This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/722022AEB3C411F0AB42E30CC4F9AE02.roa
File: 722022AEB3C411F0AB42E30CC4F9AE02.roa (raw, json)
Hash identifier: zJGjUrnbSMk5V656YwH2KxI3KNelMEHiCvbKNGT1UK4=
Subject key identifier: 55:A9:7B:44:41:87:CA:82:6F:26:A8:7D:67:83:05:2F:9B:23:EE:5F
Certificate issuer: /CN=A9123072/serialNumber=E3BCBA88BEDC2A768A9865F416D68A7C3033F469
Certificate serial: 0827
Authority key identifier: E3:BC:BA:88:BE:DC:2A:76:8A:98:65:F4:16:D6:8A:7C:30:33:F4:69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/722022AEB3C411F0AB42E30CC4F9AE02.roa
Signing time: Fri 19 Dec 2025 09:05:14 +0000
ROA not before: Fri 19 Dec 2025 09:05:14 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 149014
IP address blocks: 103.198.192.0/24 maxlen: 24
103.198.193.0/24 maxlen: 24
103.198.194.0/24 maxlen: 24
103.198.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl
rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 09:17:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2087 (0x827)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123072, serialNumber=E3BCBA88BEDC2A768A9865F416D68A7C3033F469
Validity
Not Before: Dec 19 09:05:14 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6945154a-aeb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c2:d1:68:a7:d7:2a:cb:be:85:b1:e0:4a:ce:
28:ad:ca:9b:b4:2d:67:75:af:4b:fe:07:3e:0c:05:
f6:75:d7:14:bb:14:c4:08:aa:1b:08:cb:0c:af:7d:
57:e4:02:77:2d:b2:ee:ca:ad:c5:ac:fd:2e:75:0b:
ca:ea:07:70:f0:0a:d4:85:27:d3:07:10:34:94:d3:
0e:54:4d:22:b3:cb:cf:57:e2:67:b6:d3:6f:5f:49:
de:c2:2f:ef:b5:43:01:2b:14:8a:ad:b0:95:b4:63:
70:b6:f7:a3:c1:57:da:20:bc:db:cc:b5:f7:3b:94:
04:80:93:09:73:80:ff:f0:78:48:f3:d1:5e:12:33:
a0:9d:2b:84:e3:bd:c8:ad:96:fa:ba:1c:93:43:65:
98:8a:71:e5:48:7f:02:e5:1c:07:88:bd:10:7d:a2:
e8:45:15:3d:47:fd:41:42:0e:58:e4:89:e2:4b:0a:
e4:d7:48:63:2f:f6:53:87:b6:75:0e:cd:6a:29:74:
ac:7d:6d:b3:9d:31:75:d7:36:b5:0f:a8:b1:8b:ce:
f6:ea:14:07:06:3f:b5:44:50:98:9b:ce:f7:68:9a:
6a:7d:19:dc:b5:a9:33:23:a2:e0:c0:01:57:47:e6:
13:c5:5d:b6:f5:ed:b4:d2:d2:5d:c5:89:56:ef:f3:
4d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A9:7B:44:41:87:CA:82:6F:26:A8:7D:67:83:05:2F:9B:23:EE:5F
X509v3 Authority Key Identifier:
keyid:E3:BC:BA:88:BE:DC:2A:76:8A:98:65:F4:16:D6:8A:7C:30:33:F4:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/722022AEB3C411F0AB42E30CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.198.192.0/22
Signature Algorithm: sha256WithRSAEncryption
49:b0:4b:08:c7:a4:73:28:47:e8:a4:5c:5d:bd:63:34:cb:c4:
55:a6:40:0f:01:89:45:7d:b3:3d:79:ed:44:21:fc:fc:5c:ce:
a3:b8:29:16:07:f4:1c:f2:9b:4f:20:03:90:d4:04:95:a6:f8:
61:e6:fa:70:60:37:53:50:87:2a:94:10:f1:69:fb:f3:5f:0c:
b3:81:40:26:d9:1a:52:5a:3e:b1:b7:e2:ff:7f:21:20:a8:d1:
a4:8e:fc:8c:42:79:65:fc:89:26:50:6a:17:e1:84:6c:7c:bf:
5c:50:4a:f3:0a:94:fc:24:bf:5c:78:9e:7d:0b:ef:77:d0:4b:
4f:f6:e0:ff:c0:ce:74:24:d1:da:63:00:cd:6f:ce:74:1a:d9:
a9:34:ba:5a:ae:29:cc:34:af:82:c6:80:b4:65:0b:b3:c5:c2:
5d:1e:e4:93:b1:a1:9e:22:27:8c:de:00:1a:e0:9e:70:74:67:
1d:ed:9b:15:ae:fa:f3:1b:0b:5c:82:1b:e4:75:a9:e5:90:8e:
e4:07:10:b6:07:f6:6b:3f:ed:f5:6c:e0:54:c4:4a:1b:26:93:
cc:36:e2:87:5d:8a:21:b6:44:15:b2:98:fb:05:77:2a:24:47:
99:98:46:82:e7:b2:38:de:c0:e8:3c:58:91:bc:ba:2b:02:6f:
06:c3:69:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:56:05 2025 by rpki-client