This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/38360112C3EB11F080C9980DC4F9AE02.roa
File: 38360112C3EB11F080C9980DC4F9AE02.roa (raw, json)
Hash identifier: XqYyZyrqJ9BamfB85dIngxi60ilbd+EHlah+RvSpOvo=
Subject key identifier: 2C:61:AF:4D:4D:DC:1A:6C:81:E7:6D:43:79:D2:6D:38:AB:76:30:C4
Certificate issuer: /CN=A915D1A2/serialNumber=6F4F468E4308B00D0DF5FEAC842866D54E77F5D3
Certificate serial: 0CC7
Authority key identifier: 6F:4F:46:8E:43:08:B0:0D:0D:F5:FE:AC:84:28:66:D5:4E:77:F5:D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b09GjkMIsA0N9f6shChm1U539dM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/38360112C3EB11F080C9980DC4F9AE02.roa
Signing time: Mon 17 Nov 2025 19:25:48 +0000
ROA not before: Mon 17 Nov 2025 19:25:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137530
IP address blocks: 103.112.56.0/24 maxlen: 24
103.112.57.0/24 maxlen: 24
103.112.58.0/24 maxlen: 24
103.112.59.0/24 maxlen: 24
2402:a540:56::/48 maxlen: 48
2402:a540:57::/48 maxlen: 48
2402:a540:58::/48 maxlen: 48
2402:a540:59::/48 maxlen: 48
2402:a540:156::/48 maxlen: 48
2402:a540:157::/48 maxlen: 48
2402:a540:158::/48 maxlen: 48
2402:a540:159::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.crl
rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b09GjkMIsA0N9f6shChm1U539dM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 17:49:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3271 (0xcc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D1A2, serialNumber=6F4F468E4308B00D0DF5FEAC842866D54E77F5D3
Validity
Not Before: Nov 17 19:25:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=691b76bb-4678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c3:32:0d:b9:cd:ed:97:ea:4b:84:ae:e0:ea:
ea:2f:e9:33:de:75:9b:e3:fd:75:63:01:02:88:10:
3f:ae:9f:10:a8:2d:0e:25:50:6f:17:cb:21:7f:b8:
3f:f5:9e:da:1c:01:79:dd:d9:fa:97:68:05:0a:c6:
8e:1f:f2:1f:d9:fe:c2:b3:ac:a3:27:2e:e2:84:88:
6e:f3:17:a5:c3:5a:5a:96:36:72:26:b1:0a:db:9c:
0e:99:04:25:ae:67:cd:d5:fa:10:36:77:80:7f:5c:
e0:a7:3e:0c:2a:db:ce:f9:a1:ac:47:0c:00:16:fb:
28:7d:e7:e6:5b:a9:ac:f6:b3:bc:2a:9c:c9:9a:76:
e8:3a:d9:b2:0b:9b:8f:24:22:02:b5:0f:bb:ef:de:
79:42:2b:54:b4:17:5d:78:f2:f8:86:04:87:ba:64:
b8:b2:5e:d2:94:e3:16:6a:f9:dc:98:0f:e2:74:61:
d8:c4:8e:86:7c:5d:04:e1:57:01:21:60:9b:ef:78:
1d:fe:e6:c1:53:4d:45:01:c0:fd:ba:86:9b:21:c3:
ec:8a:a6:38:23:41:bc:ca:66:54:1c:d0:a3:7f:d3:
79:2f:e8:ad:d5:5a:d5:a5:5a:f7:be:62:1c:43:91:
08:ac:9f:76:fa:c0:86:9a:50:7b:13:d8:f3:eb:ed:
b6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:61:AF:4D:4D:DC:1A:6C:81:E7:6D:43:79:D2:6D:38:AB:76:30:C4
X509v3 Authority Key Identifier:
keyid:6F:4F:46:8E:43:08:B0:0D:0D:F5:FE:AC:84:28:66:D5:4E:77:F5:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b09GjkMIsA0N9f6shChm1U539dM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/38360112C3EB11F080C9980DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.112.56.0/22
