This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/1F8AECC6EF8411EBB4E00D4DC4F9AE02.roa
File: 1F8AECC6EF8411EBB4E00D4DC4F9AE02.roa (raw, json)
Hash identifier: a75W3u++Sx62OvWOipCamz/Iikqj9lfo60sY/JtoAyc=
Subject key identifier: 55:3C:1F:6B:F5:46:A3:B5:1F:EA:6E:53:BB:AA:1D:8B:CD:50:36:71
Certificate issuer: /CN=A91BDE68/serialNumber=2688D48E342192B5FDA8DB6DAD62CC15C87503FA
Certificate serial: 16B6
Authority key identifier: 26:88:D4:8E:34:21:92:B5:FD:A8:DB:6D:AD:62:CC:15:C8:75:03:FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JojUjjQhkrX9qNttrWLMFch1A_o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/1F8AECC6EF8411EBB4E00D4DC4F9AE02.roa
Signing time: Sat 10 Jan 2026 14:36:54 +0000
ROA not before: Sat 10 Jan 2026 14:36:54 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 137080
IP address blocks: 103.104.28.0/22 maxlen: 24
103.106.146.0/23 maxlen: 24
2401:ff40::/32 maxlen: 32
2401:ff40:5000::/44 maxlen: 44
2401:ff40:5010::/44 maxlen: 44
2401:ff40:5020::/44 maxlen: 44
2401:ff40:5040::/44 maxlen: 44
2401:ff40:6000::/44 maxlen: 44
2401:ff40:d000::/40 maxlen: 40
2401:ff40:d000::/44 maxlen: 44
2401:ff40:e000::/44 maxlen: 44
2401:ff40:e040::/44 maxlen: 44
2401:ff40:f000::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/JojUjjQhkrX9qNttrWLMFch1A_o.crl
rsync://rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/JojUjjQhkrX9qNttrWLMFch1A_o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JojUjjQhkrX9qNttrWLMFch1A_o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Jan 2026 16:26:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5814 (0x16b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDE68, serialNumber=2688D48E342192B5FDA8DB6DAD62CC15C87503FA
Validity
Not Before: Jan 10 14:36:54 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69626405-454f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:62:1b:06:24:b1:b5:09:a2:2d:a4:55:e3:69:
91:ee:df:f7:05:ba:ed:a6:86:b0:db:ea:28:4d:1f:
c8:54:7f:bb:38:e0:e7:32:27:9b:81:64:56:7f:f0:
51:fa:19:08:ef:ef:34:29:50:1e:18:1d:e2:c8:9d:
e9:81:7a:fb:13:95:25:9e:8e:e3:34:30:bc:88:9b:
aa:b0:31:45:81:dc:5c:8f:a4:d3:20:ce:84:6f:d2:
6e:11:43:15:40:ad:09:5d:bc:d3:05:1e:ef:54:82:
6e:70:7c:95:90:28:a7:e3:bb:56:10:71:fd:43:c4:
a8:47:bb:72:97:9f:9c:48:e6:da:5b:1f:32:3f:a5:
9c:20:e4:8a:09:3e:25:e5:93:55:96:18:24:29:c2:
35:e4:9a:42:ac:db:e8:90:75:19:99:d3:3b:e6:4a:
03:d4:05:af:90:69:85:0e:5c:e0:4c:d8:0d:b4:79:
c6:c6:df:7f:a8:34:92:21:60:0c:a7:50:09:96:ee:
a1:e9:94:f8:43:ed:3e:7b:2b:8e:8b:de:95:17:88:
17:47:e5:aa:45:b1:94:53:ec:d2:78:8c:c2:88:4c:
cd:4d:51:ed:38:52:8b:89:3e:f6:d2:f7:d4:fa:65:
5f:98:8f:7a:1e:50:ba:e8:b3:66:2c:fb:93:83:b6:
01:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:3C:1F:6B:F5:46:A3:B5:1F:EA:6E:53:BB:AA:1D:8B:CD:50:36:71
X509v3 Authority Key Identifier:
keyid:26:88:D4:8E:34:21:92:B5:FD:A8:DB:6D:AD:62:CC:15:C8:75:03:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/JojUjjQhkrX9qNttrWLMFch1A_o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JojUjjQhkrX9qNttrWLMFch1A_o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/1F8AECC6EF8411EBB4E00D4DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.104.28.0/22
103.106.146.0/23
IPv6:
2401:ff40::/32
Signature Algorithm: sha256WithRSAEncryption
83:8e:4c:f2:ce:84:a3:f4:e4:3c:eb:c2:0c:28:3a:1b:3c:92:
41:3f:fe:5e:b7:7c:40:8c:27:b0:e9:12:d3:d2:a9:74:49:1c:
f8:0c:03:d9:bb:b3:ca:cc:d6:65:f3:92:86:e0:56:3f:47:3c:
b4:e2:dc:e1:b8:b7:fe:1c:d7:59:bf:a7:e2:1e:16:82:4a:e0:
15:5d:71:7b:a8:7f:77:ae:90:de:bd:10:f8:be:1d:e7:7b:8b:
7d:08:7c:9c:12:5c:70:9d:1b:16:3e:93:5c:39:90:0d:86:07:
cc:ab:23:9f:ff:b1:91:8a:df:e0:21:93:04:53:36:28:c5:ce:
e5:bb:ab:97:d6:7b:a5:e6:28:fe:04:4d:74:9d:20:18:40:98:
fa:8a:c6:4a:3d:82:e5:bd:e4:53:5b:f6:0d:a4:c2:36:d6:59:
b4:9b:12:ed:da:f2:27:82:17:bd:64:13:f7:66:81:9d:72:47:
87:8c:cd:b8:5e:5d:ab:a9:f6:4e:6d:b2:f5:fd:02:03:03:1e:
e8:69:de:67:ac:71:3f:b3:04:0b:53:48:bc:14:67:69:4c:cb:
a1:5c:81:81:27:59:55:1a:8d:6a:93:bb:67:f8:d7:8e:2a:dc:
56:23:2e:e4:72:fd:f0:40:4c:89:d0:c2:07:cd:45:36:f0:bf:
bb:64:ec:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 03:19:52 2026 by rpki-client