This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/27E5184CCC6211EFA20BEE1BC4F9AE02.roa
File: 27E5184CCC6211EFA20BEE1BC4F9AE02.roa (raw, json)
Hash identifier: ICu/yjGLx5mxYSM0WJFCxUELVponO7X2E1rDJr+HfU4=
Subject key identifier: A7:5E:18:FA:CE:BC:75:59:5E:B3:02:B8:15:54:F1:04:37:E1:8F:68
Certificate issuer: /CN=A917F0AF/serialNumber=E114378DA934861469F495D97598E0F00289C330
Certificate serial: 7F
Authority key identifier: E1:14:37:8D:A9:34:86:14:69:F4:95:D9:75:98:E0:F0:02:89:C3:30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RQ3jak0hhRp9JXZdZjg8AKJwzA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/27E5184CCC6211EFA20BEE1BC4F9AE02.roa
Signing time: Wed 03 Sep 2025 07:37:01 +0000
ROA not before: Wed 03 Sep 2025 07:37:01 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 16789
IP address blocks: 103.170.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.crl
rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RQ3jak0hhRp9JXZdZjg8AKJwzA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127 (0x7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F0AF, serialNumber=E114378DA934861469F495D97598E0F00289C330
Validity
Not Before: Sep 3 07:37:01 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=68b7f01c-6d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:89:a1:58:eb:d1:92:cc:26:ad:25:79:a7:43:
05:b3:2d:0a:2b:25:ca:c6:1a:4e:de:ff:50:2e:dd:
95:8d:13:b0:68:c9:16:ee:14:2b:c9:c5:09:bf:f6:
b0:17:cd:62:98:a9:dd:c5:63:8a:c0:a7:e9:d6:56:
4a:1d:7d:eb:3f:35:f0:2b:bb:df:05:6f:a8:1d:23:
a8:85:03:67:7e:23:95:35:42:b2:fb:21:7f:26:63:
f3:49:1a:02:a7:a0:1b:86:4c:68:a4:8e:fc:cc:cb:
54:47:1c:1b:01:8c:68:02:34:16:ee:32:c2:b1:a1:
eb:ae:9e:27:5b:ec:e6:4e:1b:9f:b0:1b:a4:c3:c7:
63:cc:b0:a8:a2:62:06:03:14:1a:ca:7d:f7:1c:b7:
61:32:fd:a4:ba:db:1f:13:8e:de:b7:33:a4:8c:41:
b0:25:17:52:9a:1a:0f:b4:88:f3:e5:6b:6f:10:63:
ce:03:73:70:fb:3d:e2:13:72:d8:88:c1:57:34:fd:
92:c1:70:99:fb:36:8f:69:fd:59:af:d0:ad:16:55:
f1:36:fc:89:fb:dd:03:48:01:c7:93:88:51:56:03:
b3:dd:07:f0:7b:9a:76:77:ad:04:c9:3c:eb:2a:2a:
fa:ac:b9:3d:90:dc:e7:3f:b7:a6:28:73:62:4d:35:
b4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5E:18:FA:CE:BC:75:59:5E:B3:02:B8:15:54:F1:04:37:E1:8F:68
X509v3 Authority Key Identifier:
keyid:E1:14:37:8D:A9:34:86:14:69:F4:95:D9:75:98:E0:F0:02:89:C3:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RQ3jak0hhRp9JXZdZjg8AKJwzA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/27E5184CCC6211EFA20BEE1BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.170.76.0/24
Signature Algorithm: sha256WithRSAEncryption
77:e7:73:94:fb:87:8e:df:2e:9f:65:05:1c:ba:7f:4f:57:86:
8d:7f:63:67:d0:69:bd:26:7d:18:a8:0b:62:cb:fe:45:9c:65:
fc:44:c2:ee:5c:80:8f:ba:34:b4:df:54:cf:2e:75:fd:d1:35:
64:16:97:b6:90:9f:e0:e1:2e:f4:b9:ee:96:78:83:72:d5:30:
59:17:ef:54:ca:88:02:63:2b:6a:5c:05:60:f2:5e:16:14:c2:
a0:e8:be:fa:0d:17:69:f0:cd:81:ad:64:a0:44:70:90:17:1b:
a4:c9:31:c9:fc:f5:d5:8a:0d:92:4e:ff:01:32:e1:30:31:ab:
0e:db:21:db:c5:5a:7a:3d:0e:f3:9d:7c:c0:d6:ae:25:e9:00:
ec:59:d3:5d:c2:53:47:f8:c1:a0:b6:bd:41:14:42:20:28:b3:
62:cb:f6:c1:86:2a:ce:f4:27:9d:9e:bb:54:3e:e7:d7:9c:74:
a8:f3:72:66:02:46:d3:6b:00:29:d8:13:1c:8c:2b:98:65:71:
14:d6:df:3f:18:04:b0:c8:18:a7:54:06:89:28:83:02:8d:aa:
7d:ed:9b:f7:29:ea:b3:fe:82:a5:4f:b2:98:c1:c7:73:74:bc:
f3:cc:e5:9a:b2:55:3d:39:20:61:30:d9:52:aa:e9:64:24:70:
cc:e0:ab:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:57:48 2025 by rpki-client