This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/8732232CCBA011E887F87451C4F9AE02.roa
File: 8732232CCBA011E887F87451C4F9AE02.roa (raw, json)
Hash identifier: eW7HUd0AqFpEmBZ5m/dr7HGk+rxZDTswhaWbGZK0g6E=
Subject key identifier: 41:BB:4D:A3:44:0A:68:62:65:A5:26:E1:4C:D9:0E:6D:16:BD:3D:43
Certificate issuer: /CN=A912F9FB/serialNumber=BFFDB7EBF45D7C61BF9D23908A9F38C332985970
Certificate serial: 196F
Authority key identifier: BF:FD:B7:EB:F4:5D:7C:61:BF:9D:23:90:8A:9F:38:C3:32:98:59:70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v_236_RdfGG_nSOQip84wzKYWXA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/8732232CCBA011E887F87451C4F9AE02.roa
Signing time: Fri 28 Nov 2025 16:18:01 +0000
ROA not before: Fri 28 Nov 2025 16:18:00 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 38719
IP address blocks: 103.20.200.0/22 maxlen: 22
103.28.48.0/22 maxlen: 22
122.201.64.0/19 maxlen: 19
122.201.96.0/19 maxlen: 19
202.146.208.0/21 maxlen: 24
2402:af00::/32 maxlen: 32
2405:3f00::/32 maxlen: 32
2405:3f01::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.crl
rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v_236_RdfGG_nSOQip84wzKYWXA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 16:03:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6511 (0x196f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F9FB, serialNumber=BFFDB7EBF45D7C61BF9D23908A9F38C332985970
Validity
Not Before: Nov 28 16:18:00 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6929cb38-c164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b2:a7:34:1f:03:b5:16:15:5c:02:97:40:b2:
20:6e:37:4b:3e:5e:30:e0:af:dd:8f:e8:9d:02:9a:
66:5c:c5:0b:53:15:2c:23:33:e5:05:07:e1:94:69:
58:d2:ea:99:0a:ea:65:70:30:19:df:bf:30:ca:67:
b7:38:4d:78:d6:f7:d8:69:bc:7b:62:c9:8d:56:07:
9c:70:ea:b2:30:25:16:08:2a:64:ac:35:11:4e:0b:
7e:92:8f:be:86:5b:e1:70:84:14:dc:a3:a9:e0:32:
b9:bf:06:d0:7e:a7:75:65:12:27:2a:8c:22:75:d6:
3a:ab:41:8a:c0:8d:fa:02:ea:07:9f:a4:85:44:f8:
0d:5b:08:cb:81:19:f8:de:8c:04:9f:b7:d4:eb:c5:
34:d4:53:b8:3a:9a:79:32:f5:07:9d:b4:64:dc:fc:
1b:b5:74:cb:e3:6c:9a:3e:76:2e:ba:1c:67:b3:f4:
23:10:b5:fe:b5:a4:b4:22:9f:78:06:f7:27:2a:8b:
79:30:4b:5b:2e:bd:4c:21:69:87:fa:a6:99:c9:6a:
cb:e2:46:ad:36:38:25:87:7c:9e:95:b6:b8:e7:46:
b1:63:31:02:0d:f9:2c:3b:89:88:9e:ae:9f:a2:3a:
46:94:4c:4b:97:e6:1f:a6:49:da:e9:5d:d8:79:32:
3e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:BB:4D:A3:44:0A:68:62:65:A5:26:E1:4C:D9:0E:6D:16:BD:3D:43
X509v3 Authority Key Identifier:
keyid:BF:FD:B7:EB:F4:5D:7C:61:BF:9D:23:90:8A:9F:38:C3:32:98:59:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v_236_RdfGG_nSOQip84wzKYWXA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/8732232CCBA011E887F87451C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.20.200.0/22
