This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/ABF8D808CA6D11F084F59728C4F9AE02.roa
File: ABF8D808CA6D11F084F59728C4F9AE02.roa (raw, json)
Hash identifier: 4kagDiDwOK9DDKuYrOZLBx4t6wG2YIBPDsR0s/PYy+4=
Subject key identifier: E4:88:5B:66:D1:83:24:B6:3E:F9:5C:03:59:10:98:13:25:77:9C:4B
Certificate issuer: /CN=A9135D1F/serialNumber=0CAB68E069083A4388E8FC69758F045962FD01AF
Certificate serial: 44
Authority key identifier: 0C:AB:68:E0:69:08:3A:43:88:E8:FC:69:75:8F:04:59:62:FD:01:AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/ABF8D808CA6D11F084F59728C4F9AE02.roa
Signing time: Wed 26 Nov 2025 02:14:44 +0000
ROA not before: Wed 26 Nov 2025 02:14:44 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 154329
IP address blocks: 203.21.65.0/24 maxlen: 24
203.28.195.0/24 maxlen: 24
203.32.55.0/24 maxlen: 24
203.34.190.0/24 maxlen: 24
2001:df2:d440::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl
rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:31:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68 (0x44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135D1F, serialNumber=0CAB68E069083A4388E8FC69758F045962FD01AF
Validity
Not Before: Nov 26 02:14:44 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69266293-1717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e2:f7:e7:80:f8:80:fb:be:6d:15:4d:93:6d:
60:47:f4:25:59:b7:d2:8f:27:ec:55:03:2f:0d:c0:
87:df:1a:d9:6f:69:4a:2a:66:ae:21:5d:81:88:e5:
5b:b3:85:c4:20:0c:86:f6:48:d7:27:b6:c4:80:28:
f8:13:55:ae:75:37:88:9e:f4:65:b9:3c:a4:ce:27:
70:0e:51:8c:b7:57:68:b1:30:b0:fc:1d:62:8d:8d:
8a:48:fe:49:cf:f7:5f:df:a2:37:5f:3e:91:23:70:
f1:d6:0e:60:b6:de:bb:46:78:61:7c:02:a7:84:6f:
5a:de:fe:c4:79:f2:ba:30:ec:6d:7f:dc:cf:ec:1c:
91:92:82:c9:63:55:fd:63:a8:3c:84:27:b8:33:0d:
d5:db:f9:d7:ce:98:3e:9e:de:9b:a6:aa:4d:a8:b0:
4f:4a:3e:ec:65:a6:89:14:69:74:42:d6:9d:dc:be:
92:a6:56:be:8a:47:7b:a3:cc:d1:51:88:e1:78:88:
9c:07:8d:eb:c0:f2:6d:f7:c4:be:ef:5f:8e:86:be:
ec:73:9c:dc:4d:bb:7c:59:48:1d:66:8b:10:ec:6c:
a3:3e:f6:9e:87:41:f1:72:96:d8:43:00:f3:05:20:
49:b3:02:4b:c6:eb:93:da:ba:e1:ef:6c:7b:95:50:
99:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:88:5B:66:D1:83:24:B6:3E:F9:5C:03:59:10:98:13:25:77:9C:4B
X509v3 Authority Key Identifier:
keyid:0C:AB:68:E0:69:08:3A:43:88:E8:FC:69:75:8F:04:59:62:FD:01:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/ABF8D808CA6D11F084F59728C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.21.65.0/24
203.28.195.0/24
203.32.55.0/24
203.34.190.0/24
IPv6:
2001:df2:d440::/48
