This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/4E6E940C612211EB8166284BC4F9AE02.roa
File: 4E6E940C612211EB8166284BC4F9AE02.roa (raw, json)
Hash identifier: a5J9PDQVvcHeLKxKb14WDmG3jv/OMTIc+XWYxdwGt6o=
Subject key identifier: 77:5F:5B:1B:F8:EA:19:7B:19:A4:14:85:B7:AC:18:AE:CA:1F:C8:33
Certificate issuer: /CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
Certificate serial: 0AA8
Authority key identifier: 74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/4E6E940C612211EB8166284BC4F9AE02.roa
Signing time: Sat 08 Nov 2025 19:40:21 +0000
ROA not before: Sat 08 Nov 2025 19:40:21 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 17829
IP address blocks: 119.15.72.0/24 maxlen: 24
119.15.73.0/24 maxlen: 24
119.15.74.0/24 maxlen: 24
119.15.75.0/24 maxlen: 24
119.15.76.0/24 maxlen: 24
119.15.77.0/24 maxlen: 24
119.15.78.0/24 maxlen: 24
119.15.79.0/24 maxlen: 24
125.253.52.0/23 maxlen: 23
203.32.82.0/24 maxlen: 24
203.33.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl
rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 19:38:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2728 (0xaa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E475, serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
Validity
Not Before: Nov 8 19:40:21 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=690f9ca4-e9fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ed:3f:5a:2d:e7:b8:73:08:cc:af:68:b9:10:
9f:27:28:76:96:50:ec:e6:fb:b4:16:4e:c1:fc:f9:
4a:7a:12:b4:bc:cc:fe:94:72:87:1f:d5:59:8a:b3:
7d:e6:46:8a:6e:b8:3f:80:7b:5e:d6:ab:59:9e:c7:
fd:74:b4:55:65:4e:0a:63:51:7b:db:49:89:06:0e:
f1:af:47:c6:f1:f4:8b:e2:69:b2:86:7e:8a:0a:66:
ac:27:53:d4:83:f6:e7:52:26:26:60:c3:4d:04:43:
e9:b5:f7:78:06:b1:f1:d0:20:f4:9b:1d:30:82:d1:
19:c2:8d:d0:41:e6:21:97:c4:b6:f4:11:89:96:47:
7f:ba:7f:87:75:05:71:c1:99:82:a8:a6:d3:33:08:
63:5e:fa:dd:02:81:da:2b:69:36:8b:82:2b:d5:fe:
4e:d6:00:20:31:32:98:56:51:71:cf:e1:99:29:77:
dd:c3:e2:ce:7c:6c:67:ba:7f:c5:dc:f7:95:d1:f4:
66:fa:51:17:8e:fd:02:93:0e:da:10:ee:0d:b0:0b:
4a:f0:f2:1d:38:72:1e:e4:13:21:e1:00:f3:86:45:
8a:70:df:d3:eb:a0:63:b7:7d:97:b8:0d:5e:cb:b2:
09:d5:a7:97:d0:bc:04:88:2c:0c:66:c0:52:10:1e:
38:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5F:5B:1B:F8:EA:19:7B:19:A4:14:85:B7:AC:18:AE:CA:1F:C8:33
X509v3 Authority Key Identifier:
keyid:74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/4E6E940C612211EB8166284BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
119.15.72.0/21
125.253.52.0/23
203.32.82.0/24
203.33.254.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:3e:a7:d7:fa:15:5b:50:d0:2a:a3:06:cc:33:be:69:68:a6:
f6:39:8e:eb:c2:89:b7:17:42:b4:73:fd:46:67:1d:eb:3a:f0:
22:15:d4:88:a3:b3:6e:49:6f:2e:c2:92:1c:34:72:12:94:a2:
18:76:f0:a7:3c:fa:42:df:e7:44:33:a5:fc:01:c1:96:2b:ac:
d7:00:78:de:10:5e:64:09:89:75:09:c3:d5:a1:3c:9e:2a:c2:
b0:f2:8b:28:fb:93:47:9d:86:dd:4a:3d:ab:96:af:e1:59:ce:
d6:b5:f3:b1:e7:c2:57:6b:7e:89:fd:11:e8:10:94:01:20:6e:
5a:45:c4:d7:05:fd:f3:33:e3:ef:99:51:1b:31:78:77:48:27:
30:a6:e0:0c:82:d0:ce:1b:cc:02:fa:4b:3e:f7:9d:98:dc:94:
c2:85:4b:b6:d7:b1:f4:48:e0:b0:89:7f:da:ff:96:52:47:7a:
06:8f:9a:5c:5c:63:43:9a:a5:82:fd:4e:29:35:66:4d:e4:62:
a3:9f:7a:e5:be:10:3c:9a:c6:e1:ae:7d:ed:16:14:d6:22:f1:
d3:70:fc:cd:3a:52:4a:db:19:5c:da:01:95:5b:99:3e:43:d9:
d2:d4:45:3a:28:98:30:74:b2:8a:f0:92:d5:38:84:69:f9:ae:
16:93:85:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:17:44 2025 by rpki-client