This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/9D999E187CA811F0AE15ED6EC4F9AE02.roa
File: 9D999E187CA811F0AE15ED6EC4F9AE02.roa (raw, json)
Hash identifier: XUFwo2AoDu03LerHonuKCTWQdv0ZoVpeC0iTRlacVE0=
Subject key identifier: A2:86:78:5E:27:D7:A5:4C:FA:07:5C:27:97:C5:AA:5B:B3:C2:6E:5B
Certificate issuer: /CN=A918FC40/serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571
Certificate serial: 0B8C
Authority key identifier: 16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/9D999E187CA811F0AE15ED6EC4F9AE02.roa
Signing time: Tue 02 Dec 2025 18:50:23 +0000
ROA not before: Tue 02 Dec 2025 18:50:23 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 9311
IP address blocks: 103.246.252.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl
rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 18:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2956 (0xb8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FC40, serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571
Validity
Not Before: Dec 2 18:50:23 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=692f34ee-5c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:88:9f:0b:23:39:11:22:22:ad:64:af:00:e8:
59:9a:7a:32:79:0e:64:0c:2d:67:46:4a:de:24:d0:
64:97:6e:95:5c:61:18:5d:27:0b:f5:04:e3:d6:36:
4f:d7:9b:5f:23:ab:7f:3c:57:e9:bc:7b:a8:c7:59:
b5:4b:c2:5e:2c:95:d5:56:4f:b0:8a:25:11:c4:c9:
94:2a:21:f9:0c:c5:d3:a8:c3:fa:8a:c1:d4:8d:21:
96:56:4e:6f:5e:6d:75:50:54:7d:0d:3f:5e:98:78:
a7:f9:84:b0:88:46:80:34:09:31:94:95:a5:f5:53:
cd:0c:35:d6:f5:21:51:a4:19:2b:6d:65:13:28:fe:
a8:73:b0:00:aa:69:c2:64:9c:57:bf:3e:53:92:43:
0c:9d:80:3b:bd:55:1a:64:3a:bd:6d:bd:b1:bf:2f:
b9:f6:4d:d3:94:ec:81:f7:90:b7:cb:47:58:a1:e0:
06:5b:41:6a:13:95:9c:59:ed:2b:5b:d1:fe:bd:fa:
c6:e0:9c:6a:64:35:ec:d1:1c:ed:cf:0a:cf:2c:c7:
eb:5c:7c:ee:3e:9a:e9:d5:70:ca:60:3f:91:c5:1e:
04:98:41:74:8f:51:c0:3b:72:12:c0:8c:42:17:11:
9f:5d:23:f3:89:af:21:c0:e6:60:34:7b:8e:f0:6d:
7f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:86:78:5E:27:D7:A5:4C:FA:07:5C:27:97:C5:AA:5B:B3:C2:6E:5B
X509v3 Authority Key Identifier:
keyid:16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/9D999E187CA811F0AE15ED6EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.246.252.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:f0:20:71:98:6e:bc:4e:5f:99:0d:96:96:a6:16:f4:37:78:
1d:81:86:ef:06:20:d3:ae:ef:05:81:08:de:2c:65:5b:35:a2:
88:27:24:72:4a:54:97:e9:5c:c9:ce:ce:d2:dd:75:45:f4:08:
b2:2a:a0:24:23:29:7d:3b:9a:6d:bd:bc:8a:2c:78:6e:78:98:
28:c1:4b:38:fe:26:a3:39:cd:72:e5:73:9d:f0:e5:7e:74:2a:
4f:6d:38:a8:22:d9:fc:57:f6:08:9c:fe:cd:0b:69:15:60:2e:
7a:ec:c9:31:e2:e0:ff:1b:e2:1b:46:e8:9d:e7:b2:29:87:38:
df:15:43:c1:eb:7b:66:74:36:f3:6a:98:76:ed:42:cd:7c:16:
2f:5e:9f:f8:21:21:78:f5:d4:c4:09:99:b6:b5:ce:d3:cf:bf:
83:6c:37:43:8a:3a:f0:6c:9f:37:e0:23:b5:d0:7b:9e:10:4f:
26:a1:02:ce:39:a8:4b:44:c5:26:1b:fd:df:cb:3f:83:4c:06:
3e:5d:86:5c:b4:d4:be:f6:ea:23:c0:ec:7c:27:63:d2:03:45:
c7:9e:d5:69:77:99:12:ef:b5:4b:1e:3e:a3:c2:bb:b7:53:a6:
04:10:37:1c:f8:46:b0:c5:37:bc:a6:45:fa:21:64:ba:21:ea:
dd:ae:26:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 13:10:09 2025 by rpki-client