This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/97EC93B821DA11EBAA441F75C4F9AE02.roa
File: 97EC93B821DA11EBAA441F75C4F9AE02.roa (raw, json)
Hash identifier: WDeEnar/pIFGouutv4CLauMEkuTO/puMCmVPP1vIiEY=
Subject key identifier: 01:C8:B6:66:C3:BA:85:22:E3:7E:63:8F:A5:DC:C7:04:3F:35:12:C9
Certificate issuer: /CN=A915BFDA/serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91
Certificate serial: 0CA4
Authority key identifier: 5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/97EC93B821DA11EBAA441F75C4F9AE02.roa
Signing time: Wed 31 Dec 2025 18:16:10 +0000
ROA not before: Wed 31 Dec 2025 18:16:10 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 135386
IP address blocks: 103.145.38.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl
rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 07 Jan 2026 18:16:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3236 (0xca4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BFDA, serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91
Validity
Not Before: Dec 31 18:16:10 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6955686a-abaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:27:c8:bc:83:42:33:98:e8:bb:b7:a3:0a:43:
fd:d7:ea:4d:95:64:d2:fc:4f:4b:9c:95:fd:7f:91:
f9:a0:3a:95:be:90:38:84:df:8a:d5:04:9b:b6:2a:
e6:0e:bf:88:d7:0a:13:e5:48:d9:cc:50:ce:d9:70:
0d:2a:28:6c:29:69:d2:5b:d5:9f:46:62:22:ab:53:
b1:ff:08:f6:d8:ce:94:a4:e0:82:ea:ee:f0:2f:c9:
fd:47:03:c6:1b:21:51:ea:0a:c8:56:b0:96:65:24:
fb:ad:c6:b0:40:a0:60:0c:e3:56:a4:74:72:0c:d9:
e7:c4:ea:83:94:4b:74:13:39:a0:d5:ea:8c:ec:80:
ed:e5:0c:81:60:66:99:19:f3:05:85:c9:85:2b:15:
e9:15:79:21:2f:cc:fc:82:bc:8d:d6:b9:15:ad:5a:
5c:d1:dc:f7:53:6a:94:0d:7c:16:3c:71:a0:e4:2f:
82:44:88:57:b7:65:ba:b8:ce:c1:a0:45:de:8b:af:
9e:28:02:3c:c2:94:e6:fa:64:87:98:67:5b:58:8a:
db:eb:ec:d2:43:c6:38:55:2c:bb:90:e8:27:d5:f2:
66:95:4d:87:df:89:5d:5e:a0:3e:64:e4:84:68:4d:
4a:13:83:ec:d9:2e:b7:ac:60:5e:a2:4c:05:6d:d0:
e8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C8:B6:66:C3:BA:85:22:E3:7E:63:8F:A5:DC:C7:04:3F:35:12:C9
X509v3 Authority Key Identifier:
keyid:5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/97EC93B821DA11EBAA441F75C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.145.38.0/23
Signature Algorithm: sha256WithRSAEncryption
95:e5:d3:3f:05:af:5e:e6:af:a9:2a:d4:5e:94:9e:0a:5b:6e:
6b:7c:ce:2e:e2:b8:a1:4b:48:d1:a6:ba:c4:36:58:43:8e:28:
e8:e0:f2:5f:d3:e3:58:fa:7f:4a:6f:24:b1:85:85:0c:26:29:
a9:d8:9d:dc:78:5c:b4:9b:a9:c8:0d:b4:a6:e2:78:01:0e:5e:
74:78:a2:5d:2a:ee:79:af:e4:c6:cd:44:88:01:d6:82:4d:f9:
03:16:4a:10:1c:9c:27:97:66:ba:3e:8e:0c:a7:ec:f5:a9:76:
8f:84:a4:72:1b:e2:9f:f2:17:25:60:24:6a:b6:4f:dc:23:3a:
9a:95:e9:e9:dd:98:e8:07:59:34:cb:42:e6:29:24:2f:ba:44:
20:a7:76:7f:ef:89:0b:e8:62:73:a4:39:16:d7:52:a4:f9:3e:
6b:bb:70:c5:c0:0c:ab:71:de:a6:f1:ec:d0:ff:96:82:2a:3c:
df:e5:76:1e:4d:14:4f:c4:42:79:ca:c0:46:cc:57:01:53:bb:
21:e2:81:64:e4:7c:b0:bf:02:4b:55:1a:94:4b:c6:00:b5:4f:
8a:87:54:50:64:56:58:da:5c:8c:d4:60:9b:60:e8:59:56:5d:
18:cf:dd:44:9c:64:21:d1:64:22:f6:cf:8c:1b:2c:e5:0d:26:
64:8d:a0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 05:46:07 2026 by rpki-client