Signature Algorithm: sha256WithRSAEncryption
51:99:e4:df:49:50:73:01:aa:97:14:33:a2:e9:f3:d6:c4:c4:
b2:80:fe:76:af:d5:67:05:f2:82:d2:f0:1f:21:76:cb:1e:e1:
8d:bd:8e:a0:9d:6d:2f:21:54:e5:8a:61:a7:8f:9c:f2:fc:08:
20:3d:68:3d:98:46:5c:50:56:3d:76:a7:32:93:10:ff:43:73:
21:fe:98:78:8a:d0:57:6f:5d:b3:b7:07:66:9c:2e:71:36:e1:
3e:01:14:d0:e8:45:70:77:f0:39:3b:36:97:87:ae:dc:22:51:
53:33:31:1c:6d:c5:d6:bd:1c:72:d7:4d:84:a7:6b:b5:6f:04:
34:60:d4:a7:92:fe:be:30:95:8d:07:2d:67:41:bc:cf:6c:b4:
5f:cb:48:a0:d5:db:0e:72:00:af:fe:9c:16:3e:29:2a:bf:73:
40:ac:d1:25:ba:07:5f:b9:7b:3c:72:fd:6b:0a:43:94:60:5e:
6c:1e:0c:28:e5:cd:fd:9b:31:ad:8a:e5:c3:40:0a:6c:42:9b:
33:cf:9f:07:4f:ad:1b:88:f9:f1:b3:19:07:e7:76:b9:b3:44:
cf:b7:76:1e:9a:1a:1a:a4:80:7d:a3:59:b4:c1:78:8d:fe:f5:
b4:c8:b4:ec:4c:17:68:7b:28:85:45:5a:4e:87:5c:f8:36:9e:
d1:a8:61:5f
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
NUQxRjExMC8GA1UEBRMoMENBQjY4RTA2OTA4M0E0Mzg4RThGQzY5NzU4RjA0NTk2
MkZEMDFBRjAeFw0yNTExMjYwMjE0NDRaFw0yNjEwMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5MjY2MjkzLTE3MTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDO4vfngPiA+75tFU2TbWBH9CVZt9KPJ+xVAy8NwIffGtlvaUoqZq4hXYGI5Vuz
hcQgDIb2SNcntsSAKPgTVa51N4ie9GW5PKTOJ3AOUYy3V2ixMLD8HWKNjYpI/knP
91/fojdfPpEjcPHWDmC23rtGeGF8AqeEb1re/sR58row7G1/3M/sHJGSgsljVf1j
qDyEJ7gzDdXb+dfOmD6e3pumqk2osE9KPuxlpokUaXRC1p3cvpKmVr6KR3ujzNFR
iOF4iJwHjevA8m33xL7vX46GvuxznNxNu3xZSB1mixDsbKM+9p6HQfFylthDAPMF
IEmzAkvG65PauuHvbHuVUJkNAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU5IhbZtGD
JLY++VwDWRCYEyV3nEswHwYDVR0jBBgwFoAUDKto4GkIOkOI6PxpdY8EWWL9Aa8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1RDFGL0FEMjAyMUE0OTc3
NDExRjA4MEJGMUU2NEM0RjlBRTAyL0RLdG80R2tJT2tPSTZQeHBkWThFV1dMOUFh
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvREt0bzRHa0lPa09JNlB4cGRZOEVXV0w5QWE4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NUQxRi9BRDIwMjFBNDk3NzQxMUYwODBCRjFFNjRDNEY5QUUwMi9BQkY4RDgwOENB
NkQxMUYwODRGNTk3MjhDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDBCBggrBgEFBQcBBwEB/wQz
MDEwHgQCAAEwGAMEAMsVQQMEAMscwwMEAMsgNwMEAMsivjAPBAIAAjAJAwcAIAEN
8tRAMA0GCSqGSIb3DQEBCwUAA4IBAQBRmeTfSVBzAaqXFDOi6fPWxMSygP52r9Vn
BfKC0vAfIXbLHuGNvY6gnW0vIVTlimGnj5zy/AggPWg9mEZcUFY9dqcykxD/Q3Mh
/ph4itBXb12ztwdmnC5xNuE+ARTQ6EVwd/A5OzaXh67cIlFTMzEcbcXWvRxy102E
p2u1bwQ0YNSnkv6+MJWNBy1nQbzPbLRfy0ig1dsOcgCv/pwWPikqv3NArNElugdf
uXs8cv1rCkOUYF5sHgwo5c39mzGtiuXDQApsQpszz58HT60biPnxsxkH53a5s0TP
t3YemhoapIB9o1m0wXiN/vW0yLTsTBdoeyiFRVpOh1z4Np7RqGFf
-----END CERTIFICATE-----
Generated at Sun Dec 7 04:07:27 2025 by rpki-client