This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/945375FAF69511EC90A47215C4F9AE02.roa
File: 945375FAF69511EC90A47215C4F9AE02.roa (raw, json)
Hash identifier: ZvBKfJ1ADA7aCUjrmjndruwHDHPG/7Dn7tC/SJj/AFU=
Subject key identifier: 0E:9D:FE:47:D0:90:75:74:D8:F1:64:E3:3B:30:77:EC:69:F7:04:BA
Certificate issuer: /CN=A917C606/serialNumber=B872F34D55251FA770ECC393D26712103D550737
Certificate serial: 042B
Authority key identifier: B8:72:F3:4D:55:25:1F:A7:70:EC:C3:93:D2:67:12:10:3D:55:07:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/945375FAF69511EC90A47215C4F9AE02.roa
Signing time: Thu 04 Dec 2025 23:07:08 +0000
ROA not before: Thu 04 Dec 2025 23:07:08 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 140619
IP address blocks: 103.176.206.0/24 maxlen: 24
103.176.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.crl
rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 21:31:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1067 (0x42b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C606, serialNumber=B872F34D55251FA770ECC393D26712103D550737
Validity
Not Before: Dec 4 23:07:08 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6932141c-13db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ab:87:4d:3a:3a:13:87:3c:dc:d3:d4:a3:91:
24:38:ad:41:20:27:e1:8b:71:a1:44:c3:bf:e5:e8:
b9:1c:f9:5b:04:0a:be:9b:02:d3:bf:0e:9f:c8:8e:
94:9f:46:65:2d:df:c7:7c:2b:c8:51:3f:8d:f3:18:
d1:dd:e4:ab:d1:0b:f2:7a:46:2f:12:87:7e:f2:f5:
b5:04:e7:c6:b9:d8:66:40:a7:9d:0d:e2:d2:50:19:
cf:40:87:03:b4:7b:3a:75:24:74:4e:54:d3:c6:c2:
38:be:e2:4e:c1:69:25:3c:90:9d:8f:e5:cd:10:0d:
83:78:93:90:d3:f4:77:70:0e:84:8f:4b:77:da:3c:
36:96:2d:f4:c0:8d:d6:dc:2b:38:3b:4b:58:21:b7:
73:5f:a0:67:43:43:9f:41:bd:1e:83:25:bb:78:8f:
f2:cd:2b:b2:0d:c1:5c:fb:84:5a:d3:0a:b6:c1:77:
e6:04:0a:4e:45:b8:28:32:ef:0d:0e:f8:36:47:07:
b0:5a:d9:b6:00:c3:f2:88:82:b6:99:89:2f:28:01:
b4:ec:cd:e7:a3:c6:d2:8f:1d:26:a0:f0:1c:17:c1:
2b:5a:a2:c2:a1:c4:f4:72:7f:b1:77:e8:cf:18:7e:
e4:01:5f:9c:d8:a2:4b:72:b2:4e:88:19:44:55:9c:
12:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:9D:FE:47:D0:90:75:74:D8:F1:64:E3:3B:30:77:EC:69:F7:04:BA
X509v3 Authority Key Identifier:
keyid:B8:72:F3:4D:55:25:1F:A7:70:EC:C3:93:D2:67:12:10:3D:55:07:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/945375FAF69511EC90A47215C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.176.206.0/23
Signature Algorithm: sha256WithRSAEncryption
64:ee:b9:ab:8d:ef:b4:1f:a4:63:a9:70:d6:96:d9:1c:b2:9f:
a7:61:79:5f:e5:1c:13:64:d7:a8:c8:cd:94:6a:7f:81:19:c8:
70:a9:b9:da:28:b5:1b:b3:8f:d3:42:b8:33:79:e6:30:09:40:
db:9c:f3:f1:8b:b1:3c:ff:b1:ff:7e:c8:40:e7:d4:19:9f:7e:
b5:c1:b2:ee:bc:af:ec:7c:fd:93:3c:ff:a1:e3:c3:a0:0c:b0:
e8:52:31:c1:b4:1d:0a:f3:b8:67:e3:18:9c:c6:bd:70:db:58:
c1:42:ef:75:d0:60:e2:2f:1c:a0:28:60:03:ed:e9:d4:0b:ed:
29:2e:73:56:ba:61:dc:d4:ce:fc:a3:7e:20:95:33:23:cf:90:
81:41:a9:e5:24:b1:7e:d3:ff:87:eb:1b:1e:ab:01:ef:7e:85:
7d:e7:bc:12:8f:e4:9c:5a:ca:1b:cb:1e:1c:3f:a2:4c:f3:23:
21:06:32:83:47:ae:30:42:dd:c6:7a:06:fe:80:70:33:4b:d0:
c3:9d:f3:5e:9b:a2:5e:9f:e7:41:2a:0a:04:c8:06:33:22:d8:
53:ed:5f:cd:85:55:2d:7c:7b:93:1d:a0:b3:50:54:39:06:4a:
07:52:8b:29:2a:80:12:ea:1a:9b:d9:40:fb:c5:44:c7:ce:21:
2d:5c:c1:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:57:51 2025 by rpki-client