This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/D6246110AA6F11F0AD515C63C4F9AE02.roa
File: D6246110AA6F11F0AD515C63C4F9AE02.roa (raw, json)
Hash identifier: RGGyK8DspBxTZffeC/YcsDxozPm/op0sIdvWa7dUrhw=
Subject key identifier: B4:BB:BA:DA:12:79:56:3E:AF:C9:03:6D:F2:FF:DE:E3:36:54:3A:AE
Certificate issuer: /CN=A9153850/serialNumber=2AB2432C3AD5128ED73E99C460D0611FAF4D220E
Certificate serial: 83
Authority key identifier: 2A:B2:43:2C:3A:D5:12:8E:D7:3E:99:C4:60:D0:61:1F:AF:4D:22:0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KrJDLDrVEo7XPpnEYNBhH69NIg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/D6246110AA6F11F0AD515C63C4F9AE02.roa
Signing time: Thu 16 Oct 2025 09:09:36 +0000
ROA not before: Thu 16 Oct 2025 09:09:36 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 139012
IP address blocks: 163.223.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/KrJDLDrVEo7XPpnEYNBhH69NIg4.crl
rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/KrJDLDrVEo7XPpnEYNBhH69NIg4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KrJDLDrVEo7XPpnEYNBhH69NIg4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 05:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131 (0x83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153850, serialNumber=2AB2432C3AD5128ED73E99C460D0611FAF4D220E
Validity
Not Before: Oct 16 09:09:36 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=68f0b650-7a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:39:9e:2f:a8:15:0a:12:34:bd:23:54:d6:28:
1c:da:fc:62:ad:5e:d6:b0:b3:d4:f3:89:94:c0:59:
48:b5:e5:90:e3:a1:cd:e8:3a:f8:6e:bf:73:65:0f:
b9:01:97:7d:ec:a7:f3:bc:da:b0:e9:01:7f:29:30:
5a:94:7d:a7:8f:07:6e:e8:76:12:a9:7e:5f:11:b0:
65:4e:a1:b4:b9:8f:cf:e3:ea:80:bf:cf:7a:4d:42:
a6:d3:73:a6:c0:e3:6a:b2:5c:e1:c4:7c:f4:7e:dd:
22:e5:4c:e8:dc:f8:dd:fd:af:03:9a:6a:4b:a3:9d:
5f:fc:ad:88:0c:12:ef:11:23:0c:6b:76:67:c0:0e:
7d:92:65:0a:3d:3d:80:e7:26:fa:a3:6e:5f:27:3e:
7a:b9:02:fd:ad:5a:b4:82:b4:00:9c:66:f5:23:f6:
6f:17:50:41:bb:a5:c5:1f:3e:3a:df:3e:7d:57:76:
c8:f6:f7:01:74:73:cb:8d:05:8d:19:ef:8a:a0:24:
3b:2e:f3:a8:5a:f3:2c:71:98:e3:ca:65:4c:54:09:
ce:88:d2:af:33:2b:3e:e3:e5:e3:15:88:87:95:63:
c9:86:ab:dc:c2:31:5a:45:e9:d1:26:1d:ba:b8:a0:
3e:73:03:bb:16:5f:a1:ba:c6:33:cb:ae:f0:ca:9a:
fe:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BB:BA:DA:12:79:56:3E:AF:C9:03:6D:F2:FF:DE:E3:36:54:3A:AE
X509v3 Authority Key Identifier:
keyid:2A:B2:43:2C:3A:D5:12:8E:D7:3E:99:C4:60:D0:61:1F:AF:4D:22:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/KrJDLDrVEo7XPpnEYNBhH69NIg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KrJDLDrVEo7XPpnEYNBhH69NIg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/D6246110AA6F11F0AD515C63C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.223.57.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:c7:f7:17:e9:82:c5:f9:19:0b:11:04:17:7f:65:42:da:d1:
dc:fd:d4:b8:f7:54:8f:41:fa:2f:ba:77:cf:0d:86:eb:c4:de:
97:57:66:83:de:ab:86:c1:ff:10:cf:f0:b5:78:85:b5:12:e4:
0f:5c:95:4b:cb:5b:7e:95:48:d0:b4:6a:26:b6:30:fa:df:18:
be:4a:f2:96:0a:3c:8a:80:1f:72:1a:ad:d1:6a:43:24:20:2e:
2e:1f:6b:a5:5c:13:e5:4f:6f:3d:a7:51:08:1c:2e:4c:dd:30:
8f:72:86:60:13:a6:9f:69:05:66:93:d5:d1:31:0a:55:6b:e2:
9a:f3:0b:a7:90:a0:9f:0c:82:d3:07:af:6a:27:79:1c:b3:56:
7d:9d:04:aa:36:48:af:ef:5c:70:74:d0:43:94:7a:6b:21:f8:
a3:3e:c5:e5:4f:5f:1d:67:24:4d:ae:72:ce:83:aa:3a:92:b9:
50:11:3b:e3:28:87:03:54:bf:e3:9a:28:b3:f9:67:d8:cb:e1:
5b:36:59:51:1b:3e:8e:7d:40:ea:ea:b9:2c:55:2f:ab:12:af:
e2:78:05:45:14:64:c9:08:ac:cf:dc:f1:a5:5e:ec:48:d4:8e:
e5:06:ca:b8:ad:76:bc:2e:45:1b:2c:ac:e1:69:55:92:7b:71:
89:09:f6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:31:12 2025 by rpki-client