This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/C5C77866584111EE85E40820C4F9AE02.roa
File: C5C77866584111EE85E40820C4F9AE02.roa (raw, json)
Hash identifier: pdM+P+02WfirDBU7ez3rFKthQlrXbj54VyWDtVJ3HCs=
Subject key identifier: BA:5F:AE:21:F2:BF:BE:45:6A:08:7F:D6:CC:38:03:1D:D0:EB:D5:BB
Certificate issuer: /CN=A9170829/serialNumber=F897422E501006D2601D85A501795326BAFE7388
Certificate serial: 01B9
Authority key identifier: F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/C5C77866584111EE85E40820C4F9AE02.roa
Signing time: Fri 05 Dec 2025 00:11:34 +0000
ROA not before: Fri 05 Dec 2025 00:11:34 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 212921
IP address blocks: 103.151.172.0/23 maxlen: 23
103.151.172.0/24 maxlen: 24
103.151.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl
rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:37:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 441 (0x1b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170829, serialNumber=F897422E501006D2601D85A501795326BAFE7388
Validity
Not Before: Dec 5 00:11:34 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69322336-a35c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:37:bd:69:49:a1:b2:c8:a5:62:e1:bb:aa:0e:
64:53:8a:23:e8:a9:23:1d:f3:5f:55:de:2f:68:d3:
91:70:d9:75:9f:51:3b:3c:d6:08:5a:b6:28:f3:b4:
88:40:33:d7:7f:93:3c:e5:87:b7:2d:15:a2:d4:41:
26:c0:58:88:e4:73:69:f6:0c:2b:0b:83:fe:c5:50:
09:f1:29:d7:1e:f8:77:70:56:2a:7c:84:d5:32:fb:
05:eb:52:6e:3e:a4:35:65:e7:e7:04:7f:82:6c:b1:
3f:8f:46:c9:48:3e:eb:cc:8a:6a:e7:96:f5:a4:ed:
c3:9b:ab:15:31:1c:c8:18:56:e5:fb:05:ed:d6:62:
12:2f:35:6f:7e:79:c6:39:dd:b2:26:2d:27:59:c7:
5a:de:a5:35:92:26:44:26:dc:8e:a6:90:fa:f8:10:
2c:3b:64:c7:4c:08:70:02:f5:ee:b1:af:15:11:0f:
f3:6d:a1:18:89:25:1a:f9:17:f6:94:7c:fd:b8:e8:
a5:4e:0a:b1:cb:d8:ac:af:f2:d0:fe:e8:f0:6e:56:
9a:84:68:14:4f:25:27:74:cd:dc:f7:64:fc:aa:d1:
68:ca:94:06:eb:6a:34:13:81:cc:c0:ad:b7:8b:84:
3f:bc:a4:84:87:34:dd:7f:53:96:cc:6b:27:71:61:
80:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5F:AE:21:F2:BF:BE:45:6A:08:7F:D6:CC:38:03:1D:D0:EB:D5:BB
X509v3 Authority Key Identifier:
keyid:F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/C5C77866584111EE85E40820C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.172.0/23
Signature Algorithm: sha256WithRSAEncryption
11:ee:63:35:3e:d2:8e:21:60:36:5c:3c:bd:0b:9e:3e:33:e0:
91:ee:f1:9c:3a:01:fc:73:09:dc:63:2b:61:e7:7e:e6:03:69:
f0:0b:db:cc:9e:85:5d:4d:b4:05:e3:f6:59:13:75:6a:97:39:
a3:5e:23:3c:a2:b1:07:a4:be:8c:b6:c9:d1:8c:64:fc:cf:2a:
60:4f:89:64:62:e9:b9:6f:23:18:1e:fd:3f:87:0a:65:30:a3:
ff:b5:93:13:5b:ff:74:ef:a2:b0:5f:d9:f6:ed:c1:c2:a7:bc:
8c:f7:00:35:ed:6f:d5:f1:cb:bc:3b:e9:25:61:fb:42:6c:6b:
64:82:b1:f3:b8:6f:8f:7e:58:fc:3c:09:1c:3f:91:ad:ba:c6:
3a:95:09:00:99:b8:69:6b:88:25:54:aa:28:41:51:02:9a:6c:
76:23:6c:35:c6:af:ef:06:87:fd:67:21:cd:01:9b:3e:da:6c:
43:35:9d:ca:72:ec:dc:c6:c4:8c:35:6a:79:34:20:b0:ea:18:
62:bd:9e:cc:27:78:8c:c6:97:00:88:11:90:62:f0:a8:52:c8:
ec:19:73:2f:77:78:8d:3f:17:1e:9e:75:0b:07:dd:39:29:35:
52:8e:d9:1f:1d:c3:6c:3c:fa:66:3f:60:c9:f4:df:21:05:6d:
fc:68:9c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:06:58 2025 by rpki-client