This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/5637146C507611EDB59D9E2EC4F9AE02.roa
File: 5637146C507611EDB59D9E2EC4F9AE02.roa (raw, json)
Hash identifier: IYazKEF9pFwcNLUhIv47rtL28xMCsqpjMCPhr8mxAvo=
Subject key identifier: 20:A1:63:01:0F:E8:59:3D:40:67:A4:34:73:96:A6:30:10:BE:D1:EE
Certificate issuer: /CN=A9156255/serialNumber=5F6C8FA3A658740231B2C4B13481BE11500ADC76
Certificate serial: 0246
Authority key identifier: 5F:6C:8F:A3:A6:58:74:02:31:B2:C4:B1:34:81:BE:11:50:0A:DC:76
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/5637146C507611EDB59D9E2EC4F9AE02.roa
Signing time: Sat 15 Nov 2025 00:17:26 +0000
ROA not before: Sat 15 Nov 2025 00:17:26 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 142420
IP address blocks: 103.12.96.0/23 maxlen: 23
2001:df1:69c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.crl
rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 582 (0x246)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156255, serialNumber=5F6C8FA3A658740231B2C4B13481BE11500ADC76
Validity
Not Before: Nov 15 00:17:26 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6917c695-184c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fc:54:22:80:6d:e8:10:3e:9d:33:90:b1:05:
bd:54:49:60:07:a9:3f:b6:30:84:bb:db:8b:22:d9:
6e:7a:ca:ff:32:38:72:ba:a7:86:01:7e:14:30:90:
4a:fb:67:97:08:61:4d:cc:dc:9f:81:48:7c:8f:81:
83:76:67:29:e3:ad:f5:77:ce:fa:63:df:75:a7:df:
f0:9d:13:3e:35:f1:97:f9:ae:ba:f9:5a:23:95:c0:
3c:40:ec:27:72:4b:a4:ee:99:c3:41:57:98:82:36:
5f:5f:70:b0:b0:e0:b5:5f:36:53:98:c5:07:76:8b:
65:43:4f:02:7f:d0:09:a6:13:13:3d:be:bb:03:3f:
6c:e6:c1:60:28:db:67:82:c7:d9:68:92:61:48:ad:
78:d6:5e:b0:9d:58:7d:f9:a5:32:23:90:61:75:6d:
d2:99:07:c7:81:ae:b7:09:c6:50:c1:6e:0a:6d:4b:
3f:5e:d8:ac:4f:57:26:b6:0d:23:d9:d3:f2:ee:4b:
01:aa:4b:b1:31:7e:3b:d1:ae:40:2e:39:c5:c9:a9:
26:85:ae:b1:bb:7c:fa:4a:e4:2e:02:f9:b5:07:3d:
56:15:59:1d:9b:f9:78:b9:be:1f:f3:22:34:c4:81:
1f:e0:45:52:af:61:6d:09:b6:78:87:f6:02:b6:49:
60:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A1:63:01:0F:E8:59:3D:40:67:A4:34:73:96:A6:30:10:BE:D1:EE
X509v3 Authority Key Identifier:
keyid:5F:6C:8F:A3:A6:58:74:02:31:B2:C4:B1:34:81:BE:11:50:0A:DC:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/5637146C507611EDB59D9E2EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.12.96.0/23
IPv6:
2001:df1:69c0::/48
Signature Algorithm: sha256WithRSAEncryption
93:44:47:68:4f:24:53:10:41:a0:41:d6:ff:44:89:ab:05:e0:
7e:84:b8:a6:26:53:e5:3e:40:f6:4d:db:7b:0c:60:8d:3d:7c:
ab:6e:a1:79:c0:73:b4:2b:47:75:aa:36:36:71:44:4d:43:e8:
77:b2:b9:66:09:8c:8d:c6:6a:60:b9:93:43:32:d4:8f:51:a4:
cf:4e:93:d1:00:d2:57:dd:e6:19:73:2a:be:b4:72:80:5a:6b:
7f:02:3c:a4:e9:48:9b:e8:57:28:22:a8:af:db:e0:0e:7b:32:
39:6d:03:4c:71:11:fd:3d:a8:b5:ba:74:36:66:6b:f2:7d:f9:
fe:07:8f:ee:44:87:6b:a0:99:e4:4c:a7:e4:55:74:d3:ed:20:
9e:3a:21:f0:e7:db:08:1f:5d:1e:74:01:35:51:46:60:d4:00:
b6:4f:79:80:a2:b4:af:dd:38:37:25:a0:ee:54:a9:42:2a:57:
dc:dd:ce:b6:3f:83:f5:9b:16:7c:d1:4a:3d:d5:06:fc:a7:08:
91:1e:a0:ca:bb:5a:2e:2e:eb:c3:dc:bb:6d:44:d5:f4:72:68:
c8:a0:68:69:29:8b:45:42:76:75:0d:e6:54:70:58:ea:d9:aa:
22:76:1d:76:3a:15:43:a5:30:13:fe:97:b1:d1:10:c5:a7:e3:
e1:90:99:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:23:31 2025 by rpki-client