This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/B3481ED4D5B611ECA61EEC28C4F9AE02.roa
File: B3481ED4D5B611ECA61EEC28C4F9AE02.roa (raw, json)
Hash identifier: mhxb0LKcpUK4gl9y3ZBmyx0KvvyzzraBRVCT46qMSiY=
Subject key identifier: 1E:16:1D:18:E7:EC:86:6C:B3:B4:B7:41:8E:E1:BF:BE:91:88:69:B6
Certificate issuer: /CN=A91F823E/serialNumber=3EEADF145AE29B48240A3FBA3AFBD949A8F1535D
Certificate serial: 0371
Authority key identifier: 3E:EA:DF:14:5A:E2:9B:48:24:0A:3F:BA:3A:FB:D9:49:A8:F1:53:5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/B3481ED4D5B611ECA61EEC28C4F9AE02.roa
Signing time: Fri 19 Dec 2025 00:20:40 +0000
ROA not before: Fri 19 Dec 2025 00:20:40 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 4826
IP address blocks: 203.13.208.0/24 maxlen: 24
203.13.209.0/24 maxlen: 24
203.13.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.crl
rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Jan 2026 23:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 881 (0x371)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F823E, serialNumber=3EEADF145AE29B48240A3FBA3AFBD949A8F1535D
Validity
Not Before: Dec 19 00:20:40 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69449a58-3778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:31:fa:5c:e1:da:30:ec:37:c8:dc:40:3d:31:
25:b2:45:0d:91:db:1d:d3:4a:60:00:d7:da:d6:8a:
66:8c:93:e2:78:1a:a1:af:1b:50:e3:53:be:46:e9:
77:d2:7b:d4:85:21:6f:93:54:7a:4d:b6:a8:35:dd:
2d:0c:8a:88:d0:b7:5e:1a:6b:9d:21:9a:a5:ee:af:
54:58:04:2b:6f:c8:56:9a:e3:b5:62:9f:35:69:85:
19:52:ab:d5:11:bd:d3:48:11:3e:b1:0b:08:ba:eb:
3d:3f:99:75:bf:05:b0:d3:fe:77:c5:4b:ed:e9:43:
06:88:79:3e:c1:a6:42:57:9a:66:fe:cd:a9:24:2e:
23:be:b2:37:d8:88:1a:92:ce:5f:30:99:7e:cf:77:
63:05:b6:75:f3:59:a9:76:d6:a1:22:ee:13:d3:42:
b0:23:f2:8f:20:95:8f:fd:a8:33:dc:84:2b:be:2b:
68:c4:b4:94:6f:fa:dc:fb:c0:c9:8d:79:89:29:ee:
8d:8b:96:1e:08:e0:79:b1:10:3c:1c:57:99:ea:b6:
b7:81:25:a3:ab:ba:96:10:97:c9:eb:f3:ff:a6:25:
25:1a:3d:d4:3a:36:d5:4b:6a:61:96:52:5c:49:48:
81:f5:c5:77:ac:2d:fa:92:1b:25:19:3b:82:07:ae:
98:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:16:1D:18:E7:EC:86:6C:B3:B4:B7:41:8E:E1:BF:BE:91:88:69:B6
X509v3 Authority Key Identifier:
keyid:3E:EA:DF:14:5A:E2:9B:48:24:0A:3F:BA:3A:FB:D9:49:A8:F1:53:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/B3481ED4D5B611ECA61EEC28C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.13.208.0-203.13.210.255
Signature Algorithm: sha256WithRSAEncryption
