This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/73261D50DBF311F0B2CAB720556F56BC.roa
File: 73261D50DBF311F0B2CAB720556F56BC.roa (raw, json)
Hash identifier: ywJMDcoKtldr4HOdsn13LtO6Zc7isr0wzrZeQ+VLd08=
Subject key identifier: 28:E2:50:7B:ED:C5:33:7F:37:13:C8:64:93:EF:6C:E3:E6:FE:50:36
Certificate issuer: /CN=A918C425/serialNumber=3A1B094191FE34753719C1D481F20885A808C16B
Certificate serial: 09
Authority key identifier: 3A:1B:09:41:91:FE:34:75:37:19:C1:D4:81:F2:08:85:A8:08:C1:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhsJQZH-NHU3GcHUgfIIhagIwWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/73261D50DBF311F0B2CAB720556F56BC.roa
Signing time: Thu 18 Dec 2025 09:25:10 +0000
ROA not before: Thu 18 Dec 2025 09:25:10 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 24409
IP address blocks: 103.245.23.0/24 maxlen: 25
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.crl
rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhsJQZH-NHU3GcHUgfIIhagIwWs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 07:03:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C425, serialNumber=3A1B094191FE34753719C1D481F20885A808C16B
Validity
Not Before: Dec 18 09:25:10 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=6943c876-0377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a2:8c:9f:3d:bf:ab:63:b2:aa:c1:0b:6e:fd:
50:98:d0:9b:bd:1d:6e:37:5d:ab:59:4d:cb:9e:0e:
a7:9d:56:cd:3a:22:ef:ad:bb:20:48:01:b1:21:9b:
60:83:95:59:9a:4f:89:78:a3:0f:04:2f:45:12:23:
cd:24:37:25:9d:60:dd:c8:7a:f9:ee:02:69:e8:d1:
98:e0:16:cc:b4:f5:88:53:56:bb:01:ab:66:c2:b0:
5c:9b:4b:ea:02:75:6c:11:78:7b:0d:32:10:5f:9c:
ca:26:d7:c0:b2:a8:75:55:ca:58:52:a2:f1:a3:90:
52:f9:8e:67:70:34:77:41:8b:5a:e5:71:bd:e2:09:
a6:31:b7:8e:15:47:d6:32:b7:70:b3:a6:9e:87:26:
69:ef:c5:58:cc:8c:8b:7b:bd:42:56:e7:39:eb:17:
a3:19:7a:d3:81:e7:fe:28:9c:ba:96:31:73:14:10:
a8:af:aa:6d:d3:56:52:76:f7:1d:33:5a:1a:03:e6:
39:37:f0:ff:e4:90:03:ae:02:9b:73:d2:0b:08:29:
03:f4:18:26:40:25:ea:29:c3:d6:9f:c9:c0:0f:43:
1d:89:2e:3b:4a:72:33:0b:ba:b4:5a:38:d7:b4:13:
ed:b4:a0:45:16:1c:c9:92:00:3c:e9:75:8e:05:b4:
cc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E2:50:7B:ED:C5:33:7F:37:13:C8:64:93:EF:6C:E3:E6:FE:50:36
X509v3 Authority Key Identifier:
keyid:3A:1B:09:41:91:FE:34:75:37:19:C1:D4:81:F2:08:85:A8:08:C1:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhsJQZH-NHU3GcHUgfIIhagIwWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/73261D50DBF311F0B2CAB720556F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.245.23.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:17:c5:6f:47:6d:48:fc:7b:96:8e:49:cb:ff:66:96:2d:7c:
26:98:6a:ed:52:cb:40:16:f5:c7:08:2f:86:ba:fa:f8:2b:ca:
d5:ed:72:02:d5:dc:70:1d:ea:79:42:8d:1b:a4:2e:5c:d9:de:
c2:92:73:57:15:88:6c:bf:a1:42:6b:5a:b8:92:30:59:8b:53:
88:40:2b:59:01:99:f4:97:85:af:66:15:1c:2e:26:02:90:04:
d6:73:92:1b:63:ba:14:10:b2:64:0e:74:78:1f:ff:2b:c4:1b:
c1:e5:e9:fd:99:e7:62:43:b7:90:71:5d:9f:96:33:25:42:c1:
18:b8:e5:e2:da:f1:ba:00:37:76:a4:64:ac:f4:d5:60:0d:58:
e7:9e:f6:21:f7:7b:af:51:0d:9b:96:34:6d:92:5d:6f:1d:04:
9a:0e:bf:eb:91:f2:05:3f:6e:2b:03:6c:d6:9a:ff:ed:89:88:
6b:4e:38:8b:e2:59:b9:04:3b:99:84:ec:d2:e6:7e:69:8a:19:
53:74:14:26:8e:3d:c1:46:19:32:a1:df:ac:51:f2:18:3f:15:
6c:49:f7:d4:19:86:ba:18:31:92:ca:4c:d7:20:9e:8d:9a:e8:
18:a5:25:b8:02:71:89:30:2a:cd:02:d8:6e:2c:4e:76:15:f8:
a3:e8:d7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:08:43 2025 by rpki-client