This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/253B1382106C11F08D824C19C4F9AE02.roa
File: 253B1382106C11F08D824C19C4F9AE02.roa (raw, json)
Hash identifier: Lm98gfuE4nx/90/5gHuI/T5p7zlVxbDFyDvflUZQMdA=
Subject key identifier: 52:B9:DF:F6:7D:89:F5:2F:C3:F8:8A:A7:8D:4B:5A:7A:14:CD:85:FA
Certificate issuer: /CN=A914EBE5/serialNumber=B744A44E5B653E6C7A90CF6034E00DCFD8947D60
Certificate serial: 18C3
Authority key identifier: B7:44:A4:4E:5B:65:3E:6C:7A:90:CF:60:34:E0:0D:CF:D8:94:7D:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/253B1382106C11F08D824C19C4F9AE02.roa
Signing time: Thu 04 Dec 2025 16:15:29 +0000
ROA not before: Thu 04 Dec 2025 16:15:29 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 153621
IP address blocks: 103.77.24.0/23 maxlen: 23
2401:d540::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.crl
rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 16:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6339 (0x18c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EBE5, serialNumber=B744A44E5B653E6C7A90CF6034E00DCFD8947D60
Validity
Not Before: Dec 4 16:15:29 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6931b3a1-d6f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2c:83:26:52:9a:c4:20:b1:79:85:36:7b:cb:
22:70:01:1e:e9:1a:75:15:ac:0e:7f:2e:22:f3:e2:
c7:c2:ca:de:1f:94:1c:ca:6e:ab:c6:c3:97:b9:a5:
e1:62:0d:ee:da:2f:7d:b2:32:f4:1e:9c:fc:d9:22:
9a:b2:48:04:f3:e7:4e:93:25:cf:98:7c:a2:6c:4a:
e8:04:ee:21:82:de:ec:18:db:72:7c:8d:4f:0d:c4:
04:56:ae:96:e6:b6:74:1b:20:ca:36:3d:db:df:cc:
d7:88:f1:65:63:f3:f9:45:88:2d:ad:8d:4b:56:a8:
78:08:95:a2:1e:9a:6a:93:77:b0:38:77:1c:58:29:
f8:45:29:c4:7f:b1:4c:cc:6a:69:46:86:aa:f5:0b:
19:a9:ed:5f:d0:db:44:d0:00:67:f2:69:3c:a8:1f:
53:2e:d8:76:51:c1:65:92:06:8d:c8:6b:ac:37:14:
0f:ad:38:f2:06:37:06:86:ff:b7:a4:0c:e9:39:1b:
eb:ca:76:87:2f:a7:5b:59:74:33:f4:b8:3f:49:2a:
e4:11:7a:72:33:7f:05:2c:74:2d:7b:32:a9:9d:49:
b6:ff:0f:90:e4:80:81:21:19:27:54:83:7f:21:03:
ed:f9:33:07:f4:44:bb:8a:eb:89:0a:cb:35:70:58:
74:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B9:DF:F6:7D:89:F5:2F:C3:F8:8A:A7:8D:4B:5A:7A:14:CD:85:FA
X509v3 Authority Key Identifier:
keyid:B7:44:A4:4E:5B:65:3E:6C:7A:90:CF:60:34:E0:0D:CF:D8:94:7D:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/253B1382106C11F08D824C19C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.77.24.0/23
IPv6:
2401:d540::/32
Signature Algorithm: sha256WithRSAEncryption
