This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/66864FCE688011ECAA829E31C4F9AE02.roa
File: 66864FCE688011ECAA829E31C4F9AE02.roa (raw, json)
Hash identifier: oV8jstChrG2LMgvNNWOO9hMkyB2Ar9RL1KKMQtKZSu0=
Subject key identifier: F7:4F:9A:9D:6A:CA:CA:08:0A:26:92:D0:2D:31:63:7C:17:60:F1:CB
Certificate issuer: /CN=A916A5CD/serialNumber=BDB5926A896BB651A0E7540A398CD5EF0714171F
Certificate serial: 0480
Authority key identifier: BD:B5:92:6A:89:6B:B6:51:A0:E7:54:0A:39:8C:D5:EF:07:14:17:1F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/66864FCE688011ECAA829E31C4F9AE02.roa
Signing time: Tue 02 Dec 2025 22:57:47 +0000
ROA not before: Tue 02 Dec 2025 22:57:47 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 149307
IP address blocks: 103.178.96.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.crl
rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 22:36:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1152 (0x480)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A5CD, serialNumber=BDB5926A896BB651A0E7540A398CD5EF0714171F
Validity
Not Before: Dec 2 22:57:47 2025 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=692f6eea-f73c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a5:ea:37:4a:02:e4:bc:3a:6a:fa:bc:3b:92:
6d:29:af:4f:6e:ad:28:6c:d7:47:24:34:65:0b:7d:
d1:75:b6:c6:26:bf:13:52:08:3f:8b:60:82:cc:7e:
a7:00:27:47:1a:70:5a:d5:1d:bf:eb:a2:2d:bc:1a:
e0:6c:65:e0:cd:81:69:f1:99:13:1d:ec:4d:84:55:
8f:2a:16:42:81:71:3d:02:a4:ee:61:81:c6:f5:64:
e9:5b:fc:52:fd:c6:d8:69:1d:2f:73:a2:2c:f5:6f:
55:dc:a4:7a:4d:48:cc:53:b3:9d:26:e3:02:8c:e2:
e6:d9:f7:08:10:cb:b0:47:68:12:88:db:76:57:88:
9f:86:c1:ee:56:a8:54:57:c4:3e:54:a6:ec:1d:79:
51:31:91:f8:90:3c:f7:81:55:53:01:58:fe:2c:c9:
a4:b9:1f:dc:ec:0f:ab:fa:1e:55:e7:b5:89:b5:30:
24:ea:5b:d8:e1:01:9a:bf:5c:ba:c3:f0:65:09:37:
a1:01:eb:68:00:99:c5:89:86:40:16:f3:9c:aa:02:
61:4f:5b:f2:da:10:87:31:f8:ee:6b:97:59:90:d9:
e1:76:74:22:ca:d5:b1:c9:dd:c8:2c:23:34:a2:b3:
f0:fd:12:e9:e6:5a:25:cc:b5:a9:16:0e:5f:44:87:
59:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:4F:9A:9D:6A:CA:CA:08:0A:26:92:D0:2D:31:63:7C:17:60:F1:CB
X509v3 Authority Key Identifier:
keyid:BD:B5:92:6A:89:6B:B6:51:A0:E7:54:0A:39:8C:D5:EF:07:14:17:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/66864FCE688011ECAA829E31C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.178.96.0/24
Signature Algorithm: sha256WithRSAEncryption
66:d3:45:96:3a:16:af:59:14:90:13:88:75:8c:85:fb:6b:ab:
61:0f:3a:8e:3f:40:ac:86:f1:10:04:9d:74:f3:cd:54:4e:01:
da:e5:77:58:ea:95:de:2c:94:01:6c:df:be:32:72:06:04:a4:
47:e3:a1:1a:17:b1:e5:42:08:98:0f:1d:13:88:15:92:70:5b:
13:f4:8a:d7:93:2b:80:c5:1c:38:a2:10:3a:cf:8a:e6:2a:6f:
e8:cc:92:13:19:41:e3:22:e3:8c:a2:73:ed:35:d0:ec:c4:79:
00:d6:f2:e8:81:4d:e3:51:c6:8b:00:8e:c1:b5:fa:1f:ec:46:
75:27:dd:94:75:d7:5e:5a:12:dc:13:15:f2:ab:3f:0a:ad:57:
b4:2c:7d:be:0f:44:dc:35:34:36:ef:45:44:52:93:89:a0:24:
3a:89:18:82:fd:73:45:e4:16:d2:57:a0:9d:75:92:1c:14:d7:
8e:d5:af:88:53:59:17:c7:e9:b5:51:68:64:ec:30:1c:44:cf:
b0:a3:34:1d:22:67:7e:f9:3b:d2:f5:b9:02:11:dc:98:4b:b1:
6f:cf:d7:77:22:10:7e:b0:9b:79:d9:ac:70:12:d0:e7:ac:38:
37:a9:f5:6e:ab:c0:f6:0d:ac:18:0e:31:e2:84:26:e0:35:7b:
dd:f7:68:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:08:02 2025 by rpki-client