This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/2541D62A7F9811ED93508538C4F9AE02.roa
File: 2541D62A7F9811ED93508538C4F9AE02.roa (raw, json)
Hash identifier: U9zRAtnK+rMFnlnfGAU4KvzYtOXqBm7qFzqLf0N4GqM=
Subject key identifier: 68:58:9E:24:B7:A6:60:0D:F9:BF:C2:D4:C9:69:25:09:7C:6A:2A:41
Certificate issuer: /CN=A914E1C1/serialNumber=E3F3154D988276A2F541E5EA62818C770BBB80EA
Certificate serial: 029C
Authority key identifier: E3:F3:15:4D:98:82:76:A2:F5:41:E5:EA:62:81:8C:77:0B:BB:80:EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_MVTZiCdqL1QeXqYoGMdwu7gOo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/2541D62A7F9811ED93508538C4F9AE02.roa
Signing time: Sat 09 Aug 2025 02:39:10 +0000
ROA not before: Sat 09 Aug 2025 02:39:10 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 132561
IP address blocks: 103.58.180.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/4_MVTZiCdqL1QeXqYoGMdwu7gOo.crl
rsync://rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/4_MVTZiCdqL1QeXqYoGMdwu7gOo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_MVTZiCdqL1QeXqYoGMdwu7gOo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 23:55:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 668 (0x29c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E1C1, serialNumber=E3F3154D988276A2F541E5EA62818C770BBB80EA
Validity
Not Before: Aug 9 02:39:10 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6896b4ce-c621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e5:fa:c2:d9:ec:b5:6f:59:f3:66:cc:cf:05:
42:2b:93:81:23:9a:88:e1:ce:e8:dd:23:f6:7d:ca:
bc:30:cc:6f:69:a7:2c:88:8d:1f:30:ba:fd:c1:e9:
0c:c2:86:4a:a7:c2:1d:3f:05:75:f8:e9:3b:aa:7d:
dc:ee:ef:91:e8:9f:c5:5e:7a:b4:5a:80:43:62:84:
f7:6b:a1:24:ba:64:49:1c:b0:dc:f6:b7:99:d4:cd:
ea:12:83:e7:b7:dc:50:e1:4b:2d:1c:6d:33:15:d1:
c3:d9:86:14:db:da:aa:3f:81:4b:4d:17:9d:fe:60:
23:da:d8:00:66:17:6c:b6:ae:09:ba:ae:27:ff:f4:
58:3a:0b:8b:3f:c0:06:a4:25:57:38:5e:f7:38:ac:
5b:b7:6a:3c:e7:01:9f:8b:90:b0:18:91:2f:9c:85:
92:38:ce:fb:c6:ae:b5:7b:0d:a0:53:eb:af:86:6a:
e0:73:c6:de:9b:36:62:fd:8c:37:07:d7:55:86:6d:
72:71:0f:51:84:07:78:e1:7d:b2:8e:17:82:b0:0f:
d4:7e:ca:72:cb:08:e1:34:17:a6:7a:e0:a7:be:ca:
11:f7:aa:9d:a2:1b:58:f5:df:45:34:a9:c3:9c:8d:
fb:80:94:7d:7e:2e:df:b8:49:98:f3:08:44:8a:81:
36:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:58:9E:24:B7:A6:60:0D:F9:BF:C2:D4:C9:69:25:09:7C:6A:2A:41
X509v3 Authority Key Identifier:
