This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/A591C4A2933D11EEA6B4A653C4F9AE02.roa
File: A591C4A2933D11EEA6B4A653C4F9AE02.roa (raw, json)
Hash identifier: jzviIcT36AX7+vIYnTcKiwwmHcmgLFxJ/UujmC0oCBI=
Subject key identifier: 76:50:10:C1:94:AC:E1:5A:EC:C2:B4:C6:7E:F3:65:4E:0E:03:EE:97
Certificate issuer: /CN=A912B129/serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270
Certificate serial: 0167
Authority key identifier: 2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/A591C4A2933D11EEA6B4A653C4F9AE02.roa
Signing time: Wed 29 Oct 2025 03:48:42 +0000
ROA not before: Wed 29 Oct 2025 03:48:42 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 132353
IP address blocks: 103.14.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl
rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:59:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 359 (0x167)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B129, serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270
Validity
Not Before: Oct 29 03:48:42 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69018e9a-43a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:26:9b:54:98:b7:f4:55:db:7e:13:ca:33:54:
b1:cf:95:1c:d3:b8:ab:cf:66:53:57:d7:6c:95:1a:
c7:ed:c5:6b:cd:21:f9:6a:7b:17:5a:e2:56:a2:3e:
1e:67:e8:c7:2a:8e:11:db:7b:eb:c0:07:cf:84:30:
46:38:69:b5:c4:4b:14:03:4e:45:db:64:9b:6e:ca:
78:5a:d5:09:10:40:42:17:7a:a0:10:fb:23:26:80:
31:9d:41:cf:76:6f:1d:4b:54:c3:4d:54:38:c3:12:
c4:83:4e:f0:67:3a:de:db:e6:de:ea:22:3f:1c:1a:
08:ce:f3:b5:70:bb:cb:9c:bb:ca:07:45:a5:9d:cd:
2c:f7:7e:c9:5d:ab:2d:1a:c5:3c:66:42:f7:6d:c2:
da:7e:9e:29:94:dc:be:f7:a0:01:de:a7:a2:77:39:
eb:39:3d:07:a4:89:77:59:9e:d4:cb:43:cb:6e:e7:
2e:88:09:62:02:c6:19:cd:9b:24:7e:ec:48:c4:88:
0f:86:49:9b:ef:ef:ae:79:c1:aa:f4:e6:2a:b6:2c:
7a:c5:43:6c:a8:5a:be:9b:87:fe:34:82:23:ca:fe:
9b:e0:75:3f:bb:7f:30:56:86:e0:d7:00:65:a9:b7:
28:19:ee:09:c4:dc:77:d4:80:c2:60:4d:cb:a4:56:
ae:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:50:10:C1:94:AC:E1:5A:EC:C2:B4:C6:7E:F3:65:4E:0E:03:EE:97
X509v3 Authority Key Identifier:
keyid:2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/A591C4A2933D11EEA6B4A653C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.14.180.0/24
Signature Algorithm: sha256WithRSAEncryption
53:bb:23:25:21:e0:a7:a8:2f:08:b5:c5:1c:a8:f5:68:5b:58:
0d:dc:3a:ea:5a:48:f0:13:ab:21:f8:bb:85:76:73:55:07:a3:
85:e3:ce:15:9b:e8:b0:f0:b2:cd:64:07:70:64:d1:c0:5b:1f:
3a:c9:2d:0d:da:85:59:92:a5:3e:52:1b:44:86:62:ef:1d:1a:
a8:50:5f:73:13:7c:62:57:f2:9b:5e:4c:da:a2:d4:46:f0:7a:
ac:c5:ad:72:b6:8a:5f:05:57:8b:26:95:4b:62:39:83:85:69:
a8:2c:17:e3:f1:56:a6:3d:78:a6:1c:98:8c:60:20:ad:70:b1:
14:68:2e:f3:60:35:f9:79:ea:f7:33:3f:f1:fb:68:4a:46:0f:
70:5a:98:00:ff:61:6e:1a:48:e1:c8:42:b0:df:83:82:14:8a:
f1:d3:2d:b4:08:2e:ec:fe:66:c2:59:4e:ee:9f:e9:7f:aa:3b:
f9:c5:1e:12:a9:13:ad:5f:96:2b:85:97:18:d1:e0:d1:d6:87:
8e:b5:a1:c5:85:15:ba:76:25:0f:82:74:9f:75:09:b7:99:1b:
ef:00:37:a0:86:88:32:c2:7e:8f:76:22:55:1e:e4:e2:9f:0c:
cb:53:4c:21:b6:20:71:7c:8a:8f:b2:4b:0b:46:be:98:d8:9f:
27:c9:35:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:05:11 2025 by rpki-client