This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/A7FC5DEE8D0411EFBD7A0057C4F9AE02.roa
File: A7FC5DEE8D0411EFBD7A0057C4F9AE02.roa (raw, json)
Hash identifier: cnwfSeIwvwV6lWFdzwgrorO9+SXGNy195qZfyMAiJts=
Subject key identifier: 66:7E:29:6A:EE:85:7B:ED:8F:8D:06:E3:39:B2:9B:11:77:75:53:58
Certificate issuer: /CN=A91CC711/serialNumber=E429D429E66B797B3D8A1CBE2491577ADC38A48E
Certificate serial: 016A
Authority key identifier: E4:29:D4:29:E6:6B:79:7B:3D:8A:1C:BE:24:91:57:7A:DC:38:A4:8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/A7FC5DEE8D0411EFBD7A0057C4F9AE02.roa
Signing time: Wed 17 Dec 2025 04:23:22 +0000
ROA not before: Wed 17 Dec 2025 04:23:22 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 38456
IP address blocks: 103.11.160.0/24 maxlen: 24
103.11.161.0/24 maxlen: 24
103.11.162.0/24 maxlen: 24
103.11.163.0/24 maxlen: 24
182.236.116.0/24 maxlen: 24
182.236.117.0/24 maxlen: 24
202.5.162.0/24 maxlen: 24
202.5.163.0/24 maxlen: 24
202.5.164.0/24 maxlen: 24
202.5.168.0/24 maxlen: 24
202.5.169.0/24 maxlen: 24
202.5.177.0/24 maxlen: 24
202.5.190.0/24 maxlen: 24
203.86.208.0/24 maxlen: 24
203.86.209.0/24 maxlen: 24
203.86.210.0/24 maxlen: 24
203.86.211.0/24 maxlen: 24
203.86.212.0/24 maxlen: 24
203.86.213.0/24 maxlen: 24
203.86.214.0/24 maxlen: 24
203.86.215.0/24 maxlen: 24
203.86.219.0/24 maxlen: 24
203.86.220.0/24 maxlen: 24
203.86.221.0/24 maxlen: 24
203.86.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.crl
rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 03:50:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 362 (0x16a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC711, serialNumber=E429D429E66B797B3D8A1CBE2491577ADC38A48E
Validity
Not Before: Dec 17 04:23:22 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6942303a-e6b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fa:b8:24:2c:7a:60:bf:91:f8:af:54:33:b1:
16:fb:58:26:57:7d:73:08:a6:22:54:1c:60:ff:68:
c4:f1:ef:cb:c7:4c:cd:d6:9b:00:a3:e1:52:19:e6:
15:05:24:66:2b:e5:b6:9d:d7:a2:7c:8d:09:e6:d1:
56:4c:c7:a7:1a:a1:f3:0a:06:ad:d5:f2:b8:c4:4c:
05:8c:b6:fe:5e:c5:72:f9:2f:93:51:f2:78:b4:ee:
66:39:ed:a6:53:97:92:3b:84:34:81:a3:c0:21:a9:
05:b4:ad:3f:37:20:35:16:0e:c9:07:ac:83:0b:54:
13:4e:3a:e9:59:99:1a:8f:0a:87:ca:00:01:e6:a0:
d3:d7:20:d9:1d:dc:01:4f:2f:2a:56:fe:cd:e8:72:
fe:e6:b8:69:0d:7d:d3:cb:96:01:09:47:86:df:03:
59:06:fa:92:99:c6:e5:2f:df:41:16:74:a5:66:28:
de:65:a2:07:7b:77:4c:c1:d6:19:43:b5:86:6d:d1:
cb:66:9f:49:57:86:ba:9b:e9:7f:a0:ee:0f:21:32:
8d:b6:43:a7:f3:92:c5:60:fb:1f:1a:f6:b2:29:6b:
7a:4b:a2:9b:ab:d3:a0:e4:9f:ef:66:68:5a:a0:4d:
34:c9:ab:26:a4:4a:69:7e:b8:ce:62:78:ce:4a:95:
6e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:7E:29:6A:EE:85:7B:ED:8F:8D:06:E3:39:B2:9B:11:77:75:53:58
X509v3 Authority Key Identifier:
keyid:E4:29:D4:29:E6:6B:79:7B:3D:8A:1C:BE:24:91:57:7A:DC:38:A4:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/A7FC5DEE8D0411EFBD7A0057C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.160.0/22
182.236.116.0/23
202.5.162.0-202.5.164.255
202.5.168.0/23
202.5.177.0/24
202.5.190.0/24
203.86.208.0/21
203.86.219.0-203.86.222.255
Signature Algorithm: sha256WithRSAEncryption
65:ab:fd:6e:76:b5:66:9a:33:70:36:d2:f7:38:b4:f5:4c:7c:
ff:cc:55:fd:e1:94:5c:e1:62:78:a1:e5:f4:2e:84:6f:b5:38:
5b:c1:d7:e0:47:f9:b6:d3:f6:77:ec:f9:74:06:20:5d:6e:73:
bb:9d:33:80:e3:e1:47:c9:df:d8:e0:76:1f:43:07:d5:92:cb:
93:87:be:46:15:4d:cd:49:8e:29:65:a1:58:c8:47:19:6d:8f:
67:ef:dd:e8:b4:51:b9:94:b2:48:fe:87:bc:c0:2c:bf:65:5c:
8f:b4:23:19:c1:74:51:b8:aa:57:17:dc:2e:ef:16:2e:9d:80:
6d:6f:31:c8:25:80:42:bb:d2:aa:1b:08:f5:df:fa:75:52:15:
21:b8:6b:fa:a4:a9:1b:97:49:e4:a5:85:85:97:a5:e9:0a:c4:
b7:bb:ff:d4:51:9d:32:ef:f0:c2:e9:02:b3:9f:fa:42:7a:ee:
6c:3d:a2:23:d1:f5:3b:57:6f:fa:e6:1f:31:87:1c:e9:9a:ec:
0b:13:f9:4d:88:f5:35:95:d5:fb:5c:c7:89:dd:0c:47:b8:d7:
d9:f7:ad:15:c3:db:61:01:8f:ca:16:c3:69:14:d8:4b:b1:7b:
86:8a:28:73:ce:49:b3:ed:01:96:a3:ee:7c:bd:1e:c5:8f:df:
bf:01:47:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:56:38 2025 by rpki-client