This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/3102D984C7A511F0AB2B8524C4F9AE02.roa
File: 3102D984C7A511F0AB2B8524C4F9AE02.roa (raw, json)
Hash identifier: OQj87ghxS5TbGdxIkx5R4cZ4gUWCAYoEWtR9bN5TBkE=
Subject key identifier: DD:97:CD:56:86:1C:B2:17:C0:51:5B:AB:E1:AD:F1:8B:D8:8E:A0:74
Certificate issuer: /CN=A9194093/serialNumber=2D7356DA171BFD6403CD9F33E3DB95B44CB4BF1D
Certificate serial: 08
Authority key identifier: 2D:73:56:DA:17:1B:FD:64:03:CD:9F:33:E3:DB:95:B4:4C:B4:BF:1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXNW2hcb_WQDzZ8z49uVtEy0vx0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/3102D984C7A511F0AB2B8524C4F9AE02.roa
Signing time: Sat 22 Nov 2025 13:14:35 +0000
ROA not before: Sat 22 Nov 2025 13:14:35 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 13213
IP address blocks: 103.175.128.0/24 maxlen: 24
103.175.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.crl
rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXNW2hcb_WQDzZ8z49uVtEy0vx0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194093, serialNumber=2D7356DA171BFD6403CD9F33E3DB95B44CB4BF1D
Validity
Not Before: Nov 22 13:14:35 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6921b73b-dfbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0e:a4:c4:58:92:e2:b6:f8:15:d1:ab:59:ec:
f4:44:dc:8f:44:a5:ba:3d:c3:36:fe:f4:4d:4a:e7:
4e:19:93:00:23:07:ce:18:37:fd:af:6b:c8:85:b4:
8e:60:bc:f0:a3:65:31:cb:07:6e:02:45:3b:83:82:
c7:5e:17:b0:5a:f5:f2:de:ff:5d:49:c6:5e:1f:f6:
37:9e:2c:a1:91:ab:fd:17:73:61:22:8b:69:1e:e4:
d7:9e:93:e1:e0:f8:82:4c:f5:50:35:14:52:78:bb:
75:96:40:25:59:e7:95:2a:f5:6a:d4:8c:a5:dd:37:
ab:d2:8e:be:9e:ad:dc:d9:32:49:9d:3d:9a:98:6a:
1c:f4:7d:eb:8c:8b:07:2d:2f:81:82:f4:5e:8a:4e:
88:07:79:73:b8:36:0c:48:b1:dd:98:b5:86:e4:94:
26:36:48:3e:fb:7d:ae:c5:75:a2:a5:d3:aa:f1:5b:
a9:39:57:0f:04:3a:b4:5a:00:34:a4:86:11:5a:db:
00:fb:33:b8:59:2a:5a:b3:8d:74:ed:9b:d0:9b:ff:
83:05:02:a1:0a:26:d6:fd:18:00:56:15:c2:45:7f:
ee:15:ce:d3:f4:0e:b9:2a:ec:38:c5:91:01:b1:4b:
08:e5:73:a9:b5:cb:77:28:70:6a:a0:25:cb:b9:3d:
55:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:97:CD:56:86:1C:B2:17:C0:51:5B:AB:E1:AD:F1:8B:D8:8E:A0:74
X509v3 Authority Key Identifier:
keyid:2D:73:56:DA:17:1B:FD:64:03:CD:9F:33:E3:DB:95:B4:4C:B4:BF:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXNW2hcb_WQDzZ8z49uVtEy0vx0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/3102D984C7A511F0AB2B8524C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.175.128.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:8f:bd:98:73:75:85:f5:45:44:c5:72:bc:5b:b9:4e:55:5f:
a0:94:28:3a:fa:ef:7d:f5:4a:0b:eb:76:9f:31:ab:d8:82:74:
53:a5:a5:18:55:bf:75:b1:bd:2d:83:6b:2a:b2:9a:25:16:c0:
28:45:1d:17:20:d0:4e:f6:ac:21:28:a2:58:85:a3:1f:56:07:
9b:03:e3:64:7c:47:ed:b9:e5:1f:1b:ab:8f:5b:03:e1:c6:26:
a6:e2:60:71:be:f6:13:f1:0a:c1:5a:31:cc:1a:c8:76:9a:22:
79:37:ff:4f:88:6d:2b:ab:32:b7:d8:83:72:e7:ce:ca:cd:0a:
00:6c:35:77:14:e2:6a:bd:8f:46:b3:34:69:a5:f7:70:f9:c6:
37:c9:22:91:94:c3:4e:f2:c5:27:24:52:7e:84:7a:5a:90:12:
a5:54:5d:82:9b:b6:79:29:48:7c:2b:57:a2:e9:f5:65:1f:a0:
ac:1c:7a:5e:eb:e4:a8:f0:c1:f4:b3:58:6e:93:91:ea:89:46:
ed:d7:98:4a:99:b6:e7:47:f0:40:c1:86:e3:24:e5:cc:87:3c:
04:ba:71:f0:21:5a:8d:da:7f:98:93:b4:16:74:19:5e:70:d2:
9c:5b:e3:2c:a7:e0:d1:f1:d7:14:39:c9:46:b8:52:aa:40:30:
af:a4:3f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 16:18:35 2025 by rpki-client