This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/C3A97C9405FD11EBA6C82784C4F9AE02.roa
File: C3A97C9405FD11EBA6C82784C4F9AE02.roa (raw, json)
Hash identifier: dBsQTbyo2ik4WtMZ8qhDnVJ6kQlfuadQJdvgtMFFBas=
Subject key identifier: 7D:5A:D5:75:0E:EE:90:92:FB:A2:19:0C:3A:89:F0:54:4D:8D:1B:A6
Certificate issuer: /CN=A9147493/serialNumber=8F9F8A45F7891E2F159F3CCBC8278887D75FBD27
Certificate serial: 07EC
Authority key identifier: 8F:9F:8A:45:F7:89:1E:2F:15:9F:3C:CB:C8:27:88:87:D7:5F:BD:27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/C3A97C9405FD11EBA6C82784C4F9AE02.roa
Signing time: Wed 22 Oct 2025 22:10:32 +0000
ROA not before: Wed 22 Oct 2025 22:10:32 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 139655
IP address blocks: 103.143.48.0/24 maxlen: 24
103.143.49.0/24 maxlen: 24
2001:df1:6f80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl
rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 20:06:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2028 (0x7ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147493, serialNumber=8F9F8A45F7891E2F159F3CCBC8278887D75FBD27
Validity
Not Before: Oct 22 22:10:32 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=68f95657-c62c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f8:a3:b1:93:72:1e:f5:4b:d3:18:f2:d8:29:
37:3f:2e:31:df:fa:07:86:b4:45:a2:07:d2:2c:f3:
92:e3:80:37:a7:58:c1:99:f7:87:99:be:f8:15:d8:
ed:11:a9:5e:62:ec:13:07:16:29:bd:4b:a6:e1:7f:
6a:82:f4:cc:bc:72:45:9e:a3:a5:a0:92:2e:2a:7a:
97:fc:db:3f:4e:5f:b7:cf:d2:7b:a6:da:09:35:37:
80:e8:de:85:5e:f2:5e:bd:96:fd:14:2f:6d:c1:f9:
95:6d:61:1b:26:68:1f:22:34:6c:1c:2f:a0:34:ce:
fd:03:8e:5e:b1:f5:7f:1e:bc:a7:3c:91:16:bc:12:
92:ad:13:2e:82:2b:ef:ec:d1:42:e2:69:26:ae:57:
46:6f:e1:1e:68:6b:ae:a6:2d:2f:0a:bc:31:da:1b:
67:b4:1a:11:a8:c5:d9:c1:d6:a0:9c:42:3c:96:f8:
9e:c4:e5:b9:54:96:38:d8:94:d4:53:87:13:55:0b:
d0:7c:c4:ee:99:32:be:5d:cd:48:d8:ee:2c:7f:90:
6e:cc:46:56:b7:1b:8f:1e:8f:2c:39:3d:c3:73:3b:
1e:cc:44:b4:50:34:0f:89:69:9e:97:fd:3b:76:79:
f6:80:b9:bc:48:31:6e:21:13:32:8a:21:32:b2:cd:
e7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5A:D5:75:0E:EE:90:92:FB:A2:19:0C:3A:89:F0:54:4D:8D:1B:A6
X509v3 Authority Key Identifier:
keyid:8F:9F:8A:45:F7:89:1E:2F:15:9F:3C:CB:C8:27:88:87:D7:5F:BD:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/C3A97C9405FD11EBA6C82784C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.143.48.0/23
IPv6:
2001:df1:6f80::/48
Signature Algorithm: sha256WithRSAEncryption
83:91:06:69:aa:9c:5f:6d:bc:66:3f:09:d9:3e:f3:b8:ed:4a:
71:66:cc:e4:51:cd:c3:df:a6:7a:72:37:06:5b:5d:fa:ce:f5:
3d:1a:a0:ba:ac:83:7e:8f:a1:31:3f:ef:2d:b5:e6:30:fd:77:
55:85:55:0b:e1:a7:d7:7c:b9:18:a9:f0:80:85:ff:90:3b:f6:
60:7c:fd:b6:a9:63:cb:48:ce:97:c1:6c:f9:07:0b:db:8d:6e:
2c:8f:4e:45:f4:db:9f:4d:68:8e:da:e4:9f:0a:f8:d6:d0:71:
f8:2b:48:7e:ce:f7:8c:3b:57:75:5c:ef:c7:86:64:bf:07:b3:
dd:7b:83:29:9e:20:c7:14:cb:80:b7:8f:aa:29:1f:16:2c:be:
a5:35:31:3b:67:72:cb:4f:81:f9:2b:92:fe:34:4d:bc:4a:7a:
9a:95:68:2e:26:a9:7a:c2:8d:45:e1:58:f5:d3:3c:c9:28:91:
af:79:12:1c:f7:dc:a4:89:2e:7f:45:3a:80:81:c4:c2:94:1b:
c3:79:45:62:66:7a:82:5f:ad:47:bc:92:a8:09:a8:3d:09:a7:
6b:bb:1b:64:cb:16:44:eb:69:15:31:f2:a6:8a:47:91:b6:4a:
e6:0d:de:9d:1a:c4:d3:11:22:a1:d5:41:c7:93:94:2b:85:82:
59:7f:2a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:42:49 2025 by rpki-client