This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/6538D178628E11EEBF375134C4F9AE02.roa
File: 6538D178628E11EEBF375134C4F9AE02.roa (raw, json)
Hash identifier: 5hu6VPOMwmE3voYXkmp3eUb3lVDeCA+zJokawI+UD3A=
Subject key identifier: 78:14:7F:3A:93:C8:C4:D6:FF:4B:15:10:EA:71:11:6A:02:EE:B0:34
Certificate issuer: /CN=A911393B/serialNumber=21CBAAA044DE1A5664469F418BCD0877B213973A
Certificate serial: 0199
Authority key identifier: 21:CB:AA:A0:44:DE:1A:56:64:46:9F:41:8B:CD:08:77:B2:13:97:3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcuqoETeGlZkRp9Bi80Id7ITlzo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/6538D178628E11EEBF375134C4F9AE02.roa
Signing time: Mon 01 Dec 2025 02:29:42 +0000
ROA not before: Mon 01 Dec 2025 02:29:42 +0000
ROA not after: Mon 30 Mar 2026 00:00:00 +0000
asID: 151838
IP address blocks: 103.240.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.crl
rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcuqoETeGlZkRp9Bi80Id7ITlzo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:38:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 409 (0x199)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911393B, serialNumber=21CBAAA044DE1A5664469F418BCD0877B213973A
Validity
Not Before: Dec 1 02:29:42 2025 GMT
Not After : Mar 30 00:00:00 2026 GMT
Subject: CN=692cfd95-c015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0a:4f:69:62:3d:03:ee:42:04:cc:8c:2c:d9:
7e:f9:3e:c7:d4:9b:18:2f:3e:95:a0:6f:d8:dd:6e:
07:22:f3:4b:cf:c6:9a:96:2c:46:30:38:7f:33:04:
2c:4c:03:61:72:68:e1:2f:93:59:7f:87:b5:eb:93:
b0:7b:e5:33:7f:fe:5e:2b:a8:0a:41:eb:73:1b:7d:
03:a8:a5:64:e8:bf:d5:0b:a6:ea:3e:fb:96:fc:6c:
f7:19:99:80:be:e6:01:e6:48:ac:e9:88:66:0e:76:
90:4b:9f:17:95:b8:1b:e8:a7:6c:60:d6:82:33:c5:
f6:de:f9:d3:89:52:d0:c4:57:88:88:96:3a:55:76:
5d:67:2e:2c:41:31:16:86:4f:71:2e:b6:78:8c:4a:
fe:e2:06:86:f7:55:9b:ca:b4:3d:d5:5e:44:50:76:
06:6a:e1:98:e1:9c:f6:3c:5b:bf:eb:a9:a2:3f:a4:
cb:cd:08:60:50:0f:a8:42:61:d2:e6:ce:9a:27:93:
cc:52:e4:1d:a5:a4:b1:5d:0e:3d:50:d5:38:98:88:
05:2b:7f:7e:d8:20:38:53:58:15:cd:6c:ed:aa:81:
94:62:f1:07:0a:fb:99:3a:58:38:fe:12:38:85:f5:
c4:d0:89:35:e8:18:48:7e:63:4e:0e:3d:d9:de:80:
b4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:14:7F:3A:93:C8:C4:D6:FF:4B:15:10:EA:71:11:6A:02:EE:B0:34
X509v3 Authority Key Identifier:
keyid:21:CB:AA:A0:44:DE:1A:56:64:46:9F:41:8B:CD:08:77:B2:13:97:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcuqoETeGlZkRp9Bi80Id7ITlzo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/6538D178628E11EEBF375134C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.240.1.0/24
