This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/91BD6980054A11EEAC0B1484C4F9AE02.roa
File: 91BD6980054A11EEAC0B1484C4F9AE02.roa (raw, json)
Hash identifier: cDrMvymY/6SkZ1VCodSeywzptq/5SVnm8i6dtQkbzvo=
Subject key identifier: 12:2F:5E:11:4E:BF:E8:D1:32:72:A6:4A:97:0C:5D:A0:EB:53:C9:C0
Certificate issuer: /CN=A91C05E4/serialNumber=4D406D4EB184D66A4E2DE900FD4C7AEA5C9C7159
Certificate serial: 01DA
Authority key identifier: 4D:40:6D:4E:B1:84:D6:6A:4E:2D:E9:00:FD:4C:7A:EA:5C:9C:71:59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/91BD6980054A11EEAC0B1484C4F9AE02.roa
Signing time: Sat 13 Dec 2025 02:02:07 +0000
ROA not before: Sat 13 Dec 2025 02:02:07 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 141361
IP address blocks: 103.157.154.0/24 maxlen: 24
103.157.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.crl
rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 01:58:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 474 (0x1da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C05E4, serialNumber=4D406D4EB184D66A4E2DE900FD4C7AEA5C9C7159
Validity
Not Before: Dec 13 02:02:07 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=693cc91e-2ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2a:15:13:3b:79:f0:dc:20:d0:c0:94:d5:8f:
47:77:1d:bc:0c:43:e4:be:4b:85:31:f6:91:2f:7e:
72:99:69:80:fb:b1:fa:54:ec:35:dc:3c:e9:20:5b:
cf:5a:7e:ef:76:65:96:fd:d6:1c:eb:3e:e8:de:76:
6c:47:2d:a9:1a:5b:2c:40:7d:64:39:d9:f3:55:b7:
f5:04:66:d5:00:b8:ae:d9:be:50:e3:b5:82:3f:33:
de:e1:04:72:b1:9f:77:8a:e6:b6:5f:f5:14:03:87:
e7:af:2e:1a:a3:92:16:41:35:5b:e3:b5:5b:c7:fa:
bc:11:c8:60:db:b0:12:a0:fa:da:19:bf:e2:8e:1d:
17:14:6e:07:d8:e1:cc:09:2f:48:a7:04:a4:3f:13:
f1:da:ec:0f:f6:5c:e6:e5:23:65:8e:a3:ae:44:fe:
6f:d9:50:a8:61:d2:49:81:07:6f:f8:be:4e:02:3b:
ad:79:38:88:20:41:1f:bd:32:52:e1:29:75:b2:c3:
84:8e:7a:e5:34:f0:67:32:fa:2c:1b:8b:44:bf:b5:
17:60:73:00:93:ee:39:d8:cb:ee:27:60:05:4b:f2:
7d:90:dd:d6:5a:f9:a9:aa:44:c1:87:b0:18:28:d8:
0d:76:66:99:4c:79:90:72:7b:b3:f6:4a:c7:a3:ff:
bd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:2F:5E:11:4E:BF:E8:D1:32:72:A6:4A:97:0C:5D:A0:EB:53:C9:C0
X509v3 Authority Key Identifier:
keyid:4D:40:6D:4E:B1:84:D6:6A:4E:2D:E9:00:FD:4C:7A:EA:5C:9C:71:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/91BD6980054A11EEAC0B1484C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.157.154.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:2f:62:45:7e:59:2b:1b:93:a3:a7:b1:d4:24:a2:81:c7:b0:
