This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/93441F8211CB11EEB8151734C4F9AE02.roa
File: 93441F8211CB11EEB8151734C4F9AE02.roa (raw, json)
Hash identifier: Vktc7b/W/qyCDQCLU/0lBgnB36d7rVRYjTdYFnrUKeM=
Subject key identifier: FE:9C:37:97:B7:3B:E9:A0:CA:2B:12:00:C8:31:00:3B:1B:F3:31:26
Certificate issuer: /CN=A915BF76/serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
Certificate serial: 355E
Authority key identifier: 63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/93441F8211CB11EEB8151734C4F9AE02.roa
Signing time: Sun 30 Nov 2025 15:11:17 +0000
ROA not before: Sun 30 Nov 2025 15:11:17 +0000
ROA not after: Mon 30 Mar 2026 00:00:00 +0000
asID: 21859
IP address blocks: 103.21.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl
rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:09:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13662 (0x355e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BF76, serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
Validity
Not Before: Nov 30 15:11:17 2025 GMT
Not After : Mar 30 00:00:00 2026 GMT
Subject: CN=692c5e95-ce70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a6:5b:ce:36:e0:95:4c:eb:35:43:2c:20:d6:
45:43:bc:fd:f9:8f:ed:3a:17:0f:c7:58:db:a5:87:
f7:e2:50:6c:5c:1f:f6:de:05:fb:dc:88:a0:b5:40:
9b:47:1f:81:95:27:42:a0:9a:42:dd:bb:e7:ad:f6:
2f:9d:85:22:24:e5:9c:36:b3:63:4c:6d:61:79:26:
22:03:77:fa:53:14:1c:b7:c5:9b:ff:a2:52:9d:c8:
62:9c:48:65:27:74:8e:98:79:68:ab:f2:5a:4b:df:
41:b9:02:2c:cb:65:55:fa:67:19:0b:00:b0:c3:87:
cf:c8:30:e5:d9:33:2a:6d:9e:eb:bc:75:e2:8b:b3:
2e:b8:c7:e7:c9:2b:8b:7f:90:82:4f:b3:82:47:f3:
a2:f1:b2:0f:cf:39:34:9b:11:1d:65:74:ce:f5:66:
06:de:71:09:c5:42:f7:92:57:5f:ba:15:85:9a:da:
a4:1e:a1:3c:f8:b0:07:70:8d:f5:54:8a:53:1c:b5:
89:3b:76:bc:2e:39:97:c0:9d:fa:43:8a:df:00:09:
c4:53:2d:8b:07:5b:6e:53:46:8c:1f:f5:8b:fd:42:
8a:ee:4e:60:33:5b:98:51:dd:60:19:c8:44:ec:cb:
5f:49:3c:f5:5b:0a:b6:8e:ef:d8:c3:ac:f8:9d:02:
a4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:9C:37:97:B7:3B:E9:A0:CA:2B:12:00:C8:31:00:3B:1B:F3:31:26
X509v3 Authority Key Identifier:
keyid:63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/93441F8211CB11EEB8151734C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.21.138.0/24
Signature Algorithm: sha256WithRSAEncryption
04:24:d3:d7:ab:88:b5:7c:32:c6:ae:2c:e4:f6:20:22:ac:3f:
9c:10:8d:fd:e0:79:89:74:14:74:c8:05:e1:45:93:48:b2:27:
ce:cf:7a:5f:4e:d4:6f:dc:38:40:76:79:3a:2c:4e:8a:40:cd:
d8:e3:35:ad:90:a4:3b:d6:3f:14:b6:45:7f:5a:f2:9e:a0:64:
68:47:57:15:72:64:b5:f8:62:cc:ac:87:f9:ea:15:5c:5e:4c:
58:d0:e9:8a:0f:67:aa:a1:be:4b:ec:f8:d9:4d:2b:53:fc:43:
b8:cb:ba:21:b4:6b:56:33:9c:2d:43:31:81:c4:8d:86:62:be:
af:6d:f7:fe:54:3c:a8:ac:ac:fc:eb:70:da:cf:95:ab:aa:5f:
58:b3:44:2b:62:eb:84:69:da:ad:3d:13:58:f5:9c:73:7b:3f:
8f:55:0f:ef:1b:19:73:5a:40:c8:e6:da:46:07:30:ad:1d:3a:
7a:4c:58:77:b5:e5:7c:77:8c:77:b0:6c:90:dc:63:a9:79:1c:
ff:76:e4:bc:00:04:73:d0:17:f5:1f:63:cd:3d:2f:b0:7a:e1:
58:8e:6c:ba:54:b7:a0:45:ee:6e:45:5e:b5:77:24:c5:66:b4:
5c:61:34:3e:fb:0a:49:3b:5c:b9:e6:f1:29:76:d5:73:ef:42:
ec:18:f2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:24:12 2025 by rpki-client