4d:68:69:ba:c6:43:d2:25:fb:c1:bc:d3:df:46:37:35:ae:30:
81:8a:6b:11:f9:6c:87:21:b5:01:be:46:9a:37:bb:92:be:a5:
7b:05:b4:42:01:77:2a:c4:1e:b1:32:9d:4a:27:46:fb:b9:2e:
51:17:25:9a:ae:86:28:83:d0:37:fb:6b:a3:1d:21:3b:a7:6d:
7c:fd:05:89:77:dd:d4:fd:67:f2:20:ef:3b:c0:53:4f:60:ab:
bd:cc:54:f0:ce:22:92:44:33:c9:9f:68:d8:1a:79:d7:11:14:
a0:d8:f2:f7:cf:9e:f5:fa:29:96:e8:33:0c:e5:58:d4:c2:bb:
45:84:b7:e5:5c:31:73:aa:b9:f7:4f:f6:d3:1b:9d:03:ff:96:
12:53:e6:4c:d2:cc:bb:a6:f8:ef:49:dd:53:75:f7:ec:4a:e1:
16:e6:48:7e:b7:d2:37:18:06:7d:17:ee:83:93:77:01:40:c3:
33:c8:d8:1e:ad:b8:39:16:c9:4b:c3:43:e6:97:22:27:46:7a:
2e:f9:1c:ab:94:16:27:e9:37:38:cd:aa:4b:26:6e:38:7e:ac:
78:0c:20:6b:2d:50:65:9a:11:f9:a4:6c:87:cb:62:d7:f0:1a:
7e:1f:60:d9:ab:83:d5:d7:7c:35:9a:22:6d:d2:21:c5:de:ee:
28:09:95:3f
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgICA3EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
RjgyM0UxMTAvBgNVBAUTKDNFRUFERjE0NUFFMjlCNDgyNDBBM0ZCQTNBRkJEOTQ5
QThGMTUzNUQwHhcNMjUxMjE5MDAyMDQwWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTQ0OWE1OC0zNzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvjH6XOHaMOw3yNxAPTElskUNkdsd00pgANfa1opmjJPieBqhrxtQ41O+Rul3
0nvUhSFvk1R6TbaoNd0tDIqI0LdeGmudIZql7q9UWAQrb8hWmuO1Yp81aYUZUqvV
Eb3TSBE+sQsIuus9P5l1vwWw0/53xUvt6UMGiHk+waZCV5pm/s2pJC4jvrI32Iga
ks5fMJl+z3djBbZ181mpdtahIu4T00KwI/KPIJWP/agz3IQrvitoxLSUb/rc+8DJ
jXmJKe6Ni5YeCOB5sRA8HFeZ6ra3gSWjq7qWEJfJ6/P/piUlGj3UOjbVS2phllJc
SUiB9cV3rC36khslGTuCB66YYwIDAQABo4ICnTCCApkwHQYDVR0OBBYEFB4WHRjn
7IZss7S3QY7hv76RiGm2MB8GA1UdIwQYMBaAFD7q3xRa4ptIJAo/ujr72Umo8VNd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODIzRS83RDY5QTgzQ0Q1
QjExMUVDOTM1MUU2MjBDNEY5QUUwMi9QdXJmRkZyaW0wZ2tDai02T3Z2WlNhanhV
MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1B1cmZGRnJpbTBna0NqLTZPdnZaU2FqeFUxMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjgyM0UvN0Q2OUE4M0NENUIxMTFFQzkzNTFFNjIwQzRGOUFFMDIvQjM0ODFFRDRE
NUI2MTFFQ0E2MUVFQzI4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E
GDAWMBQEAgABMA4wDAMEBMsN0AMEAMsN0jANBgkqhkiG9w0BAQsFAAOCAQEATWhp
usZD0iX7wbzT30Y3Na4wgYprEflshyG1Ab5Gmje7kr6lewW0QgF3KsQesTKdSidG
+7kuURclmq6GKIPQN/trox0hO6dtfP0FiXfd1P1n8iDvO8BTT2CrvcxU8M4ikkQz
yZ9o2Bp51xEUoNjy98+e9foplugzDOVY1MK7RYS35Vwxc6q590/20xudA/+WElPm
TNLMu6b470ndU3X37ErhFuZIfrfSNxgGfRfug5N3AUDDM8jYHq24ORbJS8ND5pci
J0Z6Lvkcq5QWJ+k3OM2qSyZuOH6seAwgay1QZZoR+aRsh8ti1/Aafh9g2auD1dd8
NZoibdIhxd7uKAmVPw==
-----END CERTIFICATE-----
Generated at Sat Jan 3 02:56:15 2026 by rpki-client