This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/673F4DC6894911EEB032426EC4F9AE02.roa
File: 673F4DC6894911EEB032426EC4F9AE02.roa (raw, json)
Hash identifier: NpMgHBFk9cRmDwRCI3Qag1+PV5w2sgZ3yh4MiAg4Cs4=
Subject key identifier: 2D:60:F0:94:B7:0D:F8:B9:9C:6A:BE:BF:EA:0B:F3:BF:CA:2B:1C:70
Certificate issuer: /CN=A912885B/serialNumber=BDA7621E1AC6E05B0BA0C2EF154174C8BE5C13B9
Certificate serial: 0234
Authority key identifier: BD:A7:62:1E:1A:C6:E0:5B:0B:A0:C2:EF:15:41:74:C8:BE:5C:13:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/673F4DC6894911EEB032426EC4F9AE02.roa
Signing time: Tue 11 Nov 2025 00:17:45 +0000
ROA not before: Tue 11 Nov 2025 00:17:45 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 150394
IP address blocks: 103.29.60.0/23 maxlen: 23
103.29.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.crl
rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:15:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 564 (0x234)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912885B, serialNumber=BDA7621E1AC6E05B0BA0C2EF154174C8BE5C13B9
Validity
Not Before: Nov 11 00:17:45 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=691280a9-8dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5b:de:91:9f:66:fe:58:a2:69:22:2f:00:a5:
81:76:e2:e9:75:9b:46:f2:99:9a:05:a4:ea:52:22:
99:ec:4f:c4:1d:f7:46:02:9c:b0:3e:ff:3a:73:f6:
5d:bf:25:98:ea:f9:91:b7:85:84:00:40:7f:36:e4:
02:15:a9:33:80:4e:d6:ac:3a:7e:a2:d2:7d:e7:60:
65:69:99:bf:eb:27:1f:f5:a9:4d:f4:20:24:d3:f4:
0e:b9:a1:50:65:2e:99:ee:ca:6b:8e:77:4d:53:ca:
24:6d:d6:24:ac:d1:71:c2:c9:3d:09:c7:5e:e4:34:
07:1f:2d:3c:3f:20:88:39:01:1e:ab:5e:6a:76:dd:
ad:34:19:69:26:19:16:1d:db:c1:6f:93:db:be:43:
31:f0:97:fc:7c:6a:76:e2:74:ed:a2:1c:b0:2c:b9:
14:c7:97:b7:f8:db:a0:13:e7:d2:c8:cd:cb:89:7e:
d5:55:0c:ab:e3:70:1f:af:cc:d6:8f:e1:4b:aa:ed:
d8:4a:5e:2d:7d:e0:98:28:e6:e3:79:50:aa:9d:5f:
b1:c1:1d:10:66:d7:70:17:05:28:95:51:58:81:a5:
d0:f3:5e:b1:c2:5d:fd:76:7b:8c:6c:b4:99:bf:42:
ce:42:36:85:72:b1:d6:eb:f3:e2:ba:c7:b7:00:4e:
c2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:60:F0:94:B7:0D:F8:B9:9C:6A:BE:BF:EA:0B:F3:BF:CA:2B:1C:70
X509v3 Authority Key Identifier:
keyid:BD:A7:62:1E:1A:C6:E0:5B:0B:A0:C2:EF:15:41:74:C8:BE:5C:13:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/673F4DC6894911EEB032426EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.29.60.0/23
Signature Algorithm: sha256WithRSAEncryption
