This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/36F199B80D1311EBB2726077C4F9AE02.roa
File: 36F199B80D1311EBB2726077C4F9AE02.roa (raw, json)
Hash identifier: XOu+NGz3wCBtpV1QSlFKSlK/61FIlkWvOgRrc8L4ZLk=
Subject key identifier: 43:9E:D3:7C:45:AC:E8:7E:DA:52:4A:86:8E:BF:34:C4:D3:90:12:0D
Certificate issuer: /CN=A9160BEB/serialNumber=225CDB0BEED52F515051F26EB27AD25DC6799783
Certificate serial: 07EB
Authority key identifier: 22:5C:DB:0B:EE:D5:2F:51:50:51:F2:6E:B2:7A:D2:5D:C6:79:97:83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/36F199B80D1311EBB2726077C4F9AE02.roa
Signing time: Tue 18 Nov 2025 20:12:27 +0000
ROA not before: Tue 18 Nov 2025 20:12:27 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 139740
IP address blocks: 103.144.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.crl
rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 20:10:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2027 (0x7eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160BEB, serialNumber=225CDB0BEED52F515051F26EB27AD25DC6799783
Validity
Not Before: Nov 18 20:12:27 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=691cd32b-1643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:01:67:4b:0c:da:5f:c1:2a:bf:04:d4:76:f5:
e7:8d:18:ca:97:11:4d:0a:ef:d5:ce:e6:c9:98:92:
ba:1a:6d:32:15:0e:72:2f:c6:eb:40:b4:a0:d9:ee:
4a:74:10:aa:f8:2d:3a:3d:8e:f6:9f:6c:af:cb:9d:
56:0d:d6:f1:de:36:3d:f3:03:09:e6:5e:7e:df:29:
51:05:8e:42:92:d8:4e:59:5b:d3:2e:9b:eb:08:9b:
67:49:2f:9d:ce:39:be:41:9f:76:ac:35:28:d5:72:
7d:30:5a:b1:ad:8f:85:da:8d:64:d3:f5:04:88:c9:
0c:ad:fe:af:cc:91:da:1d:58:b7:f0:ba:45:21:61:
7f:6e:a4:c6:89:11:36:a0:ce:92:07:c8:a4:bb:0b:
dd:6c:42:a4:8e:b5:e2:35:58:6b:f6:9e:65:43:8f:
dd:e8:df:fd:29:bb:47:b1:b2:b8:9b:92:62:04:56:
72:26:10:ad:61:f3:c1:71:e4:c6:f3:f1:d8:62:18:
1e:4d:32:ae:de:07:15:bf:50:ce:80:9f:63:3e:eb:
22:28:a4:f7:22:f1:c8:8a:3c:de:a4:65:bd:6e:47:
8e:3e:fc:aa:e2:48:7f:ab:9f:b5:9e:de:48:65:61:
06:eb:17:63:ad:07:d6:56:b6:b6:08:15:4e:c2:68:
32:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9E:D3:7C:45:AC:E8:7E:DA:52:4A:86:8E:BF:34:C4:D3:90:12:0D
X509v3 Authority Key Identifier:
keyid:22:5C:DB:0B:EE:D5:2F:51:50:51:F2:6E:B2:7A:D2:5D:C6:79:97:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/36F199B80D1311EBB2726077C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.144.101.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:44:88:22:7c:81:c6:45:27:1b:84:81:59:9b:93:a0:66:fd:
4e:3e:52:24:ca:66:13:a7:32:88:9e:6f:ed:2d:76:46:94:18:
61:77:af:d0:37:68:cb:cf:15:64:b7:15:f9:6a:7b:8a:77:d2:
32:5f:d5:c7:26:2d:be:4b:85:05:c8:77:57:05:1d:98:ed:5f:
85:80:95:6d:9b:43:22:62:32:aa:ea:28:e5:37:c1:a4:27:3f:
a0:02:1d:c6:b3:e9:3c:42:ff:d6:fd:3f:d6:fa:0d:d3:4c:d6:
f9:3d:9f:ce:4f:b1:c4:cb:4d:0e:d6:f9:3c:d5:3f:48:3c:2e:
03:54:b8:49:80:3d:4e:e9:f0:1d:0a:bc:86:9a:56:6c:fd:61:
db:d3:f9:2c:29:82:06:fc:f3:45:22:82:87:e1:48:b3:ea:ee:
40:bc:d2:15:05:7c:59:f1:87:7b:38:71:a5:36:9a:8e:6d:d4:
40:d9:36:a8:fb:7c:44:92:7f:b7:78:61:2b:6f:cf:39:c4:44:
f3:bb:84:d6:18:1e:97:ee:40:1a:93:3b:8e:fd:5d:d8:b9:4e:
e5:16:94:e2:bd:af:ac:84:6e:18:f8:e2:fb:86:5d:d2:d9:43:
7a:8f:e1:d6:64:4e:6f:95:a7:65:2b:53:f9:04:ab:ad:37:ae:
9d:70:42:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:39:29 2025 by rpki-client