This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/C3CD4B12C85411E8A5D4274BC4F9AE02.roa
File: C3CD4B12C85411E8A5D4274BC4F9AE02.roa (raw, json)
Hash identifier: eY3ibsYzV91/JflqQnul3DxFJH+5O7KLj0qmVYC2zhk=
Subject key identifier: 06:3D:1A:D1:56:7F:E5:C8:C9:A1:1F:20:FD:C2:C9:71:04:6D:7E:3B
Certificate issuer: /CN=A919C5FE/serialNumber=44ABE24B70A116046F744211D18D026505B0C7B3
Certificate serial: 12F5
Authority key identifier: 44:AB:E2:4B:70:A1:16:04:6F:74:42:11:D1:8D:02:65:05:B0:C7:B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/C3CD4B12C85411E8A5D4274BC4F9AE02.roa
Signing time: Fri 28 Nov 2025 16:49:01 +0000
ROA not before: Fri 28 Nov 2025 16:49:01 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 7615
IP address blocks: 103.129.63.0/24 maxlen: 24
2001:dea:4001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.crl
rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 16:34:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4853 (0x12f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C5FE, serialNumber=44ABE24B70A116046F744211D18D026505B0C7B3
Validity
Not Before: Nov 28 16:49:01 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6929d27d-373b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:01:8a:86:00:89:65:8b:ae:dc:23:b9:30:aa:
23:68:4b:51:dc:f1:53:ea:a5:eb:fe:d8:7d:11:7f:
e8:64:02:13:59:7b:b8:e3:79:c0:e4:c1:c9:7f:4e:
21:0b:f3:96:72:47:6a:53:59:b8:62:23:7a:ab:dc:
b0:7c:8c:4b:72:17:92:c2:22:dc:9f:28:42:b1:0d:
15:85:19:45:94:4d:62:39:28:0e:3a:d4:64:c4:33:
39:7c:fa:2b:ee:e2:de:a2:ec:28:5a:96:ad:10:65:
cf:d3:db:e4:f8:21:1b:7c:15:60:65:21:52:dc:af:
d9:76:b8:9c:8e:af:48:f1:c8:1c:f0:1c:dc:15:42:
f1:95:79:ab:1f:eb:0e:73:fb:35:14:f9:82:3e:a9:
11:53:35:9e:26:10:f4:03:d8:2d:23:40:1f:f3:6a:
e5:5e:3f:2b:09:f8:47:c8:0a:e3:3b:12:8d:38:88:
28:b6:15:1f:4a:3c:61:b4:8a:7f:87:fc:17:71:af:
a1:b7:ad:eb:be:09:b8:7b:42:6e:39:d4:8a:7a:68:
a1:66:b0:45:7a:58:90:58:6f:89:09:ce:fb:18:ab:
92:56:87:f2:f4:51:f5:34:fc:9e:00:08:f6:d3:48:
3b:8b:16:01:de:89:c5:1e:9d:8b:67:36:5b:e9:c0:
df:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:3D:1A:D1:56:7F:E5:C8:C9:A1:1F:20:FD:C2:C9:71:04:6D:7E:3B
X509v3 Authority Key Identifier:
keyid:44:AB:E2:4B:70:A1:16:04:6F:74:42:11:D1:8D:02:65:05:B0:C7:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/C3CD4B12C85411E8A5D4274BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.129.63.0/24
IPv6:
2001:dea:4001::/48
Signature Algorithm: sha256WithRSAEncryption
