This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/3ABCE5008B9811EE9C0BA252C4F9AE02.roa
File: 3ABCE5008B9811EE9C0BA252C4F9AE02.roa (raw, json)
Hash identifier: QARhrQCIusoXboY/rX+cC36TY43s5E2mm8nkohh7VsI=
Subject key identifier: 05:15:FF:1B:60:2D:AC:77:64:0D:0D:CE:5A:65:62:5B:DE:D7:F6:10
Certificate issuer: /CN=A915465A/serialNumber=785E0BFF07B9037C60334B2DF3369281A4DC3F5A
Certificate serial: 080F
Authority key identifier: 78:5E:0B:FF:07:B9:03:7C:60:33:4B:2D:F3:36:92:81:A4:DC:3F:5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/3ABCE5008B9811EE9C0BA252C4F9AE02.roa
Signing time: Wed 31 Dec 2025 01:34:12 +0000
ROA not before: Wed 31 Dec 2025 01:34:12 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 63916
IP address blocks: 103.42.212.0/22 maxlen: 22
103.42.214.0/24 maxlen: 24
183.78.168.0/22 maxlen: 22
183.78.168.0/24 maxlen: 24
183.78.169.0/24 maxlen: 24
183.78.170.0/24 maxlen: 24
183.78.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.crl
rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 20:35:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2063 (0x80f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915465A, serialNumber=785E0BFF07B9037C60334B2DF3369281A4DC3F5A
Validity
Not Before: Dec 31 01:34:12 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69547d94-d220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b3:8a:d6:a8:b6:c7:76:e6:57:82:9d:74:fa:
2f:01:3f:65:24:1f:26:d9:c9:06:fd:33:9d:fa:6c:
24:9d:78:1d:90:c0:2d:c3:57:4f:e1:3b:3b:ec:05:
31:f6:f8:89:09:27:ec:b8:5a:bb:94:18:60:e0:b3:
82:eb:d8:db:00:0b:10:36:1e:b7:9d:3b:f9:87:47:
45:43:e0:c6:fb:b6:c8:01:a1:09:0e:2e:40:fe:44:
2d:6b:50:85:5e:61:21:13:66:7d:96:e0:e4:a5:b2:
6d:5f:6c:c7:88:6f:60:63:e9:3b:3b:cb:8f:d1:8e:
84:c4:79:fd:5f:c0:6d:06:5d:43:be:b0:90:20:15:
29:9c:0c:1e:c7:5f:01:3c:53:09:a5:d9:73:c7:f6:
7b:a0:af:d1:3e:1e:ea:da:85:c6:5e:a4:0f:b1:9b:
b7:e6:fa:95:8b:90:35:da:65:22:09:0d:d5:f6:47:
4e:d9:e1:10:fa:9a:e1:0c:a2:64:61:7c:48:4f:b6:
12:a4:c4:66:c5:00:bf:de:bb:c6:ff:13:41:12:57:
9a:78:ca:1a:df:fe:e5:03:ac:54:e4:ea:6f:05:f2:
99:81:94:41:da:c7:9e:97:8b:b3:10:77:a0:98:5b:
d8:bb:bb:7f:5f:e1:83:38:42:cb:f3:e5:ca:65:fa:
e9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:15:FF:1B:60:2D:AC:77:64:0D:0D:CE:5A:65:62:5B:DE:D7:F6:10
X509v3 Authority Key Identifier:
keyid:78:5E:0B:FF:07:B9:03:7C:60:33:4B:2D:F3:36:92:81:A4:DC:3F:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/3ABCE5008B9811EE9C0BA252C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.42.212.0/22
183.78.168.0/22
