This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/CA181F42791211ED9D926781C4F9AE02.roa
File: CA181F42791211ED9D926781C4F9AE02.roa (raw, json)
Hash identifier: VJsQOiSsJa0amQwIRBGtrMFlrR2aAJJ6yMzF4uWszlE=
Subject key identifier: 43:E2:60:18:96:64:21:13:C8:9B:3C:43:C4:1C:61:1E:48:6D:7D:72
Certificate issuer: /CN=A911B5AC/serialNumber=0FD4248FD48BA1AE0B60D8CF6A43DB33B6F4F6BA
Certificate serial: 022F
Authority key identifier: 0F:D4:24:8F:D4:8B:A1:AE:0B:60:D8:CF:6A:43:DB:33:B6:F4:F6:BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9Qkj9SLoa4LYNjPakPbM7b09ro.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/CA181F42791211ED9D926781C4F9AE02.roa
Signing time: Sat 29 Nov 2025 00:28:08 +0000
ROA not before: Sat 29 Nov 2025 00:28:08 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 150668
IP address blocks: 103.109.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.crl
rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9Qkj9SLoa4LYNjPakPbM7b09ro.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 00:32:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 559 (0x22f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B5AC, serialNumber=0FD4248FD48BA1AE0B60D8CF6A43DB33B6F4F6BA
Validity
Not Before: Nov 29 00:28:08 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=692a3e18-51b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6d:97:dd:36:bf:16:0f:8a:82:f1:3c:3a:2e:
cf:fa:b4:7e:d7:53:c6:a4:19:fe:7a:cb:24:1c:cd:
5f:62:f6:a5:8c:71:8a:c7:b8:f7:9a:4c:10:5f:ea:
b8:3c:23:b5:4c:6b:a9:15:9b:06:ec:be:a0:93:a1:
5d:a9:6b:68:d5:80:5f:ce:27:01:92:1b:9a:24:b9:
3a:19:8f:64:1d:4e:fd:84:97:40:f3:63:e9:c6:6f:
2c:a4:01:d5:81:fa:be:0f:6d:cb:fb:ea:5a:dd:fd:
5a:b4:62:2b:b1:67:ac:61:0d:d7:9f:4d:55:96:ed:
69:22:17:6b:2b:59:63:64:7a:e4:c2:f5:90:14:df:
52:e3:ca:78:5f:d4:3c:e7:40:e6:a4:e3:e5:d2:06:
c1:fa:8c:19:67:ad:ac:c5:2a:76:f4:f5:5b:d0:b2:
3c:56:4c:e7:bf:9c:ad:fd:de:7a:30:39:4f:09:51:
8e:87:cc:28:c2:e9:9f:d5:a5:dc:11:8d:4c:08:b6:
f6:e8:59:87:b5:09:2a:b9:22:86:49:e4:0f:2d:a6:
59:f5:50:ef:23:fa:2f:b9:12:51:fe:40:c5:99:b0:
72:f2:9a:75:be:b7:1d:2a:df:fe:45:96:54:7f:f4:
2d:51:2a:6c:e4:bd:4d:36:52:a4:a1:7e:c3:75:80:
af:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E2:60:18:96:64:21:13:C8:9B:3C:43:C4:1C:61:1E:48:6D:7D:72
X509v3 Authority Key Identifier:
keyid:0F:D4:24:8F:D4:8B:A1:AE:0B:60:D8:CF:6A:43:DB:33:B6:F4:F6:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9Qkj9SLoa4LYNjPakPbM7b09ro.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/CA181F42791211ED9D926781C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.109.105.0/24
Signature Algorithm: sha256WithRSAEncryption
47:d2:c5:cd:26:e3:70:b4:e6:b7:9f:66:e5:37:b6:ff:db:60:
4e:9a:80:3a:5e:a2:95:5f:7a:a4:d5:ff:9f:33:9e:d6:4d:cc:
35:4f:32:f0:4b:48:a4:85:a6:61:4a:58:37:29:ad:9d:82:57:
47:41:b0:b3:ca:10:bf:2e:7a:3f:35:64:78:ed:5c:18:22:df:
af:d6:1e:ca:80:1d:90:7e:00:1e:a6:bc:9e:60:8c:f2:72:73:
d7:ce:2e:b3:0e:fd:91:15:97:7f:45:83:15:66:5e:2d:cd:b9:
fc:9c:02:ff:2a:4a:a4:05:c8:53:a7:3c:5c:31:f7:3b:e2:0e:
fe:a9:e2:e0:04:04:a4:a8:26:3f:6f:f6:7d:92:e6:1c:5f:c0:
fd:e6:bd:17:0e:dd:77:c7:c4:37:04:de:e9:1d:a7:bd:f7:d9:
bf:0f:eb:73:de:1c:44:3a:25:58:a4:f3:b0:a2:d3:c9:2c:08:
f0:b4:59:fc:47:78:fc:36:39:54:e5:9b:9d:ff:d5:09:7f:7f:
ab:9b:be:51:df:95:1e:2d:82:5b:ce:fa:f1:a5:c8:52:0d:91:
b1:60:be:eb:1e:72:70:10:93:3a:66:66:19:a8:42:14:c3:a1:
5f:5e:fc:a5:8f:7c:f3:b8:5c:5f:d8:4c:b6:0e:22:8c:01:a1:
06:81:80:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:41:27 2025 by rpki-client