This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C532/B42B7D22B21011E9AD7E0F79C4F9AE02/ACE45EC4C5AE11E998CC136CC4F9AE02.roa
File: ACE45EC4C5AE11E998CC136CC4F9AE02.roa (raw, json)
Hash identifier: g3qDe1sc3cQP3xfaLWtTraSUhZiLD4IiyWXHano3tHA=
Subject key identifier: 7E:DB:4E:06:06:7E:73:EA:E8:71:B1:73:C3:3F:35:04:42:31:D2:E6
Certificate issuer: /CN=A915C532/serialNumber=0BA75469C62D259205BA8BB65DB99D0337BAD77D
Certificate serial: 0E3A
Authority key identifier: 0B:A7:54:69:C6:2D:25:92:05:BA:8B:B6:5D:B9:9D:03:37:BA:D7:7D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6dUacYtJZIFuou2XbmdAze6130.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C532/B42B7D22B21011E9AD7E0F79C4F9AE02/ACE45EC4C5AE11E998CC136CC4F9AE02.roa
Signing time: Tue 14 Oct 2025 18:47:14 +0000
ROA not before: Tue 14 Oct 2025 18:47:14 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 54187
IP address blocks: 103.21.28.0/22 maxlen: 24
2405:5500::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915C532/B42B7D22B21011E9AD7E0F79C4F9AE02/C6dUacYtJZIFuou2XbmdAze6130.crl
rsync://rpki.apnic.net/member_repository/A915C532/B42B7D22B21011E9AD7E0F79C4F9AE02/C6dUacYtJZIFuou2XbmdAze6130.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6dUacYtJZIFuou2XbmdAze6130.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 17:35:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3642 (0xe3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C532, serialNumber=0BA75469C62D259205BA8BB65DB99D0337BAD77D
Validity
Not Before: Oct 14 18:47:14 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=68ee9ab1-6815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d6:1c:81:0a:cb:af:84:80:34:1f:32:6e:fc:
d9:bc:52:e9:cd:1a:40:75:d3:59:ad:7c:b2:11:a4:
35:64:e4:b7:d0:f5:ce:a9:ab:9c:84:5a:18:74:e6:
d8:62:26:ec:e7:1f:54:7d:be:23:70:a2:1d:00:b9:
3e:b6:d3:a0:1a:1a:88:06:90:ac:7a:d2:0e:a7:44:
83:a2:4c:c6:1c:5a:1b:df:67:f2:2b:c2:ad:8e:7d:
64:d8:79:d1:2d:45:8c:cc:99:6e:2a:42:76:4d:6c:
cf:0a:19:41:4c:f4:69:95:97:a0:20:ee:99:79:85:
0f:3b:5c:5e:a8:1d:a0:19:4b:08:ec:e4:87:a4:65:
02:b0:01:73:fe:fe:3a:69:b9:8f:cf:36:67:46:8e:
c1:43:13:e9:15:73:49:00:14:dd:2b:1f:59:c2:bf:
11:d4:11:9a:0d:59:02:83:3e:58:4d:b1:4a:ea:3b:
c3:3c:83:b9:d5:82:df:c4:28:fc:0a:ca:e7:29:7b:
d6:aa:54:34:b4:12:ea:e6:6c:62:0e:e7:19:bf:44:
37:2d:25:75:b3:7b:0a:aa:85:62:ea:53:7c:18:01:
6c:e2:97:c7:5e:d3:8c:c0:06:3f:1f:e8:2c:ca:3e:
ab:25:06:5c:9b:16:07:ea:d5:e7:74:48:70:28:a9:
07:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:DB:4E:06:06:7E:73:EA:E8:71:B1:73:C3:3F:35:04:42:31:D2:E6
X509v3 Authority Key Identifier:
keyid:0B:A7:54:69:C6:2D:25:92:05:BA:8B:B6:5D:B9:9D:03:37:BA:D7:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C532/B42B7D22B21011E9AD7E0F79C4F9AE02/C6dUacYtJZIFuou2XbmdAze6130.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6dUacYtJZIFuou2XbmdAze6130.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C532/B42B7D22B21011E9AD7E0F79C4F9AE02/ACE45EC4C5AE11E998CC136CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.21.28.0/22
IPv6:
2405:5500::/32
Signature Algorithm: sha256WithRSAEncryption
bd:60:df:00:c8:f2:43:da:e2:fd:bd:98:1d:ea:a4:d4:68:89:
07:9d:cd:a9:1c:0d:6c:7f:77:03:c3:87:59:75:3f:48:6f:7b:
4f:5c:d4:62:59:74:1f:16:15:73:8d:aa:92:7a:bc:c5:dd:ca:
ae:88:a9:7e:39:56:85:6e:a7:66:47:08:03:1f:74:4e:be:8f:
f3:ad:0c:cb:bb:b5:2d:cd:fe:f6:47:61:62:f1:14:ab:8d:fa:
25:35:41:f5:bf:7e:18:65:08:8c:a0:8b:17:12:11:72:77:2d:
a9:53:d6:75:a3:ab:69:ed:fe:1d:d7:d6:86:b1:b4:75:47:87:
f6:83:b2:33:01:93:d5:50:4c:56:f1:1f:da:58:b0:1c:99:1e:
c6:cd:2e:a4:79:ea:74:ac:03:b1:e4:85:18:70:87:15:86:bf:
83:49:9b:6a:f2:c6:39:21:04:04:07:38:af:79:e6:34:3e:6f:
c4:c8:b2:86:db:7d:0f:3c:f3:b8:f4:dc:51:6f:a8:18:06:12:
20:b0:60:f5:c6:b6:7e:ac:ca:79:a5:6f:cc:fd:80:cf:51:8e:
75:cb:4f:1c:4a:a1:69:e6:6e:6b:77:22:c6:a6:14:5f:94:87:
7a:4b:aa:9e:ca:1f:b5:a2:0a:26:8b:b3:78:fc:c6:c4:9b:c3:
9c:64:a8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:50:39 2025 by rpki-client