This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/713028F48D4911EB9335E32FC4F9AE02.roa
File: 713028F48D4911EB9335E32FC4F9AE02.roa (raw, json)
Hash identifier: CTwAyCDwocPW6eH/qU1N86er0YYRpEPrmGGxc9l63f0=
Subject key identifier: EE:16:08:C8:40:F2:A2:A9:27:13:E6:36:A4:50:20:F5:30:85:BD:8D
Certificate issuer: /CN=A9145456/serialNumber=A99B2DB6FAC36CB0203B98E20FD67E019FE1B8FB
Certificate serial: 07B5
Authority key identifier: A9:9B:2D:B6:FA:C3:6C:B0:20:3B:98:E2:0F:D6:7E:01:9F:E1:B8:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZsttvrDbLAgO5jiD9Z-AZ_huPs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/713028F48D4911EB9335E32FC4F9AE02.roa
Signing time: Wed 26 Nov 2025 20:42:29 +0000
ROA not before: Wed 26 Nov 2025 20:42:29 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 139831
IP address blocks: 103.145.206.0/23 maxlen: 24
2405:8d40::/32 maxlen: 32
2405:8d40:a07::/48 maxlen: 48
2405:8d40:aa0::/48 maxlen: 48
2405:8d40:b00::/40 maxlen: 40
2405:8d40:c00::/40 maxlen: 40
2405:8d40:f00::/40 maxlen: 40
2405:8d40:1000::/42 maxlen: 42
2405:8d40:1040::/42 maxlen: 42
2405:8d40:1080::/42 maxlen: 42
2405:8d40:10c0::/42 maxlen: 42
2405:8d40:1100::/42 maxlen: 42
2405:8d40:1200::/42 maxlen: 42
2405:8d40:1240::/42 maxlen: 42
2405:8d40:1280::/42 maxlen: 42
2405:8d40:12c0::/42 maxlen: 42
2405:8d40:1300::/42 maxlen: 42
2405:8d40:4000::/36 maxlen: 36
2405:8d40:4000::/42 maxlen: 42
2405:8d40:4040::/42 maxlen: 42
2405:8d40:4080::/42 maxlen: 42
2405:8d40:40c0::/42 maxlen: 42
2405:8d40:4100::/42 maxlen: 42
2405:8d40:4400::/42 maxlen: 42
2405:8d40:4440::/42 maxlen: 42
2405:8d40:4480::/42 maxlen: 42
2405:8d40:44c0::/42 maxlen: 42
2405:8d40:4500::/42 maxlen: 42
2405:8d40:4800::/42 maxlen: 42
2405:8d40:4840::/42 maxlen: 42
2405:8d40:4880::/42 maxlen: 42
2405:8d40:48c0::/42 maxlen: 42
2405:8d40:4900::/42 maxlen: 42
2405:8d40:4c00::/42 maxlen: 42
2405:8d40:4c40::/42 maxlen: 42
2405:8d40:4c80::/42 maxlen: 42
2405:8d40:4cc0::/42 maxlen: 42
2405:8d40:4d00::/42 maxlen: 42
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.crl
rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZsttvrDbLAgO5jiD9Z-AZ_huPs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 20:31:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1973 (0x7b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145456, serialNumber=A99B2DB6FAC36CB0203B98E20FD67E019FE1B8FB
Validity
Not Before: Nov 26 20:42:29 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69276635-66e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:88:61:60:5b:f6:69:c6:f3:8b:4b:3e:15:fb:
ed:1a:1f:dc:3d:25:68:77:fb:4d:e7:3e:d9:2c:1a:
43:8a:b6:39:94:c9:f9:9f:c0:df:e0:3b:a8:d0:60:
8d:50:23:68:fd:91:95:8b:00:83:d9:ae:7d:69:01:
7a:67:16:e1:5f:b8:ee:49:cc:17:48:9e:98:53:be:
98:d0:87:78:7b:1e:92:2d:15:e8:8f:c3:06:86:c4:
a8:c5:88:50:ab:4d:f1:0d:2b:ad:ca:11:13:49:e1:
02:a5:8f:4b:c8:9d:20:f0:23:ca:11:83:3b:b5:45:
d3:fa:4a:c2:86:47:af:4d:fa:b3:e0:fc:f3:34:27:
06:f4:87:9a:5c:d6:2a:37:ec:37:a7:d5:aa:27:a4:
60:a5:85:74:76:1f:22:43:0e:be:e4:25:5b:93:12:
25:be:ba:aa:25:7c:a2:12:3d:23:e6:7c:6a:82:87:
94:e7:2f:a1:e2:cc:4c:c4:56:76:cb:1d:3e:3b:75:
7b:76:39:28:1c:5e:85:9d:92:fd:43:0f:5b:16:9c:
e3:32:8f:42:bb:57:ad:1b:18:e0:f5:34:4b:46:a2:
2c:e5:96:7c:7e:dd:77:01:0b:31:b2:7d:84:7e:c1:
fd:16:a7:8d:75:23:66:87:34:f8:51:eb:89:8c:4d:
8d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:16:08:C8:40:F2:A2:A9:27:13:E6:36:A4:50:20:F5:30:85:BD:8D
X509v3 Authority Key Identifier:
keyid:A9:9B:2D:B6:FA:C3:6C:B0:20:3B:98:E2:0F:D6:7E:01:9F:E1:B8:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZsttvrDbLAgO5jiD9Z-AZ_huPs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/713028F48D4911EB9335E32FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.145.206.0/23
IPv6:
2405:8d40::/32
Signature Algorithm: sha256WithRSAEncryption
84:27:3d:8c:5e:78:09:88:8b:6e:c8:f2:b4:44:34:ec:be:1e:
bf:8e:11:0a:7e:d1:40:7d:36:71:ce:26:f7:a0:24:54:48:af:
b4:67:0b:f6:84:40:4f:da:e4:72:8f:b7:94:73:e7:d0:39:41:
89:81:a5:4f:d8:a4:9e:a1:a6:d8:a3:9b:e5:93:6b:a8:37:13:
87:09:6f:54:f6:74:2a:de:3e:4d:64:64:52:c6:81:e0:0d:83:
c8:8c:d8:d0:68:65:a6:ba:ac:73:ec:98:4d:15:1e:c6:ad:37:
79:4c:f2:3d:42:98:9b:0a:99:0d:40:5c:e5:3e:b4:49:df:30:
35:cb:d7:00:3a:4d:7d:2d:54:8d:60:5d:aa:e9:59:9f:a6:fe:
42:f8:64:b8:79:4a:39:66:dd:6b:67:6d:3a:3f:18:df:84:c7:
ab:19:8f:48:09:5e:96:dd:ac:84:59:90:f4:f1:d6:6b:9d:0a:
ab:7d:a2:78:c3:bc:5f:f0:7a:0f:b7:6b:b7:2d:67:90:3d:83:
97:65:9e:35:f5:16:1e:0c:be:77:5e:ce:a4:3e:ff:93:b2:f9:
bf:15:ba:ba:62:ea:1c:bd:ad:58:9a:f3:c2:1e:1b:a5:de:fc:
9a:0d:fc:78:53:b0:4e:1e:19:0f:eb:44:5a:93:2b:cf:2c:c1:
e2:d1:bd:1d
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICB7UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDU0NTYxMTAvBgNVBAUTKEE5OUIyREI2RkFDMzZDQjAyMDNCOThFMjBGRDY3RTAx
OUZFMUI4RkIwHhcNMjUxMTI2MjA0MjI5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTI3NjYzNS02NmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0IhhYFv2acbzi0s+FfvtGh/cPSVod/tN5z7ZLBpDirY5lMn5n8Df4Duo0GCN
UCNo/ZGViwCD2a59aQF6ZxbhX7juScwXSJ6YU76Y0Id4ex6SLRXoj8MGhsSoxYhQ
q03xDSutyhETSeECpY9LyJ0g8CPKEYM7tUXT+krChkevTfqz4PzzNCcG9IeaXNYq
N+w3p9WqJ6RgpYV0dh8iQw6+5CVbkxIlvrqqJXyiEj0j5nxqgoeU5y+h4sxMxFZ2
yx0+O3V7djkoHF6FnZL9Qw9bFpzjMo9Cu1etGxjg9TRLRqIs5ZZ8ft13AQsxsn2E
fsH9FqeNdSNmhzT4UeuJjE2NawIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFO4WCMhA
8qKpJxPmNqRQIPUwhb2NMB8GA1UdIwQYMBaAFKmbLbb6w2ywIDuY4g/WfgGf4bj7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTQ1Ni84MTQxNDI1RTMw
NjYxMUVCODUyNTEzNTVDNEY5QUUwMi9xWnN0dHZyRGJMQWdPNWppRDlaLUFaX2h1
UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Fac3R0dnJEYkxBZ081amlEOVotQVpfaHVQcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDU0NTYvODE0MTQyNUUzMDY2MTFFQjg1MjUxMzU1QzRGOUFFMDIvNzEzMDI4RjQ4
RDQ5MTFFQjkzMzVFMzJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAFnkc4wDQQCAAIwBwMFACQFjUAwDQYJKoZIhvcNAQELBQAD
ggEBAIQnPYxeeAmIi27I8rRENOy+Hr+OEQp+0UB9NnHOJvegJFRIr7RnC/aEQE/a
5HKPt5Rz59A5QYmBpU/YpJ6hptijm+WTa6g3E4cJb1T2dCrePk1kZFLGgeANg8iM
2NBoZaa6rHPsmE0VHsatN3lM8j1CmJsKmQ1AXOU+tEnfMDXL1wA6TX0tVI1gXarp
WZ+m/kL4ZLh5Sjlm3WtnbTo/GN+Ex6sZj0gJXpbdrIRZkPTx1mudCqt9onjDvF/w
eg+3a7ctZ5A9g5dlnjX1Fh4MvndezqQ+/5Oy+b8Vurpi6hy9rVia88IeG6Xe/JoN
/HhTsE4eGQ/rRFqTK88sweLRvR0=
-----END CERTIFICATE-----
Generated at Mon Dec 8 09:31:30 2025 by rpki-client