75:e6:26:de:23:2c:fb:41:df:13:88:58:1d:86:0a:ec:a0:32:
3d:2c:c4:82:41:7d:10:ed:dc:1d:73:89:4d:e0:6e:9b:bf:97:
4c:f4:d8:fc:c6:2e:40:96:2f:97:cf:6f:c7:30:88:40:29:7a:
ef:99:40:6d:6b:e7:c4:a1:63:b4:5e:4e:05:b0:8e:26:1b:74:
c1:bc:5f:21:c3:78:44:59:ec:bf:b5:05:d3:81:c7:6f:50:59:
3e:cd:c7:67:b4:42:84:5f:c4:51:ef:b7:33:c9:7e:e3:cc:01:
c3:79:45:f5:3c:58:42:92:c8:96:61:c1:1b:c3:d4:d2:15:63:
ed:9e:ba:6f:5e:05:13:61:bf:c2:1a:8b:47:98:20:3a:53:56:
5e:db:e1:39:57:87:f9:f3:dd:38:20:bd:67:76:a1:04:c1:4b:
76:96:7b:36:cd:9c:3e:d4:33:dc:6c:05:14:3e:77:1f:6d:43:
53:5c:e4:5a:41:a5:87:0e:57:20:c0:8b:56:e2:d3:0e:ed:87:
5b:ac:bf:de:63:57:f6:c4:f0:cf:63:a7:f7:57:3b:e5:91:a8:
5e:ac:15:94:ab:dc:17:b6:1b:99:df:f6:ba:84:c7:d8:eb:db:
45:71:22:36:9b:80:47:e7:5b:47:f8:85:fa:01:ca:61:6a:24:
48:29:6a:6c
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjg4NUIxMTAvBgNVBAUTKEJEQTc2MjFFMUFDNkUwNUIwQkEwQzJFRjE1NDE3NEM4
QkU1QzEzQjkwHhcNMjUxMTExMDAxNzQ1WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTEyODBhOS04ZGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmFvekZ9m/liiaSIvAKWBduLpdZtG8pmaBaTqUiKZ7E/EHfdGApywPv86c/Zd
vyWY6vmRt4WEAEB/NuQCFakzgE7WrDp+otJ952BlaZm/6ycf9alN9CAk0/QOuaFQ
ZS6Z7sprjndNU8okbdYkrNFxwsk9Ccde5DQHHy08PyCIOQEeq15qdt2tNBlpJhkW
HdvBb5PbvkMx8Jf8fGp24nTtohywLLkUx5e3+NugE+fSyM3LiX7VVQyr43Afr8zW
j+FLqu3YSl4tfeCYKObjeVCqnV+xwR0QZtdwFwUolVFYgaXQ816xwl39dnuMbLSZ
v0LOQjaFcrHW6/Piuse3AE7CwQIDAQABo4IClTCCApEwHQYDVR0OBBYEFC1g8JS3
Dfi5nGq+v+oL87/KKxxwMB8GA1UdIwQYMBaAFL2nYh4axuBbC6DC7xVBdMi+XBO5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODg1Qi9BOTlDMTg5MDZD
NzkxMUVEOENCNkJDNkJDNEY5QUUwMi92YWRpSGhyRzRGc0xvTUx2RlVGMHlMNWNF
N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZhZGlIaHJHNEZzTG9NTHZGVUYweUw1Y0U3ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Mjg4NUIvQTk5QzE4OTA2Qzc5MTFFRDhDQjZCQzZCQzRGOUFFMDIvNjczRjREQzY4
OTQ5MTFFRUIwMzI0MjZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnHTwwDQYJKoZIhvcNAQELBQADggEBAHXmJt4jLPtB3xOI
WB2GCuygMj0sxIJBfRDt3B1ziU3gbpu/l0z02PzGLkCWL5fPb8cwiEApeu+ZQG1r
58ShY7ReTgWwjiYbdMG8XyHDeERZ7L+1BdOBx29QWT7Nx2e0QoRfxFHvtzPJfuPM
AcN5RfU8WEKSyJZhwRvD1NIVY+2eum9eBRNhv8Iai0eYIDpTVl7b4TlXh/nz3Tgg
vWd2oQTBS3aWezbNnD7UM9xsBRQ+dx9tQ1Nc5FpBpYcOVyDAi1bi0w7th1usv95j
V/bE8M9jp/dXO+WRqF6sFZSr3Be2G5nf9rqEx9jr20VxIjabgEfnW0f4hfoBymFq
JEgpamw=
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:39:39 2025 by rpki-client