This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CA16E952AF6411EB95CDDD18C4F9AE02.roa
File: CA16E952AF6411EB95CDDD18C4F9AE02.roa (raw, json)
Hash identifier: mqCHPi1r2tteDkkOG48QCgQUwGvn4ZuEYUWvCHmgyPY=
Subject key identifier: 50:99:FC:D9:10:E7:EA:FD:34:11:75:3A:28:63:2F:6D:28:F1:57:7D
Certificate issuer: /CN=A914C10B/serialNumber=08D3FBA8DDC218CBB3039C03761E6AB7076E4FA2
Certificate serial: 064A
Authority key identifier: 08:D3:FB:A8:DD:C2:18:CB:B3:03:9C:03:76:1E:6A:B7:07:6E:4F:A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CA16E952AF6411EB95CDDD18C4F9AE02.roa
Signing time: Tue 04 Nov 2025 23:12:58 +0000
ROA not before: Tue 04 Nov 2025 23:12:58 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 13984
IP address blocks: 103.102.8.0/22 maxlen: 22
2401:dac0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.crl
rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 21:31:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1610 (0x64a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C10B, serialNumber=08D3FBA8DDC218CBB3039C03761E6AB7076E4FA2
Validity
Not Before: Nov 4 23:12:58 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=690a8879-3251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:62:c2:74:6b:4b:72:00:3d:e7:e2:55:8e:61:
70:a5:8b:09:ba:84:a9:84:f8:54:3b:f9:18:1f:f0:
78:1d:ca:79:a7:5a:ac:3d:55:21:75:e9:19:45:29:
52:5d:f7:35:55:9c:72:83:42:38:75:25:b4:5d:ba:
ce:69:e7:65:04:a7:80:de:d8:55:24:93:2d:08:00:
c8:33:13:3e:f2:47:7a:fd:94:d8:a3:a2:7b:d5:65:
d6:3c:55:ad:39:c7:24:5a:6e:3d:0f:83:22:4c:65:
d7:70:78:4d:ad:ed:14:57:46:c3:d4:60:53:2a:91:
b9:9b:4c:36:61:38:74:b6:3d:04:9f:b0:63:a3:a8:
45:30:37:5e:8a:65:f9:d1:db:77:70:27:57:11:54:
0d:64:08:e9:9e:ab:6d:e9:cd:9f:70:ec:5f:48:3d:
9a:06:61:88:84:99:d3:ed:0f:18:29:42:aa:99:81:
72:57:9d:f8:31:91:b5:59:4f:fd:c6:9d:6b:f6:b2:
58:4c:2d:f4:34:7c:7b:84:49:43:c5:1e:d3:0c:2e:
e5:60:bd:26:cd:7f:94:3b:2d:93:3b:50:c6:81:f1:
b4:48:e0:78:e4:25:ed:62:7a:ab:9d:ae:7d:33:32:
09:0b:ef:49:57:51:6d:6e:39:01:a9:b5:65:b8:b1:
3a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:99:FC:D9:10:E7:EA:FD:34:11:75:3A:28:63:2F:6D:28:F1:57:7D
X509v3 Authority Key Identifier:
keyid:08:D3:FB:A8:DD:C2:18:CB:B3:03:9C:03:76:1E:6A:B7:07:6E:4F:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CA16E952AF6411EB95CDDD18C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.102.8.0/22
IPv6:
2401:dac0::/32
Signature Algorithm: sha256WithRSAEncryption
34:c8:84:74:4a:76:f4:62:03:ae:c1:09:99:3d:b9:a0:24:05:
ca:0c:45:44:d8:18:3f:2b:40:cf:bf:47:68:4a:83:9f:c9:cb:
55:40:d7:43:40:5a:5e:c5:a9:71:57:02:5c:f6:d4:af:ab:37:
d2:34:b8:c0:3b:cb:d5:41:7a:71:7f:1d:85:77:08:98:1b:86:
7e:68:89:0a:ea:71:23:d9:b9:c9:64:fb:8e:be:84:6a:4d:df:
88:45:de:c2:9f:4a:60:3f:4c:0e:41:60:1d:48:f2:3a:b0:47:
f2:07:eb:d0:dd:3a:62:b8:3c:b0:42:d9:6e:d9:4d:06:0b:98:
eb:10:32:d3:9d:21:03:ea:4b:96:5e:00:67:ca:ef:46:b3:9a:
99:b3:02:c7:1a:99:a3:32:e4:05:41:df:0f:b6:35:1a:c0:f3:
b2:bc:6a:7c:d9:05:44:f5:a8:79:3b:8a:e9:db:01:81:0f:d7:
0d:15:6d:69:24:c2:7a:50:92:08:c0:86:51:f9:56:09:cc:44:
8d:27:b9:33:a0:0c:8e:3a:a4:9a:08:2c:ac:e2:ef:63:17:7d:
5e:ba:7f:37:84:3d:69:6d:bb:61:6e:ab:1a:03:6b:3f:15:25:
0d:a5:43:0a:e6:c9:02:fe:d0:2d:0a:b9:ae:41:94:df:82:38:
82:63:93:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 10:52:24 2025 by rpki-client