This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/C3C2560ABFDA11F0A858A529C4F9AE02.roa
File: C3C2560ABFDA11F0A858A529C4F9AE02.roa (raw, json)
Hash identifier: M8dEVx7z1Arf5gjqxSmxf89yynC0zTeAF4veyq81hRQ=
Subject key identifier: 6E:A6:A3:B6:17:EA:CF:C0:D2:B7:51:EE:6D:65:00:4E:35:FF:82:62
Certificate issuer: /CN=A911C621/serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
Certificate serial: 0257
Authority key identifier: 87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/C3C2560ABFDA11F0A858A529C4F9AE02.roa
Signing time: Wed 12 Nov 2025 15:17:56 +0000
ROA not before: Wed 12 Nov 2025 15:17:56 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 17941
IP address blocks: 103.86.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl
rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:18:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 599 (0x257)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C621, serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
Validity
Not Before: Nov 12 15:17:56 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=6914a524-49d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d1:78:57:07:2b:93:c0:c1:62:17:02:db:1b:
53:b9:af:a9:f1:1a:9d:91:73:7c:c8:91:94:cb:b0:
83:7a:0b:09:31:d3:3a:d9:07:c4:25:5f:7d:c6:b9:
94:d4:ae:5b:02:cd:95:70:73:8c:80:b8:52:51:6a:
96:86:61:2c:80:80:e6:8c:02:15:72:b3:7e:be:c0:
79:2b:68:1c:da:0a:45:f4:c7:4a:0b:82:0e:c3:a0:
36:be:cd:b7:fc:7d:e5:97:ca:a7:2e:6c:a8:25:05:
ad:b6:83:f8:bb:7c:40:e5:49:43:38:f6:be:f7:a6:
1e:0e:b7:a5:10:5a:5b:a1:29:85:97:e3:77:0c:d0:
ac:f5:7b:0d:3c:6d:e9:da:f7:bb:e2:d3:ec:17:0f:
7b:51:73:9e:2c:85:ca:00:e3:96:15:26:5f:9c:09:
4d:33:c8:8b:1f:6c:d6:00:b0:5e:58:24:69:70:6c:
1f:6f:78:12:da:80:33:da:e4:36:65:6f:9d:2e:8d:
3d:f7:fe:9e:8f:6f:8f:61:d2:f7:7c:d3:62:af:53:
be:0a:04:5d:64:53:7a:be:e8:81:e5:3f:18:73:a9:
47:ec:d0:cf:b7:90:b3:d7:27:25:83:6b:00:1b:dc:
52:55:d0:de:60:fa:98:45:35:ee:54:88:b9:1f:47:
27:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:A6:A3:B6:17:EA:CF:C0:D2:B7:51:EE:6D:65:00:4E:35:FF:82:62
X509v3 Authority Key Identifier:
keyid:87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/C3C2560ABFDA11F0A858A529C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.86.123.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:c2:76:0c:3b:c3:b6:2c:82:91:a0:e9:96:0d:a1:d0:1d:c3:
84:de:61:d7:57:da:b3:f8:b1:a5:88:dd:9a:4e:34:79:dc:a1:
59:9e:e9:62:7c:b6:3b:11:53:ba:97:ef:c0:b1:35:0a:fb:04:
5c:4e:95:5a:47:57:e2:91:66:0a:eb:ad:b9:d2:c9:b8:c6:be:
91:4f:de:4a:04:57:64:6f:f7:1a:aa:37:c0:75:48:2c:73:f7:
de:51:a2:46:24:e3:14:da:1d:6c:4e:b1:6c:8d:b1:14:31:7a:
3b:6a:dc:eb:4b:a7:af:e4:77:1a:b2:67:42:af:fb:22:da:c0:
60:71:2e:37:e5:5b:7f:66:d4:09:4d:28:f7:2b:3d:1b:63:7a:
2a:c6:1f:33:6c:83:49:6f:ac:41:52:69:6e:c1:f5:9c:e8:cc:
6f:d1:d7:39:35:35:0d:2a:34:49:fb:72:44:12:43:e3:5b:8c:
aa:bf:4d:1a:e3:87:d2:65:00:b4:6a:0a:0b:42:8f:6f:50:df:
65:ca:69:2e:c8:95:5a:42:88:fe:65:55:3e:b4:5e:f1:e8:d7:
ba:90:86:bc:41:1d:7b:9e:ec:f0:a4:19:75:82:aa:f7:64:f0:
89:fe:ed:3f:1e:f6:cc:5a:9c:df:e4:60:32:8f:b1:6e:de:9f:
80:42:07:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:26:32 2025 by rpki-client