This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/115BD35AA41611EFA0D7CD42C4F9AE02.roa
File: 115BD35AA41611EFA0D7CD42C4F9AE02.roa (raw, json)
Hash identifier: aniyMN410sjj0MEX+PDPaHXzJQYHXYAopGV6HCn0kcs=
Subject key identifier: 3D:60:5A:DC:A3:48:20:37:91:70:CB:AE:17:2F:50:2E:15:CD:F6:8A
Certificate issuer: /CN=A9171BF0/serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7
Certificate serial: CB
Authority key identifier: 21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/115BD35AA41611EFA0D7CD42C4F9AE02.roa
Signing time: Sat 13 Dec 2025 05:44:32 +0000
ROA not before: Sat 13 Dec 2025 05:44:32 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 153399
IP address blocks: 160.191.196.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl
rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Jan 2026 04:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 203 (0xcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171BF0, serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7
Validity
Not Before: Dec 13 05:44:32 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=693cfd3f-08b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b3:63:3d:e2:25:09:6e:c7:67:60:6d:e6:f2:
e2:1d:14:98:a0:52:4f:03:7a:b8:95:e3:8c:8c:7d:
c5:43:5b:7b:c9:e9:24:a9:3c:fa:63:b6:ce:92:22:
a3:09:fb:97:8c:42:0d:f9:1a:74:7e:a5:d4:13:e2:
96:cd:0a:e3:e4:29:4b:45:19:59:75:e5:6e:b9:67:
16:eb:6b:33:32:fc:f3:2a:77:26:ce:43:d3:f7:3c:
35:dd:e7:c0:59:67:cd:17:2a:20:ea:e2:04:a4:e5:
fa:bc:4a:89:68:d9:a4:a2:88:3f:c8:4c:15:bd:ec:
50:7f:32:83:0e:58:37:a6:f2:1c:49:23:41:9f:bf:
45:2a:2d:6f:b6:22:03:8b:d3:b5:c0:9b:f8:4c:44:
05:dd:89:24:46:27:53:0b:2f:fc:83:dc:ea:24:f0:
5c:b1:09:87:d4:a5:85:5d:c1:ed:c0:75:d0:90:51:
e9:7b:2d:d1:c1:e4:38:34:eb:01:31:8c:9e:6d:96:
b9:0d:31:be:25:92:94:84:f5:2c:77:d3:85:7e:f5:
40:75:f9:13:f4:35:83:f5:74:45:6d:a2:d1:1d:fc:
37:be:36:b5:d7:90:e6:20:ca:36:36:79:ef:bb:77:
8c:72:a7:33:82:7b:75:7e:72:20:2a:5f:a5:b4:87:
43:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:60:5A:DC:A3:48:20:37:91:70:CB:AE:17:2F:50:2E:15:CD:F6:8A
X509v3 Authority Key Identifier:
keyid:21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/115BD35AA41611EFA0D7CD42C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.191.196.0/23
Signature Algorithm: sha256WithRSAEncryption
17:51:68:59:db:8a:73:2a:53:9e:f1:30:7a:9f:af:1a:c6:b9:
f4:99:7d:bb:6e:33:0c:a5:7f:3d:1b:66:f8:29:38:06:4f:ac:
61:80:94:99:d5:27:a3:c8:af:42:37:86:da:8a:f1:59:1b:d2:
c8:df:69:e1:74:30:d9:89:88:c3:eb:70:9f:95:f7:64:9b:ce:
88:a0:01:1a:72:a3:a0:e0:60:99:17:e9:e7:dd:5e:4c:b2:76:
03:d7:e6:ec:64:94:58:26:c0:00:b7:39:1d:e3:da:a1:7f:15:
8d:88:02:67:43:8d:dc:e7:b5:2e:48:0b:8e:a3:b8:ca:95:70:
af:b3:6a:13:a9:41:46:20:d2:83:07:84:90:f5:bf:9c:4e:01:
dd:45:3d:b0:0c:28:24:25:3a:d5:86:02:fc:49:2e:ba:59:50:
42:27:5a:bb:c8:c8:8b:60:ac:4f:50:26:9a:7d:9e:ed:62:14:
d4:bd:ee:78:50:f7:e0:7c:9b:5d:94:5d:6b:b6:ba:18:d9:c9:
fc:c2:6f:67:fb:c9:e8:c1:a3:d8:77:0b:3c:a6:89:e5:41:67:
eb:02:0a:67:da:25:db:40:d9:18:a1:36:7f:25:e1:22:ab:58:
41:cf:77:6d:d8:9a:cf:67:4b:3c:b6:5e:a6:6c:31:5c:72:b8:
7f:e8:0b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 14:39:58 2026 by rpki-client