103.28.48.0/22
122.201.64.0/18
202.146.208.0/21
IPv6:
2402:af00::/32
2405:3f00::/31
Signature Algorithm: sha256WithRSAEncryption
28:d2:a2:7c:8d:4f:02:ce:d2:5c:b9:6a:ca:3e:41:33:f6:f7:
8e:40:93:17:94:a3:19:6e:6c:dd:c3:98:bb:ed:e9:00:9b:29:
7e:ee:e4:4f:30:e3:39:28:3b:4a:0c:d5:64:df:84:2e:eb:44:
e8:c1:8d:33:53:cf:65:0a:5d:83:57:40:69:aa:d5:1c:9a:f8:
9a:83:ef:32:7e:b8:b8:cf:a4:e5:9c:50:06:c3:f5:2f:e0:53:
42:24:76:4e:46:0e:15:3c:1b:7e:40:1c:97:a4:d5:4a:fd:bf:
6f:8b:04:db:f7:70:ba:41:76:67:8c:41:48:5c:4a:40:54:ba:
61:29:ed:68:78:49:94:52:8a:5a:6b:25:ba:14:12:22:12:0c:
ca:34:ba:36:af:dd:4d:08:30:9f:d7:f0:bc:b0:15:7c:8f:8b:
07:60:f9:87:9f:e5:51:c1:0b:4e:15:a9:66:4d:a6:66:b9:d0:
4a:cd:68:a6:31:91:ef:92:a0:8d:1b:26:42:52:21:0c:32:39:
20:83:91:39:69:49:ec:c6:4b:2e:f8:21:1e:2f:7a:e1:22:01:
b9:3f:49:e6:60:c0:7f:44:f5:f9:94:be:3f:5b:65:d8:57:6f:
b1:d9:47:85:29:e4:9c:09:e8:70:17:02:c6:06:0b:16:a0:fe:
99:f7:ca:ff
-----BEGIN CERTIFICATE-----
MIIFmTCCBIGgAwIBAgICGW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkY5RkIxMTAvBgNVBAUTKEJGRkRCN0VCRjQ1RDdDNjFCRjlEMjM5MDhBOUYzOEMz
MzI5ODU5NzAwHhcNMjUxMTI4MTYxODAwWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTI5Y2IzOC1jMTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx7KnNB8DtRYVXAKXQLIgbjdLPl4w4K/dj+idAppmXMULUxUsIzPlBQfhlGlY
0uqZCuplcDAZ378wyme3OE141vfYabx7YsmNVgeccOqyMCUWCCpkrDURTgt+ko++
hlvhcIQU3KOp4DK5vwbQfqd1ZRInKowiddY6q0GKwI36AuoHn6SFRPgNWwjLgRn4
3owEn7fU68U01FO4Opp5MvUHnbRk3PwbtXTL42yaPnYuuhxns/QjELX+taS0Ip94
BvcnKot5MEtbLr1MIWmH+qaZyWrL4katNjglh3yelba450axYzECDfksO4mInq6f
ojpGlExLl+Yfpkna6V3YeTI+VQIDAQABo4ICvTCCArkwHQYDVR0OBBYEFEG7TaNE
CmhiZaUm4UzZDm0WvT1DMB8GA1UdIwQYMBaAFL/9t+v0XXxhv50jkIqfOMMymFlw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjlGQi9BRjAwOThEMDg5
NkYxMUU3OEE4MUM4M0NDNEY5QUUwMi92XzIzNl9SZGZHR19uU09RaXA4NHd6S1lX
WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZfMjM2X1JkZkdHX25TT1FpcDg0d3pLWVdYQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkY5RkIvQUYwMDk4RDA4OTZGMTFFNzhBODFDODNDQzRGOUFFMDIvODczMjIzMkND
QkEwMTFFODg3Rjg3NDUxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRwYIKwYBBQUHAQcBAf8E
ODA2MB4EAgABMBgDBAJnFMgDBAJnHDADBAZ6yUADBAPKktAwFAQCAAIwDgMFACQC
rwADBQEkBT8AMA0GCSqGSIb3DQEBCwUAA4IBAQAo0qJ8jU8CztJcuWrKPkEz9veO
QJMXlKMZbmzdw5i77ekAmyl+7uRPMOM5KDtKDNVk34Qu60TowY0zU89lCl2DV0Bp
qtUcmviag+8yfri4z6TlnFAGw/Uv4FNCJHZORg4VPBt+QByXpNVK/b9viwTb93C6
QXZnjEFIXEpAVLphKe1oeEmUUopaayW6FBIiEgzKNLo2r91NCDCf1/C8sBV8j4sH
YPmHn+VRwQtOFalmTaZmudBKzWimMZHvkqCNGyZCUiEMMjkgg5E5aUnsxksu+CEe
L3rhIgG5P0nmYMB/RPX5lL4/W2XYV2+x2UeFKeScCehwFwLGBgsWoP6Z98r/
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:59:29 2025 by rpki-client