This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/8D6AE850AD3911F0992C7B7CC4F9AE02.roa
File: 8D6AE850AD3911F0992C7B7CC4F9AE02.roa (raw, json)
Hash identifier: y0Rm6jcN2MRyG4F58GapbPK7TstkLchGmKqdVJWxG0c=
Subject key identifier: 76:4A:FF:E4:77:0D:B1:E5:A2:D2:7B:17:F1:23:80:42:96:9D:A4:4A
Certificate issuer: /CN=A915BF76/serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
Certificate serial: 3561
Authority key identifier: 63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/8D6AE850AD3911F0992C7B7CC4F9AE02.roa
Signing time: Sun 30 Nov 2025 15:11:19 +0000
ROA not before: Sun 30 Nov 2025 15:11:19 +0000
ROA not after: Mon 30 Mar 2026 00:00:00 +0000
asID: 9304
IP address blocks: 103.21.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl
rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 15:07:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13665 (0x3561)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BF76, serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
Validity
Not Before: Nov 30 15:11:19 2025 GMT
Not After : Mar 30 00:00:00 2026 GMT
Subject: CN=692c5e97-fa5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:51:68:35:16:5a:9e:84:af:ae:10:38:99:ff:
42:5e:c4:c7:71:60:1a:5f:4e:11:87:88:5d:a3:34:
5e:38:f9:87:46:5c:32:73:fe:24:13:17:68:29:69:
2c:67:85:97:26:29:74:38:77:ba:af:6a:7d:f3:12:
7c:bf:6e:8d:1a:1c:59:c0:a3:05:f8:e6:ee:a3:74:
c3:7f:f4:65:8c:ae:7d:c1:6b:9a:9e:b9:dd:0f:d7:
56:7f:55:ad:05:68:00:17:bd:0b:bc:47:02:e9:2a:
1b:70:17:2f:e4:95:89:89:62:4f:6a:bd:05:97:bf:
ff:d1:1d:09:c9:74:9b:e0:df:8a:fd:d1:68:71:9b:
98:40:f8:0f:9a:8e:cf:9a:a4:5e:a0:eb:ed:5c:9c:
cb:54:e6:e8:7b:fc:81:4a:c8:7b:6d:0f:63:30:7e:
34:da:3c:c6:f1:ed:de:f7:b9:90:c5:57:25:83:97:
12:5f:bc:82:cf:c5:1f:fa:dc:ac:1b:c9:d9:b0:f4:
2b:9f:fe:87:d5:ff:34:fa:46:e2:fb:2b:98:ae:64:
6d:04:d3:78:6d:5a:5e:66:ec:fe:11:06:14:64:7a:
c7:5f:e6:4e:21:c6:ab:ee:13:79:8e:83:bb:de:7f:
c3:a0:5e:f9:5d:0e:5e:95:9c:10:a3:4b:0c:bd:8b:
96:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:4A:FF:E4:77:0D:B1:E5:A2:D2:7B:17:F1:23:80:42:96:9D:A4:4A
X509v3 Authority Key Identifier:
keyid:63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/8D6AE850AD3911F0992C7B7CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.21.137.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:7f:dc:23:63:d1:ce:a4:dd:34:4f:92:2d:d2:9c:8a:0f:2e:
c0:82:01:93:38:9c:1b:c1:2a:e7:cc:ab:7e:2d:a5:60:4e:ae:
8d:08:ee:ca:13:eb:bc:a8:4e:bc:82:ef:ef:0f:54:85:1b:ff:
69:72:13:d6:a5:f9:11:9e:ef:e3:0a:65:ba:7a:35:a4:d0:d1:
b3:bd:c0:c8:d7:9e:e0:ee:37:b5:2f:71:e3:8e:35:6a:35:51:
04:b4:22:63:60:91:b9:98:fa:29:01:85:c8:d6:a8:06:ee:68:
b8:d7:03:ec:59:67:e8:89:2f:e0:20:d6:6f:65:89:8a:b2:a6:
d5:5a:ad:f8:77:bf:57:cb:95:cc:49:37:ea:7b:f1:9d:64:14:
f2:df:af:f9:49:9f:42:1d:2a:36:ee:e5:e3:ef:c8:34:1c:2e:
dd:29:45:b8:f1:de:bd:37:a9:c8:3a:64:c5:07:74:57:d2:94:
33:c1:ae:36:4e:60:5a:a8:2b:19:83:cb:a2:ca:2b:76:13:f0:
61:e1:70:52:b8:10:3e:82:4b:8a:55:23:7e:7c:20:04:c8:37:
dc:46:2e:3b:1b:d7:a4:0e:e1:3f:60:f5:f3:1a:b2:2a:45:4e:
de:03:f8:96:5b:fa:45:f0:86:1d:d1:47:86:ca:50:1f:05:21:
7a:74:1c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:54:48 2025 by rpki-client