This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/9F9CEB425CB911ECAEF7AE14C4F9AE02.roa
File: 9F9CEB425CB911ECAEF7AE14C4F9AE02.roa (raw, json)
Hash identifier: r19jWUfm6ne9mMhoLOU3FQVzD9TqdTUiA0fmQoFhQKU=
Subject key identifier: 5E:A9:D0:8B:BD:A1:C6:40:5F:DD:7C:55:D4:9F:F1:8F:6C:A0:2A:E6
Certificate issuer: /CN=A914FE87/serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49
Certificate serial: 04A3
Authority key identifier: EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/9F9CEB425CB911ECAEF7AE14C4F9AE02.roa
Signing time: Mon 10 Nov 2025 22:45:57 +0000
ROA not before: Mon 10 Nov 2025 22:45:57 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 147033
IP address blocks: 103.173.106.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl
rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 23:19:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1187 (0x4a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914FE87, serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49
Validity
Not Before: Nov 10 22:45:57 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69126b24-2f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0f:db:0e:55:41:9b:32:81:bd:2e:a1:ec:0e:
a3:b4:e6:00:34:6d:4b:1e:8e:28:61:a7:d6:ce:5d:
ba:37:7c:d3:29:75:62:ec:20:7d:71:2d:8e:ca:af:
a1:49:c1:01:fc:53:4c:89:14:10:48:c9:dd:d6:36:
ec:94:61:21:d4:9d:62:af:fd:b3:42:14:61:3f:49:
41:0b:6c:56:40:3e:e2:5e:d1:43:95:b8:12:44:b9:
48:fe:fa:2b:3a:a1:9f:47:54:2e:03:13:cd:93:4d:
5a:a7:17:af:c3:a8:4c:0e:89:03:c0:ca:bd:89:af:
be:bc:16:8c:05:73:5f:56:39:dc:86:c8:87:11:1d:
d3:9d:08:83:d6:d7:7e:ee:72:84:8b:66:72:be:87:
47:3e:b6:8b:93:60:fe:95:d1:81:53:7e:ef:00:62:
b9:a6:3d:ac:47:4e:a3:29:d7:98:29:68:aa:c2:54:
18:42:20:c7:d1:c5:92:e2:1b:b3:2f:3c:2d:3b:fa:
f6:a5:27:73:69:8a:60:5e:03:93:78:f2:ff:cd:e4:
8e:70:b5:98:0c:ff:8d:df:c3:37:c3:12:d0:19:00:
bb:ef:7e:51:1d:36:07:e8:14:a9:63:fb:f4:5f:ba:
91:4d:a2:e2:7f:73:18:aa:54:21:bd:35:bb:21:29:
7c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A9:D0:8B:BD:A1:C6:40:5F:DD:7C:55:D4:9F:F1:8F:6C:A0:2A:E6
X509v3 Authority Key Identifier:
keyid:EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/9F9CEB425CB911ECAEF7AE14C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.173.106.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:a8:33:5e:fa:66:77:2e:63:2a:93:9a:dd:a9:b8:34:ef:d9:
66:33:6f:fb:7e:35:7e:40:df:b9:ab:0f:38:b9:e7:6c:8a:90:
27:c2:67:44:53:aa:ee:b9:46:59:02:d4:a5:05:b3:8a:8e:59:
20:3d:e7:d9:3d:49:eb:fa:ac:8e:25:e7:b6:cf:fd:3e:b9:57:
c2:b1:82:3c:fa:33:75:ac:48:cd:9c:ea:34:22:0b:45:d1:ff:
2f:4f:67:28:d0:87:ec:4f:69:b1:78:5f:a2:5f:58:30:81:1a:
dc:d5:6f:b0:01:b2:dd:1d:9b:2d:9e:be:07:82:80:a1:c7:69:
7c:db:52:ec:dd:40:db:b2:a2:d8:3b:6f:f7:1e:a3:2e:9c:9f:
04:27:a8:1d:68:de:17:db:ff:3f:12:fe:35:95:02:a9:b3:22:
3e:66:73:db:90:09:be:24:07:8c:c2:b1:19:d4:bc:73:a9:9c:
0d:4a:df:97:6a:ae:b3:b7:9f:41:57:2a:4d:55:7b:05:43:be:
d7:f5:eb:76:f6:b3:0c:0f:e5:04:e5:66:6b:d4:be:39:e2:0b:
01:3f:a8:dc:0f:0d:1d:49:60:5d:01:fd:d2:0c:fc:78:5b:73:
06:f3:ab:da:9b:5b:f3:b7:e5:8b:4d:46:d1:b0:ee:6e:83:31:
9a:ff:d1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:31:05 2025 by rpki-client