This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/71CCFDEEB52311F0BF19FE49C4F9AE02.roa
File: 71CCFDEEB52311F0BF19FE49C4F9AE02.roa (raw, json)
Hash identifier: jIPvjbAYj25xkAzA5n3/TB9z0ZyafRPU/VfL6zEeQ0c=
Subject key identifier: AB:6F:5E:83:D9:7A:35:47:6D:43:6D:86:B0:B6:40:F6:2A:6A:F2:87
Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial: 3AF9
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/71CCFDEEB52311F0BF19FE49C4F9AE02.roa
Signing time: Thu 13 Nov 2025 05:32:20 +0000
ROA not before: Thu 13 Nov 2025 05:32:20 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 18328
IP address blocks: 45.120.65.0/24 maxlen: 24
103.31.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 14:20:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15097 (0x3af9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Validity
Not Before: Nov 13 05:32:20 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69156d64-b766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f8:6a:1c:08:27:0e:0c:75:14:be:9f:70:bc:
d1:cf:b4:e6:27:96:b4:e1:35:12:74:bc:53:cc:f7:
e8:87:0a:9e:9b:1b:51:ea:02:4c:ac:18:b7:66:78:
f3:7a:a3:d6:b2:b4:54:26:82:85:af:45:cc:84:a7:
e2:bd:c8:bf:fa:7e:bf:a3:9f:ce:f3:37:d3:fa:d5:
fe:ba:70:14:83:1d:18:81:a6:ec:a2:ac:0b:19:cf:
cd:43:a4:5c:6f:2c:60:77:24:c0:ab:a3:03:d5:e9:
90:f3:4a:4b:57:8a:ce:bc:b6:5e:40:33:6c:bf:e2:
34:ce:5a:d5:e8:97:fe:0a:9b:72:0a:99:5a:b0:99:
eb:58:9b:68:9b:86:73:b8:0a:7e:7f:a9:39:7a:fc:
18:2a:dc:9f:ef:fc:da:94:e3:6d:1d:73:52:48:11:
34:39:dc:c8:85:23:08:33:e4:be:81:05:fa:b3:39:
de:94:8a:29:e6:68:26:d4:fa:a2:27:f7:b5:32:a1:
6b:03:e1:3c:5b:26:f5:56:c4:6c:cc:a0:ca:c0:83:
6c:74:3f:d1:d4:e2:40:d0:cb:62:49:62:3f:fb:8c:
2f:29:7b:ad:7a:66:1f:f5:89:3e:58:91:ec:55:87:
a7:81:32:c8:a2:7e:87:91:cd:c1:3f:55:e2:ef:52:
c7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:6F:5E:83:D9:7A:35:47:6D:43:6D:86:B0:B6:40:F6:2A:6A:F2:87
X509v3 Authority Key Identifier:
keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/71CCFDEEB52311F0BF19FE49C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.120.65.0/24
103.31.181.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:df:b6:66:26:61:a6:7e:be:af:95:df:27:4e:bd:65:5e:c6:
7e:f2:4c:fe:ce:a0:e5:90:b7:b8:a4:6a:d0:47:4f:95:d9:57:
2e:2f:18:43:f1:03:d8:3c:b0:22:f2:67:8f:f8:f4:9a:f1:79:
7e:ac:9a:d7:79:97:83:64:c6:a7:c6:83:3c:f5:2f:b1:cc:f7:
67:9f:cc:8c:31:db:eb:f6:85:8d:f4:b1:fc:70:5b:ff:71:66:
fa:d2:24:58:6a:62:3f:89:7b:3d:ea:b0:91:65:c3:95:e8:2b:
80:2f:5c:80:fc:90:0f:75:e5:5d:38:10:84:0e:d2:ab:8c:62:
62:4e:ed:0a:04:b6:99:94:d4:cc:34:32:7f:21:86:f1:b7:34:
69:8c:dd:5d:c4:b1:dc:45:d7:39:ed:fa:84:e3:4b:54:9e:b3:
35:53:2e:1a:5a:2d:69:34:c3:c7:0c:ca:03:ea:b1:01:96:75:
81:46:6f:20:04:6b:d6:39:5e:c1:45:d2:3c:e0:d2:2c:25:f2:
a2:e5:90:45:4f:96:e0:f8:96:cf:05:83:16:76:6d:cc:83:49:
ea:89:d7:8d:d2:f6:66:50:d7:72:1a:8c:e1:c0:89:84:94:80:
7a:11:dd:86:c9:9a:80:26:b5:77:ac:e4:2d:7e:7f:b8:e6:4a:
26:54:2f:6f
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICOvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG
OURGN0M1NEIwHhcNMjUxMTEzMDUzMjIwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTE1NmQ2NC1iNzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwPhqHAgnDgx1FL6fcLzRz7TmJ5a04TUSdLxTzPfohwqemxtR6gJMrBi3Znjz
eqPWsrRUJoKFr0XMhKfivci/+n6/o5/O8zfT+tX+unAUgx0YgabsoqwLGc/NQ6Rc
byxgdyTAq6MD1emQ80pLV4rOvLZeQDNsv+I0zlrV6Jf+CptyCplasJnrWJtom4Zz
uAp+f6k5evwYKtyf7/zalONtHXNSSBE0OdzIhSMIM+S+gQX6sznelIop5mgm1Pqi
J/e1MqFrA+E8Wyb1VsRszKDKwINsdD/R1OJA0MtiSWI/+4wvKXutemYf9Yk+WJHs
VYengTLIon6Hkc3BP1Xi71LHEwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFKtvXoPZ
ejVHbUNthrC2QPYqavKHMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE
ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4
VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvNzFDQ0ZERUVC
NTIzMTFGMEJGMTlGRTQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAAteEEDBABnH7UwDQYJKoZIhvcNAQELBQADggEBAKvftmYm
YaZ+vq+V3ydOvWVexn7yTP7OoOWQt7ikatBHT5XZVy4vGEPxA9g8sCLyZ4/49Jrx
eX6smtd5l4NkxqfGgzz1L7HM92efzIwx2+v2hY30sfxwW/9xZvrSJFhqYj+Jez3q
sJFlw5XoK4AvXID8kA915V04EIQO0quMYmJO7QoEtpmU1Mw0Mn8hhvG3NGmM3V3E
sdxF1znt+oTjS1SeszVTLhpaLWk0w8cMygPqsQGWdYFGbyAEa9Y5XsFF0jzg0iwl
8qLlkEVPluD4ls8FgxZ2bcyDSeqJ143S9mZQ13IajOHAiYSUgHoR3YbJmoAmtXes
5C1+f7jmSiZUL28=
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:47:28 2025 by rpki-client