This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/95C751AAC99F11F098604B44C4F9AE02.roa
File: 95C751AAC99F11F098604B44C4F9AE02.roa (raw, json)
Hash identifier: NmpEc8D8qa0q1zd5A3YpqQoZSHsGMDweaQM/Ibr7UC4=
Subject key identifier: 75:D8:20:8A:23:BB:26:11:9C:82:AB:E8:D6:3A:D6:86:AC:08:56:3C
Certificate issuer: /CN=A918ADBA/serialNumber=E71F782A53DA16DB1FD30C6C0D2615427522A6DE
Certificate serial: 0E
Authority key identifier: E7:1F:78:2A:53:DA:16:DB:1F:D3:0C:6C:0D:26:15:42:75:22:A6:DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5x94KlPaFtsf0wxsDSYVQnUipt4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/95C751AAC99F11F098604B44C4F9AE02.roa
Signing time: Sat 13 Dec 2025 08:04:58 +0000
ROA not before: Sat 13 Dec 2025 08:04:58 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 58372
IP address blocks: 103.29.204.0/24 maxlen: 24
103.29.205.0/24 maxlen: 24
103.29.206.0/24 maxlen: 24
103.29.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/5x94KlPaFtsf0wxsDSYVQnUipt4.crl
rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/5x94KlPaFtsf0wxsDSYVQnUipt4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5x94KlPaFtsf0wxsDSYVQnUipt4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 06:54:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918ADBA, serialNumber=E71F782A53DA16DB1FD30C6C0D2615427522A6DE
Validity
Not Before: Dec 13 08:04:58 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=693d1e2a-5260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:49:7c:30:d6:9f:1a:35:c3:7c:59:40:b5:50:
b7:96:c5:2e:9a:15:80:ae:ad:e5:b0:d4:72:4c:ee:
e3:af:c3:f0:7d:2f:bd:28:e7:c5:d5:88:b5:18:b1:
d8:ba:82:e7:9d:0c:ac:1e:0a:0f:9e:d5:1d:62:3a:
22:09:53:9f:6d:28:ff:9d:ff:bb:ef:df:88:5d:64:
98:1a:ec:19:d0:de:b5:2c:d7:c3:7e:01:39:34:c3:
f4:e9:c5:82:9d:e4:b6:7f:f5:37:e4:d7:dd:5e:af:
67:62:76:dc:96:45:bd:8a:47:f7:b6:59:2e:45:41:
1f:d9:f0:07:03:ae:46:38:3a:43:ff:82:20:45:5c:
1b:d0:f0:ac:f3:ff:2e:e2:3a:28:16:67:a9:93:63:
89:23:34:c5:43:07:b0:ac:de:0f:26:84:7d:31:2d:
53:ec:37:83:6f:86:dc:84:84:f0:1e:c9:c1:e3:62:
ab:ee:9b:c7:92:e8:94:59:1d:56:0c:2b:aa:a3:27:
d7:b8:e2:82:a0:f2:37:c0:48:cc:0b:17:23:17:ef:
32:2a:81:29:1d:dd:10:02:7b:97:44:6a:99:14:1c:
81:39:9f:ba:aa:a5:da:4d:26:c1:57:93:85:46:01:
71:2d:82:d5:44:dc:32:c1:13:06:f7:20:17:46:81:
a1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D8:20:8A:23:BB:26:11:9C:82:AB:E8:D6:3A:D6:86:AC:08:56:3C
X509v3 Authority Key Identifier:
keyid:E7:1F:78:2A:53:DA:16:DB:1F:D3:0C:6C:0D:26:15:42:75:22:A6:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/5x94KlPaFtsf0wxsDSYVQnUipt4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5x94KlPaFtsf0wxsDSYVQnUipt4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/95C751AAC99F11F098604B44C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.29.204.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:ec:72:be:53:65:cc:af:44:ab:2a:3a:e4:35:92:f0:5a:49:
8f:3c:eb:27:cf:6a:79:20:56:3c:af:25:aa:6e:ac:6a:43:6a:
69:cf:91:48:50:3f:ec:c0:86:92:ee:50:c1:33:90:38:eb:0e:
89:e8:01:02:c5:c4:bd:47:35:51:76:14:d5:0d:42:23:63:92:
d8:51:2e:32:2f:d3:a3:fa:82:4a:64:3c:4e:64:f2:e6:01:c9:
f4:a8:88:fc:33:c7:09:67:e6:4f:da:a6:a6:b3:b8:a6:93:f4:
18:a5:16:51:74:bf:02:97:86:f6:2c:b6:bc:f6:09:12:50:63:
53:ab:90:e6:40:44:4a:2d:45:84:4d:e4:98:7d:cc:3d:0e:7c:
b8:01:be:ec:22:9f:ba:d4:8e:f5:5d:8d:07:4c:f0:6e:00:ef:
68:b8:db:9a:92:05:e5:b2:f9:c6:a6:65:3d:fe:70:93:b8:7d:
3d:3b:fc:dc:79:7a:6f:31:b7:3e:ec:f2:1d:e7:c2:43:79:26:
d6:35:b1:90:1f:81:dc:28:8a:ae:75:f9:41:09:e5:1b:3a:93:
a3:f9:8b:93:c1:d7:e5:2d:88:6b:21:f2:e6:15:8d:53:d0:e1:
5e:fa:87:49:fa:a3:2c:76:8e:77:d7:82:aa:fd:2f:1b:a2:dc:
f5:96:0c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:09:52 2025 by rpki-client