This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/E4AAD78CEFFE11E991390613C4F9AE02.roa
File: E4AAD78CEFFE11E991390613C4F9AE02.roa (raw, json)
Hash identifier: pRdeyjIR5PJUpFPO2R7F1j82SKKC+YOZPiwCmzodVXc=
Subject key identifier: C9:CF:95:EB:60:E5:9C:9F:3D:5A:C6:EF:E3:C0:93:12:BD:48:46:B0
Certificate issuer: /CN=A9152EF3/serialNumber=6744748D61C4C6C77640EF584714E97843D1EA02
Certificate serial: 0DFF
Authority key identifier: 67:44:74:8D:61:C4:C6:C7:76:40:EF:58:47:14:E9:78:43:D1:EA:02
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/E4AAD78CEFFE11E991390613C4F9AE02.roa
Signing time: Thu 14 Aug 2025 18:27:46 +0000
ROA not before: Thu 14 Aug 2025 18:27:46 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 137974
IP address blocks: 103.119.68.0/22 maxlen: 24
2403:3fc0::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl
rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 17:14:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3583 (0xdff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152EF3, serialNumber=6744748D61C4C6C77640EF584714E97843D1EA02
Validity
Not Before: Aug 14 18:27:46 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=689e2aa1-8bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a8:1c:50:0c:f4:37:03:c0:c7:c4:b2:89:c8:
d3:ba:c0:f9:de:ee:f5:8d:3b:57:bb:7d:94:71:34:
c0:2e:93:ba:d3:82:63:d4:96:b0:21:71:6c:db:c8:
b6:51:f1:2e:38:94:aa:58:60:2f:37:d7:b1:5c:a8:
0c:c3:cb:9c:7d:f2:f8:aa:88:c0:85:6a:c8:b7:59:
2f:7e:18:b0:1d:b2:a6:ce:ab:8e:03:b3:a4:2b:30:
df:8e:3b:1e:99:f8:a2:29:1c:cc:0a:5a:66:a6:0a:
c1:c8:fb:b0:d4:58:60:a7:b9:85:32:63:56:6e:86:
ad:69:31:88:55:08:7a:dd:ac:9d:47:cb:4b:a9:67:
d0:e1:a3:72:f3:8c:0e:70:39:e8:fd:dc:71:97:f3:
f8:e4:f7:b0:4b:87:83:c1:51:2e:bf:4c:86:3c:47:
ba:09:a5:0c:2c:c6:2e:44:b9:68:aa:2f:da:f3:f7:
f4:af:34:1b:5a:42:a1:9e:e8:50:f7:7f:7b:b5:c1:
39:4d:13:4c:03:f8:2e:6f:b7:7d:e2:64:af:b2:be:
12:9d:db:3c:c1:f7:8d:24:d6:2e:7d:9c:d3:fa:80:
8b:db:db:d5:ae:6f:29:f9:0f:da:ba:4b:b4:a5:86:
e6:4b:3f:a4:72:80:85:6c:2b:6b:f5:a8:27:63:1e:
bf:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CF:95:EB:60:E5:9C:9F:3D:5A:C6:EF:E3:C0:93:12:BD:48:46:B0
X509v3 Authority Key Identifier:
keyid:67:44:74:8D:61:C4:C6:C7:76:40:EF:58:47:14:E9:78:43:D1:EA:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/E4AAD78CEFFE11E991390613C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.119.68.0/22
IPv6:
2403:3fc0::/32
Signature Algorithm: sha256WithRSAEncryption
85:9e:0a:91:c9:66:9b:ea:be:ab:10:e8:79:1e:47:0d:95:e1:
73:be:55:bd:b8:96:56:a4:3b:34:9c:40:ef:41:48:99:3d:4b:
e2:3c:94:07:67:5e:72:74:7e:f6:e4:7a:f3:61:39:34:b0:d4:
c2:6f:fc:95:7b:58:7e:a2:fa:9b:a2:1b:2e:73:f9:98:9c:bf:
1c:67:eb:da:1a:a6:b0:9d:40:72:ef:d9:7a:14:4c:12:9d:fd:
f2:5d:2b:2c:5a:e8:12:a6:24:a8:db:1f:34:23:dc:cf:f4:53:
32:76:6c:e6:7b:c5:6e:0a:03:41:06:cd:da:b7:c9:88:60:6c:
ba:70:70:b8:41:f9:e6:08:bb:af:8f:1f:27:43:93:ed:8f:e3:
35:1d:47:2f:53:e1:6a:5c:11:d1:58:ae:0e:d3:c7:79:f3:86:
09:ae:dc:eb:d3:f1:9f:4c:e0:da:37:9f:ab:78:15:82:a4:84:
0f:e1:69:17:c8:c7:9b:c8:21:78:f2:5d:5c:36:da:20:e6:87:
8d:f7:9d:74:b8:d5:b6:44:24:93:aa:a7:fe:d3:25:2a:73:b9:
77:5a:25:23:4c:2f:5f:e3:cb:eb:ee:1c:7f:e7:3c:92:57:23:
82:c7:da:11:37:95:ab:fd:19:85:c0:19:a7:ff:94:62:21:c5:
d7:43:11:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:19:54 2025 by rpki-client