This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/FC03153ADBDD11F0AA14A9C858641951.roa
File: FC03153ADBDD11F0AA14A9C858641951.roa (raw, json)
Hash identifier: 2ObjOZ1YyUBkTC8vQFB/t8Q/pgar6Imnt7CP85pUwOo=
Subject key identifier: 5E:2B:4A:4E:AD:A3:DF:BA:55:81:E6:08:D4:DF:93:0C:95:DB:5A:76
Certificate issuer: /CN=A913EFAB/serialNumber=9F2BFD7D800CFA13E9048AE100B4851430126FD3
Certificate serial: 0598
Authority key identifier: 9F:2B:FD:7D:80:0C:FA:13:E9:04:8A:E1:00:B4:85:14:30:12:6F:D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nyv9fYAM-hPpBIrhALSFFDASb9M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/FC03153ADBDD11F0AA14A9C858641951.roa
Signing time: Thu 18 Dec 2025 12:33:32 +0000
ROA not before: Thu 18 Dec 2025 12:33:32 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 138926
IP address blocks: 103.170.178.0/24 maxlen: 24
103.170.179.0/24 maxlen: 24
2402:41a0::/32 maxlen: 32
2402:41a0::/48 maxlen: 48
2402:41a0:170::/48 maxlen: 48
2402:41a0:171::/48 maxlen: 48
2402:41a0:172::/48 maxlen: 48
2402:41a0:173::/48 maxlen: 48
2402:41a0:174::/48 maxlen: 48
2402:41a0:175::/48 maxlen: 48
2402:41a0:176::/48 maxlen: 48
2402:41a0:177::/48 maxlen: 48
2402:41a0:178::/48 maxlen: 48
2402:41a0:179::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.crl
rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nyv9fYAM-hPpBIrhALSFFDASb9M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 22:38:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1432 (0x598)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913EFAB, serialNumber=9F2BFD7D800CFA13E9048AE100B4851430126FD3
Validity
Not Before: Dec 18 12:33:32 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6943f49c-53a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:14:fc:30:c3:0b:03:28:28:ac:ca:2d:05:ed:
55:d1:f0:68:25:6e:00:90:5b:33:64:e1:e4:0d:c3:
fd:47:7e:45:79:c8:cf:2b:1c:20:b6:71:97:da:4a:
c4:36:d7:28:67:7a:28:d5:51:f7:ec:54:67:6a:44:
6c:b1:58:97:fd:77:29:fb:a0:09:e6:2f:6e:09:81:
ab:bc:a0:5e:6e:7d:da:e3:ad:d3:4b:82:be:32:a8:
fc:70:9d:fd:f2:6c:b7:30:37:c0:81:ff:fd:3c:e9:
b9:be:d6:51:01:77:17:51:12:8a:fa:1e:d0:6b:93:
58:4d:9f:2c:48:16:2f:4d:8b:58:d1:01:70:17:bf:
aa:37:2d:e7:cb:8b:2a:16:a5:a6:c6:80:61:40:16:
70:a3:12:ea:09:79:10:51:55:dd:15:9c:bd:31:57:
2f:ff:f2:f5:b7:bd:d0:ba:63:70:5a:29:4a:86:02:
57:2e:ba:55:c3:2b:fb:c4:2a:81:93:1c:26:a6:da:
ed:2f:21:13:bd:c3:0e:54:40:e0:84:aa:6f:f8:92:
d8:d3:1f:9e:ef:9d:31:2a:cf:1d:69:29:8a:4a:f2:
f8:aa:06:55:47:d1:48:9a:3a:89:14:67:7c:fb:d2:
73:31:6d:00:cf:3d:73:f8:28:f7:da:df:64:97:13:
12:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:2B:4A:4E:AD:A3:DF:BA:55:81:E6:08:D4:DF:93:0C:95:DB:5A:76
X509v3 Authority Key Identifier:
keyid:9F:2B:FD:7D:80:0C:FA:13:E9:04:8A:E1:00:B4:85:14:30:12:6F:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nyv9fYAM-hPpBIrhALSFFDASb9M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/FC03153ADBDD11F0AA14A9C858641951.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.170.178.0/23
IPv6:
2402:41a0::/32
Signature Algorithm: sha256WithRSAEncryption
a6:c0:97:5d:2e:3f:af:ef:9e:18:44:d8:cd:ac:74:c8:b2:3a:
b7:c1:9e:6d:30:5e:2c:14:fe:c4:12:21:f1:2e:f5:4a:14:a7:
88:8c:76:ef:1c:bd:23:6b:1a:bf:dc:fb:3e:a2:81:0b:a7:70:
c1:26:19:8b:2c:39:89:23:ae:58:06:aa:3c:3d:b8:9a:21:2e:
28:01:e7:b3:b8:f2:ac:14:a7:b4:02:22:52:d4:ce:97:7a:bc:
d9:7d:2d:c4:be:32:8f:6a:0d:9e:b2:39:18:23:bd:40:fa:ca:
51:06:af:45:31:95:84:d3:ea:ea:bc:87:23:9d:29:5f:7a:7b:
bf:d5:25:af:8b:22:e7:b3:34:da:8b:bf:48:26:64:c2:47:b3:
f3:38:8f:fc:44:1c:9c:fc:b2:c3:42:46:65:7b:a5:8c:c2:87:
74:03:56:3b:3f:5c:7d:59:40:a1:62:a6:4a:39:40:82:c9:3e:
38:79:e3:a4:71:c7:57:f3:5c:f1:4c:9a:cf:fa:f7:85:cc:8f:
ce:f6:95:bb:d3:4f:c4:80:60:1e:79:c0:f5:9a:02:01:17:02:
30:a7:0f:33:dd:15:82:36:85:6f:e8:de:3e:08:1b:fa:ce:d0:
69:0d:38:d4:e3:54:ce:a5:f4:75:7b:d9:79:ad:cc:89:c5:1e:
b9:97:66:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 01:38:25 2025 by rpki-client