8d:ca:f9:b2:b1:32:2b:a0:d0:ba:8e:5a:ca:95:a4:27:5f:aa:
03:88:13:cf:ec:4c:df:21:49:01:25:fd:f4:9f:f5:78:f7:de:
a8:e8:33:32:37:39:2d:62:75:c0:b2:96:37:61:dd:b0:64:71:
5b:5d:12:b2:c6:c3:ad:7e:de:f8:33:e3:8c:dc:2f:e9:77:9a:
2f:1a:b4:0f:fa:7e:7e:65:c3:96:be:8a:15:7e:67:5b:8d:0f:
f5:76:10:bb:49:95:94:a9:a9:c1:28:ad:f9:4f:d5:f8:29:d1:
68:64:26:45:d1:6c:7e:df:e0:49:e3:6a:cf:7c:5c:eb:e0:a2:
95:35:ff:c2:cc:55:4c:af:bb:5f:9e:16:64:7f:f3:f6:81:1d:
f6:54:59:d4:06:bc:ca:34:ad:40:45:3b:51:32:5d:e5:57:36:
d0:3a:35:33:2e:06:ea:e4:97:7b:93:c8:2b:e6:ca:80:e3:db:
86:48:96:32:f6:d5:14:18:a9:c0:37:0b:4a:f6:bb:f1:a6:25:
a2:e4:ff:5f:2b:0a:23:b5:5c:cf:83:1a:42:25:43:d7:25:18:
6a:cc:f5:05:ae:46:db:14:83:9f:f4:5e:c5:2b:f7:6b:da:7d:
5e:1d:7e:28
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzA1RTQxMTAvBgNVBAUTKDRENDA2RDRFQjE4NEQ2NkE0RTJERTkwMEZENEM3QUVB
NUM5QzcxNTkwHhcNMjUxMjEzMDIwMjA3WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTNjYzkxZS0yY2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArSoVEzt58Nwg0MCU1Y9Hdx28DEPkvkuFMfaRL35ymWmA+7H6VOw13DzpIFvP
Wn7vdmWW/dYc6z7o3nZsRy2pGlssQH1kOdnzVbf1BGbVALiu2b5Q47WCPzPe4QRy
sZ93iua2X/UUA4fnry4ao5IWQTVb47Vbx/q8Echg27ASoPraGb/ijh0XFG4H2OHM
CS9IpwSkPxPx2uwP9lzm5SNljqOuRP5v2VCoYdJJgQdv+L5OAjuteTiIIEEfvTJS
4Sl1ssOEjnrlNPBnMvosG4tEv7UXYHMAk+452MvuJ2AFS/J9kN3WWvmpqkTBh7AY
KNgNdmaZTHmQcnuz9krHo/+9RQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBIvXhFO
v+jRMnKmSpcMXaDrU8nAMB8GA1UdIwQYMBaAFE1AbU6xhNZqTi3pAP1MeupcnHFZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDVFNC83OEE0RDQ0NjA1
NDYxMUVFOTVFRDdBODNDNEY5QUUwMi9UVUJ0VHJHRTFtcE9MZWtBX1V4NjZseWNj
VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RVQnRUckdFMW1wT0xla0FfVXg2Nmx5Y2NWay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzA1RTQvNzhBNEQ0NDYwNTQ2MTFFRTk1RUQ3QTgzQzRGOUFFMDIvOTFCRDY5ODAw
NTRBMTFFRUFDMEIxNDg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnnZowDQYJKoZIhvcNAQELBQADggEBADsvYkV+WSsbk6On
sdQkooHHsI3K+bKxMiug0LqOWsqVpCdfqgOIE8/sTN8hSQEl/fSf9Xj33qjoMzI3
OS1idcCyljdh3bBkcVtdErLGw61+3vgz44zcL+l3mi8atA/6fn5lw5a+ihV+Z1uN
D/V2ELtJlZSpqcEorflP1fgp0WhkJkXRbH7f4Enjas98XOvgopU1/8LMVUyvu1+e
FmR/8/aBHfZUWdQGvMo0rUBFO1EyXeVXNtA6NTMuBurkl3uTyCvmyoDj24ZIljL2
1RQYqcA3C0r2u/GmJaLk/18rCiO1XM+DGkIlQ9clGGrM9QWuRtsUg5/0XsUr92va
fV4dfig=
-----END CERTIFICATE-----
Generated at Sun Dec 21 08:01:19 2025 by rpki-client