Signature Algorithm: sha256WithRSAEncryption
32:81:a7:c0:5f:df:01:64:89:61:8c:8b:96:15:2f:0a:9a:3e:
ce:90:68:29:da:0a:ee:62:18:4b:a9:3d:eb:8b:cc:7b:62:8f:
f0:3a:a9:dc:8b:1a:e5:bb:ad:43:b7:85:ca:fd:91:b9:1c:32:
98:3c:a7:4c:da:3c:d8:b7:3e:e7:ca:57:03:d5:4b:eb:e8:28:
12:14:7a:75:cf:fb:ec:46:ce:c7:c2:6a:34:d0:58:32:c6:ff:
65:3e:d4:88:ca:1d:77:4c:22:8b:24:dd:9d:3e:a0:c3:8b:53:
05:ea:a6:48:67:4b:5a:00:73:27:4f:5f:72:52:64:88:ec:7d:
47:84:c8:74:bb:80:39:44:57:9c:53:fa:45:4e:5c:b2:e7:54:
c5:d3:6a:77:e0:49:c6:4e:ab:4c:18:fa:b1:20:44:68:79:1a:
c4:c8:75:77:0b:e0:0f:31:fd:f4:8a:9e:e5:a5:a6:9c:d7:64:
ac:d7:df:8e:e2:63:c3:2c:4d:aa:7c:59:56:19:fa:e5:08:82:
ec:0e:9b:47:e2:e6:a9:cc:3a:45:ef:38:b4:7d:2e:53:23:09:
d5:2c:c1:28:34:c8:70:0d:04:9e:d9:88:42:7c:cb:a4:5e:7c:
bd:6c:74:00:78:8e:4c:ae:83:22:17:5a:74:19:be:f5:d2:55:
c2:f0:95:35
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICCA8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTQ2NUExMTAvBgNVBAUTKDc4NUUwQkZGMDdCOTAzN0M2MDMzNEIyREYzMzY5Mjgx
QTREQzNGNUEwHhcNMjUxMjMxMDEzNDEyWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTU0N2Q5NC1kMjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl7OK1qi2x3bmV4KddPovAT9lJB8m2ckG/TOd+mwknXgdkMAtw1dP4Ts77AUx
9viJCSfsuFq7lBhg4LOC69jbAAsQNh63nTv5h0dFQ+DG+7bIAaEJDi5A/kQta1CF
XmEhE2Z9luDkpbJtX2zHiG9gY+k7O8uP0Y6ExHn9X8BtBl1DvrCQIBUpnAwex18B
PFMJpdlzx/Z7oK/RPh7q2oXGXqQPsZu35vqVi5A12mUiCQ3V9kdO2eEQ+prhDKJk
YXxIT7YSpMRmxQC/3rvG/xNBEleaeMoa3/7lA6xU5OpvBfKZgZRB2seel4uzEHeg
mFvYu7t/X+GDOELL8+XKZfrp6wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFAUV/xtg
Lax3ZA0NzlplYlve1/YQMB8GA1UdIwQYMBaAFHheC/8HuQN8YDNLLfM2koGk3D9a
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDY1QS84ODk0QTcwQTFD
NTUxMUVCQUI4OEMxODJDNEY5QUUwMi9lRjRMX3dlNUEzeGdNMHN0OHphU2dhVGNQ
MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VGNExfd2U1QTN4Z00wc3Q4emFTZ2FUY1Axby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTQ2NUEvODg5NEE3MEExQzU1MTFFQkFCODhDMTgyQzRGOUFFMDIvM0FCQ0U1MDA4
Qjk4MTFFRTlDMEJBMjUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAJnKtQDBAK3TqgwDQYJKoZIhvcNAQELBQADggEBADKBp8Bf
3wFkiWGMi5YVLwqaPs6QaCnaCu5iGEupPeuLzHtij/A6qdyLGuW7rUO3hcr9kbkc
Mpg8p0zaPNi3PufKVwPVS+voKBIUenXP++xGzsfCajTQWDLG/2U+1IjKHXdMIosk
3Z0+oMOLUwXqpkhnS1oAcydPX3JSZIjsfUeEyHS7gDlEV5xT+kVOXLLnVMXTanfg
ScZOq0wY+rEgRGh5GsTIdXcL4A8x/fSKnuWlppzXZKzX347iY8MsTap8WVYZ+uUI
guwOm0fi5qnMOkXvOLR9LlMjCdUswSg0yHANBJ7ZiEJ8y6RefL1sdAB4jkyugyIX
WnQZvvXSVcLwlTU=
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:34:08 2026 by rpki-client