This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/3E0EDBC83E0111ECA3AF5462C4F9AE02.roa
File: 3E0EDBC83E0111ECA3AF5462C4F9AE02.roa (raw, json)
Hash identifier: lExXs/ZWSysLfoXLqxxqgj7BhKcNAbWDLDuu5558YHQ=
Subject key identifier: 29:4A:6F:2E:4A:27:DD:47:5A:09:F3:89:DD:50:8E:BD:D7:8F:C8:5D
Certificate issuer: /CN=A912C4DB/serialNumber=75055E0D8CDB14EF9F04F8B95DAC8B89C968CDDD
Certificate serial: 0CA4
Authority key identifier: 75:05:5E:0D:8C:DB:14:EF:9F:04:F8:B9:5D:AC:8B:89:C9:68:CD:DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQVeDYzbFO-fBPi5XayLiclozd0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/3E0EDBC83E0111ECA3AF5462C4F9AE02.roa
Signing time: Fri 28 Nov 2025 18:22:14 +0000
ROA not before: Fri 28 Nov 2025 18:22:14 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 139792
IP address blocks: 103.145.70.0/23 maxlen: 23
103.145.70.0/24 maxlen: 24
103.145.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.crl
rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQVeDYzbFO-fBPi5XayLiclozd0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 17:46:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3236 (0xca4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C4DB, serialNumber=75055E0D8CDB14EF9F04F8B95DAC8B89C968CDDD
Validity
Not Before: Nov 28 18:22:14 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6929e856-696a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8f:25:41:99:69:72:3b:cd:36:0e:2a:19:b3:
59:c1:e7:8f:ba:25:ec:af:99:64:81:f8:9f:99:a0:
be:f0:9a:2b:02:ba:7d:09:65:38:ed:fd:31:86:51:
c3:89:9a:31:01:7e:4d:8b:48:90:4d:49:b0:a0:95:
60:12:56:98:97:aa:d9:f6:2f:57:35:13:e4:f6:50:
33:f2:ef:72:93:3d:6c:a9:a1:d8:e7:0e:11:4f:10:
97:2c:a9:7e:4a:38:1f:fa:1d:75:6a:54:e6:61:75:
e6:4d:88:d5:41:49:cf:58:07:77:3b:b8:fd:7d:af:
4d:5c:0f:4b:4f:25:07:54:ee:16:19:5e:94:ce:3b:
4a:d3:9f:c6:72:5f:6b:4d:fd:e9:b7:26:1a:ed:d7:
9c:a0:39:2f:a2:e9:43:43:26:ae:2c:56:06:ec:c8:
1d:7e:21:f0:28:bf:c1:4c:a8:41:53:21:3b:e3:27:
3f:09:32:97:12:e3:1e:7f:36:5e:a4:f1:87:05:ae:
f5:21:76:97:1e:ae:c1:2a:ca:0e:5a:50:0d:de:e6:
26:29:12:a8:5f:f3:68:d3:06:6b:a0:94:5e:3c:aa:
c3:c0:9f:0f:c9:82:4c:d9:c7:af:cf:36:8e:e8:69:
f7:00:7c:d7:3c:ad:e5:ba:27:c6:3d:d4:f9:3c:89:
8e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:4A:6F:2E:4A:27:DD:47:5A:09:F3:89:DD:50:8E:BD:D7:8F:C8:5D
X509v3 Authority Key Identifier:
keyid:75:05:5E:0D:8C:DB:14:EF:9F:04:F8:B9:5D:AC:8B:89:C9:68:CD:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQVeDYzbFO-fBPi5XayLiclozd0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/3E0EDBC83E0111ECA3AF5462C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.145.70.0/23
Signature Algorithm: sha256WithRSAEncryption
67:d0:37:ea:de:32:f1:54:fb:84:17:34:af:75:48:54:9b:be:
7a:07:1f:4e:3a:9e:b9:66:9b:b6:41:3b:d8:5d:62:d7:f9:32:
5b:da:40:ea:68:83:33:ef:63:29:79:53:1a:61:7b:fe:43:ae:
0d:a2:31:6e:98:07:12:3a:c4:ad:cd:9f:e0:79:cc:96:04:75:
76:97:fa:f8:9a:38:a3:58:77:ce:42:27:77:ee:c9:69:76:1c:
44:4c:18:2f:4d:1a:30:bb:28:94:9f:d9:06:98:aa:be:ed:04:
fe:59:a9:37:78:14:d4:ab:a2:b5:ea:f4:4c:18:ac:44:d1:af:
49:73:20:2e:8a:3e:31:87:76:e3:12:14:ff:b5:9d:a6:a6:ac:
b2:fc:c2:7a:e5:8e:c8:ae:c9:c0:9c:17:7f:56:39:e3:29:ec:
ff:a9:1b:e5:85:70:56:cb:7c:6b:1a:c5:71:1d:91:ec:bc:f8:
04:dd:ef:20:5a:0d:ae:33:61:91:41:6b:13:a8:de:2a:47:40:
e4:f7:83:f1:b9:44:20:54:4b:ac:52:e2:ab:c1:36:d5:af:92:
9c:5a:82:5f:97:5a:f3:49:0f:12:c1:dd:02:54:51:7c:eb:c5:
6c:09:74:fe:2b:a7:66:67:3d:a2:38:51:7d:f7:fe:2d:e3:8a:
8e:c8:6f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:52:35 2025 by rpki-client