This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/B3878620B15E11EE9521E85BC4F9AE02.roa
File: B3878620B15E11EE9521E85BC4F9AE02.roa (raw, json)
Hash identifier: czgCm9inUwQtKmsycjisqnVVnUqNecHZYtpi4MypO+s=
Subject key identifier: D6:23:1B:30:0B:BE:F6:C5:39:CE:91:32:29:AC:1D:6E:C2:67:40:85
Certificate issuer: /CN=A9194692/serialNumber=AFE5B3CD2DC567AB8A58EB3980D5E5E784290A40
Certificate serial: 077A
Authority key identifier: AF:E5:B3:CD:2D:C5:67:AB:8A:58:EB:39:80:D5:E5:E7:84:29:0A:40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-WzzS3FZ6uKWOs5gNXl54QpCkA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/B3878620B15E11EE9521E85BC4F9AE02.roa
Signing time: Tue 02 Dec 2025 20:54:27 +0000
ROA not before: Tue 02 Dec 2025 20:54:27 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 141418
IP address blocks: 103.158.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.crl
rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-WzzS3FZ6uKWOs5gNXl54QpCkA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 20:39:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1914 (0x77a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194692, serialNumber=AFE5B3CD2DC567AB8A58EB3980D5E5E784290A40
Validity
Not Before: Dec 2 20:54:27 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=692f5203-8a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f2:1e:14:02:d3:aa:be:46:31:99:a3:17:3f:
b7:15:a9:c4:d1:e0:20:cb:57:5c:56:35:18:47:2c:
a7:4c:86:75:db:0f:23:30:33:ce:77:10:30:6c:14:
d7:59:2a:c6:fe:b8:92:56:92:d1:12:68:b5:41:56:
26:7b:f8:17:0f:c9:bf:89:25:bf:ed:79:ee:67:6b:
7b:cb:71:4f:1f:96:fd:3a:e8:05:fc:23:1f:4d:3a:
a3:72:16:b2:dc:4c:36:e9:9f:53:68:f8:7e:4c:e7:
0c:06:62:b2:e4:d1:a2:c1:35:17:a7:d8:4a:52:e3:
fe:2b:b9:be:96:70:9d:2a:f1:20:0d:0e:bf:64:a4:
86:b6:ae:60:57:96:49:dd:d2:03:0f:25:e9:42:f6:
4b:35:78:64:98:87:59:f5:fa:89:86:23:f6:52:87:
1e:01:5f:39:bf:8f:d2:49:89:55:11:8f:58:16:69:
e4:2f:1f:a5:35:29:1e:10:ce:d9:e0:85:cd:54:6d:
59:73:ca:b1:99:1e:57:ca:5c:6d:5e:eb:62:5d:80:
a3:f8:a8:91:5f:12:34:6d:8d:d2:14:49:9e:39:9c:
4b:d4:c3:46:fd:7a:84:54:35:38:04:7a:1c:0a:38:
e6:6c:e1:db:9f:ea:b8:23:55:d5:a6:99:75:e3:62:
ce:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:23:1B:30:0B:BE:F6:C5:39:CE:91:32:29:AC:1D:6E:C2:67:40:85
X509v3 Authority Key Identifier:
keyid:AF:E5:B3:CD:2D:C5:67:AB:8A:58:EB:39:80:D5:E5:E7:84:29:0A:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-WzzS3FZ6uKWOs5gNXl54QpCkA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/B3878620B15E11EE9521E85BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.158.210.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:83:26:4a:50:97:c2:7f:70:3f:20:96:0d:09:28:94:b1:d7:
a2:df:36:94:73:18:01:fa:40:6c:b0:48:b6:c5:af:ae:2d:35:
d9:d5:a9:f2:d0:e6:18:30:84:dc:49:38:9c:02:48:92:3b:fd:
56:db:28:f9:0d:60:f8:18:f9:85:15:36:04:71:d1:ec:75:8b:
8d:7f:dc:66:34:36:c0:5f:5b:3c:6c:88:5b:40:6c:f6:ad:fc:
68:f2:8e:c1:86:98:3e:52:db:84:45:ef:ad:49:53:6c:f9:d4:
30:53:f6:4e:28:77:bd:2c:c9:33:3c:69:f9:59:25:f1:e8:a6:
9b:e4:37:d5:96:5f:0a:87:84:f5:d2:86:5d:76:18:e0:d4:b7:
87:e9:1f:09:d3:8b:18:79:94:5f:b3:88:e1:a1:0b:3a:99:9c:
dd:d3:92:5e:2c:45:80:e4:14:f5:4b:69:8c:a3:36:61:b8:22:
59:a5:ca:25:1e:7f:51:2d:81:e1:4c:ab:80:01:33:55:2e:8c:
01:4b:50:55:36:32:74:03:ea:58:cb:8d:9b:ac:5d:19:39:2d:
7f:51:52:c9:b6:52:74:41:9a:2c:a2:01:9a:e2:1b:8d:d9:da:
29:11:a5:8b:41:32:e1:12:0b:17:f3:15:e5:d9:2f:79:66:ba:
b2:a3:da:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:00:34 2025 by rpki-client