This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/071BCFF849D011EF9F8A8969C4F9AE02.roa
File: 071BCFF849D011EF9F8A8969C4F9AE02.roa (raw, json)
Hash identifier: ta+wizYmG5Li1UNdnV+RjnG6RQDSQFnDtjBK6l15sJs=
Subject key identifier: 18:08:AE:9C:0E:2B:EB:50:86:0B:46:EB:98:55:23:6F:F8:E9:77:E8
Certificate issuer: /CN=A914B79F/serialNumber=78E4290BCCC9991580B276DC0C2C97BFB08620D8
Certificate serial: 0115
Authority key identifier: 78:E4:29:0B:CC:C9:99:15:80:B2:76:DC:0C:2C:97:BF:B0:86:20:D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOQpC8zJmRWAsnbcDCyXv7CGINg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/071BCFF849D011EF9F8A8969C4F9AE02.roa
Signing time: Fri 07 Feb 2025 03:36:27 +0000
ROA not before: Fri 07 Feb 2025 03:36:27 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 139900
IP address blocks: 103.146.206.0/24 maxlen: 24
103.146.207.0/24 maxlen: 24
2400:b020::/33 maxlen: 33
2400:b020:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.crl
rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOQpC8zJmRWAsnbcDCyXv7CGINg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 277 (0x115)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B79F, serialNumber=78E4290BCCC9991580B276DC0C2C97BFB08620D8
Validity
Not Before: Feb 7 03:36:27 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67a57fbb-9b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:92:bc:9f:54:88:a9:49:23:67:19:62:62:c0:
65:1c:d2:1b:c5:aa:3b:37:0a:2c:b6:88:65:0a:3c:
9b:ba:fa:f5:e2:c4:9a:59:f4:90:52:9f:ce:b9:78:
7c:68:e5:f2:4f:13:02:b2:a0:52:9c:86:c1:ae:26:
8a:89:f2:c5:4b:ec:9c:70:7c:5d:1b:6a:9d:ec:d3:
28:fb:e7:8e:e4:3f:47:3a:d3:09:56:c1:90:c0:10:
6b:79:3c:f9:c4:b3:75:4c:29:15:94:0f:c7:8c:d5:
ef:98:bd:e1:2d:24:78:29:16:51:c2:8d:90:20:2c:
a9:77:b8:9c:bb:86:1a:5b:91:ff:e1:22:9a:a8:20:
fe:1e:6c:9f:cd:74:69:7a:c6:ea:bf:6c:3d:45:3d:
28:d9:6b:f7:2b:45:c0:fe:a3:ee:ff:8c:d2:3b:1f:
28:f3:82:b8:7e:17:e7:af:f6:58:de:16:96:d3:02:
21:1c:63:3a:cc:3d:97:8a:24:80:1b:28:a8:bb:ae:
49:2e:5f:de:cc:6e:34:90:47:3e:c2:08:2f:5f:31:
9f:dc:46:db:57:c4:04:c7:0f:e9:72:3b:bc:69:6d:
9a:65:ae:9c:15:eb:75:db:21:72:92:a4:d6:20:a1:
3f:5f:d8:28:6c:a4:6b:d0:14:61:20:e3:cb:73:ce:
1c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:08:AE:9C:0E:2B:EB:50:86:0B:46:EB:98:55:23:6F:F8:E9:77:E8
X509v3 Authority Key Identifier:
keyid:78:E4:29:0B:CC:C9:99:15:80:B2:76:DC:0C:2C:97:BF:B0:86:20:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOQpC8zJmRWAsnbcDCyXv7CGINg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/071BCFF849D011EF9F8A8969C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.146.206.0/23
