This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F0E7/03A12C5C3DC611EB82A7681CC4F9AE02/595EF8C63DC711EBA35AB51DC4F9AE02.roa
File: 595EF8C63DC711EBA35AB51DC4F9AE02.roa (raw, json)
Hash identifier: S5CNbgHmeay09rv7Gsfj4S5qYd6WxzxI7IwrMq72VfM=
Subject key identifier: 3E:F4:B2:6E:35:C5:63:1E:55:58:2F:C1:56:80:D2:8F:79:B6:81:30
Certificate issuer: /CN=A914F0E7/serialNumber=AFAC57751C5E769875ED26F5BCDF17F53DFF9C99
Certificate serial: 0767
Authority key identifier: AF:AC:57:75:1C:5E:76:98:75:ED:26:F5:BC:DF:17:F5:3D:FF:9C:99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6xXdRxedph17Sb1vN8X9T3_nJk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F0E7/03A12C5C3DC611EB82A7681CC4F9AE02/595EF8C63DC711EBA35AB51DC4F9AE02.roa
Signing time: Sat 08 Nov 2025 20:42:00 +0000
ROA not before: Sat 08 Nov 2025 20:42:00 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 141229
IP address blocks: 103.156.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F0E7/03A12C5C3DC611EB82A7681CC4F9AE02/r6xXdRxedph17Sb1vN8X9T3_nJk.crl
rsync://rpki.apnic.net/member_repository/A914F0E7/03A12C5C3DC611EB82A7681CC4F9AE02/r6xXdRxedph17Sb1vN8X9T3_nJk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6xXdRxedph17Sb1vN8X9T3_nJk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1895 (0x767)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F0E7, serialNumber=AFAC57751C5E769875ED26F5BCDF17F53DFF9C99
Validity
Not Before: Nov 8 20:42:00 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=690fab18-00e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b1:c0:2c:ea:c7:63:22:fd:83:a4:80:01:3f:
c2:da:b6:96:d7:ba:d3:d1:1e:83:b9:0e:a5:f6:9e:
42:d6:51:20:68:c3:5e:af:99:2f:49:dc:f0:43:0f:
ff:71:7b:9c:4a:fe:e0:d9:81:78:bf:28:7a:76:6b:
53:f5:21:26:f9:cb:cb:39:29:3a:2d:ab:0e:d4:1c:
19:11:91:d0:b4:91:95:0a:35:12:d0:35:b1:d3:28:
b7:43:71:b0:b9:45:73:d6:e9:aa:cd:d5:32:2a:2f:
93:4b:b6:e1:3b:ad:5c:1a:82:74:17:f4:fe:ad:4e:
49:7a:48:36:26:37:33:0e:f4:e9:12:57:bc:e0:42:
9b:e6:01:d9:df:b6:01:92:7e:ff:61:d7:b9:06:27:
d7:38:a3:a7:b0:06:71:ab:e9:f9:4e:f5:39:dd:f3:
c6:c1:4d:f5:81:25:27:27:64:32:a5:0e:a0:00:cb:
99:87:ac:14:ab:64:be:ed:4d:c2:df:3e:ba:26:74:
56:36:e9:d1:6e:23:57:38:09:b0:02:2c:17:5e:45:
c7:75:1d:6f:6a:0b:72:36:49:a1:26:80:07:6a:f7:
6a:1e:e3:c0:61:56:13:e4:77:5f:d7:06:60:e1:af:
65:15:4b:c7:82:7c:1e:21:d7:55:82:62:c1:32:9b:
69:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F4:B2:6E:35:C5:63:1E:55:58:2F:C1:56:80:D2:8F:79:B6:81:30
X509v3 Authority Key Identifier:
keyid:AF:AC:57:75:1C:5E:76:98:75:ED:26:F5:BC:DF:17:F5:3D:FF:9C:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F0E7/03A12C5C3DC611EB82A7681CC4F9AE02/r6xXdRxedph17Sb1vN8X9T3_nJk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6xXdRxedph17Sb1vN8X9T3_nJk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F0E7/03A12C5C3DC611EB82A7681CC4F9AE02/595EF8C63DC711EBA35AB51DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.156.198.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:63:0a:c5:f6:9a:ff:30:ec:9d:96:76:28:ba:7b:1b:de:e5:
ea:64:c5:22:16:f8:a0:9a:b7:4c:fb:82:20:7f:1e:77:d1:50:
39:dc:17:24:ec:76:be:68:8c:2b:54:c7:8e:d1:12:48:da:4d:
3d:79:02:98:12:21:e3:b3:12:1a:58:bc:a4:80:0f:a2:ea:97:
3a:1a:0f:be:30:bf:0b:cc:ea:6e:23:c0:d5:57:53:d3:3d:5e:
52:cc:a6:60:b3:5f:8b:b6:67:37:0f:c2:cd:e8:6c:e1:d9:c3:
bd:f4:0e:cc:e6:bf:51:47:2a:86:d5:81:37:0b:68:61:f1:83:
68:b9:0f:61:64:6e:57:e7:89:cd:7f:7a:92:91:5b:d4:99:8a:
8a:b7:16:37:d3:93:df:32:ab:0a:4c:36:99:7a:cb:89:71:42:
60:2c:01:3f:b8:4a:71:15:b1:88:08:25:ee:60:14:94:c7:f2:
94:fc:5e:9c:e1:b2:d5:ab:69:01:d6:6c:f8:64:cd:c3:e4:bc:
f9:ac:0e:7d:58:8a:94:a9:2e:aa:3e:67:ea:f6:75:6b:d7:48:
0e:6d:d4:72:8f:04:47:f9:9e:fc:a2:94:68:37:54:14:68:be:
ef:d4:85:0c:3e:16:df:f1:d3:5e:97:76:39:3c:97:cf:cd:53:
22:7f:ab:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:00:10 2025 by rpki-client