This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/CE00DA34FF4411EBAD3A632AC4F9AE02.roa
File: CE00DA34FF4411EBAD3A632AC4F9AE02.roa (raw, json)
Hash identifier: DiD1wIx5N0oHonnxsIu2kFRZ6TwhX9enYctOFCdvJ64=
Subject key identifier: DD:0C:75:65:91:B3:32:18:A1:82:AB:B9:E4:8E:FE:EA:AF:75:4E:0A
Certificate issuer: /CN=A917584F/serialNumber=934ADFB94A39A0C37B77F97903706B61F0BEFEE7
Certificate serial: 05A3
Authority key identifier: 93:4A:DF:B9:4A:39:A0:C3:7B:77:F9:79:03:70:6B:61:F0:BE:FE:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0rfuUo5oMN7d_l5A3BrYfC-_uc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/CE00DA34FF4411EBAD3A632AC4F9AE02.roa
Signing time: Sun 28 Dec 2025 23:18:49 +0000
ROA not before: Sun 28 Dec 2025 23:18:49 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 141004
IP address blocks: 103.159.84.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.crl
rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0rfuUo5oMN7d_l5A3BrYfC-_uc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 22:22:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1443 (0x5a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917584F, serialNumber=934ADFB94A39A0C37B77F97903706B61F0BEFEE7
Validity
Not Before: Dec 28 23:18:49 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6951bad9-7e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1b:d2:c7:75:39:06:26:40:03:c7:62:da:9a:
25:d8:b7:60:86:63:b7:28:c4:2e:9f:2a:c9:74:72:
4f:03:3c:e9:c7:15:81:a6:be:fa:4e:f9:e4:ce:a6:
4f:68:fa:62:ea:4f:fd:c7:f1:d7:00:cc:5d:c0:0d:
84:32:c9:19:3e:e4:a9:c6:ef:ef:a9:42:e5:88:61:
81:3f:5f:51:cf:38:31:ff:86:cc:53:c9:80:aa:5b:
b6:15:53:ca:30:f8:2c:7d:f6:aa:61:78:ec:46:35:
93:a1:74:7c:fa:9d:5b:02:3e:9c:18:cf:ce:91:9b:
76:cd:f4:30:8a:80:23:21:15:ba:1b:0d:50:bb:74:
d1:69:26:f6:e0:2a:27:74:f1:2d:e6:5a:bb:ab:55:
37:fd:1a:8e:0d:98:0c:9b:d9:75:63:dc:24:4b:4c:
a6:8d:61:e7:ee:67:9b:c1:54:46:62:a7:9e:49:ee:
53:31:ed:e0:7f:7d:c2:f3:62:8d:45:0e:50:55:5d:
73:65:af:7d:36:49:79:ab:57:62:49:fb:7e:db:e9:
ae:f7:43:12:ea:84:1d:ef:21:c0:bf:e0:4f:df:5f:
d1:99:ac:5a:3a:4c:a3:0b:54:83:58:b6:71:3b:89:
5b:4e:a4:2a:a1:a1:92:58:94:be:df:bd:d4:22:69:
64:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:0C:75:65:91:B3:32:18:A1:82:AB:B9:E4:8E:FE:EA:AF:75:4E:0A
X509v3 Authority Key Identifier:
keyid:93:4A:DF:B9:4A:39:A0:C3:7B:77:F9:79:03:70:6B:61:F0:BE:FE:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0rfuUo5oMN7d_l5A3BrYfC-_uc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/CE00DA34FF4411EBAD3A632AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.159.84.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:dc:23:76:b0:d7:c4:59:11:20:9b:d2:49:d4:11:dc:57:cf:
b7:1b:c4:55:ae:5b:c8:d4:3e:f4:d3:db:1a:af:93:8f:34:e8:
1a:ca:57:e7:c8:67:4e:ed:a0:2d:7b:93:11:a5:ab:6e:96:86:
a3:0f:9c:04:3d:65:aa:5c:a3:70:e7:99:a9:9a:34:eb:61:eb:
47:d4:02:0a:1c:5f:df:31:d8:6d:16:67:98:cd:45:1a:2c:32:
45:6b:78:a1:04:cb:10:38:4f:a9:e3:10:9b:7f:78:de:2e:7d:
d8:b5:fc:5b:85:34:59:43:2d:ff:63:23:b0:25:99:4d:dc:6c:
26:4b:c8:8c:29:5e:d1:00:d0:f8:b2:02:44:e5:6e:74:9b:97:
81:0d:83:de:bc:b1:58:3c:02:7e:ff:e9:3d:8f:e9:68:16:62:
60:ef:13:95:06:58:d9:9b:7e:09:a6:83:3c:e1:c4:2e:a8:12:
01:20:fa:ef:71:cb:54:be:fb:3c:fa:ec:2b:ea:f9:f3:a2:2d:
78:20:2d:f3:08:15:6a:cd:41:c5:8a:24:c1:25:18:59:d8:19:
15:ba:f7:36:9a:5a:dd:1d:bb:cb:7e:4f:7f:73:f4:9a:ae:20:
01:d6:ce:aa:2b:00:75:d6:43:4b:bc:af:4c:b1:15:e7:fd:1b:
66:97:33:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:06:54 2026 by rpki-client