This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/96540A72CD0E11ED9A9CAE58C4F9AE02.roa
File: 96540A72CD0E11ED9A9CAE58C4F9AE02.roa (raw, json)
Hash identifier: gQgaVP6gsqEmtORlyD8C7NpCpWYfOsLgU2Aae4Tbg5g=
Subject key identifier: 7A:8F:EF:BA:3F:B8:D4:E1:F9:3D:E8:BD:73:AF:59:D3:A1:0C:19:8D
Certificate issuer: /CN=A916899E/serialNumber=487CB633171A0DDF38ACBB6AD1ED8AE69655860A
Certificate serial: 01FF
Authority key identifier: 48:7C:B6:33:17:1A:0D:DF:38:AC:BB:6A:D1:ED:8A:E6:96:55:86:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/96540A72CD0E11ED9A9CAE58C4F9AE02.roa
Signing time: Fri 05 Dec 2025 01:10:30 +0000
ROA not before: Fri 05 Dec 2025 01:10:30 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 7647
IP address blocks: 203.18.78.0/24 maxlen: 24
203.21.83.0/24 maxlen: 24
203.22.196.0/24 maxlen: 24
203.22.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.crl
rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:10:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 511 (0x1ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916899E, serialNumber=487CB633171A0DDF38ACBB6AD1ED8AE69655860A
Validity
Not Before: Dec 5 01:10:30 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69323105-4a63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ab:10:c6:e0:36:76:ac:67:05:01:76:35:ac:
bd:5b:4e:7a:b0:33:b1:0b:8c:d5:11:f3:48:d7:e5:
e0:cb:7d:3f:1f:ab:26:74:49:7d:f1:08:fd:d3:89:
d4:dc:ce:a7:a2:ce:1d:b4:bd:2e:70:60:34:4b:b0:
bd:71:48:1d:94:c4:61:9d:5f:e2:68:8f:3d:7f:29:
52:f8:6b:30:62:6d:36:bb:5b:05:67:94:de:1c:82:
97:df:6f:e6:89:24:be:5b:58:cc:2d:32:8f:e3:94:
e8:78:99:74:b7:ff:5e:7e:25:9a:5b:8f:d5:66:0b:
97:2e:8e:11:b7:c6:28:16:37:da:bd:7b:22:35:f1:
44:83:d6:af:37:5b:ea:65:9c:f7:de:f8:d4:34:44:
87:77:21:9d:7f:61:10:75:0c:7f:b7:0e:42:03:cb:
04:2a:42:fb:08:ab:d4:87:3c:a6:cd:2a:b1:92:67:
c6:b2:aa:70:bf:bc:61:5f:7d:5e:43:83:43:6e:00:
2c:8c:8b:2f:3b:b9:28:25:b4:6e:dc:10:de:ff:e3:
2a:a5:b5:32:a0:2f:55:ce:4a:e7:a6:b9:35:c0:f6:
e6:3a:2c:ba:8c:e0:24:4d:d3:c8:be:b4:5a:84:4b:
92:4a:d0:31:29:13:07:f1:49:77:93:31:c4:cc:0d:
d8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8F:EF:BA:3F:B8:D4:E1:F9:3D:E8:BD:73:AF:59:D3:A1:0C:19:8D
X509v3 Authority Key Identifier:
keyid:48:7C:B6:33:17:1A:0D:DF:38:AC:BB:6A:D1:ED:8A:E6:96:55:86:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/96540A72CD0E11ED9A9CAE58C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.18.78.0/24
203.21.83.0/24
203.22.196.0/24
203.22.202.0/24
Signature Algorithm: sha256WithRSAEncryption
52:60:8e:63:1e:ff:bf:60:da:5a:b4:ab:9a:bc:4c:3b:cb:cd:
8e:01:7a:14:be:b3:ec:41:1d:19:95:d9:8f:d1:11:7b:02:71:
f0:a0:96:06:94:da:0f:1b:22:04:59:a5:30:d1:43:20:82:8e:
ef:48:14:d9:82:8a:6f:40:0e:30:52:ce:7d:aa:85:d5:11:fc:
b7:d0:6e:10:69:6a:9c:5f:83:dc:d4:15:90:a3:66:1a:41:b7:
a3:b0:dd:9b:c4:f7:c7:3f:c8:ef:b6:de:d9:a9:c4:33:8f:5e:
11:96:88:8c:4e:a5:5e:af:4b:1a:bc:f7:bf:6c:ee:6a:f4:4a:
5f:07:f6:15:e1:8e:d1:82:d9:c1:b7:f8:b5:35:a9:8f:d9:b2:
03:4e:e5:dd:68:0f:01:60:33:93:b4:ec:63:f5:31:9e:4f:9c:
7e:2c:90:04:5c:02:be:6b:48:0b:fa:4c:4e:45:65:fa:04:eb:
57:a8:7d:6e:00:12:7c:78:e4:2c:b4:ad:9e:49:af:ec:bd:0b:
0c:48:e9:d7:4e:d5:4f:6f:9d:d5:07:4b:9c:c4:58:00:2b:be:
b8:89:f6:b9:79:bc:f8:b0:7d:a4:8a:0d:38:7f:30:57:14:46:
02:f2:53:e9:3e:76:71:3f:1d:0a:4c:7b:66:05:a4:59:c9:80:
10:69:6d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:56:43 2025 by rpki-client