This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/830A87FCD49511F0ACA42142C4F9AE02.roa
File: 830A87FCD49511F0ACA42142C4F9AE02.roa (raw, json)
Hash identifier: J48jVYAPcubXEJWg5zM54Rai/8mjj7AI0PpCCOKJIK8=
Subject key identifier: 57:7B:55:A8:85:33:44:B5:09:0C:B9:A9:E8:E6:CB:A8:EB:04:85:5F
Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial: 3B4D
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/830A87FCD49511F0ACA42142C4F9AE02.roa
Signing time: Tue 09 Dec 2025 00:26:33 +0000
ROA not before: Tue 09 Dec 2025 00:26:33 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 401783
IP address blocks: 101.53.86.0/24 maxlen: 24
182.237.53.0/24 maxlen: 24
182.237.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 14:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15181 (0x3b4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Validity
Not Before: Dec 9 00:26:33 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69376cb9-6da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:60:6f:bb:7a:7a:a0:db:74:ba:03:0f:14:5f:
83:46:d7:06:05:6e:7b:9c:1a:94:9e:0c:13:9d:1c:
a0:11:e8:9b:7d:af:94:aa:99:a1:80:89:f3:db:99:
40:b1:43:75:9b:ff:e1:e8:6b:52:6e:7f:7c:fd:2d:
1a:46:bd:fe:5f:51:2f:97:d4:bf:9a:db:e3:43:d2:
f8:5f:36:11:d5:31:5b:f8:14:77:87:1b:4b:7f:79:
48:c2:c7:30:2e:5c:16:c8:55:1d:f3:74:70:98:c8:
32:a3:eb:5d:9c:af:e9:d2:dd:b6:c3:16:b7:57:37:
98:5a:03:28:22:6d:5d:9a:b2:9e:43:84:75:35:1e:
5a:a3:1a:1d:ee:4e:2f:1c:64:11:ea:b2:53:34:60:
eb:96:b8:8e:cf:94:ea:f2:3c:fd:85:49:3f:c6:45:
8a:1a:33:89:c0:c2:2b:79:e1:85:ad:e0:4f:5b:27:
65:8c:6d:45:67:d3:51:60:c5:c6:70:67:b3:e3:85:
47:07:4e:20:31:da:b5:28:76:10:ce:36:c7:48:74:
b4:86:3a:b4:2f:2f:2a:43:90:bc:a1:d2:dd:b7:9a:
41:88:fd:d7:86:1f:a9:30:2f:a2:8e:58:6b:8d:20:
08:58:13:5b:93:b2:fb:17:b8:0f:92:62:be:56:f6:
10:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:7B:55:A8:85:33:44:B5:09:0C:B9:A9:E8:E6:CB:A8:EB:04:85:5F
X509v3 Authority Key Identifier:
keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/830A87FCD49511F0ACA42142C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
101.53.86.0/24
182.237.53.0/24
182.237.63.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:65:c3:c7:c3:77:4b:c1:19:db:53:e7:ff:b7:49:24:db:44:
d6:68:ca:72:88:fb:f9:36:5e:11:c8:19:a8:07:c8:b3:74:d6:
eb:7c:09:02:37:d1:84:33:42:95:62:3e:ef:32:2c:fa:cb:24:
c3:52:8e:35:3b:bf:a5:a1:5c:48:1d:88:bb:5e:78:1a:5b:1a:
cf:48:98:2d:71:87:96:25:f5:87:5b:08:bd:07:e4:aa:0a:87:
fc:f9:fa:74:b1:ee:d5:9d:fa:b2:f8:00:8b:27:f9:67:a8:0a:
17:87:ba:25:3c:7b:1c:fe:3f:0c:58:97:73:f5:b6:58:11:a1:
9c:66:1b:97:ed:2f:83:3d:7d:53:82:c3:a3:1a:89:2d:a2:3a:
62:30:3c:0f:e1:25:f4:90:e8:03:d6:7b:df:d6:b4:12:13:63:
ff:15:8f:14:f6:e9:ec:d7:d0:38:48:70:d2:ea:08:ea:0e:e1:
65:41:ec:b5:07:a5:0b:ce:66:97:a7:00:df:84:61:03:5a:f6:
1a:d8:dc:b1:dc:37:2e:b3:8f:e9:51:06:6a:f3:be:a2:ae:4a:
4a:92:fb:8a:68:a6:d9:9b:88:ed:4b:da:a9:85:3d:9e:0b:77:
4c:2d:f5:44:a6:0c:c9:87:bf:34:c9:fe:47:12:ba:9f:76:71:
3f:25:81:d6
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgICO00wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG
OURGN0M1NEIwHhcNMjUxMjA5MDAyNjMzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTM3NmNiOS02ZGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtGBvu3p6oNt0ugMPFF+DRtcGBW57nBqUngwTnRygEeibfa+UqpmhgInz25lA
sUN1m//h6GtSbn98/S0aRr3+X1Evl9S/mtvjQ9L4XzYR1TFb+BR3hxtLf3lIwscw
LlwWyFUd83RwmMgyo+tdnK/p0t22wxa3VzeYWgMoIm1dmrKeQ4R1NR5aoxod7k4v
HGQR6rJTNGDrlriOz5Tq8jz9hUk/xkWKGjOJwMIreeGFreBPWydljG1FZ9NRYMXG
cGez44VHB04gMdq1KHYQzjbHSHS0hjq0Ly8qQ5C8odLdt5pBiP3Xhh+pMC+ijlhr
jSAIWBNbk7L7F7gPkmK+VvYQZQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFFd7VaiF
M0S1CQy5qejmy6jrBIVfMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE
ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4
VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvODMwQTg3RkNE
NDk1MTFGMEFDQTQyMTQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E
HDAaMBgEAgABMBIDBABlNVYDBAC27TUDBAC27T8wDQYJKoZIhvcNAQELBQADggEB
AEplw8fDd0vBGdtT5/+3SSTbRNZoynKI+/k2XhHIGagHyLN01ut8CQI30YQzQpVi
Pu8yLPrLJMNSjjU7v6WhXEgdiLteeBpbGs9ImC1xh5Yl9YdbCL0H5KoKh/z5+nSx
7tWd+rL4AIsn+WeoCheHuiU8exz+PwxYl3P1tlgRoZxmG5ftL4M9fVOCw6MaiS2i
OmIwPA/hJfSQ6APWe9/WtBITY/8VjxT26ezX0DhIcNLqCOoO4WVB7LUHpQvOZpen
AN+EYQNa9hrY3LHcNy6zj+lRBmrzvqKuSkqS+4poptmbiO1L2qmFPZ4Ld0wt9USm
DMmHvzTJ/kcSup92cT8lgdY=
-----END CERTIFICATE-----
Generated at Fri Dec 19 22:48:20 2025 by rpki-client