This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/64720824EF6611EB9A7EFE0EC4F9AE02.roa
File: 64720824EF6611EB9A7EFE0EC4F9AE02.roa (raw, json)
Hash identifier: 7yL6U8ud5pLwixKeXetRxZPEaqHv1CH+VsXl+F/+77I=
Subject key identifier: B0:0B:01:E0:DD:9B:E6:32:CC:1E:F3:06:03:D7:6F:01:B9:2F:B4:7E
Certificate issuer: /CN=A918E0B2/serialNumber=0B3EBA88F1ADA1A1B50891B26531A3E709BF659A
Certificate serial: 05AD
Authority key identifier: 0B:3E:BA:88:F1:AD:A1:A1:B5:08:91:B2:65:31:A3:E7:09:BF:65:9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/64720824EF6611EB9A7EFE0EC4F9AE02.roa
Signing time: Fri 14 Nov 2025 22:13:43 +0000
ROA not before: Fri 14 Nov 2025 22:13:43 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 9790
IP address blocks: 103.252.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl
rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 21:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1453 (0x5ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E0B2, serialNumber=0B3EBA88F1ADA1A1B50891B26531A3E709BF659A
Validity
Not Before: Nov 14 22:13:43 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6917a997-5936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2d:73:df:93:dc:eb:64:7a:ef:1d:f0:9c:d6:
39:9c:b5:22:9b:8b:ef:24:ac:13:c3:53:d2:50:8e:
0d:a0:f7:ca:2a:ac:58:5c:c3:67:17:1c:cc:01:aa:
4c:3d:60:86:ec:e5:a8:a7:9a:2b:13:33:b2:7d:95:
55:09:4f:34:d3:a4:21:89:5a:4d:ce:d9:94:e4:83:
6d:cf:6b:21:34:47:e7:f7:46:5f:ac:a3:f3:00:b5:
05:60:27:e1:eb:b7:3a:01:28:e4:75:1a:09:1d:b4:
02:d1:08:c2:75:7a:57:1d:09:5f:bf:76:e7:4d:fc:
0e:71:fa:4e:c4:51:aa:0a:20:a7:cf:ec:9a:3f:29:
5c:83:c3:0e:b7:8a:15:bc:52:d2:cf:2a:bb:d4:bb:
3a:e9:cc:52:de:95:62:a8:e9:a0:65:56:ac:4a:17:
29:0c:06:dd:17:75:1e:fb:c4:b1:d6:97:f0:a8:89:
f7:41:80:e4:a8:20:b3:58:ed:8d:30:fa:5f:23:00:
3f:73:c7:26:63:ad:90:54:ea:12:d6:15:21:3a:18:
c5:80:f9:76:61:31:be:e1:ec:23:f2:1c:fb:5e:03:
b7:b8:a1:f7:8d:52:b4:4d:18:28:16:41:ac:7a:b6:
ee:5c:4c:64:a8:8c:4c:0a:d1:bc:f1:9d:bf:07:13:
0a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0B:01:E0:DD:9B:E6:32:CC:1E:F3:06:03:D7:6F:01:B9:2F:B4:7E
X509v3 Authority Key Identifier:
keyid:0B:3E:BA:88:F1:AD:A1:A1:B5:08:91:B2:65:31:A3:E7:09:BF:65:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/64720824EF6611EB9A7EFE0EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.252.247.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:1c:93:73:6c:19:f3:19:48:41:ea:96:3e:42:d0:80:62:4a:
68:09:81:03:d7:b9:42:d3:80:62:c5:80:24:a0:f4:96:f0:f5:
a6:9f:5d:c0:a7:57:31:40:6f:54:5c:d8:42:a1:80:5b:b2:3a:
09:47:1d:3a:2a:7d:48:7f:58:7c:28:ab:8d:1d:b9:6f:ea:57:
92:75:98:c6:6f:06:82:a8:c9:01:06:07:97:e9:c6:42:34:ee:
8f:f9:72:9f:5a:94:b3:ee:cb:96:78:85:3b:0d:4e:d0:fc:e7:
2d:ad:b4:4e:d1:1d:0c:60:87:93:86:9e:7d:c6:66:15:7e:55:
da:e8:c3:73:b6:ed:9d:f9:ee:02:2d:fa:a8:1b:27:06:2a:7c:
65:29:29:75:fc:e8:ca:81:94:fc:41:a9:3f:b5:44:33:ea:b2:
e5:7f:4c:d5:23:c2:95:25:ec:be:d0:80:ab:ef:14:51:77:7e:
70:8c:7c:18:26:e6:0f:bf:bd:78:29:91:b1:14:fa:58:b1:ed:
38:37:bb:0d:43:0b:49:81:78:33:64:9f:4f:41:5a:fc:36:23:
94:ce:f0:b9:ee:e5:2a:0f:84:74:75:f0:f3:ac:e4:7c:2e:7f:
af:0a:10:36:7d:65:3d:b1:c8:6e:0d:bf:e0:ec:97:cd:34:63:
3f:d5:2a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:33:31 2025 by rpki-client