This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/B3C29AE8D3C711F09E46353CC4F9AE02.roa
File: B3C29AE8D3C711F09E46353CC4F9AE02.roa (raw, json)
Hash identifier: Jb/Harc2a3koeaaZ6I7bDftucuee7kjp7yofjbYSiJQ=
Subject key identifier: 70:99:4B:F9:FD:39:3A:7E:DA:5F:7A:1D:91:49:91:06:E2:71:B7:01
Certificate issuer: /CN=A91E5191/serialNumber=50A7116BB9F3697BC5E3E222EF035F70342CDDA3
Certificate serial: 07DB
Authority key identifier: 50:A7:11:6B:B9:F3:69:7B:C5:E3:E2:22:EF:03:5F:70:34:2C:DD:A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/B3C29AE8D3C711F09E46353CC4F9AE02.roa
Signing time: Sun 07 Dec 2025 23:51:52 +0000
ROA not before: Sun 07 Dec 2025 23:51:52 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 4764
IP address blocks: 103.139.228.0/24 maxlen: 24
103.139.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.crl
rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 20:44:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2011 (0x7db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5191, serialNumber=50A7116BB9F3697BC5E3E222EF035F70342CDDA3
Validity
Not Before: Dec 7 23:51:52 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69361317-4794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:02:28:f1:c8:cd:4a:6c:86:5a:fb:c8:a2:0f:
52:ab:19:ac:1b:ae:7b:d2:39:13:5e:ce:21:17:9f:
16:b6:05:d0:db:30:b8:e5:26:b1:50:64:19:a6:d0:
f3:e6:83:f1:7c:d6:8b:9c:98:5e:ab:60:97:21:f8:
47:71:cd:77:97:a7:cb:89:9b:a3:e1:ba:1b:c0:82:
50:40:02:08:73:29:f0:2e:25:f7:be:dc:48:50:cd:
b6:03:fb:a3:20:3d:67:2b:65:6d:7e:93:f3:c4:d4:
81:a7:7f:98:bb:bc:fa:c8:f3:97:bd:c9:1f:80:71:
0c:79:e7:3e:a2:09:a7:07:6a:bf:87:e5:ba:94:0b:
d8:f4:c4:82:e0:25:36:8c:46:df:0e:1f:6d:80:55:
98:30:ac:69:f3:15:0d:4b:53:57:7d:ae:e9:bc:f1:
b7:49:f1:35:e1:18:a3:24:d1:19:3d:f1:0b:90:f8:
61:9a:3d:97:f1:64:2f:19:7b:7f:fa:5f:40:65:79:
de:05:08:aa:82:91:46:39:27:f1:11:82:cf:68:8a:
6d:33:c6:0a:bb:f8:98:ed:9c:c1:59:3c:43:18:dc:
12:37:96:a3:bc:e1:30:be:13:f8:81:ef:da:0c:49:
b9:87:bb:c1:45:e1:2d:b2:b6:8b:03:9f:17:26:35:
12:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:99:4B:F9:FD:39:3A:7E:DA:5F:7A:1D:91:49:91:06:E2:71:B7:01
X509v3 Authority Key Identifier:
keyid:50:A7:11:6B:B9:F3:69:7B:C5:E3:E2:22:EF:03:5F:70:34:2C:DD:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/B3C29AE8D3C711F09E46353CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.139.228.0/23
Signature Algorithm: sha256WithRSAEncryption
81:7a:58:d0:84:ea:8d:f5:a5:fb:3b:07:75:88:9a:d3:e9:3f:
7e:e5:51:58:2f:33:42:e1:a3:4d:82:c5:85:c7:89:54:ce:aa:
1e:e3:92:91:0e:ca:11:dc:39:02:1d:ec:e9:ef:48:6f:85:1f:
c7:63:ef:88:eb:ed:9b:8a:d0:0d:71:f5:58:9b:38:39:38:28:
46:3a:71:7c:93:68:77:e9:25:21:8c:4c:93:2c:96:59:df:ac:
24:21:19:23:1b:cc:8c:aa:a5:98:e0:71:5f:c0:00:70:69:79:
a0:04:31:36:e8:d0:6e:15:01:1c:19:f5:9d:84:de:ef:cb:4d:
76:f7:5a:cd:0a:8f:10:d4:b7:b1:d0:80:ae:7b:f6:8b:eb:0c:
c7:06:f2:ea:51:b9:11:83:3f:a3:df:90:24:7e:d3:a4:5d:d4:
27:ba:80:29:8f:db:3f:26:4c:7a:c4:d9:5f:73:dd:90:5f:ce:
82:75:c0:25:c8:fb:96:b8:76:e4:e3:04:fd:b5:e4:0a:68:62:
f4:ad:5b:02:06:e2:ea:61:ed:4f:86:fa:c4:21:6e:51:c5:a2:
59:37:5c:0f:cf:a8:4b:da:4c:8f:04:ef:37:28:31:bf:64:5e:
b8:d7:66:59:d2:51:9c:f2:8d:1b:78:38:54:16:6a:6c:b0:d9:
7d:c4:45:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 21:46:41 2025 by rpki-client