This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/C562775017FD11EF9A320864C4F9AE02.roa
File: C562775017FD11EF9A320864C4F9AE02.roa (raw, json)
Hash identifier: /WtVfmIGzSnn9ROVLgs6+dWRzHCaOdfjNH1x53TWZKY=
Subject key identifier: B6:F5:A8:63:BF:DC:31:80:04:30:DA:16:AA:B7:60:7C:0B:89:A4:B9
Certificate issuer: /CN=A911945B/serialNumber=EB32DF927434AC6D3A86847DDFBA3D2E81001131
Certificate serial: 012E
Authority key identifier: EB:32:DF:92:74:34:AC:6D:3A:86:84:7D:DF:BA:3D:2E:81:00:11:31
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zLfknQ0rG06hoR937o9LoEAETE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/C562775017FD11EF9A320864C4F9AE02.roa
Signing time: Fri 19 Dec 2025 04:23:09 +0000
ROA not before: Fri 19 Dec 2025 04:23:09 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 7575
IP address blocks: 203.2.32.0/22 maxlen: 22
203.2.36.0/24 maxlen: 24
203.2.37.0/24 maxlen: 24
203.2.38.0/24 maxlen: 24
203.2.39.0/24 maxlen: 24
203.2.40.0/22 maxlen: 22
203.2.41.0/24 maxlen: 24
203.2.44.0/22 maxlen: 22
203.2.48.0/22 maxlen: 22
203.2.60.0/24 maxlen: 24
203.2.61.0/24 maxlen: 24
203.15.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.crl
rsync://rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zLfknQ0rG06hoR937o9LoEAETE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 04:23:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 302 (0x12e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911945B, serialNumber=EB32DF927434AC6D3A86847DDFBA3D2E81001131
Validity
Not Before: Dec 19 04:23:09 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6944d32d-c17d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:35:d3:7c:1a:cf:33:67:9a:e0:94:0c:b7:bb:
47:4e:b7:91:92:da:bb:67:be:13:55:88:7d:5c:2a:
3d:d7:1e:44:a6:90:0f:91:5a:5e:7a:b4:d6:b2:97:
2f:72:4a:e8:4f:4c:bb:c3:32:68:44:78:93:4f:b8:
9c:af:af:24:c9:67:02:19:65:5a:7a:ce:4d:14:1d:
12:55:ab:31:6a:7f:30:d8:fa:3b:12:ed:81:62:a7:
86:cf:a0:93:b2:a4:e1:01:5e:b6:cd:4b:16:bc:24:
e8:25:07:3f:fe:f5:4d:92:10:0a:55:bb:c2:cf:c6:
c4:3f:02:ee:39:8d:36:59:dd:52:38:15:bf:f7:96:
77:35:43:e4:6d:4b:4c:95:df:f3:87:8d:3e:55:b6:
f5:85:b5:26:1f:5b:df:28:98:89:9f:5f:01:f9:2c:
4d:a1:53:ac:ad:74:5b:28:24:3b:0d:3b:6d:c9:6e:
e6:9d:51:1a:b9:46:c4:53:d0:ce:af:55:33:11:cb:
fc:13:fb:78:a2:4d:64:b6:e2:cb:99:fb:8a:68:93:
b6:77:f4:4c:4e:90:4e:88:32:aa:85:20:12:2c:89:
99:58:96:ee:a1:f6:79:16:51:2d:8c:a2:e0:a3:ae:
c0:3e:0f:3e:bb:40:b5:6a:c8:5a:da:29:e8:90:ac:
88:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F5:A8:63:BF:DC:31:80:04:30:DA:16:AA:B7:60:7C:0B:89:A4:B9
X509v3 Authority Key Identifier:
keyid:EB:32:DF:92:74:34:AC:6D:3A:86:84:7D:DF:BA:3D:2E:81:00:11:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zLfknQ0rG06hoR937o9LoEAETE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/C562775017FD11EF9A320864C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.2.32.0-203.2.51.255
203.2.60.0/23
203.15.154.0/24
Signature Algorithm: sha256WithRSAEncryption
be:66:4f:ae:b9:f8:6f:8d:43:64:1d:de:5f:02:a5:a3:59:f1:
8c:12:a9:e4:4f:42:4b:14:69:ec:15:49:bc:3c:d2:dd:2e:05:
d8:e3:18:69:49:29:22:90:55:f0:85:25:99:b1:c7:2d:da:ef:
69:77:f0:8d:7a:2d:65:c8:8e:2f:eb:88:13:16:a9:e0:92:63:
01:07:23:54:8d:58:30:02:8d:9c:8f:21:51:68:a7:dc:a3:39:
d8:9a:5b:5e:56:63:8f:3d:e8:00:3c:c5:d4:c6:8c:f6:4d:7e:
49:6b:bf:aa:fe:46:4d:7b:89:9d:41:6e:94:a3:d2:62:f6:9c:
30:6e:75:24:81:99:2a:49:2c:3e:75:6b:3c:af:3d:50:dd:b7:
8c:41:09:6e:b1:66:a9:67:85:74:a2:05:22:c3:3c:d8:70:33:
11:1d:4c:c4:bd:5d:0b:b1:4b:5c:b4:0b:c4:be:1b:73:bc:a3:
c0:b8:3e:25:ab:2a:99:03:47:92:74:93:39:cd:d0:01:c6:67:
8a:43:fa:f1:c4:45:05:a4:e0:aa:a1:3e:e7:83:bc:7c:1b:c5:
95:a2:3c:e2:f3:e5:52:ed:dc:30:d3:ed:d4:0b:21:49:65:a2:
ff:2d:d1:54:61:f2:81:f6:7b:fc:8e:e5:b6:d3:c7:c7:40:ad:
58:99:72:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:25:24 2025 by rpki-client