This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/FF4F13D4448711ECA80CFC34C4F9AE02.roa
File: FF4F13D4448711ECA80CFC34C4F9AE02.roa (raw, json)
Hash identifier: D8Rskcy+MlcZVWynnet9FUcktOO82nExRIwJwtWFbsg=
Subject key identifier: 11:18:62:0A:7E:B8:AE:F7:EB:05:0B:57:6F:B5:20:00:A6:BE:27:B8
Certificate issuer: /CN=A917BBF1/serialNumber=65409186028EC54CD45B5834FFBECAF4B78F19C2
Certificate serial: 0CB0
Authority key identifier: 65:40:91:86:02:8E:C5:4C:D4:5B:58:34:FF:BE:CA:F4:B7:8F:19:C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/FF4F13D4448711ECA80CFC34C4F9AE02.roa
Signing time: Wed 19 Nov 2025 10:13:01 +0000
ROA not before: Wed 19 Nov 2025 10:13:01 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 137810
IP address blocks: 103.114.98.0/24 maxlen: 24
103.114.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.crl
rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 17:49:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3248 (0xcb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BBF1, serialNumber=65409186028EC54CD45B5834FFBECAF4B78F19C2
Validity
Not Before: Nov 19 10:13:01 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=691d982c-0c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fa:a1:35:be:ac:2a:4a:31:49:dc:01:2c:73:
07:9d:b2:c0:91:d8:d5:5a:6b:66:03:ce:f5:f8:2d:
51:f1:04:f1:ec:ed:da:8a:28:d1:38:90:4f:ee:3d:
09:07:c0:93:a4:2b:01:d6:e3:51:b1:80:79:19:17:
81:bc:85:3c:da:c5:a9:59:c1:ec:40:f7:4a:b1:41:
c6:35:b3:dd:70:70:52:0f:dd:7b:cf:71:6f:d2:5e:
ca:89:9a:f7:c5:ec:7b:5e:1e:e1:e9:d0:de:b3:de:
86:94:f8:07:84:a3:3d:34:33:8b:e8:60:d7:5e:58:
c9:e1:ac:94:03:43:d4:57:77:2e:de:c6:d3:fb:ea:
7b:46:8b:37:43:b3:58:aa:b0:24:ed:c3:e4:6a:b8:
56:f8:b1:12:a8:25:4d:8d:e0:6a:8a:fc:89:42:7d:
e4:73:cd:d9:76:4f:01:48:13:2d:3b:06:a6:ad:42:
45:f8:7a:e2:1f:36:34:8e:72:a7:e0:ce:9d:ce:40:
c9:4e:1d:f1:88:37:7f:9b:79:19:71:32:d4:89:37:
d8:51:27:30:3d:c9:e2:eb:aa:0e:49:d9:66:9b:6e:
33:1d:ba:f2:28:3b:e9:5f:c3:45:6e:97:6c:73:f7:
86:03:f5:aa:71:10:30:04:80:d7:04:d9:e5:dc:28:
50:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:18:62:0A:7E:B8:AE:F7:EB:05:0B:57:6F:B5:20:00:A6:BE:27:B8
X509v3 Authority Key Identifier:
keyid:65:40:91:86:02:8E:C5:4C:D4:5B:58:34:FF:BE:CA:F4:B7:8F:19:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/FF4F13D4448711ECA80CFC34C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.114.98.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:ba:65:f7:69:78:84:ef:cc:91:b7:2e:01:c5:31:9b:0f:1a:
05:1d:cf:17:b0:d5:fb:81:1f:f0:5c:8e:8d:98:c0:34:9f:d7:
92:2d:a5:5d:df:36:d7:f6:a8:b6:95:32:d1:e6:3a:8d:dc:bb:
ce:cb:39:9b:32:7d:e5:53:23:1e:40:f7:5a:0f:c6:fc:9a:7b:
c0:b1:e0:68:cd:6b:8a:22:66:ca:ad:62:2a:d4:e4:d6:41:ae:
3c:44:3b:c1:53:f2:0f:8a:8e:67:e0:49:ac:7a:8f:89:8b:d8:
00:12:79:23:d8:ca:d5:89:17:a3:ee:70:c5:58:08:03:d5:8f:
d5:5d:2a:4d:27:f0:80:4d:4b:fd:72:73:a7:96:0f:68:ad:70:
ff:5a:0a:83:9a:74:ca:e2:60:c8:22:18:cf:eb:33:fc:ab:b2:
88:af:21:d7:ac:a8:8a:5c:0c:5c:ef:b1:e5:97:65:67:29:9c:
e7:9b:7a:dc:4c:2d:2e:ea:e4:cb:b6:f9:26:50:1d:5c:fd:34:
70:e3:46:f3:d2:00:46:74:f7:28:37:06:54:1e:ff:ab:f7:87:
06:80:3b:40:f8:9b:17:a7:c4:38:c7:5f:34:c5:93:00:3d:5a:
81:91:9d:bf:0f:e1:34:64:e7:59:c7:cb:48:ec:b0:c7:17:b3:
43:60:73:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:33:39 2025 by rpki-client