IPv6:
2402:a540:56::-2402:a540:59:ffff:ffff:ffff:ffff:ffff
2402:a540:156::-2402:a540:159:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
13:d2:96:81:a2:5e:c1:9a:fc:57:07:71:5e:81:44:c4:03:82:
ef:30:e4:98:9e:78:7e:a8:f3:59:0f:0d:cd:56:ed:3b:86:c0:
45:24:2f:10:dd:ba:85:9f:b5:2f:48:5f:6e:8e:0a:5a:86:64:
f0:c7:7b:c1:0f:49:ea:0f:14:18:ea:e0:1a:23:f0:ec:f5:6c:
48:5c:84:ac:7c:b8:86:82:bf:e2:07:0a:2b:25:10:ec:f8:b1:
9e:23:de:bc:1d:87:d6:ff:33:86:e5:42:82:c5:87:60:6f:ea:
c1:3b:ff:00:f1:65:eb:47:a4:e7:3d:36:8f:d2:6e:07:f5:1f:
eb:2b:46:8d:89:16:4e:16:b1:a2:7d:22:f7:61:84:04:fa:b2:
5f:d2:f2:50:02:99:f4:22:08:3c:79:d4:bd:ce:01:1f:f1:8a:
be:04:8e:be:2a:a3:8b:f3:75:b6:6e:e0:de:cb:d3:4f:43:ff:
20:e6:22:ac:ef:f7:4e:94:97:87:3c:2f:35:11:2f:e4:48:fe:
f1:28:62:64:fe:e9:e4:e3:82:dd:d7:72:76:e2:78:6b:43:e1:
35:f1:cb:97:0b:8c:88:d3:6b:ad:9a:04:97:01:c1:68:bf:7e:
53:91:55:3b:e8:4c:ae:c9:d0:94:62:e6:8c:18:f8:b9:14:e1:
5a:53:9e:00
-----BEGIN CERTIFICATE-----
MIIFoTCCBImgAwIBAgICDMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUQxQTIxMTAvBgNVBAUTKDZGNEY0NjhFNDMwOEIwMEQwREY1RkVBQzg0Mjg2NkQ1
NEU3N0Y1RDMwHhcNMjUxMTE3MTkyNTQ4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTFiNzZiYi00Njc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwsMyDbnN7ZfqS4Su4OrqL+kz3nWb4/11YwECiBA/rp8QqC0OJVBvF8shf7g/
9Z7aHAF53dn6l2gFCsaOH/If2f7Cs6yjJy7ihIhu8xelw1paljZyJrEK25wOmQQl
rmfN1foQNneAf1zgpz4MKtvO+aGsRwwAFvsofefmW6ms9rO8KpzJmnboOtmyC5uP
JCICtQ+77955QitUtBddePL4hgSHumS4sl7SlOMWavncmA/idGHYxI6GfF0E4VcB
IWCb73gd/ubBU01FAcD9uoabIcPsiqY4I0G8ymZUHNCjf9N5L+it1VrVpVr3vmIc
Q5EIrJ92+sCGmlB7E9jz6+22LQIDAQABo4ICxTCCAsEwHQYDVR0OBBYEFCxhr01N
3BpsgedtQ3nSbTirdjDEMB8GA1UdIwQYMBaAFG9PRo5DCLANDfX+rIQoZtVOd/XT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDFBMi9ERkQxMUYyODA2
QTYxMUVBODk3NUUzNDFDNEY5QUUwMi9iMDlHamtNSXNBME45ZjZzaENobTFVNTM5
ZE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2IwOUdqa01Jc0EwTjlmNnNoQ2htMVU1MzlkTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUQxQTIvREZEMTFGMjgwNkE2MTFFQTg5NzVFMzQxQzRGOUFFMDIvMzgzNjAxMTJD
M0VCMTFGMDgwQzk5ODBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTwYIKwYBBQUHAQcBAf8E
QDA+MAwEAgABMAYDBAJncDgwLgQCAAIwKDASAwcBJAKlQABWAwcBJAKlQABYMBID
BwEkAqVAAVYDBwEkAqVAAVgwDQYJKoZIhvcNAQELBQADggEBABPSloGiXsGa/FcH
cV6BRMQDgu8w5JieeH6o81kPDc1W7TuGwEUkLxDduoWftS9IX26OClqGZPDHe8EP
SeoPFBjq4Boj8Oz1bEhchKx8uIaCv+IHCislEOz4sZ4j3rwdh9b/M4blQoLFh2Bv
6sE7/wDxZetHpOc9No/Sbgf1H+srRo2JFk4WsaJ9IvdhhAT6sl/S8lACmfQiCDx5
1L3OAR/xir4Ejr4qo4vzdbZu4N7L009D/yDmIqzv906Ul4c8LzURL+RI/vEoYmT+
6eTjgt3XcnbieGtD4TXxy5cLjIjTa62aBJcBwWi/flORVTvoTK7J0JRi5owY+LkU
4VpTngA=
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:19:24 2025 by rpki-client