This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/2E511546D07111F09D273F2BC4F9AE02.roa
File: 2E511546D07111F09D273F2BC4F9AE02.roa (raw, json)
Hash identifier: UwOWo3yxX9gqPa44fO4AhHoo35qvvDoJEKScpDmr7GI=
Subject key identifier: 9D:74:4A:A9:54:49:F2:0A:22:34:42:FA:1C:64:15:DA:91:2F:4F:9B
Certificate issuer: /CN=A912F9FB/serialNumber=BFFDB7EBF45D7C61BF9D23908A9F38C332985970
Certificate serial: 1978
Authority key identifier: BF:FD:B7:EB:F4:5D:7C:61:BF:9D:23:90:8A:9F:38:C3:32:98:59:70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v_236_RdfGG_nSOQip84wzKYWXA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/2E511546D07111F09D273F2BC4F9AE02.roa
Signing time: Wed 03 Dec 2025 18:00:00 +0000
ROA not before: Wed 03 Dec 2025 18:00:00 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 198949
IP address blocks: 103.28.48.0/22 maxlen: 24
202.146.208.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.crl
rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v_236_RdfGG_nSOQip84wzKYWXA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 16:03:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6520 (0x1978)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F9FB, serialNumber=BFFDB7EBF45D7C61BF9D23908A9F38C332985970
Validity
Not Before: Dec 3 18:00:00 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69307aa0-ec66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:aa:51:62:50:6f:1d:21:41:25:5a:b5:01:83:
51:c2:9a:de:1e:69:73:c3:69:08:07:e6:bb:04:26:
b5:62:6a:2f:71:08:7b:8a:33:31:ff:ed:10:07:e4:
44:49:25:9d:56:6c:a0:39:45:da:47:6b:cf:e8:4a:
24:4d:5f:30:db:9f:fb:99:3c:e1:4d:aa:5c:75:08:
13:0f:a6:b8:78:e3:99:58:59:9a:1d:17:71:47:f4:
f8:c5:99:50:fe:a1:cf:6e:ab:8c:02:db:39:ef:ea:
a1:6f:c6:7a:66:8b:50:12:e9:72:73:d3:30:88:e8:
02:2d:8f:0a:7b:08:6a:57:cb:d5:dd:40:6b:49:3b:
a6:2a:7f:e8:1c:08:31:b8:d7:30:7d:97:9f:00:b0:
96:4b:f6:91:be:ed:09:0f:66:a1:84:7f:a6:e6:c9:
23:34:f2:d2:4b:4a:72:b8:1c:8f:c6:e7:39:d7:3f:
ea:1a:30:70:61:92:c2:44:14:df:17:b8:48:b8:ea:
a9:53:58:3b:69:88:d5:60:8a:15:2b:0e:92:2e:fc:
1d:1a:83:f0:8f:dd:11:01:32:7a:90:12:7b:16:cc:
6e:56:c7:a3:79:04:f5:eb:22:db:ba:09:31:99:6e:
6e:25:81:4d:56:ec:df:86:01:24:ce:48:a2:0f:11:
59:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:74:4A:A9:54:49:F2:0A:22:34:42:FA:1C:64:15:DA:91:2F:4F:9B
X509v3 Authority Key Identifier:
keyid:BF:FD:B7:EB:F4:5D:7C:61:BF:9D:23:90:8A:9F:38:C3:32:98:59:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v_236_RdfGG_nSOQip84wzKYWXA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/2E511546D07111F09D273F2BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.28.48.0/22
