This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/E0039822DDDD11EF84C13A22C4F9AE02.roa
File: E0039822DDDD11EF84C13A22C4F9AE02.roa (raw, json)
Hash identifier: lbNcfGSFcHGLdiGqKxJXuzYk9QV0WuySnsT7ZvlBLqg=
Subject key identifier: CE:02:55:60:43:09:D2:6B:F1:B0:02:D2:47:CE:85:39:39:56:14:A7
Certificate issuer: /CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
Certificate serial: 0AAB
Authority key identifier: 74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/E0039822DDDD11EF84C13A22C4F9AE02.roa
Signing time: Sat 08 Nov 2025 19:40:24 +0000
ROA not before: Sat 08 Nov 2025 19:40:24 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 24129
IP address blocks: 116.255.41.0/24 maxlen: 24
116.255.43.0/24 maxlen: 24
116.255.44.0/24 maxlen: 24
116.255.48.0/24 maxlen: 24
116.255.50.0/24 maxlen: 24
116.255.53.0/24 maxlen: 24
203.10.77.0/24 maxlen: 24
203.27.116.0/24 maxlen: 24
223.27.64.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl
rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 19:38:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2731 (0xaab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E475, serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
Validity
Not Before: Nov 8 19:40:24 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=690f9ca7-8955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c5:fe:8b:35:36:34:88:30:f4:66:cf:3e:25:
a4:6b:5d:75:eb:59:94:93:80:38:1e:92:b6:00:ab:
cf:3c:96:0e:93:43:ef:78:34:02:25:95:de:79:52:
2f:4e:73:26:34:1d:16:98:ee:05:d3:ac:f0:f3:82:
60:d8:65:0b:f8:9a:28:f5:c6:8f:83:29:86:ba:b3:
0a:b8:89:a1:2b:cc:39:fe:20:e7:8f:20:98:2d:6f:
5d:80:9c:92:f9:bb:e6:64:28:b6:4e:ec:84:c7:8d:
82:a0:b4:9c:9e:3a:e9:0b:8d:db:91:0c:ca:fa:41:
e6:d7:45:a8:64:5e:aa:5f:9f:b6:d9:07:f1:62:4c:
a0:e4:3e:cb:47:42:a3:b5:35:8a:b3:ec:f3:6a:fd:
ef:68:e9:87:c2:67:ee:4f:ff:ed:0c:6d:21:59:8f:
1b:54:ce:4c:61:97:c6:c6:b2:28:55:36:7a:9a:4b:
80:a0:8f:32:76:11:08:a4:56:5f:39:c8:10:e9:03:
20:9c:ee:b8:08:fb:29:b1:df:54:c5:2b:c5:ec:e2:
42:c7:81:15:fb:e9:f1:20:b8:15:bd:ee:87:9f:9a:
2c:fb:07:8e:9b:ec:2f:b1:ec:0d:1d:c8:42:88:54:
47:19:bd:df:aa:a0:2b:c0:dc:db:0b:d8:5d:a6:b3:
39:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:02:55:60:43:09:D2:6B:F1:B0:02:D2:47:CE:85:39:39:56:14:A7
X509v3 Authority Key Identifier:
keyid:74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/E0039822DDDD11EF84C13A22C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.255.41.0/24
116.255.43.0-116.255.44.255
116.255.48.0/24
116.255.50.0/24
116.255.53.0/24
203.10.77.0/24
203.27.116.0/24
223.27.64.0/23
Signature Algorithm: sha256WithRSAEncryption
da:0c:4c:04:b6:1a:fa:c7:fd:75:fc:ae:7a:85:75:c3:25:a4:
10:7d:a3:e9:3e:be:a6:eb:fb:77:3c:33:cc:0e:1d:ad:88:98:
0b:e3:dc:ea:c9:6d:01:91:0f:ae:51:d7:79:1e:66:d9:f5:3d:
cc:a7:22:6f:21:dd:db:a1:67:fe:65:e8:f3:41:a9:97:c4:14:
17:0b:f0:bb:cb:02:b3:f4:89:82:61:c5:ae:89:cd:42:0a:ad:
a1:6e:57:68:89:de:15:a0:da:3c:d1:59:96:41:f9:9d:55:bc:
60:70:2b:a0:0d:fc:87:90:03:b9:8f:68:68:79:2e:f5:14:48:
24:4b:46:2e:b4:46:2e:e7:b1:d2:61:61:24:aa:32:1b:53:31:
e6:2e:14:93:f9:db:f0:72:83:ee:08:1a:75:90:6f:25:8a:52:
0d:42:cb:b1:7d:96:d9:53:64:3c:54:06:1f:d8:dd:3f:3a:52:
99:5f:3c:9f:17:8c:de:5d:a1:5b:ca:89:c9:2f:98:2a:75:61:
12:67:06:e0:ae:b5:2d:b3:c0:70:f9:36:a4:5f:99:21:3b:58:
06:db:fc:69:0a:af:34:8f:c2:8c:da:8f:83:42:67:e2:b8:94:
29:49:31:ee:bf:57:35:39:9e:b2:2e:a5:1e:0c:46:e9:b3:46:
06:c1:ac:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:17:32 2025 by rpki-client