This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/E27CA57ECA9111EC9F9A7513C4F9AE02.roa
File: E27CA57ECA9111EC9F9A7513C4F9AE02.roa (raw, json)
Hash identifier: NOcFLuFaIVJHWaiJ8tb4VlHDCVMgWLAInSiLZFt0/do=
Subject key identifier: 98:8F:45:27:02:24:A6:63:41:F4:3B:55:D6:AB:7D:24:2A:22:E9:ED
Certificate issuer: /CN=A91D2258/serialNumber=F49A39D4308970E4702DF29F1D4DCF521F0A5135
Certificate serial: 038F
Authority key identifier: F4:9A:39:D4:30:89:70:E4:70:2D:F2:9F:1D:4D:CF:52:1F:0A:51:35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/E27CA57ECA9111EC9F9A7513C4F9AE02.roa
Signing time: Wed 17 Dec 2025 00:20:45 +0000
ROA not before: Wed 17 Dec 2025 00:20:45 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 4826
IP address blocks: 103.42.19.0/24 maxlen: 24
103.157.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.crl
rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 08 Jan 2026 00:15:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 911 (0x38f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2258, serialNumber=F49A39D4308970E4702DF29F1D4DCF521F0A5135
Validity
Not Before: Dec 17 00:20:45 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6941f75d-04cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5b:d5:50:44:05:7d:dc:7c:0a:02:f0:8f:25:
e6:0f:d5:da:5d:fb:81:ca:86:fa:bb:ed:27:b1:80:
0b:d6:57:d0:99:15:38:db:ad:ac:7d:10:80:ce:36:
3f:2f:58:55:18:1f:dc:51:b9:8f:03:d1:3e:68:f8:
ce:38:03:d8:9f:c2:26:23:ac:95:c5:d3:f4:22:89:
3c:81:a6:12:0a:37:cc:06:3f:dc:48:24:85:d6:a5:
4d:9d:c8:71:55:25:c2:ec:c3:fb:67:a1:f6:6e:47:
79:69:14:e5:b8:b5:fc:7c:2a:e9:d9:72:40:8a:77:
e7:36:b4:b0:08:98:19:5f:50:a2:9f:1b:8e:35:d0:
af:5f:9e:2a:fe:f9:62:41:65:25:e4:36:01:5c:6e:
69:af:92:60:fa:66:7e:36:3e:86:e6:4d:54:0c:f8:
8e:a1:e9:68:d4:94:63:db:7f:0f:22:8a:19:d8:bb:
21:22:eb:2c:25:d3:99:4a:e7:b6:91:a6:48:75:a7:
53:ed:28:58:d7:69:92:ae:2d:4f:dc:23:9b:dd:ad:
08:34:3b:1e:b2:9c:72:b7:d7:e6:cc:39:39:36:ab:
78:70:b1:ea:72:99:89:89:c6:a5:2a:20:50:c0:55:
84:9c:cf:f1:4b:4f:be:33:14:4d:1a:1d:55:82:28:
f9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:8F:45:27:02:24:A6:63:41:F4:3B:55:D6:AB:7D:24:2A:22:E9:ED
X509v3 Authority Key Identifier:
keyid:F4:9A:39:D4:30:89:70:E4:70:2D:F2:9F:1D:4D:CF:52:1F:0A:51:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/E27CA57ECA9111EC9F9A7513C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.42.19.0/24
103.157.84.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:c9:ba:6c:c3:d0:9a:57:85:e5:4c:a8:83:09:26:0f:b4:78:
fb:bf:a6:83:ff:67:51:0c:df:41:59:d6:f4:d5:98:ba:58:82:
b3:23:92:fd:d0:c7:db:cc:91:09:ff:55:cf:8d:91:aa:c7:82:
da:ac:f5:6f:e9:97:ab:cf:00:61:29:44:98:f5:5a:e1:4b:52:
de:87:a9:1b:c4:b2:58:5f:8e:08:4f:39:14:b9:c0:c0:87:d1:
61:97:f2:fa:4c:c2:f4:7e:b0:bd:2b:3b:e2:00:9f:cf:4f:e7:
86:a5:f6:52:62:54:9b:2c:21:ad:99:e1:57:36:bd:8f:a8:86:
96:81:e5:ea:cb:3f:34:a1:c8:61:01:65:2d:c4:a0:30:05:8d:
a8:f4:54:65:3a:a4:9d:07:fc:13:dc:af:dd:ab:7a:7b:09:c7:
ae:e9:a1:ed:92:73:09:fe:b1:77:16:ba:94:82:ee:a0:09:36:
0a:de:75:56:b3:dd:19:bc:39:73:b5:af:7a:18:90:83:56:3a:
fa:f4:f2:8f:69:f8:74:43:cc:52:18:19:8b:b7:14:33:87:77:
fe:01:f2:11:e5:f7:0d:87:c4:39:62:29:71:bb:46:dc:37:fc:
99:e5:4c:e0:5d:a5:cb:d7:d5:2f:0b:9b:46:68:b4:ca:a0:b6:
5f:3f:34:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 12:31:20 2026 by rpki-client