This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/1B3EC39C525311EA939E4652C4F9AE02.roa
File: 1B3EC39C525311EA939E4652C4F9AE02.roa (raw, json)
Hash identifier: D6dVGaiglNkDLe+LBetmN5iVvfLkCKhRycT6uEarDPs=
Subject key identifier: 4C:38:FC:EA:2A:CB:BA:E1:1B:B9:8F:12:44:B2:70:65:DE:6B:19:9C
Certificate issuer: /CN=A9144354/serialNumber=47D06BD7EA8DF2197F71270B75C964C79AB9F0CC
Certificate serial: 11CD
Authority key identifier: 47:D0:6B:D7:EA:8D:F2:19:7F:71:27:0B:75:C9:64:C7:9A:B9:F0:CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R9Br1-qN8hl_cScLdclkx5q58Mw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/1B3EC39C525311EA939E4652C4F9AE02.roa
Signing time: Thu 04 Dec 2025 17:18:13 +0000
ROA not before: Thu 04 Dec 2025 17:18:13 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 35916
IP address blocks: 103.127.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.crl
rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R9Br1-qN8hl_cScLdclkx5q58Mw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4557 (0x11cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144354, serialNumber=47D06BD7EA8DF2197F71270B75C964C79AB9F0CC
Validity
Not Before: Dec 4 17:18:13 2025 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6931c255-03c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dc:89:98:7f:c5:55:f7:8d:8f:f4:69:73:72:
6f:d6:20:3f:cc:31:01:0c:30:b8:38:2c:84:11:2f:
24:b4:d4:32:a7:32:75:25:69:35:ae:14:85:7a:13:
d9:7c:d7:13:1e:a6:4b:49:00:ae:1d:ad:ad:5d:8e:
79:7f:7a:c5:58:ec:01:42:86:9f:6c:73:14:2b:48:
cb:33:68:db:44:01:e8:07:04:2a:e2:3b:f0:4a:f5:
83:00:42:81:e9:78:95:a3:12:7b:1c:bd:7c:13:a7:
50:8d:a2:ec:0b:17:43:1b:da:ac:cb:ee:ca:f7:d8:
c3:7f:93:f5:c2:74:80:9f:ea:df:6e:61:e7:7d:a4:
4f:66:89:5a:52:66:1d:a5:53:e3:18:3e:19:fa:27:
b7:25:1f:b1:32:ce:93:dc:06:98:83:2e:40:9c:8b:
7d:22:b5:9a:35:f9:0a:aa:9e:96:c6:ea:25:1a:20:
5b:3e:0c:24:43:6f:55:90:17:7a:12:cb:91:21:91:
b9:0e:11:c4:23:aa:02:af:6e:45:eb:16:5b:25:77:
f7:b1:9a:2f:67:6f:06:5e:29:32:77:56:b4:9b:99:
67:f3:f5:36:15:e8:c5:1f:f6:ed:17:d5:c0:ea:5c:
78:ec:72:1c:2a:9e:b6:57:f3:35:1c:24:73:13:6a:
63:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:38:FC:EA:2A:CB:BA:E1:1B:B9:8F:12:44:B2:70:65:DE:6B:19:9C
X509v3 Authority Key Identifier:
keyid:47:D0:6B:D7:EA:8D:F2:19:7F:71:27:0B:75:C9:64:C7:9A:B9:F0:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R9Br1-qN8hl_cScLdclkx5q58Mw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/1B3EC39C525311EA939E4652C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.127.158.0/24
Signature Algorithm: sha256WithRSAEncryption
91:6b:c9:e6:fd:ab:b6:33:1b:63:00:19:4b:d2:13:cd:25:85:
a1:42:a1:c1:0b:7c:ee:b6:6d:74:27:a8:77:ce:7d:d5:16:03:
6a:e9:2e:57:78:6e:32:38:cc:a2:aa:91:61:f3:3a:c3:cd:61:
27:ab:ce:d1:05:10:6e:73:bc:09:3c:65:cd:b6:06:ef:01:4f:
21:2b:62:74:ab:aa:ad:68:b5:9e:e5:1f:3c:4d:be:7b:cb:a8:
be:f0:a1:13:3a:83:07:49:c9:ce:14:25:ed:00:36:54:cc:01:
17:c5:0d:ae:af:75:78:0a:8d:d7:86:31:dd:36:17:ae:3d:3b:
3d:5d:67:0f:52:12:68:67:cb:c9:30:8a:43:ff:1f:19:e3:61:
29:1c:af:e6:64:27:93:21:46:be:1d:bd:70:27:01:8a:cf:9a:
3d:b2:16:83:a3:7e:03:14:c6:4b:fb:d8:3c:5f:65:a3:05:9d:
ee:e4:31:62:3b:a8:a8:43:89:94:72:a7:10:2b:f1:ce:9a:1a:
dd:3c:f4:8f:87:1a:c5:23:f9:1e:21:d7:b6:13:ca:a3:2e:44:
0c:24:ce:94:5f:67:cd:54:3a:3a:72:4e:6c:87:c7:26:bc:cf:
fd:59:d7:09:9b:6c:da:8e:f5:b4:b8:06:5b:ca:e7:70:26:f2:
1e:88:f3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:09:19 2025 by rpki-client