This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/E07C4E34914011EDABD5F778C4F9AE02.roa
File: E07C4E34914011EDABD5F778C4F9AE02.roa (raw, json)
Hash identifier: 7JORqu7sYrSri00VpAd97cPkbX0dugE57bkWBi2JQNk=
Subject key identifier: 1F:5A:11:C7:B6:14:0B:CC:79:5F:9B:A1:E0:EE:E8:86:88:A4:49:ED
Certificate issuer: /CN=A911E9B6/serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C
Certificate serial: 0257
Authority key identifier: 2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/E07C4E34914011EDABD5F778C4F9AE02.roa
Signing time: Sun 07 Dec 2025 00:40:05 +0000
ROA not before: Sun 07 Dec 2025 00:40:05 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 137395
IP address blocks: 203.214.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl
rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 00:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 599 (0x257)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E9B6, serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C
Validity
Not Before: Dec 7 00:40:05 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6934cce5-a290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c6:5e:55:4d:db:78:d3:7b:90:5a:57:40:8b:
3d:6f:65:ba:5b:a7:e6:b6:1b:e9:3e:70:dc:d0:55:
42:00:ca:89:9a:61:f1:94:4b:ff:31:bf:50:c8:44:
f6:a5:44:43:07:41:29:da:bb:50:8f:4f:ec:52:31:
14:a7:39:89:c6:b7:ce:46:d7:aa:37:88:35:a3:40:
82:9f:10:ef:8b:1a:fc:5b:96:6c:cd:92:d8:99:e5:
bb:43:51:62:7a:92:de:f2:99:42:3c:c4:7a:45:d9:
30:d9:d0:91:64:57:75:de:04:c3:5e:9d:4e:5c:c5:
c3:f6:be:eb:42:f8:cf:d9:b4:55:bb:6c:1e:a1:96:
59:f8:bb:5d:70:db:17:02:0a:bf:ce:1a:63:1c:d5:
17:a3:ff:12:f0:65:b0:12:5d:2d:19:19:b4:50:2a:
d2:64:da:1f:f0:35:75:7a:0d:a0:f1:13:04:2a:0e:
7b:3d:f1:4f:44:42:0f:19:3e:01:5b:14:1d:0c:f3:
e0:3d:60:fd:ec:21:2d:b1:0d:2f:f6:f2:37:0f:75:
95:2e:ee:e0:7e:1f:0e:c2:2b:ec:3d:ab:71:eb:fb:
d1:43:6d:f2:2b:92:1f:de:87:16:4d:dc:dd:92:49:
d8:5b:76:79:21:8d:67:1b:90:b9:d7:59:01:5d:14:
79:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:5A:11:C7:B6:14:0B:CC:79:5F:9B:A1:E0:EE:E8:86:88:A4:49:ED
X509v3 Authority Key Identifier:
keyid:2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/E07C4E34914011EDABD5F778C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.214.165.0/24
Signature Algorithm: sha256WithRSAEncryption
38:88:7d:b8:df:94:22:d7:4c:11:3b:5a:dd:db:a9:2a:f1:ce:
1b:9d:93:08:3c:de:e0:87:f1:ed:92:a2:c5:4f:03:36:a7:53:
e7:60:14:a6:79:e4:7b:45:2f:9a:20:30:66:aa:5a:ab:8d:80:
c2:59:18:d1:43:58:e7:cf:66:d7:e8:ae:9e:7b:0c:a3:24:27:
d7:bb:42:75:f0:b9:45:6c:3f:24:85:b5:91:a5:b4:d4:4a:db:
9a:6e:1e:e9:43:b9:84:b2:96:d8:e7:6e:a1:2f:da:3d:cb:08:
f2:37:30:5f:19:99:cc:39:6a:7d:82:75:51:14:fb:8b:90:c5:
5e:e0:1d:7c:ff:e9:f5:27:a1:08:b6:c2:db:48:5d:f2:84:30:
23:d0:62:c1:1e:82:18:4a:fb:6d:01:c6:96:29:74:c5:f8:75:
64:1d:8a:27:50:85:fe:4a:5c:71:e5:89:f4:03:0e:b3:43:b4:
2b:79:8e:b0:98:d3:af:80:aa:ab:c8:4b:83:7a:bb:6e:c9:e2:
f2:0a:b8:b5:42:8b:63:6a:f0:bf:52:15:61:73:71:6b:9b:13:
e6:1e:62:8c:ca:e5:2d:f0:b2:58:85:ab:77:0c:da:8f:7d:90:
7b:d7:5d:71:58:0e:2c:db:06:08:3b:16:33:87:e5:61:68:b6:
91:6d:18:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:16:31 2025 by rpki-client