This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/3A9AD3CEDAD411EBB35DA50AC4F9AE02.roa
File: 3A9AD3CEDAD411EBB35DA50AC4F9AE02.roa (raw, json)
Hash identifier: 4YmEMzZF9Z0+vuAqy9c7qXvkwg3h0FbJupKtjQXz9Dw=
Subject key identifier: C9:DF:12:13:38:12:0E:3F:D6:93:BC:F1:3D:74:EF:25:B7:0A:F7:32
Certificate issuer: /CN=A9164860/serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E
Certificate serial: 12C6
Authority key identifier: BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/3A9AD3CEDAD411EBB35DA50AC4F9AE02.roa
Signing time: Tue 09 Dec 2025 05:48:57 +0000
ROA not before: Tue 09 Dec 2025 05:48:57 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 141013
IP address blocks: 103.125.244.0/24 maxlen: 24
116.89.245.0/24 maxlen: 24
2401:fdc0:10::/44 maxlen: 44
2401:fdc0:20::/44 maxlen: 44
2401:fdc0:30::/44 maxlen: 44
2401:fdc0:ff00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl
rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 16:49:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4806 (0x12c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164860, serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E
Validity
Not Before: Dec 9 05:48:57 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6937b849-bb0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b4:c3:c2:4a:18:9e:88:a6:8d:4b:67:ff:76:
90:99:3c:32:30:32:e8:7f:55:f5:2b:f3:09:0c:07:
17:bf:b6:43:df:3f:55:87:34:89:71:25:61:dd:91:
44:f0:7c:d7:69:22:64:1d:f4:18:9d:d1:53:df:91:
f8:e4:aa:28:31:69:ae:8a:e2:5b:28:3c:84:3f:c6:
de:64:3c:77:95:ce:47:64:1d:ef:c5:ca:0c:26:c1:
27:77:ba:d7:b3:a6:66:e2:d6:54:f2:e1:7e:83:3f:
19:f2:ac:87:6e:87:6e:70:f0:65:56:12:27:2a:3d:
a8:b0:1e:f3:16:02:f9:76:8d:a9:d4:b6:74:0e:38:
16:be:b0:f9:be:b6:93:2b:76:25:8b:d3:20:e2:bc:
eb:65:8f:9f:81:88:7e:39:24:9d:d7:c1:08:df:57:
21:14:41:f3:49:ec:be:73:36:5a:39:91:8b:55:32:
3a:46:44:f2:cf:65:1e:d8:f1:1d:27:9d:7b:b4:d8:
5e:fc:c2:df:19:e8:3b:ec:16:53:29:25:53:d8:04:
15:01:02:b1:b1:34:d7:5d:9d:78:2d:81:58:cf:3d:
e3:19:00:2a:fa:46:6b:a1:2c:a0:e6:76:0e:22:6b:
2a:1d:a8:28:e7:2a:15:a1:d8:68:bc:f3:b4:97:7c:
bf:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:DF:12:13:38:12:0E:3F:D6:93:BC:F1:3D:74:EF:25:B7:0A:F7:32
X509v3 Authority Key Identifier:
keyid:BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/3A9AD3CEDAD411EBB35DA50AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.125.244.0/24
116.89.245.0/24
IPv6:
2401:fdc0:10::-2401:fdc0:3f:ffff:ffff:ffff:ffff:ffff
2401:fdc0:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