18:22:d4:36:2e:b9:54:58:3c:11:d8:60:72:08:e1:af:49:93:
5e:d9:b9:09:d7:f2:3f:fc:ba:9d:0a:16:78:23:af:69:6a:58:
8f:d6:6a:d5:33:a5:55:94:88:ea:c6:ee:43:e6:7a:f3:5d:99:
1e:5b:29:2b:a5:15:e6:1c:b5:b6:89:8c:28:ef:19:d2:19:e1:
ac:50:0d:42:48:4f:7a:68:6e:07:05:b5:ad:71:59:94:82:6a:
09:70:c3:df:88:b0:d5:62:e5:e1:b7:69:be:9e:de:ff:b7:32:
a9:5a:15:b7:79:9d:4c:2f:56:09:46:02:89:2d:3d:fb:3e:98:
3a:c1:f8:0f:0b:19:a9:1a:0f:39:f5:8b:25:18:9b:d9:09:d3:
ed:86:bb:7c:f6:85:5a:e6:30:b7:6b:8a:1b:b5:00:7d:d5:4f:
60:02:8b:cc:c7:1c:6b:16:42:02:35:b8:0a:95:f9:e6:d8:02:
6c:e9:4e:80:09:f5:e4:33:c2:d7:87:33:96:9e:ac:3a:18:53:
da:5c:24:27:b2:1f:7f:f7:16:6d:c1:6b:c6:45:1e:b3:09:5e:
57:39:93:2c:f9:0a:ef:15:16:45:40:5e:d4:b8:48:c3:5c:30:
bb:b4:a2:15:3c:af:19:9a:c8:de:77:b3:9c:10:9d:b8:52:b2:
91:49:fe:26
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICEvUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUM1RkUxMTAvBgNVBAUTKDQ0QUJFMjRCNzBBMTE2MDQ2Rjc0NDIxMUQxOEQwMjY1
MDVCMEM3QjMwHhcNMjUxMTI4MTY0OTAxWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTI5ZDI3ZC0zNzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAygGKhgCJZYuu3CO5MKojaEtR3PFT6qXr/th9EX/oZAITWXu443nA5MHJf04h
C/OWckdqU1m4YiN6q9ywfIxLcheSwiLcnyhCsQ0VhRlFlE1iOSgOOtRkxDM5fPor
7uLeouwoWpatEGXP09vk+CEbfBVgZSFS3K/Zdricjq9I8cgc8BzcFULxlXmrH+sO
c/s1FPmCPqkRUzWeJhD0A9gtI0Af82rlXj8rCfhHyArjOxKNOIgothUfSjxhtIp/
h/wXca+ht63rvgm4e0JuOdSKemihZrBFeliQWG+JCc77GKuSVofy9FH1NPyeAAj2
00g7ixYB3onFHp2LZzZb6cDfFwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFAY9GtFW
f+XIyaEfIP3CyXEEbX47MB8GA1UdIwQYMBaAFESr4ktwoRYEb3RCEdGNAmUFsMez
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzVGRS9BMDdGQTFDRUM4
NTMxMUU4QUI1NEQzNDhDNEY5QUUwMi9SS3ZpUzNDaEZnUnZkRUlSMFkwQ1pRV3d4
N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JLdmlTM0NoRmdSdmRFSVIwWTBDWlFXd3g3TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUM1RkUvQTA3RkExQ0VDODUzMTFFOEFCNTREMzQ4QzRGOUFFMDIvQzNDRDRCMTJD
ODU0MTFFOEE1RDQyNzRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBABngT8wDwQCAAIwCQMHACABDepAATANBgkqhkiG9w0BAQsF
AAOCAQEAGCLUNi65VFg8Edhgcgjhr0mTXtm5CdfyP/y6nQoWeCOvaWpYj9Zq1TOl
VZSI6sbuQ+Z6812ZHlspK6UV5hy1tomMKO8Z0hnhrFANQkhPemhuBwW1rXFZlIJq
CXDD34iw1WLl4bdpvp7e/7cyqVoVt3mdTC9WCUYCiS09+z6YOsH4DwsZqRoPOfWL
JRib2QnT7Ya7fPaFWuYwt2uKG7UAfdVPYAKLzMccaxZCAjW4CpX55tgCbOlOgAn1
5DPC14czlp6sOhhT2lwkJ7Iff/cWbcFrxkUeswleVzmTLPkK7xUWRUBe1LhIw1ww
u7SiFTyvGZrI3neznBCduFKykUn+Jg==
-----END CERTIFICATE-----
Generated at Sun Dec 7 13:27:37 2025 by rpki-client