202.146.208.0/21
Signature Algorithm: sha256WithRSAEncryption
1b:40:37:8a:76:55:10:db:bd:6a:b1:81:9b:1d:e5:a4:a7:18:
b0:2c:94:ca:2e:2e:5e:d2:c4:10:36:c1:05:cc:b3:07:79:d2:
c1:cf:16:3c:62:69:ac:46:72:04:c9:da:32:cc:2d:81:b5:ae:
5a:2e:4c:5f:35:87:62:21:84:e9:c9:f9:b5:b1:6e:67:0e:64:
cb:a2:b7:3f:f0:a0:b0:12:92:a6:ce:70:43:81:7f:db:a5:18:
e4:1e:bd:e3:57:d4:95:e2:d4:85:45:50:bb:6b:18:e1:88:8e:
66:56:12:9c:73:a2:78:85:76:5c:b0:28:03:39:77:0c:6e:fe:
9e:c2:76:bc:1a:ce:91:5b:e5:cb:fa:16:54:e6:03:10:da:69:
76:38:be:0b:55:6f:bf:54:04:23:b2:06:23:10:e3:5f:ff:62:
cc:02:79:2e:c3:fa:74:42:36:9a:32:c0:73:98:d5:f8:fe:31:
e7:74:26:4d:2b:8f:64:a2:54:e1:a8:7f:97:65:57:d0:40:2f:
84:bf:ca:3c:f3:31:d1:23:45:45:5c:81:93:df:cf:82:98:1a:
64:c3:86:dc:c8:ae:8d:2b:0b:8b:ca:0a:d1:bc:d9:e8:99:c7:
4d:d4:c4:5b:48:e3:54:c2:5b:4b:1e:9b:a1:c1:3d:ef:35:e8:
4c:0b:48:b3
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICGXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkY5RkIxMTAvBgNVBAUTKEJGRkRCN0VCRjQ1RDdDNjFCRjlEMjM5MDhBOUYzOEMz
MzI5ODU5NzAwHhcNMjUxMjAzMTgwMDAwWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTMwN2FhMC1lYzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyqpRYlBvHSFBJVq1AYNRwpreHmlzw2kIB+a7BCa1YmovcQh7ijMx/+0QB+RE
SSWdVmygOUXaR2vP6EokTV8w25/7mTzhTapcdQgTD6a4eOOZWFmaHRdxR/T4xZlQ
/qHPbquMAts57+qhb8Z6ZotQEulyc9MwiOgCLY8KewhqV8vV3UBrSTumKn/oHAgx
uNcwfZefALCWS/aRvu0JD2ahhH+m5skjNPLSS0pyuByPxuc51z/qGjBwYZLCRBTf
F7hIuOqpU1g7aYjVYIoVKw6SLvwdGoPwj90RATJ6kBJ7FsxuVsejeQT16yLbugkx
mW5uJYFNVuzfhgEkzkiiDxFZTwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJ10SqlU
SfIKIjRC+hxkFdqRL0+bMB8GA1UdIwQYMBaAFL/9t+v0XXxhv50jkIqfOMMymFlw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjlGQi9BRjAwOThEMDg5
NkYxMUU3OEE4MUM4M0NDNEY5QUUwMi92XzIzNl9SZGZHR19uU09RaXA4NHd6S1lX
WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZfMjM2X1JkZkdHX25TT1FpcDg0d3pLWVdYQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkY5RkIvQUYwMDk4RDA4OTZGMTFFNzhBODFDODNDQzRGOUFFMDIvMkU1MTE1NDZE
MDcxMTFGMDlEMjczRjJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAJnHDADBAPKktAwDQYJKoZIhvcNAQELBQADggEBABtAN4p2
VRDbvWqxgZsd5aSnGLAslMouLl7SxBA2wQXMswd50sHPFjxiaaxGcgTJ2jLMLYG1
rlouTF81h2IhhOnJ+bWxbmcOZMuitz/woLASkqbOcEOBf9ulGOQeveNX1JXi1IVF
ULtrGOGIjmZWEpxzoniFdlywKAM5dwxu/p7CdrwazpFb5cv6FlTmAxDaaXY4vgtV
b79UBCOyBiMQ41//YswCeS7D+nRCNpoywHOY1fj+Med0Jk0rj2SiVOGof5dlV9BA
L4S/yjzzMdEjRUVcgZPfz4KYGmTDhtzIro0rC4vKCtG82eiZx03UxFtI41TCW0se
m6HBPe816EwLSLM=
-----END CERTIFICATE-----
Generated at Sun Dec 7 06:45:21 2025 by rpki-client