This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/E84DCBC422D211EDAF1F924EC4F9AE02.roa
File: E84DCBC422D211EDAF1F924EC4F9AE02.roa (raw, json)
Hash identifier: TyaeGX842kMEGDRBcupYe577AZgEgKGiqyo02h56Luk=
Subject key identifier: 51:A5:89:6F:D9:CF:D2:A1:39:5E:2B:F9:E5:9F:0C:D8:5C:1E:73:06
Certificate issuer: /CN=A9131EDD/serialNumber=A4694BE47C4F3BC94805D4A366A007C69070512E
Certificate serial: 06C4
Authority key identifier: A4:69:4B:E4:7C:4F:3B:C9:48:05:D4:A3:66:A0:07:C6:90:70:51:2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGlL5HxPO8lIBdSjZqAHxpBwUS4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/E84DCBC422D211EDAF1F924EC4F9AE02.roa
Signing time: Sat 04 Oct 2025 22:23:48 +0000
ROA not before: Sat 04 Oct 2025 22:23:48 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 132382
IP address blocks: 103.14.172.0/24 maxlen: 24
103.14.173.0/24 maxlen: 24
103.14.174.0/24 maxlen: 24
103.14.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/pGlL5HxPO8lIBdSjZqAHxpBwUS4.crl
rsync://rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/pGlL5HxPO8lIBdSjZqAHxpBwUS4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGlL5HxPO8lIBdSjZqAHxpBwUS4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 21:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1732 (0x6c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131EDD, serialNumber=A4694BE47C4F3BC94805D4A366A007C69070512E
Validity
Not Before: Oct 4 22:23:48 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=68e19e73-6d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6c:a6:b4:7a:2e:7c:62:e8:29:53:54:01:8e:
68:55:9e:5b:2a:94:1c:63:a5:43:ea:9d:20:62:ee:
bf:2b:8b:82:77:30:a8:be:d4:51:8f:62:0f:3f:df:
2b:63:74:b4:db:d8:b5:1c:1d:da:e3:15:43:66:20:
d1:12:70:60:5e:a4:ce:4b:93:73:18:3a:c0:61:f3:
b5:41:e3:ef:49:96:01:cb:57:6f:46:df:0f:78:32:
d8:05:81:9d:ed:da:1b:04:b5:d4:19:34:4c:64:9a:
9a:3a:f2:50:8a:e6:cf:33:8d:82:ef:91:71:4f:2c:
90:d4:cb:c3:2b:3f:fb:cf:74:6f:e8:f3:4e:99:6d:
27:28:58:3d:67:25:d5:0f:26:13:a7:f6:b0:9e:c3:
c0:db:e7:99:57:38:3c:ee:ba:c2:5b:37:dd:36:a1:
f3:ab:70:4e:1a:5c:2a:ca:b0:00:8e:f7:2b:e9:44:
6e:46:18:9a:84:fe:19:86:e8:e5:e8:9a:d2:0e:8b:
f2:78:30:dd:15:08:de:e9:40:c8:77:fe:41:e1:1e:
91:ca:4f:63:ed:9b:21:66:df:81:ac:9e:aa:51:17:
70:36:35:11:15:ae:31:71:90:7b:74:fa:b3:e6:9b:
b5:18:e6:34:75:7f:5c:72:e4:47:aa:f8:0c:f4:43:
d5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A5:89:6F:D9:CF:D2:A1:39:5E:2B:F9:E5:9F:0C:D8:5C:1E:73:06
X509v3 Authority Key Identifier:
keyid:A4:69:4B:E4:7C:4F:3B:C9:48:05:D4:A3:66:A0:07:C6:90:70:51:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/pGlL5HxPO8lIBdSjZqAHxpBwUS4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGlL5HxPO8lIBdSjZqAHxpBwUS4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/E84DCBC422D211EDAF1F924EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.14.172.0/22
Signature Algorithm: sha256WithRSAEncryption
86:16:01:08:9f:4e:6f:f4:70:89:07:fd:de:ea:ca:07:ca:b2:
fd:84:ef:4b:c4:71:4f:c4:51:37:cd:0c:77:72:4c:62:8c:c6:
48:1e:40:41:ef:94:97:5d:db:f9:7a:02:ac:03:d9:a6:1f:70:
e9:39:24:ba:3b:4f:91:51:aa:89:71:81:ac:4f:12:07:62:a5:
93:b0:09:1a:9a:e1:d1:f3:fb:81:cf:12:77:e2:a9:4e:5d:f8:
85:2e:d8:50:3c:da:cd:c0:ac:8d:22:dc:4f:7f:e9:b7:cd:54:
47:7a:fe:58:61:bf:53:e6:8d:2b:d0:47:17:e1:65:5c:73:8b:
8c:86:24:3f:65:f3:93:3e:aa:9a:9d:ed:b3:c6:e0:b1:22:89:
49:5c:7e:eb:2e:fc:f5:c9:45:09:b8:a7:e7:87:16:11:df:2f:
c3:85:60:b7:2f:70:ba:80:9e:2e:31:a8:b2:8d:88:06:b7:94:
46:a3:6e:1f:74:48:12:d3:b2:06:9b:97:df:53:14:9d:ef:a8:
08:5a:b8:2c:9c:dd:88:33:59:b6:be:00:2d:e7:17:30:4d:ad:
14:ed:ae:75:8d:fa:85:38:93:f3:b7:11:01:00:c5:12:00:59:
ac:e0:5b:6b:15:ec:44:67:f5:76:b3:3c:14:11:69:7f:0a:56:
78:51:ba:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:47:45 2025 by rpki-client