This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/BC38A630AFB511F0912BFF37C4F9AE02.roa
File: BC38A630AFB511F0912BFF37C4F9AE02.roa (raw, json)
Hash identifier: yYq9FUi9QUL8JQHPDpyePLTnQdBwLv7qNIB4oZOqa8Y=
Subject key identifier: 79:DD:03:7E:7E:30:EE:0F:A5:26:D8:34:CF:C3:F0:9A:38:9C:1E:93
Certificate issuer: /CN=A912176D/serialNumber=96F42E19F69D596A0318921590A17DD53233E595
Certificate serial: 087E
Authority key identifier: 96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/BC38A630AFB511F0912BFF37C4F9AE02.roa
Signing time: Fri 07 Nov 2025 08:52:37 +0000
ROA not before: Fri 07 Nov 2025 08:52:37 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 202736
IP address blocks: 43.225.36.0/24 maxlen: 24
43.225.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl
rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 20:30:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2174 (0x87e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912176D, serialNumber=96F42E19F69D596A0318921590A17DD53233E595
Validity
Not Before: Nov 7 08:52:37 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=690db355-5592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:16:c7:11:2c:a6:bd:23:ad:d2:19:00:3f:95:
6c:c3:6d:34:c7:d6:b3:8e:42:03:24:3e:f7:01:98:
ba:86:28:e7:51:4c:fc:fa:3b:b5:e1:e5:55:83:04:
f1:c3:7f:59:b3:94:26:cd:5d:9b:06:be:08:fe:c5:
31:84:63:35:cd:05:d3:c3:f3:f7:fe:94:78:d6:83:
9f:16:37:89:40:d2:2f:cc:f5:9d:d3:5f:a3:a2:85:
9d:fd:15:4c:e6:d3:ce:99:c2:fb:2f:6e:09:f5:29:
c5:1a:90:94:f8:bf:cf:56:3e:bb:ed:87:ed:16:e0:
63:1a:89:72:af:bd:8d:0b:b7:f6:c8:ac:e6:f1:34:
b5:d6:59:3d:76:b7:17:16:2e:d2:67:a3:fc:d9:ee:
0a:27:f5:13:97:91:2d:5b:5f:b4:1a:c7:e6:8d:1d:
b7:2b:5b:d7:17:a1:63:e0:35:d5:53:21:2b:4d:62:
47:e3:68:f9:4b:ab:2c:9e:14:c2:86:7f:e6:61:5d:
17:53:5b:52:43:ea:49:c1:26:48:f2:4d:6d:60:92:
c6:19:b1:cb:5a:25:c1:57:9f:a4:ad:2d:fb:70:9c:
e1:f9:49:de:a7:de:10:8c:2c:ce:61:d6:6c:34:d4:
25:32:d7:7e:76:5a:97:1d:81:57:32:85:ac:b1:f8:
76:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:DD:03:7E:7E:30:EE:0F:A5:26:D8:34:CF:C3:F0:9A:38:9C:1E:93
X509v3 Authority Key Identifier:
keyid:96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/BC38A630AFB511F0912BFF37C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.36.0/23
Signature Algorithm: sha256WithRSAEncryption
69:c9:2c:8f:c8:88:fc:f9:5a:09:ca:36:b2:6d:4b:b9:2d:9b:
d0:88:24:c5:f1:6f:11:d6:94:7e:e6:06:9e:31:15:84:79:48:
bb:59:65:17:0d:65:f9:1f:e5:ad:c2:c4:d3:68:c0:0e:c8:02:
2f:6b:ef:a5:53:13:f6:8f:d2:db:aa:17:84:f7:4f:52:9e:ee:
cb:e1:b2:ef:37:be:5b:51:17:9d:7a:ba:04:44:ae:bd:6a:27:
cd:e4:98:57:40:f9:ba:a6:28:8e:34:75:ef:5d:b4:76:40:64:
23:f3:d9:7a:eb:23:95:4e:20:1d:0d:08:72:de:65:3e:19:1d:
c6:ff:22:d4:0d:12:6a:1b:2b:a5:f2:e7:5c:7b:19:05:f8:7c:
94:08:86:c0:44:1e:d1:09:a0:0a:04:6e:f3:ef:74:04:4e:e3:
f5:29:06:3e:ca:08:7e:04:4d:ca:83:d7:0b:b0:05:df:ff:6a:
6f:45:10:f5:36:38:c3:d5:ca:6f:94:df:ae:ef:20:d6:3d:df:
6c:f2:98:c2:16:14:3a:dd:2d:42:5d:d1:77:91:37:77:c8:71:
66:c8:f0:a0:5d:e1:23:9c:b4:c4:5f:70:c0:1e:41:a8:18:ea:
df:3f:55:5a:04:f8:53:45:d4:4d:4c:e9:e1:90:9f:b7:0c:a4:
3a:fc:8e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 16:55:38 2025 by rpki-client