This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/AF4851DEE36C11EF876EED6BC4F9AE02.roa
File: AF4851DEE36C11EF876EED6BC4F9AE02.roa (raw, json)
Hash identifier: Wn369l93+2+aQnvi9l/DEYR+w0mxvVik1UUwZPt8oyg=
Subject key identifier: 7F:22:A0:C3:4D:67:63:F4:54:58:C8:2F:59:D7:DC:05:4E:51:93:49
Certificate issuer: /CN=A918664E/serialNumber=4C05BA8935E8DF3CC23250B567F2056B850715B9
Certificate serial: 0234
Authority key identifier: 4C:05:BA:89:35:E8:DF:3C:C2:32:50:B5:67:F2:05:6B:85:07:15:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/AF4851DEE36C11EF876EED6BC4F9AE02.roa
Signing time: Sat 22 Nov 2025 07:09:11 +0000
ROA not before: Sat 22 Nov 2025 07:09:11 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 150108
IP address blocks: 103.122.222.0/24 maxlen: 24
2400:f160::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.crl
rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 01:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 564 (0x234)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918664E, serialNumber=4C05BA8935E8DF3CC23250B567F2056B850715B9
Validity
Not Before: Nov 22 07:09:11 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=69216197-f25a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:45:4e:ef:eb:b6:12:1d:33:89:e3:27:ea:40:
0f:02:89:aa:4b:8f:32:5a:c0:1d:32:00:5f:a4:11:
1c:be:cf:25:20:65:83:72:52:2a:f1:3d:c3:ed:cd:
5e:89:55:7f:f1:f0:15:c4:c8:9f:61:6b:7c:77:88:
51:45:40:6a:2d:03:99:2a:67:7d:89:96:0c:df:6a:
80:9d:8f:87:33:51:db:f9:02:0c:bd:f0:3d:53:cc:
1d:ef:a5:6b:5f:aa:63:cb:5c:7c:cf:26:c9:c2:81:
7d:0d:b6:41:2e:36:c6:09:35:e6:08:fb:83:3b:e2:
52:ec:3f:7c:38:1a:3d:52:fe:89:20:64:7e:a9:51:
2b:49:ff:ef:89:17:2d:84:ce:fa:c7:50:7e:21:8a:
10:71:59:21:16:ff:a6:af:d6:5b:63:ba:63:1d:fb:
d0:9f:91:55:3f:35:b6:0e:c7:ef:d1:e9:8a:0e:b7:
50:b8:f6:1f:fa:04:fc:a3:dc:b1:18:12:2b:06:7e:
9f:a2:3b:36:84:dd:4d:66:a2:b9:2b:57:a8:9f:9e:
02:bf:ae:01:d9:86:61:9f:04:45:42:71:6c:50:21:
e0:3d:66:8f:7b:75:29:ee:a5:d9:be:2b:89:59:64:
ff:11:c1:43:7f:37:ae:f7:00:d5:9f:5c:4d:2a:b4:
a9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:22:A0:C3:4D:67:63:F4:54:58:C8:2F:59:D7:DC:05:4E:51:93:49
X509v3 Authority Key Identifier:
keyid:4C:05:BA:89:35:E8:DF:3C:C2:32:50:B5:67:F2:05:6B:85:07:15:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/AF4851DEE36C11EF876EED6BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.222.0/24
IPv6:
2400:f160::/32
Signature Algorithm: sha256WithRSAEncryption
90:6a:a2:b5:84:6f:82:80:f3:fe:39:f8:a5:4a:c2:05:79:f0:
ff:a3:7c:67:82:6c:8c:af:e6:83:86:f5:30:e8:93:9c:84:ab:
91:ae:9e:a8:c2:b4:f3:87:86:b9:59:04:37:c9:5b:af:2e:10:
0a:b8:49:e8:13:06:4f:a3:02:7b:13:9b:71:d3:b6:ab:df:05:
29:f2:5e:88:32:f2:4c:76:74:40:41:99:9c:be:92:72:fb:21:
1c:56:02:08:9e:41:d7:b0:0c:e4:6f:8c:8f:20:57:c9:9b:d3:
ea:3c:0f:64:4d:46:53:49:e1:f1:34:02:b9:8d:3c:8c:36:bb:
21:d6:02:9d:a3:51:5f:19:f0:43:77:02:58:5f:12:ca:a2:b3:
2b:af:2f:50:57:77:55:88:dd:1b:af:11:7f:89:9c:85:3d:9e:
e7:45:6f:a2:31:67:a6:58:9b:34:98:40:38:7f:e2:8b:e5:45:
49:c2:8a:e4:90:0b:7f:90:fe:3d:17:50:9e:ea:c7:94:19:e0:
a7:32:0f:8b:e6:34:d7:30:66:09:3d:d0:4b:45:2e:08:63:fe:
a6:d5:3b:fd:e8:8d:a1:ac:97:3c:9f:87:c6:a9:ba:56:5b:58:
77:49:b2:6c:09:a4:26:66:de:6b:34:13:55:eb:95:0d:08:ff:
64:89:58:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:35:27 2025 by rpki-client