f9:51:af:8e:3a:14:03:65:48:cc:
a6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:13:EE:D0:DD:DC:8C:45:38:BE:FB:43:1C:B0:FA:FD:96:DC:56:9A
X509v3 Authority Key Identifier:
keyid:C4:72:39:FF:F5:CF:78:85:21:7F:C6:CA:90:1B:7A:32:78:08:31:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHI5__XPeIUhf8bKkBt6MngIMfA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/A9AB917CDF2A11F092E976D2656F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.51.36.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:dc:1f:6f:8e:75:ea:05:94:25:79:b5:a5:ac:96:44:c8:4d:
b2:95:87:11:28:59:88:f2:a2:7c:55:c1:dc:65:3a:5a:16:73:
2b:f7:83:64:51:5d:4a:4c:d2:6e:d5:84:ff:83:44:41:6a:5c:
b2:bf:c0:94:70:54:b6:de:91:aa:53:27:2f:39:f1:be:eb:c6:
03:30:d0:1c:f0:a1:ad:1d:48:ab:10:45:b3:4f:71:ff:69:a8:
a9:60:43:fa:06:90:7a:db:f4:e0:28:7b:2b:4f:32:f8:81:30:
12:d7:92:f5:7c:c1:75:9a:44:04:57:94:7e:ad:05:96:08:ed:
55:8b:73:ca:cc:dd:d9:ae:fd:d1:f8:82:98:7e:4f:25:93:72:
7d:d5:dd:f2:46:35:78:fb:a6:f6:a0:6b:be:dd:9e:42:ea:0f:
1f:31:7e:54:47:ea:f9:cd:52:29:e2:74:19:8f:8d:20:57:7a:
b8:c8:98:e1:d4:b6:98:6f:3e:4c:a8:e5:f0:ff:47:d6:ad:7d:
02:44:23:f3:d2:b6:84:9a:77:8a:ba:4d:9a:d2:78:50:c2:23:
e5:81:9c:b1:ff:95:e9:2d:dd:ea:2d:87:41:0e:d4:2d:d3:4f:
91:9c:c8:8a:3a:de:9b:95:40:2f:9e:91:d8:97:5e:f1:6c:5b:
b2:9b:99:05
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTE3
NjFBOTExMC8GA1UEBRMoQzQ3MjM5RkZGNUNGNzg4NTIxN0ZDNkNBOTAxQjdBMzI3
ODA4MzFGMDAeFw0yNTEyMjIxMTM3NThaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV
BAMMDTY5NDkyZDk1LTllMWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCIGph4F16VT6Pr0FV8YnUEk3hXQ35PWSeN1Q4MAdeHEDPWlGjAUkHbXVJWjZI8
cD3X9UlGSwbMJhwc5MNTdfCbCmpsd9eU+ilYOTfV0tBVJ17n5t3Sm3zdiwyfMJrX
YprDwpiWO66c83FNZlOyRMySSB0Khlzd2ActPLENFyRBQWc17IucFZixOGxTKKCx
I+1lyiZwYWmodFX60ncwaoV0rSJHesgUJMryeKTNkSsZj2Du7awl2o5U/Y/jQJvn
h5cNAVeCCFzCfSQL3K3SHBq3TmyqKyCZFJNnE2tI6zLDVpHs5Q6y8XElh49uZE77
o0KZL3Yo+VGvjjoUA2VIzKbLAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUjBPu0N3c
jEU4vvtDHLD6/ZbcVpowHwYDVR0jBBgwFoAUxHI5//XPeIUhf8bKkBt6MngIMfAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2MUE5Lzc1MjhCM0IwREYy
NzExRjA4RjY5MUQ2NTY1NkY1NkJDL3hISTVfX1hQZUlVaGY4YktrQnQ2TW5nSU1m
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIveEhJNV9fWFBlSVVoZjhiS2tCdDZNbmdJTWZBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NjFBOS83NTI4QjNCMERGMjcxMUYwOEY2OTFENjU2NTZGNTZCQy9BOUFCOTE3Q0RG
MkExMUYwOTJFOTc2RDI2NTZGNTZCQy5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAmczJDANBgkqhkiG9w0BAQsFAAOCAQEAndwfb4516gWUJXm1
payWRMhNspWHEShZiPKifFXB3GU6WhZzK/eDZFFdSkzSbtWE/4NEQWpcsr/AlHBU
tt6RqlMnLznxvuvGAzDQHPChrR1IqxBFs09x/2moqWBD+gaQetv04Ch7K08y+IEw
EteS9XzBdZpEBFeUfq0FlgjtVYtzyszd2a790fiCmH5PJZNyfdXd8kY1ePum9qBr
vt2eQuoPHzF+VEfq+c1SKeJ0GY+NIFd6uMiY4dS2mG8+TKjl8P9H1q19AkQj89K2
hJp3irpNmtJ4UMIj5YGcsf+V6S3d6i2HQQ7ULdNPkZzIijrem5VAL56R2Jde8Wxb
spuZBQ==
-----END CERTIFICATE-----
Generated at Tue Dec 23 07:16:34 2025 by rpki-client