This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/02817064DCD811F0A33153DF516F56BC.roa
File: 02817064DCD811F0A33153DF516F56BC.roa (raw, json)
Hash identifier: 8I9UOp4Z+/Xy0X8dibahvto/spl08HnHkRuVpTID/Qo=
Subject key identifier: B5:74:51:7C:83:C9:61:33:81:B8:C6:48:B4:9D:6A:CD:EC:6E:42:51
Certificate issuer: /CN=A91A4707/serialNumber=98E863E44B597B64CA8C81FE3F6DCBCDDFE1F655
Certificate serial: 0575
Authority key identifier: 98:E8:63:E4:4B:59:7B:64:CA:8C:81:FE:3F:6D:CB:CD:DF:E1:F6:55
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/02817064DCD811F0A33153DF516F56BC.roa
Signing time: Fri 19 Dec 2025 12:42:46 +0000
ROA not before: Fri 19 Dec 2025 12:42:46 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 132210
IP address blocks: 103.101.236.0/23 maxlen: 23
103.101.236.0/24 maxlen: 24
103.101.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.crl
rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 16:21:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1397 (0x575)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4707, serialNumber=98E863E44B597B64CA8C81FE3F6DCBCDDFE1F655
Validity
Not Before: Dec 19 12:42:46 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69454846-6d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a7:53:af:11:ac:a3:c6:f5:f4:dd:02:41:95:
31:f9:cf:03:76:bb:21:a6:11:c7:c9:21:fd:af:10:
1f:85:f9:eb:5e:10:79:94:63:e7:62:de:7a:d8:ca:
c0:1f:ba:68:7b:58:56:e7:a7:5c:aa:66:87:8a:85:
3b:65:27:0d:ca:c5:a3:91:f7:3e:a3:5c:99:c1:1a:
5a:39:d1:79:85:cc:f1:ed:84:a7:fe:95:9e:b5:8c:
66:23:f0:d7:50:43:07:db:d1:14:27:a7:8a:55:73:
9f:53:0c:a6:08:77:34:dc:9d:44:3d:31:0e:41:a9:
7d:af:11:bb:28:c1:d1:a4:89:e2:c3:09:92:4b:59:
cb:1f:84:fd:6d:6d:36:ed:dc:4c:72:1e:85:90:b7:
61:c2:0b:a3:49:38:d7:be:bc:8e:39:6e:79:71:90:
5c:c0:cc:b2:d0:81:16:5d:ab:f3:65:e3:0d:31:f0:
1e:70:a1:2a:42:e0:61:06:45:e7:ab:b3:a0:f6:f2:
80:e4:74:b6:6c:ec:ec:ca:bc:5a:78:ea:c8:e7:91:
5a:a3:14:15:f0:9c:72:4b:f2:25:c0:af:02:7f:ed:
dc:b6:e1:65:70:f6:4d:00:79:0f:f9:6e:cd:e7:bd:
0e:d5:b8:27:2f:bf:bc:c8:e7:92:3e:46:ab:da:ce:
32:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:74:51:7C:83:C9:61:33:81:B8:C6:48:B4:9D:6A:CD:EC:6E:42:51
X509v3 Authority Key Identifier:
keyid:98:E8:63:E4:4B:59:7B:64:CA:8C:81:FE:3F:6D:CB:CD:DF:E1:F6:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/02817064DCD811F0A33153DF516F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.101.236.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:fa:18:f6:27:ca:c2:74:35:02:28:1d:fd:f2:3b:55:de:3c:
7e:87:38:a3:ee:c2:79:f2:3e:45:1b:f3:11:2c:5a:29:43:9f:
0a:0d:2d:12:5b:2f:72:d7:47:24:47:01:95:9d:be:7b:82:c6:
8a:c6:8a:f7:8e:1d:2b:91:93:75:e3:30:43:f8:91:b8:29:9e:
59:eb:f5:e0:67:45:40:f8:55:64:d8:b5:50:ec:60:e4:6e:7c:
0f:ac:76:41:a8:e5:de:9d:a8:cb:f7:40:c6:29:86:9b:d2:27:
ce:65:90:52:96:b3:2e:e8:94:3d:84:80:70:94:ed:23:2d:ca:
f2:f5:e6:9a:e8:69:30:cd:a7:da:14:8d:fe:11:cd:24:b5:c5:
cf:a4:d8:e8:e4:77:c3:89:da:b0:8d:e4:a4:75:46:32:4e:7a:
1f:7b:39:d1:5f:2c:6a:21:46:7c:a2:fc:fa:17:e3:76:dc:72:
57:f7:09:a7:f9:78:53:30:cc:3c:b9:56:2a:4c:85:27:bc:83:
4e:99:00:84:b0:0e:00:5e:be:93:1d:77:9c:54:e3:02:37:6e:
47:51:2a:dc:ab:30:60:07:1c:b5:7b:e6:ab:7b:81:55:84:24:
c5:b6:57:3f:e8:5e:0c:e1:e2:fd:9a:dc:41:bb:e4:13:8d:89:
46:a0:08:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 01:38:21 2025 by rpki-client