This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/AFFF3716479111ECA77ED34DC4F9AE02.roa
File: AFFF3716479111ECA77ED34DC4F9AE02.roa (raw, json)
Hash identifier: SVdQW6VFhMPakkvyBDzdmVeaSxb6sTFpfoyjqJiJnDU=
Subject key identifier: 31:5D:7D:ED:81:28:C5:8A:9F:F9:CD:E2:EC:08:04:EF:B2:B1:CF:F2
Certificate issuer: /CN=A91A7CA3/serialNumber=13B94CAD559E20FBB30E0897A140666B2740AF1E
Certificate serial: 04D8
Authority key identifier: 13:B9:4C:AD:55:9E:20:FB:B3:0E:08:97:A1:40:66:6B:27:40:AF:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7lMrVWeIPuzDgiXoUBmaydArx4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/AFFF3716479111ECA77ED34DC4F9AE02.roa
Signing time: Sun 30 Nov 2025 22:55:53 +0000
ROA not before: Sun 30 Nov 2025 22:55:53 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 137385
IP address blocks: 103.174.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.crl
rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7lMrVWeIPuzDgiXoUBmaydArx4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 22:22:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1240 (0x4d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7CA3, serialNumber=13B94CAD559E20FBB30E0897A140666B2740AF1E
Validity
Not Before: Nov 30 22:55:53 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=692ccb79-6049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:51:ad:7e:74:9c:7d:37:01:65:17:bf:96:29:
6a:b6:cd:eb:27:0b:9b:06:f3:59:29:38:5c:c8:58:
8d:7e:94:3c:62:8f:da:bb:ee:aa:0e:ff:fb:3d:c5:
66:72:a0:cc:dc:13:42:a1:23:ab:2a:d4:d7:68:ca:
9f:c9:0f:96:7a:24:35:c0:4f:b3:67:3f:44:40:44:
3c:9f:e8:37:ef:a4:d5:18:f3:f8:33:ce:79:1d:32:
35:e9:d0:ca:92:5a:67:9e:2d:07:4f:34:d4:9e:4e:
38:17:24:60:2b:47:a0:11:85:a9:35:0b:ee:5b:bd:
ee:b5:8b:a5:ae:35:5b:30:b5:7d:8b:3b:73:02:8a:
f9:e9:8d:9d:be:d9:70:57:32:5e:01:fb:f5:16:23:
e5:e2:22:6a:07:c6:4c:7a:ff:cb:7e:42:6f:42:7f:
d7:3d:3b:23:00:ed:65:4f:9a:12:9c:3f:b3:7b:94:
58:9f:73:dc:39:4e:94:56:2f:4d:b9:13:56:4e:1d:
4e:14:66:45:45:f1:3c:a1:8b:77:af:5b:1c:fc:f0:
aa:a5:a5:2a:0e:4f:2b:cb:ec:c3:31:15:01:ce:37:
d1:4b:e7:cc:7b:5e:c5:d2:52:bd:93:80:27:68:fb:
c7:75:de:f2:dd:ec:2a:4b:2c:d0:7b:f4:3d:b8:f9:
a0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:5D:7D:ED:81:28:C5:8A:9F:F9:CD:E2:EC:08:04:EF:B2:B1:CF:F2
X509v3 Authority Key Identifier:
keyid:13:B9:4C:AD:55:9E:20:FB:B3:0E:08:97:A1:40:66:6B:27:40:AF:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7lMrVWeIPuzDgiXoUBmaydArx4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/AFFF3716479111ECA77ED34DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.174.225.0/24
Signature Algorithm: sha256WithRSAEncryption
65:73:39:42:ca:f0:13:da:6c:11:3d:c0:28:81:bb:a0:cd:91:
2c:2c:ba:2c:20:be:d2:19:4a:a8:50:d0:8d:3d:6c:ca:50:68:
fd:7f:b8:9b:a5:8f:c0:72:a5:53:6b:51:bf:87:2b:78:29:96:
a2:d8:71:5d:87:39:3f:47:3b:44:e1:fe:f4:9e:72:8d:f3:32:
16:f6:b5:a3:b2:e1:26:0c:8e:18:f5:26:7d:7f:1c:51:cb:07:
19:de:f9:a6:9b:00:2f:88:fb:fe:45:75:c5:d2:f5:51:19:6c:
7f:91:ab:80:ac:20:e4:45:d5:6e:54:6f:2c:c8:5c:4b:51:ac:
a5:16:92:06:78:5d:0c:5c:ce:e2:9a:59:4c:02:ce:82:7d:25:
4d:b5:51:d0:01:b6:45:6e:e1:d4:33:ff:99:23:3e:db:5b:a0:
c2:c1:ef:10:3d:10:49:06:d5:cf:45:90:24:49:de:89:a2:25:
31:27:84:5d:03:c8:05:6b:7a:a8:bd:55:6f:29:db:0c:85:a2:
d1:41:e1:76:9f:08:3a:a4:42:a0:b8:ab:7c:10:d0:d1:da:3c:
03:04:d7:ad:90:a2:c2:8e:1e:1b:66:6e:53:19:c6:af:d4:fa:
b5:69:67:34:85:b2:3c:fb:8f:fc:33:ae:7f:41:c9:2e:31:f2:
93:c7:0f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:28:59 2025 by rpki-client