This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F55C/349800BE633611EDA64FD944C4F9AE02/35C34054633911ED97F86846C4F9AE02.roa
File: 35C34054633911ED97F86846C4F9AE02.roa (raw, json)
Hash identifier: Ig8a1AFnXSki3ZJ7EoxDrLnednOmb0T7taRKJZuJWIc=
Subject key identifier: 17:F4:AC:4B:6C:F8:5B:C2:7F:E5:BF:64:B9:1D:90:68:7F:78:3A:F7
Certificate issuer: /CN=A915F55C/serialNumber=27DA0054CFBAB3E3DB063FC23D335B37B89E4195
Certificate serial: 023E
Authority key identifier: 27:DA:00:54:CF:BA:B3:E3:DB:06:3F:C2:3D:33:5B:37:B8:9E:41:95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J9oAVM-6s-PbBj_CPTNbN7ieQZU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F55C/349800BE633611EDA64FD944C4F9AE02/35C34054633911ED97F86846C4F9AE02.roa
Signing time: Thu 27 Nov 2025 00:18:20 +0000
ROA not before: Thu 27 Nov 2025 00:18:20 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 149829
IP address blocks: 103.21.222.0/23 maxlen: 23
103.21.222.0/24 maxlen: 24
103.21.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915F55C/349800BE633611EDA64FD944C4F9AE02/J9oAVM-6s-PbBj_CPTNbN7ieQZU.crl
rsync://rpki.apnic.net/member_repository/A915F55C/349800BE633611EDA64FD944C4F9AE02/J9oAVM-6s-PbBj_CPTNbN7ieQZU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J9oAVM-6s-PbBj_CPTNbN7ieQZU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 00:22:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 574 (0x23e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F55C, serialNumber=27DA0054CFBAB3E3DB063FC23D335B37B89E4195
Validity
Not Before: Nov 27 00:18:20 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=692798cc-e33a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e4:5b:8d:03:3b:f1:80:31:e2:af:44:06:f5:
0a:a6:6e:2f:ee:e0:d5:27:6e:23:e2:9f:15:da:84:
35:26:e2:4b:83:35:e5:68:c2:b0:e8:67:26:70:f7:
e8:62:1e:f3:c8:28:33:67:d3:6c:9c:f0:cc:6c:89:
dd:7a:fe:a6:e0:5e:a0:ec:40:39:58:ca:f7:ba:9a:
86:0e:2e:47:c7:44:ee:23:b8:0b:74:bc:22:2b:a1:
c2:59:9c:9c:72:d8:04:49:b8:a7:63:b1:ad:36:3a:
10:22:dd:b4:c3:cc:0a:d4:dd:62:7c:09:0e:e6:8e:
75:06:d8:66:8a:47:46:88:06:c3:ee:9d:25:79:13:
04:a1:fb:09:4a:55:d0:d0:8c:3b:5e:93:a9:fa:62:
55:f8:8e:f1:fb:00:87:82:db:80:1c:2a:f2:48:c1:
42:66:42:6c:bd:a0:fd:4c:95:0e:8c:82:36:c4:85:
1c:c5:cd:36:8a:df:9a:20:f0:b6:26:fa:73:f6:58:
43:48:e3:ce:7e:6b:42:2e:4a:fa:a5:9a:b1:89:18:
4f:a6:1d:78:dc:2a:e9:7e:ae:8d:23:62:ed:f1:d3:
4d:82:1c:f7:7f:3c:53:1f:1d:72:ed:00:fb:48:b1:
52:53:c8:bd:fd:f6:a6:6f:2d:01:e1:d7:02:21:db:
b1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F4:AC:4B:6C:F8:5B:C2:7F:E5:BF:64:B9:1D:90:68:7F:78:3A:F7
X509v3 Authority Key Identifier:
keyid:27:DA:00:54:CF:BA:B3:E3:DB:06:3F:C2:3D:33:5B:37:B8:9E:41:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F55C/349800BE633611EDA64FD944C4F9AE02/J9oAVM-6s-PbBj_CPTNbN7ieQZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J9oAVM-6s-PbBj_CPTNbN7ieQZU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F55C/349800BE633611EDA64FD944C4F9AE02/35C34054633911ED97F86846C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.21.222.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:ef:94:b4:54:4f:66:88:bb:39:e9:cf:91:bc:50:0f:75:f9:
f5:5d:e0:af:88:42:4a:fd:de:c9:06:f7:e3:94:f9:3d:bc:69:
8e:88:dd:86:c5:dd:12:5e:b7:fe:d1:c1:9c:1e:ff:e2:dd:df:
30:90:ad:3c:3d:78:83:64:d2:80:af:a3:9b:8a:2e:d7:ea:fd:
a1:ee:50:8d:9f:18:4f:9a:a7:e3:87:e2:b5:12:f8:7f:11:63:
d2:db:d9:f1:98:0a:e3:c8:01:e7:cf:27:43:09:cc:31:a1:91:
10:0a:29:19:9e:09:23:ec:ec:93:2a:31:d6:1f:7f:05:af:54:
42:7c:26:0e:16:c7:1d:32:44:72:2f:80:7e:63:ba:d3:b6:e3:
a2:77:68:8d:fd:7e:93:70:2d:bf:93:0f:6b:f2:85:43:a6:d0:
dd:af:f1:35:2c:c4:07:79:7a:9d:88:38:f8:a8:c6:ad:af:c3:
0b:6f:74:1e:27:ee:36:43:45:d3:2f:06:98:c5:1d:12:e3:c1:
3f:ba:57:1d:ab:b5:ac:2b:f8:85:c0:ff:bd:4a:18:ae:21:8f:
03:51:86:25:08:15:10:57:ed:2c:27:04:75:46:03:10:cd:42:
3a:fd:f5:04:cf:c8:49:f4:d7:8a:46:62:14:1d:a6:55:76:b2:
85:db:a1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:46:28 2025 by rpki-client