This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/585ECA9EC6D111F095FA7F7AC4F9AE02.roa
File: 585ECA9EC6D111F095FA7F7AC4F9AE02.roa (raw, json)
Hash identifier: 1SEPVzYRAGDUfKY/bJWbY1lv2kLO7Bzm+OBHzqa00/0=
Subject key identifier: C4:8C:15:04:4A:67:13:65:B7:82:71:4B:01:43:0D:D8:26:B3:88:06
Certificate issuer: /CN=A91D298C/serialNumber=5FC26B928DEDC90C391CC4F529BA7B9E09A5046E
Certificate serial: 06
Authority key identifier: 5F:C2:6B:92:8D:ED:C9:0C:39:1C:C4:F5:29:BA:7B:9E:09:A5:04:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/585ECA9EC6D111F095FA7F7AC4F9AE02.roa
Signing time: Fri 21 Nov 2025 12:06:53 +0000
ROA not before: Fri 21 Nov 2025 12:06:53 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 139646
IP address blocks: 103.143.14.0/23 maxlen: 23
103.143.14.0/24 maxlen: 24
103.143.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.crl
rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:51:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D298C, serialNumber=5FC26B928DEDC90C391CC4F529BA7B9E09A5046E
Validity
Not Before: Nov 21 12:06:53 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=692055dd-5988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7e:69:04:3c:c5:f1:4f:09:28:76:e6:b4:ba:
4a:a3:46:4a:59:03:5c:43:8c:5c:b6:39:56:0b:52:
37:dd:06:0a:dd:20:5c:42:a4:e5:d7:24:9d:83:c9:
15:bc:b8:a3:df:2f:ff:d5:04:49:6d:02:ac:c5:df:
e3:7b:ca:44:45:c0:40:1f:6b:61:94:00:84:7a:a4:
c1:39:a2:d3:50:51:af:46:f0:eb:28:b1:13:a7:db:
3c:7d:e0:72:9f:0b:bb:36:dc:1d:04:c5:02:9c:de:
77:ec:d2:76:64:98:6d:62:6c:9e:db:ec:fa:17:43:
a3:70:11:14:74:42:c0:2b:54:3e:2f:57:6a:b5:09:
ec:87:ef:25:8e:6f:10:79:0a:a8:d3:b8:7b:23:83:
f2:8c:35:b9:41:b3:4c:2b:32:ff:dc:19:6e:42:55:
7b:b1:93:2d:57:bc:50:c1:0e:d7:93:1e:79:0a:69:
01:17:00:fe:58:65:31:08:e8:69:59:3f:b1:3c:fb:
99:d5:ad:54:ef:4a:91:3d:3b:8e:0f:ed:17:1e:c7:
a3:7a:80:80:e5:b6:7b:d8:91:ea:d8:fc:cd:62:c8:
93:36:94:91:ce:cc:34:67:63:85:c1:89:a4:34:20:
db:be:2b:1d:db:34:17:f0:dc:e9:0d:77:da:d6:8d:
49:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8C:15:04:4A:67:13:65:B7:82:71:4B:01:43:0D:D8:26:B3:88:06
X509v3 Authority Key Identifier:
keyid:5F:C2:6B:92:8D:ED:C9:0C:39:1C:C4:F5:29:BA:7B:9E:09:A5:04:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/585ECA9EC6D111F095FA7F7AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.143.14.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:6c:79:0d:c3:00:90:29:00:11:cc:55:32:1e:43:6b:b7:8b:
74:50:96:f9:6f:b9:a4:ad:c7:a4:de:31:c9:67:14:63:5a:2e:
3f:05:0a:14:29:b6:51:74:f8:8f:ec:68:ec:1a:f2:dd:e5:b9:
59:f5:a1:4e:7a:50:de:29:37:61:06:12:b7:63:59:8d:5b:93:
8d:e1:8a:6d:00:f8:07:a3:60:7a:7d:bc:c3:80:07:48:09:66:
e6:be:9d:52:04:45:68:29:2c:cf:0e:0b:2e:93:54:15:41:8f:
9e:e6:ad:80:e0:71:3f:c2:eb:b9:9f:e3:50:6f:ce:68:6b:c0:
25:14:86:ad:8a:35:85:09:1b:99:05:a4:53:f8:47:d2:54:f6:
cb:5d:0f:2f:65:88:50:05:96:18:99:97:f2:37:97:df:b9:9b:
22:c4:cb:bc:0a:34:c9:a8:83:5f:ac:c1:47:75:2c:a6:dd:57:
f7:61:5f:e4:f1:9c:e9:4b:40:99:b1:9b:0b:f3:4a:a0:7a:89:
e0:ba:3d:d4:93:fc:61:a9:60:69:a9:27:2e:44:e0:34:55:a7:
d9:76:8e:38:12:0e:12:51:3d:1d:3b:21:57:a6:97:f0:ff:4e:
5f:e1:10:20:44:d5:30:93:59:2e:31:5f:46:9f:da:69:03:6b:
9e:96:46:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:34:08 2025 by rpki-client