69:1e:ed:d3:82:11:31:cb:df:bc:18:45:8f:57:56:42:95:c3:
2b:a0:6b:9b:68:f5:7d:06:8b:11:5e:02:96:4a:3f:61:f5:c9:
1d:ec:cd:8e:5e:52:22:79:83:1e:f6:62:ca:ae:3d:86:57:52:
03:b2:ad:70:5d:89:82:98:52:56:d6:78:75:e9:80:7e:61:a9:
38:9e:f3:be:00:5e:d0:56:bc:3b:bc:32:00:c7:23:4d:56:c0:
9a:dd:2b:ec:d7:fb:94:81:41:29:98:6d:92:2c:8b:b2:70:cd:
e6:99:37:cf:39:69:e9:13:8d:ab:9f:26:cf:64:11:b1:67:63:
4d:7f:ce:80:1f:e4:ca:0b:bd:bb:15:13:84:3a:33:0f:65:5b:
f3:a6:28:f2:08:74:9c:47:41:2b:86:6c:2c:7f:94:db:ac:05:
46:00:89:7a:a6:b8:79:e0:09:35:8a:d5:03:15:0e:4a:b0:d2:
a3:38:26:ab:f6:e6:18:c9:5d:2b:43:71:03:3f:39:f1:4f:7e:
3b:cb:77:8e:35:03:90:bf:51:40:a5:56:da:9a:65:ed:91:6a:
b6:dc:5c:84:e7:9c:d9:30:57:12:be:0e:08:22:4d:b8:8c:32:
f6:0c:e0:e7:a5:61:b0:77:a5:82:b1:40:57:be:23:4e:d8:30:
e1:0f:47:3f
-----BEGIN CERTIFICATE-----
MIIFmzCCBIOgAwIBAgICEsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjQ4NjAxMTAvBgNVBAUTKEJDNTM2QzAwRjg1RjU5MDQxRDlDNEMyOTYxRjcyMjQy
QkY2MEQ1MUUwHhcNMjUxMjA5MDU0ODU3WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTM3Yjg0OS1iYjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt7TDwkoYnoimjUtn/3aQmTwyMDLof1X1K/MJDAcXv7ZD3z9VhzSJcSVh3ZFE
8HzXaSJkHfQYndFT35H45KooMWmuiuJbKDyEP8beZDx3lc5HZB3vxcoMJsEnd7rX
s6Zm4tZU8uF+gz8Z8qyHboducPBlVhInKj2osB7zFgL5do2p1LZ0DjgWvrD5vraT
K3Yli9Mg4rzrZY+fgYh+OSSd18EI31chFEHzSey+czZaOZGLVTI6RkTyz2Ue2PEd
J517tNhe/MLfGeg77BZTKSVT2AQVAQKxsTTXXZ14LYFYzz3jGQAq+kZroSyg5nYO
ImsqHago5yoVodhovPO0l3y/mQIDAQABo4ICvzCCArswHQYDVR0OBBYEFMnfEhM4
Eg4/1pO88T107yW3CvcyMB8GA1UdIwQYMBaAFLxTbAD4X1kEHZxMKWH3IkK/YNUe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDg2MC9CNDAxQzk4MkU5
NzAxMUU4QjAzNTkzNTlDNEY5QUUwMi92Rk5zQVBoZldRUWRuRXdwWWZjaVFyOWcx
UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZGTnNBUGhmV1FRZG5Fd3BZZmNpUXI5ZzFSNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjQ4NjAvQjQwMUM5ODJFOTcwMTFFOEIwMzU5MzU5QzRGOUFFMDIvM0E5QUQzQ0VE
QUQ0MTFFQkIzNURBNTBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSQYIKwYBBQUHAQcBAf8E
OjA4MBIEAgABMAwDBABnffQDBAB0WfUwIgQCAAIwHDASAwcEJAH9wAAQAwcGJAH9
wAAAAwYAJAH9wP8wDQYJKoZIhvcNAQELBQADggEBAGke7dOCETHL37wYRY9XVkKV
wyuga5to9X0GixFeApZKP2H1yR3szY5eUiJ5gx72YsquPYZXUgOyrXBdiYKYUlbW
eHXpgH5hqTie874AXtBWvDu8MgDHI01WwJrdK+zX+5SBQSmYbZIsi7JwzeaZN885
aekTjaufJs9kEbFnY01/zoAf5MoLvbsVE4Q6Mw9lW/OmKPIIdJxHQSuGbCx/lNus
BUYAiXqmuHngCTWK1QMVDkqw0qM4Jqv25hjJXStDcQM/OfFPfjvLd441A5C/UUCl
VtqaZe2RarbcXITnnNkwVxK+DggiTbiMMvYM4OelYbB3pYKxQFe+I07YMOEPRz8=
-----END CERTIFICATE-----
Generated at Tue Dec 23 23:30:27 2025 by rpki-client