This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/D57EF608BC6C11F0894F2331C4F9AE02.roa
File: D57EF608BC6C11F0894F2331C4F9AE02.roa (raw, json)
Hash identifier: z3uOSPnTGwk2CPX9h+gHItJAS78Byp51YLLvsGTy8sE=
Subject key identifier: 26:51:00:55:B3:50:91:D4:1D:BA:49:11:7A:7C:F0:4E:C3:D4:D4:4C
Certificate issuer: /CN=A912675B/serialNumber=E2665EE362E5CC58F7D67F4A6B7621AA460BD38E
Certificate serial: 07CB
Authority key identifier: E2:66:5E:E3:62:E5:CC:58:F7:D6:7F:4A:6B:76:21:AA:46:0B:D3:8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mZe42LlzFj31n9Ka3YhqkYL044.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/D57EF608BC6C11F0894F2331C4F9AE02.roa
Signing time: Sat 08 Nov 2025 06:33:27 +0000
ROA not before: Sat 08 Nov 2025 06:33:27 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 139029
IP address blocks: 103.138.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.crl
rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mZe42LlzFj31n9Ka3YhqkYL044.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 20:22:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1995 (0x7cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912675B, serialNumber=E2665EE362E5CC58F7D67F4A6B7621AA460BD38E
Validity
Not Before: Nov 8 06:33:27 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=690ee437-743c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2e:af:7d:6f:77:fe:d4:af:88:bc:3d:49:84:
02:84:d2:b9:56:a1:bb:b5:53:4e:b5:85:6b:d8:f2:
32:66:7c:83:2d:a8:65:bc:52:7f:67:3d:4d:f8:bb:
2b:19:f4:9c:ed:e8:8a:f8:86:98:00:5c:a0:f1:ea:
a0:e9:2f:c2:b4:a9:22:b1:33:4b:b2:8e:c9:b8:ba:
3e:f3:29:d1:3e:d9:e8:b2:76:af:cc:17:0b:9b:20:
f4:c0:28:f0:2a:2d:fd:35:41:33:ae:e7:6a:30:42:
69:3f:3c:b2:17:cb:c1:65:c1:26:71:09:ed:ae:6b:
bf:d6:2f:29:c9:c0:a3:a4:e1:c2:b3:3a:93:ae:4a:
c6:b0:10:b6:c4:83:fc:c9:9c:f3:00:40:fa:89:ae:
43:86:aa:db:f8:71:8d:c3:a0:21:1a:51:fd:ac:aa:
a9:67:eb:44:be:10:3a:02:3f:4c:0d:1e:18:89:69:
35:9d:c0:9b:09:48:ae:37:50:3a:39:d3:bf:9c:22:
a9:55:f9:53:37:ec:32:df:7c:da:6c:d7:58:79:52:
bd:8b:55:98:50:19:f0:a3:86:a3:95:6a:0f:d5:9d:
98:ff:5c:83:46:a7:b7:f4:1f:4c:ac:af:c9:2d:2f:
1d:17:24:c9:85:0f:f9:32:0b:a8:4c:64:67:e0:b3:
83:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:51:00:55:B3:50:91:D4:1D:BA:49:11:7A:7C:F0:4E:C3:D4:D4:4C
X509v3 Authority Key Identifier:
keyid:E2:66:5E:E3:62:E5:CC:58:F7:D6:7F:4A:6B:76:21:AA:46:0B:D3:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mZe42LlzFj31n9Ka3YhqkYL044.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/D57EF608BC6C11F0894F2331C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.171.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:1a:48:ea:2b:18:81:89:9e:f3:20:f2:25:32:c8:00:99:13:
61:69:43:20:b1:3f:f6:b0:a1:56:ee:9d:1e:af:2b:74:00:5e:
8a:f1:19:93:a3:24:57:b9:e2:2a:39:8f:37:36:dc:fc:af:47:
52:05:89:64:be:3e:1a:9f:73:7d:42:27:01:35:2a:cd:0d:53:
06:96:9a:38:03:51:1e:0b:33:b3:bc:0c:47:d2:cf:6e:30:f8:
d4:3b:44:22:7c:9e:5d:24:03:65:8e:8d:5f:c8:1e:ab:09:e5:
34:27:47:70:aa:b8:74:20:d1:5c:72:45:f7:7d:b8:4d:6d:95:
3b:06:08:3e:1a:f1:6e:19:90:a0:03:95:70:ba:e7:54:d6:f3:
c9:39:09:97:1d:99:49:dc:1a:8b:7e:45:c1:eb:e2:8e:13:ae:
ab:e6:b9:0a:f7:73:97:a2:4a:fd:20:a5:e6:6b:9b:3a:09:59:
e7:a9:95:19:a9:55:cc:0a:d9:5c:a5:19:a0:0d:28:74:c8:47:
9a:d3:55:c6:4e:b6:5a:f0:42:95:27:75:2d:26:0b:bd:cf:21:
71:71:83:c1:f4:e7:c5:f8:5a:bf:c0:0e:73:f6:f3:c6:b6:a9:
ca:eb:5e:85:83:bf:e0:87:bc:6b:d5:d1:c2:d0:35:50:0d:f1:
d6:5a:f2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:10:04 2025 by rpki-client