This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/BDE72518479C11EC8861323FC4F9AE02.roa
File: BDE72518479C11EC8861323FC4F9AE02.roa (raw, json)
Hash identifier: BWw+T22BkT4RWRTHKZZjPZLkInjp8GW8fJQ94reWXKk=
Subject key identifier: C1:0A:97:C3:9A:21:45:55:20:C9:22:8E:C4:D0:04:0D:26:7A:05:5F
Certificate issuer: /CN=A9174282/serialNumber=6163DCB5D53B4872E159563E90FC5E41AD002C2D
Certificate serial: 04D6
Authority key identifier: 61:63:DC:B5:D5:3B:48:72:E1:59:56:3E:90:FC:5E:41:AD:00:2C:2D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/BDE72518479C11EC8861323FC4F9AE02.roa
Signing time: Wed 26 Nov 2025 22:46:10 +0000
ROA not before: Wed 26 Nov 2025 22:46:10 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 135615
IP address blocks: 103.174.150.0/23 maxlen: 23
103.174.150.0/24 maxlen: 24
103.174.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.crl
rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 22:22:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1238 (0x4d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174282, serialNumber=6163DCB5D53B4872E159563E90FC5E41AD002C2D
Validity
Not Before: Nov 26 22:46:10 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69278332-e2e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:32:2d:21:05:9d:9c:f0:1e:0b:e4:33:05:7a:
56:27:63:22:78:30:a1:73:3f:eb:0e:2c:ef:43:37:
36:3d:10:be:ae:8f:bd:73:52:1d:2b:d6:32:b7:f8:
2a:93:9a:60:f8:b1:6f:2c:b4:87:1d:12:1a:a6:82:
59:c0:b5:8a:28:61:39:aa:eb:21:b4:85:30:0e:96:
8c:33:61:2c:58:84:02:32:6c:5e:81:40:8f:1d:36:
c8:0b:10:9f:d9:d8:78:19:7c:51:dd:91:b0:62:bf:
46:8f:13:34:97:61:86:d8:ec:e3:db:66:d8:0c:93:
c3:e4:d1:db:f7:43:47:70:67:2f:01:b3:ff:80:f6:
df:dd:e8:05:46:34:e4:02:02:8c:e7:e2:11:cb:a8:
d8:07:75:c0:3d:f4:2c:b2:f4:e3:a7:64:d6:ae:49:
94:1e:ea:7f:dc:5d:e1:e0:dc:ce:99:59:65:04:49:
5e:09:ab:16:20:92:0c:7b:d3:b1:d1:59:33:46:31:
5c:2f:a1:47:97:23:74:68:13:00:aa:0a:bf:4d:97:
2a:88:c6:7a:5f:23:3b:31:a1:97:8b:61:c2:21:53:
d4:90:ed:1f:f8:28:d8:fe:fd:4f:87:54:e4:ee:6e:
e1:3b:10:f5:ca:a4:bc:38:97:3d:63:42:b8:b6:79:
61:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0A:97:C3:9A:21:45:55:20:C9:22:8E:C4:D0:04:0D:26:7A:05:5F
X509v3 Authority Key Identifier:
keyid:61:63:DC:B5:D5:3B:48:72:E1:59:56:3E:90:FC:5E:41:AD:00:2C:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/BDE72518479C11EC8861323FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.174.150.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:e6:2e:b0:65:f5:80:59:e4:7a:09:3d:5c:16:b4:34:58:29:
a7:1e:4b:ba:e2:02:c0:28:b1:9a:c2:09:a3:7a:f6:5d:1c:35:
71:d2:28:5a:8c:db:a3:b2:c0:11:c3:0f:8a:65:52:dd:5a:c3:
b7:f7:be:96:1c:18:e5:38:d1:71:a5:1f:38:56:ad:b3:8c:eb:
5e:41:b1:ef:c3:07:31:e6:4d:74:e1:b7:64:7d:1a:4e:f5:b2:
21:bf:83:a1:d1:67:d7:4a:95:e3:61:a1:fd:47:af:85:6a:6b:
6c:a3:cb:ab:bb:80:4b:f9:9e:50:69:59:fd:f1:d8:12:bb:a2:
a3:12:73:59:e3:f6:72:83:5d:9c:79:7b:65:9a:79:d3:63:0a:
60:68:bb:05:b2:03:32:a8:61:1f:98:fd:08:22:cf:f5:08:a1:
c9:7e:a6:44:d8:8c:6b:03:dd:fc:c2:26:11:cc:c9:36:30:60:
b0:f4:95:f2:13:54:d9:9a:85:17:2f:33:a1:24:1c:28:54:43:
5e:fd:c8:6d:7c:53:6f:15:cf:39:1e:44:eb:b0:68:dd:f0:56:
d9:1c:03:0f:65:bb:e5:f7:b8:dd:31:ab:27:4a:55:eb:e2:57:
8e:8a:bc:75:44:d5:ce:53:14:bb:aa:7a:fb:e3:d1:64:ba:57:
c3:43:8a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:31:35 2025 by rpki-client