This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/98657342132E11F0B588DB49C4F9AE02.roa
File: 98657342132E11F0B588DB49C4F9AE02.roa (raw, json)
Hash identifier: Fg/6h/dDbLolGq+Xi5TtVe0Kn2HcE86oCxXe7cAfHc4=
Subject key identifier: E5:5F:AA:9E:17:7A:A1:4F:DE:08:4A:F2:20:B6:94:8D:C9:D1:6C:8C
Certificate issuer: /CN=A911807E/serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A
Certificate serial: 07DE
Authority key identifier: 70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/98657342132E11F0B588DB49C4F9AE02.roa
Signing time: Thu 02 Oct 2025 21:51:24 +0000
ROA not before: Thu 02 Oct 2025 21:51:24 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 141023
IP address blocks: 103.156.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl
rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 20:15:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2014 (0x7de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911807E, serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A
Validity
Not Before: Oct 2 21:51:24 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=68def3dc-3688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:07:b7:d3:54:63:d8:7a:2b:be:15:71:07:08:
2d:1f:0b:05:07:71:7a:f1:2d:3c:db:5a:bb:4f:c9:
e6:84:a9:8c:b3:eb:07:a4:fe:8f:1f:bb:1e:5b:a0:
fe:c1:cf:42:ce:17:b5:ce:e5:56:01:14:66:93:28:
ee:99:27:5c:2e:44:54:43:59:a8:e8:39:02:1d:4f:
a6:46:d9:01:ab:d6:4c:a8:d9:95:12:02:6f:f5:cf:
6a:e7:fd:3d:66:34:e1:ba:5c:71:68:88:35:e4:22:
d1:1c:dd:35:96:e5:b7:3f:d5:a8:77:bd:93:cf:6d:
1d:34:07:26:94:25:94:c1:4d:4e:52:55:4c:cf:8e:
5c:f4:03:07:82:8c:66:3d:e5:6f:90:91:60:9b:d8:
51:0c:c3:70:3c:e0:94:5b:8a:42:5f:b9:ba:a6:c1:
d1:67:55:03:ad:fa:32:97:80:01:f1:53:5e:7c:58:
56:48:e1:5e:0a:1c:7f:1e:c7:51:57:42:b2:25:29:
50:bb:54:86:c0:9d:7a:85:51:28:38:11:4c:9a:87:
14:b5:c7:ee:33:7c:93:a7:77:1a:71:dc:44:12:43:
40:c4:18:72:98:b4:57:fc:70:29:a9:22:64:be:8d:
d9:62:23:3e:b5:2c:ab:62:e3:2b:35:c3:f6:88:d0:
1a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:5F:AA:9E:17:7A:A1:4F:DE:08:4A:F2:20:B6:94:8D:C9:D1:6C:8C
X509v3 Authority Key Identifier:
keyid:70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/98657342132E11F0B588DB49C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.156.245.0/24
Signature Algorithm: sha256WithRSAEncryption
62:94:23:4c:1e:ca:dc:55:20:ed:ca:ff:ab:27:86:d4:d8:33:
f2:4b:96:de:c9:01:31:99:13:56:cb:2d:92:cd:6d:1a:f8:fd:
e2:b5:9a:0a:2f:0f:7c:d4:03:36:58:6b:5b:e6:8c:72:9a:ea:
5f:21:a4:fb:e0:c0:26:83:b2:86:ab:b2:ff:9f:f0:6f:38:f8:
10:99:93:bb:b9:fe:c8:af:34:a4:9e:d8:8b:8c:d2:89:6a:3e:
5c:44:cd:94:a0:40:2f:7d:87:f7:dc:f0:64:b0:7d:a4:42:19:
01:8c:96:a9:f9:96:de:dc:20:cc:52:74:25:dd:b2:db:b3:43:
66:46:b3:2d:fc:f9:96:ac:77:63:a1:85:f1:e5:4f:23:38:3f:
29:ac:17:73:5e:95:b5:14:27:22:e6:ec:81:51:bb:63:ec:b0:
9c:e7:57:ef:50:1e:18:7d:a8:45:d5:a5:01:49:48:e3:ad:26:
6d:c2:2c:96:91:41:e8:64:46:7e:5e:2d:f6:58:4d:9b:be:2e:
29:8c:00:19:76:ae:26:c9:22:67:63:15:15:95:39:e1:d3:ae:
01:21:d9:cf:65:ec:75:12:db:95:b6:94:c5:ac:3e:b4:60:aa:
9d:6e:16:09:9e:4e:b5:24:c8:67:68:c1:5a:80:7c:fc:4b:15:
75:d8:96:74
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICB94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTgwN0UxMTAvBgNVBAUTKDcwQTQ1Q0NDMDU5M0M0NzEyMzYzNTA1QTBBNjRERDNC
NzM1NzZFOEEwHhcNMjUxMDAyMjE1MTI0WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGRlZjNkYy0zNjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwQe301Rj2HorvhVxBwgtHwsFB3F68S0821q7T8nmhKmMs+sHpP6PH7seW6D+
wc9Czhe1zuVWARRmkyjumSdcLkRUQ1mo6DkCHU+mRtkBq9ZMqNmVEgJv9c9q5/09
ZjThulxxaIg15CLRHN01luW3P9Wod72Tz20dNAcmlCWUwU1OUlVMz45c9AMHgoxm
PeVvkJFgm9hRDMNwPOCUW4pCX7m6psHRZ1UDrfoyl4AB8VNefFhWSOFeChx/HsdR
V0KyJSlQu1SGwJ16hVEoOBFMmocUtcfuM3yTp3cacdxEEkNAxBhymLRX/HApqSJk
vo3ZYiM+tSyrYuMrNcP2iNAaBwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOVfqp4X
eqFP3ghK8iC2lI3J0WyMMB8GA1UdIwQYMBaAFHCkXMwFk8RxI2NQWgpk3TtzV26K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODA3RS9DNEI0RTJDNjE3
OTIxMUVCOTBCRkEwODRDNEY5QUUwMi9jS1JjekFXVHhIRWpZMUJhQ21UZE8zTlhi
b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NLUmN6QVdUeEhFalkxQmFDbVRkTzNOWGJvby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTgwN0UvQzRCNEUyQzYxNzkyMTFFQjkwQkZBMDg0QzRGOUFFMDIvOTg2NTczNDIx
MzJFMTFGMEI1ODhEQjQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnnPUwDQYJKoZIhvcNAQELBQADggEBAGKUI0weytxVIO3K
/6snhtTYM/JLlt7JATGZE1bLLZLNbRr4/eK1mgovD3zUAzZYa1vmjHKa6l8hpPvg
wCaDsoarsv+f8G84+BCZk7u5/sivNKSe2IuM0olqPlxEzZSgQC99h/fc8GSwfaRC
GQGMlqn5lt7cIMxSdCXdstuzQ2ZGsy38+Zasd2OhhfHlTyM4PymsF3NelbUUJyLm
7IFRu2PssJznV+9QHhh9qEXVpQFJSOOtJm3CLJaRQehkRn5eLfZYTZu+LimMABl2
ribJImdjFRWVOeHTrgEh2c9l7HUS25W2lMWsPrRgqp1uFgmeTrUkyGdowVqAfPxL
FXXYlnQ=
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:39:29 2025 by rpki-client