IPv6:
2400:b020::/32
Signature Algorithm: sha256WithRSAEncryption
9b:c3:ce:69:dc:50:e1:20:16:d8:6d:c8:74:1f:aa:fd:fb:b0:
8c:ec:4c:4a:de:7b:80:19:0b:04:ac:40:74:13:8a:73:b8:2f:
4e:8c:36:8a:87:e5:de:11:eb:46:0f:5e:b1:ef:67:ed:d5:ba:
2b:9c:e4:00:60:7c:63:cf:04:05:6b:b3:da:75:f0:2f:e4:ad:
eb:f0:e4:2b:2a:5b:cc:6a:b7:d6:1d:e6:a2:b7:40:59:17:ed:
e6:d0:14:29:fc:ce:51:27:11:9e:05:70:b8:2a:52:5f:22:40:
bc:d7:dc:f1:0b:16:fe:56:a9:80:54:b1:fd:17:52:1e:c1:fc:
c9:48:a0:b1:89:66:79:bb:d3:eb:18:d1:87:87:a2:eb:26:e5:
17:ec:c9:0a:02:97:16:81:0c:72:4b:04:4f:11:94:46:75:f8:
83:7e:eb:67:d8:30:a2:cb:14:f5:a8:5f:fc:f4:cd:df:28:d7:
44:cf:78:12:e5:61:69:a4:77:29:d4:37:1b:e8:74:b1:67:49:
3c:39:22:ab:e0:ac:44:0b:f1:76:9d:8a:a3:da:c4:ad:ef:4a:
d4:91:2e:24:d3:41:b7:9e:9f:84:d5:06:a4:5e:cf:7e:9d:f8:
a3:46:12:f7:df:d6:7b:71:c7:73:8f:a3:fc:72:22:92:5e:8f:
84:7a:14:19
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICARUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEI3OUYxMTAvBgNVBAUTKDc4RTQyOTBCQ0NDOTk5MTU4MEIyNzZEQzBDMkM5N0JG
QjA4NjIwRDgwHhcNMjUwMjA3MDMzNjI3WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2E1N2ZiYi05YjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA35K8n1SIqUkjZxliYsBlHNIbxao7NwostohlCjybuvr14sSaWfSQUp/OuXh8
aOXyTxMCsqBSnIbBriaKifLFS+yccHxdG2qd7NMo++eO5D9HOtMJVsGQwBBreTz5
xLN1TCkVlA/HjNXvmL3hLSR4KRZRwo2QICypd7icu4YaW5H/4SKaqCD+HmyfzXRp
esbqv2w9RT0o2Wv3K0XA/qPu/4zSOx8o84K4fhfnr/ZY3haW0wIhHGM6zD2XiiSA
Gyiou65JLl/ezG40kEc+wggvXzGf3EbbV8QExw/pcju8aW2aZa6cFet12yFykqTW
IKE/X9gobKRr0BRhIOPLc84cKQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFBgIrpwO
K+tQhgtG65hVI2/46XfoMB8GA1UdIwQYMBaAFHjkKQvMyZkVgLJ23Awsl7+whiDY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Qjc5Ri9EQTY4MzdGMDRF
MjkxMUVFOTQ1QzM5NEZDNEY5QUUwMi9lT1FwQzh6Sm1SV0FzbmJjREN5WHY3Q0dJ
TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VPUXBDOHpKbVJXQXNuYmNEQ3lYdjdDR0lOZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEI3OUYvREE2ODM3RjA0RTI5MTFFRTk0NUMzOTRGQzRGOUFFMDIvMDcxQkNGRjg0
OUQwMTFFRjlGOEE4OTY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAFnks4wDQQCAAIwBwMFACQAsCAwDQYJKoZIhvcNAQELBQAD
ggEBAJvDzmncUOEgFthtyHQfqv37sIzsTEree4AZCwSsQHQTinO4L06MNoqH5d4R
60YPXrHvZ+3Vuiuc5ABgfGPPBAVrs9p18C/krevw5CsqW8xqt9Yd5qK3QFkX7ebQ
FCn8zlEnEZ4FcLgqUl8iQLzX3PELFv5WqYBUsf0XUh7B/MlIoLGJZnm70+sY0YeH
ousm5RfsyQoClxaBDHJLBE8RlEZ1+IN+62fYMKLLFPWoX/z0zd8o10TPeBLlYWmk
dynUNxvodLFnSTw5IqvgrEQL8XadiqPaxK3vStSRLiTTQbeen4TVBqRez36d+KNG
Evff1ntxx3OPo/xyIpJej4R6FBk=
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:40:27 2025 by rpki-client