This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/4DD8750E69A611EF84A27584C4F9AE02.roa
File: 4DD8750E69A611EF84A27584C4F9AE02.roa (raw, json)
Hash identifier: kQamVFgmYMR8msjGru66GiLhfU+VJZnNEztLqZV6JgE=
Subject key identifier: FD:88:4A:7E:CD:A0:CB:55:D0:2C:CC:C5:79:AE:8C:0C:00:05:75:FE
Certificate issuer: /CN=A9155501/serialNumber=99A766D4CFA45A9F9E3778250498B12768C41E1A
Certificate serial: F0
Authority key identifier: 99:A7:66:D4:CF:A4:5A:9F:9E:37:78:25:04:98:B1:27:68:C4:1E:1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/madm1M-kWp-eN3glBJixJ2jEHho.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/4DD8750E69A611EF84A27584C4F9AE02.roa
Signing time: Wed 03 Dec 2025 04:03:10 +0000
ROA not before: Wed 03 Dec 2025 04:03:10 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 147313
IP address blocks: 103.174.204.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.crl
rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/madm1M-kWp-eN3glBJixJ2jEHho.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:22:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240 (0xf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155501, serialNumber=99A766D4CFA45A9F9E3778250498B12768C41E1A
Validity
Not Before: Dec 3 04:03:10 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=692fb67e-35e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8f:0e:af:4c:ac:36:0f:78:37:f0:96:87:fe:
d3:05:ea:fa:e7:e7:b3:09:37:86:d1:f6:60:81:4f:
32:32:a8:87:59:13:c4:33:c0:1c:fb:d6:55:6b:b8:
ed:90:dc:4c:dd:6a:66:61:50:09:52:8c:ee:24:d7:
f2:91:1c:51:9a:96:0b:36:c3:fc:37:48:d3:5e:f8:
66:be:e6:b1:17:f6:93:e3:77:66:51:1b:58:9f:2f:
cf:da:b3:8c:1d:75:41:71:9f:44:d9:e8:54:94:4f:
3b:a2:d3:c8:b7:95:9b:28:db:bd:75:85:8e:19:2a:
7d:f0:38:dd:ee:22:f9:37:53:85:62:3b:8f:7f:92:
38:b9:74:25:4e:6d:c5:a8:fd:53:2d:70:9c:cc:01:
4d:fa:0e:6e:13:5c:c7:ab:3b:af:e4:7e:c6:b0:92:
c9:f4:a5:75:88:57:67:86:80:26:a1:6d:00:49:de:
2c:b2:49:f9:ac:2f:ef:4e:75:92:f6:14:1c:ac:5c:
7a:58:14:79:cf:9e:2f:f1:c8:cc:dd:4d:b4:a4:54:
16:7a:d8:c5:00:cc:0a:a3:18:31:1c:b1:de:77:9c:
05:ae:34:46:29:9b:d4:da:d9:e8:0b:79:04:79:23:
a5:a3:b5:da:d6:15:33:c0:63:9d:cc:bb:08:a5:79:
07:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:88:4A:7E:CD:A0:CB:55:D0:2C:CC:C5:79:AE:8C:0C:00:05:75:FE
X509v3 Authority Key Identifier:
keyid:99:A7:66:D4:CF:A4:5A:9F:9E:37:78:25:04:98:B1:27:68:C4:1E:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/madm1M-kWp-eN3glBJixJ2jEHho.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/4DD8750E69A611EF84A27584C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.174.204.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:cd:d9:c1:2d:c1:33:31:e5:2d:d8:f0:15:56:37:0d:0d:ac:
e8:5f:3c:43:20:b7:a3:62:df:f6:bd:59:be:28:27:23:a8:06:
9c:a3:9d:37:57:70:1f:1e:b1:7e:01:e4:42:96:30:b3:64:bf:
73:68:d9:d3:20:69:3d:c1:da:1b:ad:d1:97:1b:e9:a0:51:48:
be:6f:f9:96:34:7e:a8:32:92:6c:62:94:72:2c:e6:93:14:82:
35:2e:ae:cd:59:f5:a2:a3:b7:eb:44:61:6b:d1:03:c9:0f:c1:
24:f0:89:1f:3f:45:2c:2d:77:46:be:dc:1e:82:49:66:17:09:
a2:1d:9e:25:6d:18:ec:c7:e7:da:c1:f1:9b:d8:63:32:01:14:
82:e4:a1:2f:4e:1e:18:7a:6a:ca:bd:5a:19:01:55:aa:70:38:
d7:f8:f0:5d:09:9b:f1:c4:4a:56:e2:cc:5f:c0:f6:6a:09:6a:
13:63:ff:00:61:9c:28:5e:14:a5:27:5f:59:7c:81:e1:c6:b2:
f0:a2:7b:32:ab:49:c3:b4:ca:eb:ad:48:e7:96:ff:87:ad:cb:
e5:35:01:29:f2:84:97:fa:44:0e:b8:bd:db:b1:9a:d9:93:85:
68:d8:c4:58:dc:a2:0a:97:3c:59:8c:a7:ee:b5:8b:69:ed:ce:
03:ed:d5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:19:35 2025 by rpki-client