This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/7DF47F46F95611E996377877C4F9AE02.roa
File: 7DF47F46F95611E996377877C4F9AE02.roa (raw, json)
Hash identifier: TQudNrBg1tAuuiY/zVaf2qIyDj5AjTY8tAQkyrZyuYs=
Subject key identifier: FC:3D:45:5D:77:08:CA:DA:08:DE:04:E5:6B:14:59:96:5C:11:4A:2C
Certificate issuer: /CN=A9174DAD/serialNumber=4F6B1C5B42B61DD5E28193967A70D18A228FEF76
Certificate serial: 0CE8
Authority key identifier: 4F:6B:1C:5B:42:B6:1D:D5:E2:81:93:96:7A:70:D1:8A:22:8F:EF:76
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/7DF47F46F95611E996377877C4F9AE02.roa
Signing time: Tue 02 Dec 2025 17:48:35 +0000
ROA not before: Tue 02 Dec 2025 17:48:35 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 138462
IP address blocks: 103.126.36.0/22 maxlen: 24
2404:3c0::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.crl
rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 17:32:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3304 (0xce8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174DAD, serialNumber=4F6B1C5B42B61DD5E28193967A70D18A228FEF76
Validity
Not Before: Dec 2 17:48:35 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=692f2673-cfdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a6:35:2c:30:62:59:cb:b8:d3:a9:51:70:d5:
8c:ed:3e:b3:38:88:22:82:38:ec:60:68:29:9a:b0:
8c:36:c8:ef:31:8f:59:b1:2f:eb:50:97:b8:0f:d3:
31:4b:54:97:77:71:e3:47:ce:41:31:54:ca:c8:10:
f8:b7:e8:14:84:22:b5:d4:b7:9c:38:35:9c:08:93:
88:c5:03:7b:72:ee:e3:14:5b:b4:41:eb:99:30:51:
49:38:8b:9b:34:a8:2b:09:13:ab:8f:0d:2d:d0:92:
1d:c6:ac:5e:74:e8:d3:6b:e1:2e:27:3c:8e:bb:f0:
03:aa:fc:2a:73:06:38:62:8f:8c:0b:ca:ff:0d:88:
8a:7a:46:3a:96:0b:c2:b5:e4:37:09:08:22:eb:fd:
e8:27:d3:fc:7f:e4:e8:13:e7:32:47:c7:01:b1:2a:
85:62:b6:88:e8:63:0b:b1:d9:2b:55:07:19:4d:76:
05:31:5e:46:d1:07:7b:0c:a9:bf:e1:80:90:f1:1b:
8d:ac:df:eb:c2:13:02:ec:e7:43:bb:37:20:83:ba:
2c:9b:e3:2d:41:db:ce:cb:09:44:cc:b0:04:39:29:
6f:d7:e6:50:a4:e0:3a:6f:62:e7:7b:83:d3:44:9e:
62:f7:b2:f3:84:ce:1d:27:b2:e1:2f:91:04:c5:b3:
84:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3D:45:5D:77:08:CA:DA:08:DE:04:E5:6B:14:59:96:5C:11:4A:2C
X509v3 Authority Key Identifier:
keyid:4F:6B:1C:5B:42:B6:1D:D5:E2:81:93:96:7A:70:D1:8A:22:8F:EF:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/7DF47F46F95611E996377877C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.126.36.0/22
IPv6:
2404:3c0::/32
Signature Algorithm: sha256WithRSAEncryption
33:a2:9c:4d:53:04:97:a5:06:93:f2:6c:cf:6d:d1:59:8b:d5:
bb:73:b1:39:8e:72:99:b4:a4:2a:bf:3d:ea:85:b7:ef:46:ba:
c2:5c:36:aa:e5:1a:fe:cf:96:e7:50:82:18:e1:ae:f7:cf:df:
c9:97:c2:8c:14:97:35:ca:a5:a3:d1:c1:88:ae:16:45:36:bb:
54:c8:3d:11:0f:f7:07:a0:18:57:d9:98:48:64:97:e4:85:30:
dc:a1:b7:16:56:40:e7:3b:b1:09:ed:77:47:c5:12:9d:36:d0:
73:29:e1:42:a8:f4:10:1b:e9:cd:a0:29:a9:9b:e3:2f:03:4d:
1b:98:65:b0:4d:82:d6:70:7d:93:a0:0c:00:57:90:e9:a7:1a:
0c:f9:4b:68:c7:ce:6d:ae:27:36:3e:da:b3:fa:e0:db:a8:3d:
3f:80:8c:ac:98:af:bb:11:2a:9d:cc:0f:06:b0:e5:a5:00:68:
91:1a:9d:d0:65:49:d1:dd:28:e4:4c:76:82:7f:34:88:8f:97:
cf:9a:4d:cb:e4:3b:f4:fe:a8:bf:70:61:63:5d:96:17:76:fa:
30:e8:a8:5b:c0:9e:63:d7:0c:c5:ea:50:a6:70:c4:9c:85:e2:
b4:91:77:7a:15:e8:65:4f:0b:2c:ff:61:bd:0c:f5:df:53:d8:
08:9e:bf:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:09:28 2025 by rpki-client