This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C97B91A2D3E311F0AD18C835C4F9AE02.roa
File: C97B91A2D3E311F0AD18C835C4F9AE02.roa (raw, json)
Hash identifier: tDixoa195PopYf9y4PKaGdwV3z7aFGfggS+eJnhhAmg=
Subject key identifier: 8B:7F:C8:1C:7E:45:E9:B8:B6:E7:70:51:6D:85:2E:0A:47:C0:E8:AE
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4F5B
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C97B91A2D3E311F0AD18C835C4F9AE02.roa
Signing time: Fri 19 Dec 2025 09:38:11 +0000
ROA not before: Fri 19 Dec 2025 09:38:11 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 152933
IP address blocks: 103.165.144.0/23 maxlen: 23
103.165.144.0/24 maxlen: 24
103.165.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 10:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20315 (0x4f5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Dec 19 09:38:11 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69451d03-7c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:99:e6:3b:fa:a6:8d:d8:c2:68:0c:7b:23:0c:
ce:32:5b:40:cb:29:30:68:2c:cf:ed:14:07:ee:13:
36:24:f3:a3:af:67:cf:3f:f8:b4:64:a1:f0:ef:55:
ac:12:f4:45:83:54:66:38:01:79:ac:c9:4f:6e:c6:
6b:77:59:87:ed:08:bd:0d:76:a7:9f:7f:d0:ac:37:
1b:37:ee:35:07:78:55:30:80:90:48:f2:13:ee:c1:
76:9e:00:0d:7f:d1:97:ca:a2:c1:23:d0:23:6c:0e:
53:71:ea:c7:51:7e:3b:d4:0d:0b:26:a7:3e:bb:8a:
9b:14:b8:6f:92:f7:00:bf:47:9a:c5:11:bb:ac:a5:
6a:5f:c1:5c:0c:91:de:2c:5e:03:e0:29:5c:f9:ee:
c6:76:7f:0d:41:f6:46:d0:31:42:90:05:ab:d3:e8:
4e:82:fb:65:13:a0:43:ae:4d:89:d2:65:c6:23:6b:
47:11:e8:62:a6:32:9a:52:15:bf:8a:98:4a:f6:17:
43:1c:f1:47:bc:73:3c:20:9d:2c:da:3b:da:16:ea:
6d:d1:2f:90:81:e1:fb:34:bf:e0:3f:99:ff:3b:44:
9a:e9:53:59:c9:c1:d4:43:0e:df:17:45:ea:35:a1:
ea:60:aa:97:aa:7f:8b:1f:2a:5f:0e:5e:26:4a:35:
cd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:7F:C8:1C:7E:45:E9:B8:B6:E7:70:51:6D:85:2E:0A:47:C0:E8:AE
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C97B91A2D3E311F0AD18C835C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.165.144.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:65:8a:b6:17:cd:59:e1:77:5a:c5:75:28:ee:29:3e:fc:c2:
20:e4:63:e9:52:34:35:c2:68:c3:a5:ec:5b:5d:ba:ee:7d:31:
e9:68:5b:d5:e5:16:6a:6e:f6:5e:e6:36:5c:09:0a:35:c7:3c:
50:5d:18:a4:5f:c3:30:bf:0a:96:e6:9c:ab:f9:76:9e:6a:85:
9a:ba:1e:a8:f5:f1:04:75:24:53:5c:6d:27:6c:21:43:3a:fe:
35:33:4d:48:82:60:f7:52:bd:bd:d4:0c:21:93:a6:94:6b:ac:
e5:fc:da:a2:e1:2c:a8:0d:5c:05:15:8d:30:9d:ec:e0:db:c6:
4e:ec:68:40:39:86:71:a2:20:d0:24:4c:97:46:5d:80:55:cd:
32:f6:17:d5:51:8d:15:78:58:a1:84:59:5d:70:a7:58:70:8d:
fa:bf:65:35:74:f4:77:e3:32:ea:c7:e8:a3:df:1c:7f:96:60:
34:38:3e:44:28:b3:70:4e:19:5f:db:3b:bf:e6:18:67:ac:cc:
1f:b7:8e:aa:80:0b:03:5b:fc:ce:45:1f:24:bc:d5:0f:eb:bd:
13:a7:39:33:d2:a7:ed:28:16:1d:68:57:8f:dc:63:14:74:9f:
e4:04:8f:d3:d0:be:59:32:82:29:f8:e5:24:11:26:d5:ea:85:
8b:25:30:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:54:43 2025 by rpki-client