9e:a9:0f:74:20:9d:d4:69:db:86:bb:27:5b:dc:cc:b7:a6:71:
5a:92:61:87:d5:f8:ba:3b:b2:b4:b9:57:8b:82:60:bd:4a:cd:
61:b6:7d:ce:ad:ba:48:f8:f5:43:f8:a7:90:2b:bf:70:21:f3:
75:46:5f:c2:16:94:5c:6c:3e:bd:97:29:d2:50:4b:0f:35:e4:
7c:cc:cb:c4:53:9a:bc:ce:01:54:76:a9:b1:3a:b4:64:ae:60:
2a:04:9a:7f:4e:84:13:c7:35:7f:df:67:0b:8b:75:9f:90:f1:
fb:af:76:82:52:67:02:7f:d2:75:78:dd:ec:d2:40:13:8c:d2:
98:c7:d1:1c:60:b1:96:0e:56:63:9b:22:8d:96:a6:6e:7c:55:
3e:a3:da:f0:2c:de:55:b9:fc:98:22:ed:35:3c:2d:9d:12:ff:
13:a6:e4:11:79:7b:4e:e7:2a:ab:47:e6:ed:72:86:87:16:f9:
0e:5b:66:b1:e9:6d:42:4e:3f:53:58:9a:cf:71:08:b1:21:16:
0b:40:94:4d:e6:d2:fb:47:20:4d:aa:a0:62:66:c6:f2:42:8d:
1f:1f:65:a8:76:9d:78:ef:8c:7f:5f:67:99:ec:1e:61:cf:50:
d5:6c:cb:c6:cb:01:ca:a3:bf:16:82:3d:14:5c:11:ca:b2:b4:
5a:21:d6:cc
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICGMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEVCRTUxMTAvBgNVBAUTKEI3NDRBNDRFNUI2NTNFNkM3QTkwQ0Y2MDM0RTAwRENG
RDg5NDdENjAwHhcNMjUxMjA0MTYxNTI5WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTMxYjNhMS1kNmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzCyDJlKaxCCxeYU2e8sicAEe6Rp1FawOfy4i8+LHwsreH5Qcym6rxsOXuaXh
Yg3u2i99sjL0Hpz82SKaskgE8+dOkyXPmHyibEroBO4hgt7sGNtyfI1PDcQEVq6W
5rZ0GyDKNj3b38zXiPFlY/P5RYgtrY1LVqh4CJWiHppqk3ewOHccWCn4RSnEf7FM
zGppRoaq9QsZqe1f0NtE0ABn8mk8qB9TLth2UcFlkgaNyGusNxQPrTjyBjcGhv+3
pAzpORvrynaHL6dbWXQz9Lg/SSrkEXpyM38FLHQtezKpnUm2/w+Q5ICBIRknVIN/
IQPt+TMH9ES7iuuJCss1cFh0CQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFFK53/Z9
ifUvw/iKp41LWnoUzYX6MB8GA1UdIwQYMBaAFLdEpE5bZT5sepDPYDTgDc/YlH1g
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUJFNS82NEM1MjcwOEE5
NUYxMUU3OUFENEU3MzRDNEY5QUUwMi90MFNrVGx0bFBteDZrTTlnTk9BTno5aVVm
V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3QwU2tUbHRsUG14NmtNOWdOT0FOejlpVWZXQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEVCRTUvNjRDNTI3MDhBOTVGMTFFNzlBRDRFNzM0QzRGOUFFMDIvMjUzQjEzODIx
MDZDMTFGMDhEODI0QzE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAFnTRgwDQQCAAIwBwMFACQB1UAwDQYJKoZIhvcNAQELBQAD
ggEBAJ6pD3QgndRp24a7J1vczLemcVqSYYfV+Lo7srS5V4uCYL1KzWG2fc6tukj4
9UP4p5Arv3Ah83VGX8IWlFxsPr2XKdJQSw815HzMy8RTmrzOAVR2qbE6tGSuYCoE
mn9OhBPHNX/fZwuLdZ+Q8fuvdoJSZwJ/0nV43ezSQBOM0pjH0RxgsZYOVmObIo2W
pm58VT6j2vAs3lW5/Jgi7TU8LZ0S/xOm5BF5e07nKqtH5u1yhocW+Q5bZrHpbUJO
P1NYms9xCLEhFgtAlE3m0vtHIE2qoGJmxvJCjR8fZah2nXjvjH9fZ5nsHmHPUNVs
y8bLAcqjvxaCPRRcEcqytFoh1sw=
-----END CERTIFICATE-----
Generated at Sun Dec 7 07:31:02 2025 by rpki-client