keyid:E3:F3:15:4D:98:82:76:A2:F5:41:E5:EA:62:81:8C:77:0B:BB:80:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/4_MVTZiCdqL1QeXqYoGMdwu7gOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_MVTZiCdqL1QeXqYoGMdwu7gOo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/2541D62A7F9811ED93508538C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.58.180.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:21:cf:3d:de:b0:60:6e:7d:6f:df:19:30:e5:19:b7:0c:3f:
75:34:e2:6d:b8:87:bc:6e:0c:a6:6e:25:8a:ed:73:cb:d7:7b:
94:44:40:3d:78:e9:dc:3f:be:0f:ca:7b:e5:3e:74:64:a0:8d:
8c:cd:90:de:fd:53:fd:2b:c1:35:38:fb:71:bb:85:fd:d4:b3:
8c:93:ca:5b:b2:77:c1:7f:35:d4:3b:95:cb:74:51:52:0a:4d:
25:0a:cd:9a:57:83:c4:c0:55:b6:be:61:08:08:15:16:e0:8c:
cf:a6:98:d0:9e:5b:93:9f:83:de:63:b0:d9:c6:5f:a2:6d:c6:
ef:3d:76:5e:c0:be:d2:c8:5f:b2:0c:e1:c3:74:51:10:cf:00:
f3:3c:90:be:6b:b3:9b:e1:01:49:4e:3f:44:f8:d2:76:26:99:
bd:ba:01:bf:58:89:a3:d4:6a:68:fb:3b:67:bc:cb:47:0f:de:
2d:c6:d1:7b:ca:86:37:9e:a3:37:a1:76:cd:e0:bc:6f:af:eb:
76:6b:88:02:20:5c:1b:a7:8c:cb:9e:10:7c:cc:7a:db:5b:c2:
d5:92:11:12:94:05:8e:c1:a1:7b:bb:b3:89:c6:49:02:2a:96:
9e:ca:46:c5:e3:c4:16:0d:1e:3a:4f:7d:67:bc:85:0b:98:93:
51:3b:e3:cd
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICApwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEUxQzExMTAvBgNVBAUTKEUzRjMxNTREOTg4Mjc2QTJGNTQxRTVFQTYyODE4Qzc3
MEJCQjgwRUEwHhcNMjUwODA5MDIzOTEwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODk2YjRjZS1jNjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0uX6wtnstW9Z82bMzwVCK5OBI5qI4c7o3SP2fcq8MMxvaacsiI0fMLr9wekM
woZKp8IdPwV1+Ok7qn3c7u+R6J/FXnq0WoBDYoT3a6EkumRJHLDc9reZ1M3qEoPn
t9xQ4UstHG0zFdHD2YYU29qqP4FLTRed/mAj2tgAZhdstq4Juq4n//RYOguLP8AG
pCVXOF73OKxbt2o85wGfi5CwGJEvnIWSOM77xq61ew2gU+uvhmrgc8bemzZi/Yw3
B9dVhm1ycQ9RhAd44X2yjheCsA/UfspyywjhNBemeuCnvsoR96qdohtY9d9FNKnD
nI37gJR9fi7fuEmY8whEioE20QIDAQABo4IClTCCApEwHQYDVR0OBBYEFGhYniS3
pmAN+b/C1MlpJQl8aipBMB8GA1UdIwQYMBaAFOPzFU2Ygnai9UHl6mKBjHcLu4Dq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTFDMS9EQkU1RjJDQTEw
QzcxMUVEOEJCM0I3NURDNEY5QUUwMi80X01WVFppQ2RxTDFRZVhxWW9HTWR3dTdn
T28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRfTVZUWmlDZHFMMVFlWHFZb0dNZHd1N2dPby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEUxQzEvREJFNUYyQ0ExMEM3MTFFRDhCQjNCNzVEQzRGOUFFMDIvMjU0MUQ2MkE3
Rjk4MTFFRDkzNTA4NTM4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnOrQwDQYJKoZIhvcNAQELBQADggEBAF8hzz3esGBufW/f
GTDlGbcMP3U04m24h7xuDKZuJYrtc8vXe5REQD146dw/vg/Ke+U+dGSgjYzNkN79
U/0rwTU4+3G7hf3Us4yTyluyd8F/NdQ7lct0UVIKTSUKzZpXg8TAVba+YQgIFRbg
jM+mmNCeW5Ofg95jsNnGX6Jtxu89dl7AvtLIX7IM4cN0URDPAPM8kL5rs5vhAUlO
P0T40nYmmb26Ab9YiaPUamj7O2e8y0cP3i3G0XvKhjeeozehds3gvG+v63ZriAIg
XBunjMueEHzMettbwtWSERKUBY7BoXu7s4nGSQIqlp7KRsXjxBYNHjpPfWe8hQuY
k1E7480=
-----END CERTIFICATE-----
Generated at Sun Dec 7 06:10:10 2025 by rpki-client