This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/106A9C18500B11EC9430721DC4F9AE02.roa
File: 106A9C18500B11EC9430721DC4F9AE02.roa (raw, json)
Hash identifier: rjIRVt3ZGujRJRNz4p7iJVb8cLFrDLJrnOWwlAK/nqE=
Subject key identifier: 66:B4:94:EC:07:7D:97:90:E3:87:FD:A9:0C:2D:EA:21:6A:6B:28:64
Certificate issuer: /CN=A912425E/serialNumber=BDE411457E27CB98B4AE30FCE3A8AF5C6729509B
Certificate serial: 04C3
Authority key identifier: BD:E4:11:45:7E:27:CB:98:B4:AE:30:FC:E3:A8:AF:5C:67:29:50:9B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veQRRX4ny5i0rjD846ivXGcpUJs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/106A9C18500B11EC9430721DC4F9AE02.roa
Signing time: Thu 20 Nov 2025 22:45:17 +0000
ROA not before: Thu 20 Nov 2025 22:45:17 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 139922
IP address blocks: 103.174.84.0/23 maxlen: 24
2001:df7:be80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.crl
rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veQRRX4ny5i0rjD846ivXGcpUJs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 22:23:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1219 (0x4c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912425E, serialNumber=BDE411457E27CB98B4AE30FCE3A8AF5C6729509B
Validity
Not Before: Nov 20 22:45:17 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=691f99fd-e53e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3a:33:b9:9c:77:69:a2:21:ae:b8:54:76:e4:
97:45:d5:ef:cc:ea:e6:3f:70:09:14:96:6b:64:f8:
d6:51:bd:74:db:99:b4:6e:75:3b:1d:ed:85:89:00:
1e:87:eb:2b:c0:51:65:13:a5:3d:c0:99:a4:7f:f0:
93:81:ca:e7:10:30:67:a2:8b:84:65:55:70:c8:49:
8f:2a:54:f1:4e:5f:9a:97:17:20:58:59:84:61:bc:
03:ec:13:63:c5:32:78:70:42:4d:c8:c0:29:9a:24:
be:7c:e9:aa:9d:27:76:a6:1d:74:e7:35:43:54:40:
1a:4e:d2:1c:a9:51:bc:07:73:4c:6c:6c:03:0e:c9:
9c:5a:fc:ec:63:f2:75:55:5c:01:69:36:4a:cc:08:
47:2d:ea:cc:3d:f2:f7:33:c0:f9:8d:46:ab:0a:41:
03:5b:83:20:89:b1:79:0b:7b:03:1c:53:d4:18:2f:
00:91:66:5d:6f:0b:4a:11:44:7f:be:4e:f0:81:45:
e6:e5:cd:06:68:94:cf:cc:ea:03:54:33:a9:f8:39:
43:e9:e2:36:a1:c3:0b:27:34:57:43:59:e0:b4:90:
0e:96:e7:1e:01:3e:7a:37:6c:c4:31:08:9c:5f:0c:
b4:b1:f0:a8:fa:3f:6b:15:26:9b:d8:f5:e4:94:12:
b1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B4:94:EC:07:7D:97:90:E3:87:FD:A9:0C:2D:EA:21:6A:6B:28:64
X509v3 Authority Key Identifier:
keyid:BD:E4:11:45:7E:27:CB:98:B4:AE:30:FC:E3:A8:AF:5C:67:29:50:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veQRRX4ny5i0rjD846ivXGcpUJs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/106A9C18500B11EC9430721DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.174.84.0/23
IPv6:
2001:df7:be80::/48
Signature Algorithm: sha256WithRSAEncryption
3f:fa:4b:45:94:2b:e3:3e:72:64:04:e6:12:4f:9d:e9:fa:0d:
31:7f:0b:7a:66:de:09:99:60:f9:af:14:6d:85:f1:d0:13:1b:
c5:12:59:c1:6f:5b:af:da:ec:1f:1d:f1:59:97:9a:17:de:ce:
6c:a9:96:bd:7d:29:0f:89:0e:ae:bd:b8:58:8e:b7:8b:73:0a:
db:58:51:cd:e6:f0:92:0a:7d:e0:35:b1:d3:b6:58:f5:96:e6:
6d:fa:c8:b0:b7:a3:36:50:fe:84:2f:09:de:60:19:f1:a3:c1:
ba:11:ae:17:7a:8c:9a:82:82:0e:c8:e3:7f:12:76:1b:dd:15:
a5:72:7e:74:2e:49:76:c3:a3:7f:8c:e5:9d:2c:35:c7:e9:1b:
d3:d9:3e:4b:b6:22:6b:5e:0a:28:90:ef:d6:a4:e8:ca:02:9f:
06:e6:cf:70:fa:73:61:8e:02:e7:53:ff:25:36:30:0b:8e:0c:
82:72:1e:d4:33:61:b8:99:8b:d2:c1:e2:90:5d:22:77:14:67:
9a:6d:a5:9c:e2:6b:e1:6c:30:f2:21:f0:9e:12:24:6c:49:76:
c1:7a:fa:09:5f:65:d4:31:f2:ff:0f:32:1d:66:d0:e8:d2:1f:
75:01:3f:65:0b:19:f4:4c:32:24:d5:32:f3:db:2d:ea:c8:2f:
36:25:e6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:24:08 2025 by rpki-client