This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/F53FF9E668F411EFA1530C36C4F9AE02.roa
File: F53FF9E668F411EFA1530C36C4F9AE02.roa (raw, json)
Hash identifier: 8u8ukooKAbnYCoCoCcqh3LJNzpT+wb7zAAtytRCCJns=
Subject key identifier: 28:4F:FB:85:9F:37:68:87:75:C4:8E:AE:C3:E2:AF:9C:80:B0:0E:FE
Certificate issuer: /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Certificate serial: 03CC
Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/F53FF9E668F411EFA1530C36C4F9AE02.roa
Signing time: Tue 02 Dec 2025 23:58:54 +0000
ROA not before: Tue 02 Dec 2025 23:58:54 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 135670
IP address blocks: 103.240.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl
rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 23:26:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 972 (0x3cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912442A, serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Validity
Not Before: Dec 2 23:58:54 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=692f7d3e-f7a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fc:c4:62:eb:e6:60:46:01:84:94:9e:37:16:
f9:38:0d:d7:72:b2:cc:c9:b2:49:92:82:42:d5:c4:
21:1d:84:30:b1:09:81:24:20:e5:2e:23:7c:c3:70:
8e:1d:86:ac:0c:0c:d5:b3:bb:5c:f3:e9:34:b6:71:
d2:a3:d2:5f:de:fb:1d:ac:79:e1:3f:d9:a5:b7:9c:
61:f9:d3:de:bc:94:7d:b2:8a:fa:1f:3e:f1:e3:31:
ac:0e:0e:75:3b:ee:ff:fe:d2:2a:06:70:40:e3:75:
7b:54:db:bc:c1:d7:b1:b7:ab:fb:ad:42:52:e1:40:
1c:48:39:35:ea:64:26:66:3f:b2:82:8c:de:f0:b8:
d0:5c:10:18:19:91:5a:f4:b2:22:bd:4f:e7:3c:e6:
88:51:04:ae:16:29:db:e3:21:3d:40:83:8f:28:8b:
13:a9:33:1e:52:ba:aa:ec:5f:7e:d0:04:27:fb:ba:
60:61:c6:3b:a6:5a:51:1a:98:26:5d:3e:58:ac:9d:
87:a1:3a:38:98:af:48:67:4e:00:19:46:66:f8:4b:
05:1c:53:03:78:1f:4a:cb:ba:98:81:72:60:12:c9:
ca:e8:93:4a:4f:1c:16:f1:a0:2f:03:58:73:28:7a:
62:c2:c2:7a:e2:b0:10:46:a2:cb:db:21:96:d7:7e:
09:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4F:FB:85:9F:37:68:87:75:C4:8E:AE:C3:E2:AF:9C:80:B0:0E:FE
X509v3 Authority Key Identifier:
keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/F53FF9E668F411EFA1530C36C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.240.62.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:73:48:36:be:59:af:72:c3:df:e1:91:65:72:f0:4a:26:9f:
07:a0:b2:44:01:46:cb:b9:d0:4b:29:75:20:01:4c:db:84:d7:
88:8a:74:7a:0b:ad:11:12:5d:3c:75:10:3b:5d:ce:a4:5a:ba:
21:6e:8e:d9:42:41:04:2f:fd:a6:5b:7a:26:bb:15:bc:e4:0a:
f4:93:aa:3d:64:56:98:59:c0:19:b6:15:a7:2d:2d:2c:47:0d:
55:54:37:02:3a:df:ed:5e:38:d2:2a:a1:f8:58:7b:1c:92:94:
1e:66:81:2c:8b:e0:40:49:39:6e:fd:83:78:12:c8:3c:57:aa:
67:d3:7d:4f:8f:92:92:68:00:39:dd:0e:55:f8:d3:b3:b1:0d:
5f:8e:7c:5b:bd:9b:ca:fd:5e:c1:3c:1b:ab:8c:74:23:5c:d9:
e4:f8:6e:27:10:3e:2a:89:ae:0d:2a:e5:c3:93:4d:78:78:ae:
7e:20:b1:34:e3:54:8f:29:89:3c:53:6e:ef:b2:82:c7:46:f0:
ef:cf:36:c4:1b:66:34:c8:db:9c:f2:22:94:19:07:bd:d5:fe:
8b:aa:b1:9b:20:03:a9:70:37:14:dd:9a:26:53:f6:56:53:fc:
8c:2f:9a:ae:42:6c:9c:5b:6a:8c:a1:a2:0a:ae:d1:20:b6:24:
a0:e0:29:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:14:07 2025 by rpki-client