Signature Algorithm: sha256WithRSAEncryption
83:de:0f:1f:ed:35:29:b9:da:97:86:13:f3:44:98:b4:4f:fd:
b2:a5:9e:d6:2d:db:3f:74:59:22:2f:69:e6:fe:52:91:8c:47:
7a:b8:13:50:ee:da:1d:f4:22:af:14:d5:0b:83:5a:04:ef:64:
37:06:6e:51:ea:14:9a:ff:53:6e:b2:bb:26:f7:60:d8:3c:33:
4d:a5:a0:aa:1b:d6:de:92:f3:e0:75:61:4b:d8:79:d3:97:d1:
24:80:d9:96:4c:99:c8:30:ec:72:11:c7:77:36:bc:72:46:1c:
ee:c3:35:11:cc:de:13:53:2c:be:fe:dc:30:47:3f:47:05:6b:
2b:bd:42:22:f7:34:92:57:43:65:38:02:51:22:73:2f:e5:af:
f5:82:8e:07:30:36:20:05:fe:01:8c:c2:87:30:52:c4:fa:2e:
9c:ef:70:0b:11:03:70:0a:ba:0b:38:1b:02:01:f8:ad:08:44:
59:b5:ec:55:fc:d8:85:f6:34:ce:e0:6f:17:91:d2:6c:9f:35:
19:56:02:32:1a:6c:5f:e9:aa:21:ae:12:b0:5a:bf:f5:b4:9c:
0e:6d:2a:ce:f8:d8:8f:13:5a:e8:00:5b:e2:6c:63:39:5b:2b:
9c:53:55:90:80:71:0b:53:be:1e:dd:5d:65:ca:4d:85:00:88:
ac:b9:a6:a8
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTM5M0IxMTAvBgNVBAUTKDIxQ0JBQUEwNDRERTFBNTY2NDQ2OUY0MThCQ0QwODc3
QjIxMzk3M0EwHhcNMjUxMjAxMDIyOTQyWhcNMjYwMzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTJjZmQ5NS1jMDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwApPaWI9A+5CBMyMLNl++T7H1JsYLz6VoG/Y3W4HIvNLz8aalixGMDh/MwQs
TANhcmjhL5NZf4e165Owe+Uzf/5eK6gKQetzG30DqKVk6L/VC6bqPvuW/Gz3GZmA
vuYB5kis6YhmDnaQS58Xlbgb6KdsYNaCM8X23vnTiVLQxFeIiJY6VXZdZy4sQTEW
hk9xLrZ4jEr+4gaG91WbyrQ91V5EUHYGauGY4Zz2PFu/66miP6TLzQhgUA+oQmHS
5s6aJ5PMUuQdpaSxXQ49UNU4mIgFK39+2CA4U1gVzWztqoGUYvEHCvuZOlg4/hI4
hfXE0Ik16BhIfmNODj3Z3oC0AQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHgUfzqT
yMTW/0sVEOpxEWoC7rA0MB8GA1UdIwQYMBaAFCHLqqBE3hpWZEafQYvNCHeyE5c6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzkzQi82N0QwOEJBODYy
OEMxMUVFOTU2NUI1NjlDNEY5QUUwMi9JY3Vxb0VUZUdsWmtScDlCaTgwSWQ3SVRs
em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ljdXFvRVRlR2xaa1JwOUJpODBJZDdJVGx6by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTM5M0IvNjdEMDhCQTg2MjhDMTFFRTk1NjVCNTY5QzRGOUFFMDIvNjUzOEQxNzg2
MjhFMTFFRUJGMzc1MTM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABn8AEwDQYJKoZIhvcNAQELBQADggEBAIPeDx/tNSm52peG
E/NEmLRP/bKlntYt2z90WSIvaeb+UpGMR3q4E1Du2h30Iq8U1QuDWgTvZDcGblHq
FJr/U26yuyb3YNg8M02loKob1t6S8+B1YUvYedOX0SSA2ZZMmcgw7HIRx3c2vHJG
HO7DNRHM3hNTLL7+3DBHP0cFayu9QiL3NJJXQ2U4AlEicy/lr/WCjgcwNiAF/gGM
wocwUsT6LpzvcAsRA3AKugs4GwIB+K0IRFm17FX82IX2NM7gbxeR0myfNRlWAjIa
bF/pqiGuErBav/W0nA5tKs742I8TWugAW+JsYzlbK5xTVZCAcQtTvh7dXWXKTYUA
iKy5pqg=
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:46:36 2025 by rpki-client