This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/C584C646CA5111EAB9696B0AC4F9AE02.roa
File: C584C646CA5111EAB9696B0AC4F9AE02.roa (raw, json)
Hash identifier: Bysvr5npb2ey28MwENKAXg+efW3r+QWQ4twIeL+QXI8=
Subject key identifier: F4:90:A2:CD:38:CB:53:DE:C9:6E:33:10:3C:5B:A7:FA:4E:04:D2:B8
Certificate issuer: /CN=A91F0CC8/serialNumber=56D7B15CC1AE8277858D6492C01DD5330844CC06
Certificate serial: 08FF
Authority key identifier: 56:D7:B1:5C:C1:AE:82:77:85:8D:64:92:C0:1D:D5:33:08:44:CC:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtexXMGugneFjWSSwB3VMwhEzAY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/C584C646CA5111EAB9696B0AC4F9AE02.roa
Signing time: Wed 24 Dec 2025 13:16:23 +0000
ROA not before: Wed 24 Dec 2025 13:16:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 23647
IP address blocks: 103.90.84.0/22 maxlen: 22
103.90.84.0/23 maxlen: 23
103.90.85.0/24 maxlen: 24
103.90.86.0/23 maxlen: 23
103.90.86.0/24 maxlen: 24
103.90.87.0/24 maxlen: 24
202.51.74.0/23 maxlen: 23
202.51.74.0/24 maxlen: 24
202.51.75.0/24 maxlen: 24
202.51.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.crl
rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtexXMGugneFjWSSwB3VMwhEzAY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Jan 2026 19:51:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2303 (0x8ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0CC8, serialNumber=56D7B15CC1AE8277858D6492C01DD5330844CC06
Validity
Not Before: Dec 24 13:16:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=694be7a7-84c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:33:f8:a2:fa:e3:6f:42:5d:aa:1e:f8:1e:29:
0e:43:f1:5f:6d:c3:36:2f:ff:f4:cf:30:05:af:d4:
e8:47:c3:00:e1:32:63:25:e1:16:db:c4:63:e5:d5:
0b:53:f4:0f:e7:b7:45:46:e1:49:93:3f:99:42:40:
82:20:03:79:0f:06:06:01:f1:41:81:11:2e:10:36:
9b:f4:06:b9:08:d1:a4:c9:78:00:1f:f5:65:03:d0:
bf:f9:1e:e6:b6:28:ae:4c:16:5e:42:49:bb:13:6d:
6f:cd:d6:c5:c5:fa:c5:5b:33:ee:78:96:cc:9f:05:
4e:6a:4d:f3:d7:b0:2c:66:55:fc:4e:ef:5c:0c:27:
59:d4:e5:70:4a:cf:eb:1f:ef:56:38:f1:fd:d5:a1:
6c:42:85:96:54:7a:ca:ff:77:e6:47:a6:cc:bd:fd:
eb:04:5e:cc:ea:27:10:0c:a5:09:c6:e4:fa:63:5a:
bd:56:e9:29:30:4b:61:5c:b8:11:e0:60:20:66:fd:
dd:18:b1:6a:b7:b6:79:37:38:78:16:02:97:fe:dc:
cd:d3:cc:c9:8a:d6:d2:7c:70:d3:93:4b:7e:21:3d:
35:27:f4:f5:73:f5:68:9d:c4:33:45:fc:4f:85:6e:
ea:b4:a6:27:b6:1b:16:4e:22:fe:1e:76:e9:90:9b:
26:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:90:A2:CD:38:CB:53:DE:C9:6E:33:10:3C:5B:A7:FA:4E:04:D2:B8
X509v3 Authority Key Identifier:
keyid:56:D7:B1:5C:C1:AE:82:77:85:8D:64:92:C0:1D:D5:33:08:44:CC:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtexXMGugneFjWSSwB3VMwhEzAY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/C584C646CA5111EAB9696B0AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.90.84.0/22
202.51.74.0/23
202.51.95.0/24
Signature Algorithm: sha256WithRSAEncryption
19:18:53:76:db:92:70:96:06:52:e3:ca:6d:f6:e7:83:38:f4:
58:38:a0:02:3f:d8:ab:f7:0c:a9:81:a5:c8:4b:86:68:4e:43:
93:1b:bc:dd:a6:ce:d8:7f:51:68:1d:4a:68:5e:86:13:cf:2e:
2d:08:88:31:c2:a0:fd:04:56:58:e5:2a:fa:09:c9:6d:ab:8e:
9e:c6:a8:37:9d:b6:9a:57:dc:f8:c1:8e:e5:5e:86:96:02:f4:
25:49:a1:a4:37:92:bb:a7:6b:da:e5:27:b9:d4:b3:2e:70:b1:
25:75:b6:4d:69:0f:7c:35:fc:46:cd:12:56:35:84:ab:9d:86:
4c:6b:ee:19:b9:83:54:2c:6c:b4:31:e1:20:82:04:d9:82:4e:
84:5b:39:9c:66:27:a4:fd:69:54:83:23:c4:56:86:67:2c:df:
1a:f4:7c:3e:e7:e4:25:02:44:7b:3d:ea:0b:e1:ef:7d:df:9a:
89:70:b9:73:fd:3b:85:8e:6e:57:b9:c1:93:67:3a:2b:03:fe:
7f:95:9f:91:fa:fb:eb:c9:58:4e:94:e0:44:81:85:dc:23:3f:
8e:f1:65:5d:27:83:2d:fb:cc:34:f3:50:d1:eb:7b:e1:80:f1:
e2:fb:1f:f5:75:b7:0e:51:4d:39:fc:0f:ac:c5:5a:f9:64:94:
99:1d:40:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 09:06:34 2025 by rpki-client