This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/A83E51EC45F611EDBA9D6062C4F9AE02.roa
File: A83E51EC45F611EDBA9D6062C4F9AE02.roa (raw, json)
Hash identifier: /+DB0DwIdWV5MsoUQNnzsNFXQf9YCNytI0Fy3CklZBg=
Subject key identifier: F4:C7:83:CB:38:A7:76:91:54:90:11:49:7C:51:25:29:9B:1E:FF:1B
Certificate issuer: /CN=A914A5BB/serialNumber=D5CF5CF8B4D80F221304F36588E395604447F77A
Certificate serial: 024C
Authority key identifier: D5:CF:5C:F8:B4:D8:0F:22:13:04:F3:65:88:E3:95:60:44:47:F7:7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/A83E51EC45F611EDBA9D6062C4F9AE02.roa
Signing time: Sun 23 Nov 2025 00:17:46 +0000
ROA not before: Sun 23 Nov 2025 00:17:46 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 8075
IP address blocks: 103.58.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.crl
rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 588 (0x24c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A5BB, serialNumber=D5CF5CF8B4D80F221304F36588E395604447F77A
Validity
Not Before: Nov 23 00:17:46 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=692252aa-0eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1f:b4:cc:20:cc:44:25:4d:44:5e:11:66:6d:
07:83:26:88:69:13:ce:25:f4:0a:a2:66:68:98:8e:
5b:97:9e:aa:16:bf:d9:7f:b1:dc:34:e6:5e:37:f5:
c7:e6:ca:f6:47:7b:98:86:39:20:10:24:4f:67:2c:
61:d5:7f:d3:57:bb:ad:0e:3f:70:90:8d:ff:9f:a3:
4c:f1:06:0d:a0:9b:fb:4c:f9:e0:2a:ef:1a:f0:e4:
d0:fb:a4:db:82:e3:86:f1:42:72:45:e2:d9:61:c6:
ef:96:c1:a2:ba:4c:7c:99:48:13:eb:67:c2:08:94:
22:a5:30:57:1d:03:e3:29:f3:8f:c5:9e:7d:3a:7c:
92:d3:98:f7:02:69:eb:ac:e4:e4:a3:2e:dd:e7:43:
f3:99:86:14:2b:6a:ae:1a:c4:69:dd:88:68:8b:c7:
07:fc:26:ff:84:98:e2:3a:c7:10:d8:cb:98:ae:5a:
e1:c3:1f:1d:3a:05:e0:66:21:9d:af:95:9b:be:8c:
ca:44:f1:63:1a:fb:33:63:7d:9e:6f:a5:28:ed:c2:
fb:28:6b:f0:d7:05:c3:28:fe:e2:7a:09:89:07:32:
da:75:44:e6:95:f3:ba:e0:d0:9b:15:ac:e1:30:c8:
9c:7c:b6:25:83:b9:6f:ea:46:00:02:8b:f5:f0:f8:
a4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C7:83:CB:38:A7:76:91:54:90:11:49:7C:51:25:29:9B:1E:FF:1B
X509v3 Authority Key Identifier:
keyid:D5:CF:5C:F8:B4:D8:0F:22:13:04:F3:65:88:E3:95:60:44:47:F7:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/A83E51EC45F611EDBA9D6062C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.58.119.0/24
Signature Algorithm: sha256WithRSAEncryption
61:fc:df:5f:f7:8a:30:ff:e8:c3:d7:f7:e9:cb:51:ed:be:86:
a3:36:9c:b2:2a:e6:59:c4:76:ab:c3:ff:f8:77:08:23:53:d6:
c1:f6:44:80:4c:e0:51:8a:39:9d:ca:9f:2f:cf:61:98:5b:87:
d6:7d:2b:fe:98:52:2d:5e:f1:e1:8d:a3:8b:12:d1:5a:e2:22:
0b:f1:cb:83:5d:2e:09:f2:ac:c5:d9:df:55:c3:5a:6b:60:ec:
f0:fb:c4:b9:a9:81:c6:0c:18:59:c7:a4:54:bd:f8:38:73:ad:
db:ff:4b:55:d6:be:27:01:9d:da:47:b7:10:93:2e:64:68:73:
6b:56:8f:d6:08:b8:80:84:b4:b0:d8:13:29:ad:d0:2e:55:b1:
eb:cf:f1:85:a5:6b:eb:75:29:f7:e8:61:02:77:4d:1b:92:c2:
04:8c:a7:06:10:61:c6:79:c4:e6:bd:94:75:e1:ec:73:4c:c5:
98:12:7b:ea:f7:f3:bd:87:03:79:35:48:12:76:67:be:ef:cf:
ee:bc:10:4a:1e:c4:f6:7e:f9:74:45:de:4a:f6:a5:b4:5b:e8:
60:22:31:48:e8:18:5b:93:f2:f0:c7:ab:4e:be:9f:c3:67:89:
1f:07:dd:08:4d:f7:2f:d6:b4:10:a9:0a:8f:aa:d0:b1:3e:53:
19:0d:1f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:45:19 2025 by rpki-client