This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/59DD05DA541E11EDB324CE7DC4F9AE02.roa
File: 59DD05DA541E11EDB324CE7DC4F9AE02.roa (raw, json)
Hash identifier: bOGEQWkjWP/dvCJ1j/ghNiM2Oq9BXSpQyiuK+H739J8=
Subject key identifier: 1C:96:DA:33:2A:08:DC:C7:22:50:01:9C:23:22:E1:E3:73:97:C8:60
Certificate issuer: /CN=A911BE38/serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD
Certificate serial: 0252
Authority key identifier: B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/59DD05DA541E11EDB324CE7DC4F9AE02.roa
Signing time: Wed 03 Dec 2025 00:30:43 +0000
ROA not before: Wed 03 Dec 2025 00:30:43 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 134372
IP address blocks: 103.103.96.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl
rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:07:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 594 (0x252)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BE38, serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD
Validity
Not Before: Dec 3 00:30:43 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=692f84b3-f5f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:74:d1:c4:d3:69:20:96:4a:77:15:bc:b8:04:
a1:6f:b6:54:0e:58:39:d3:7a:98:36:5f:47:86:88:
fb:17:a9:8f:12:d3:78:b8:92:98:9d:bf:b3:0b:6b:
78:c2:8f:65:07:27:a0:5e:4c:86:db:ed:21:59:7f:
09:b1:61:33:00:4e:be:7d:fc:b5:f8:3c:a6:12:83:
d6:34:88:9c:8b:5f:68:92:d6:e4:10:b9:ac:f9:13:
29:fb:81:56:55:14:63:ec:09:98:00:b1:4d:4d:0e:
ca:16:b9:bf:df:54:8e:3f:65:3a:f3:de:7e:26:19:
44:7f:84:2a:e0:46:a7:05:43:14:60:54:a9:86:84:
4e:06:36:18:44:e5:8e:82:1b:55:c6:7c:26:b5:af:
d5:20:17:20:ff:00:6a:3a:b5:45:54:bd:3f:ac:01:
7c:37:9d:1e:3c:40:fe:cf:28:d0:ac:39:ff:44:5a:
f5:21:54:4a:0f:f2:6c:15:02:18:6d:e2:f3:5a:11:
a3:7d:33:6c:6c:40:a0:93:7d:84:d4:81:4d:59:ce:
45:a5:8a:60:3d:df:61:7d:ca:cd:99:f0:f3:6d:59:
41:d3:32:b0:43:b9:30:b0:3b:2b:a7:ed:12:c5:10:
a3:68:36:a3:ec:ec:37:d8:c7:ce:09:39:bb:21:76:
76:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:96:DA:33:2A:08:DC:C7:22:50:01:9C:23:22:E1:E3:73:97:C8:60
X509v3 Authority Key Identifier:
keyid:B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/59DD05DA541E11EDB324CE7DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.103.96.0/23
Signature Algorithm: sha256WithRSAEncryption
c1:c7:45:11:98:63:6f:ed:3f:79:b8:46:6a:d6:a6:32:32:7d:
b2:8f:79:bc:9e:5e:95:9a:13:d0:3c:eb:dd:aa:73:b5:d1:54:
48:84:09:74:a5:4d:5f:40:46:e6:2a:f2:95:ff:f5:fa:e2:ff:
86:80:41:3f:94:b6:61:a2:6e:9a:42:36:6e:cd:fa:28:d9:88:
a1:7d:6e:6b:bf:b4:a6:f3:99:99:9b:e0:c0:2a:a5:8e:43:35:
62:c6:4a:75:6c:1a:23:99:e2:34:3a:0d:87:0b:bb:66:73:3c:
dc:2b:70:33:ea:82:3f:d8:b4:4d:57:2e:4e:48:44:09:1a:1d:
2d:db:a8:ff:10:16:6a:90:21:d2:7f:09:04:fb:65:71:88:4d:
b0:94:1a:7e:84:c5:98:12:2a:c5:2b:e9:6a:6c:a2:56:37:7c:
6e:24:7a:9e:f3:96:60:22:6b:d3:f6:07:e1:45:b7:c1:a2:26:
5a:03:30:20:f0:ab:38:d3:a1:d6:6d:f4:45:4f:15:81:e5:96:
12:db:e0:e3:af:f2:e4:06:cc:c7:ca:fc:46:8f:ce:a2:b0:3a:
db:25:ed:db:7b:a5:d3:fc:97:47:85:ea:f7:b8:e8:93:6f:e5:
44:fc:d9:a0:24:2f:04:e5:a3:e9:17:2a:99:62:b7:3a:19:37:
28:0f:99:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:55:18 2025 by rpki-client