This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/4AC993D8D34A11EC8796812AC4F9AE02.roa
File: 4AC993D8D34A11EC8796812AC4F9AE02.roa (raw, json)
Hash identifier: c3jeelxHwHjlA2xu0esS5Df34f58Lm6B+pMQ4982vis=
Subject key identifier: D9:57:5B:D8:D7:DC:1E:21:1C:B3:B8:06:1B:4C:43:9C:B3:CA:0C:63
Certificate issuer: /CN=A911923C/serialNumber=7268743E5C50DD9F54D2A695C5A0EBF540CF9BAF
Certificate serial: 037D
Authority key identifier: 72:68:74:3E:5C:50:DD:9F:54:D2:A6:95:C5:A0:EB:F5:40:CF:9B:AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/4AC993D8D34A11EC8796812AC4F9AE02.roa
Signing time: Sat 13 Dec 2025 00:00:37 +0000
ROA not before: Sat 13 Dec 2025 00:00:37 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 63945
IP address blocks: 103.43.144.0/22 maxlen: 22
103.43.144.0/24 maxlen: 24
103.43.145.0/24 maxlen: 24
103.43.146.0/24 maxlen: 24
103.43.147.0/24 maxlen: 24
103.103.182.0/23 maxlen: 23
103.103.182.0/24 maxlen: 24
103.103.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.crl
rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 00:07:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 893 (0x37d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911923C, serialNumber=7268743E5C50DD9F54D2A695C5A0EBF540CF9BAF
Validity
Not Before: Dec 13 00:00:37 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=693caca5-2569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2d:73:c0:56:3a:12:87:bb:f9:ff:3b:64:ca:
66:58:62:26:1f:c7:d1:ad:7f:0a:e9:ae:2f:d1:b0:
18:b6:26:92:67:d9:29:e5:54:cf:4d:db:63:c1:7f:
6e:5d:4a:91:1b:0e:85:26:9e:39:0d:a2:fa:dd:32:
8e:99:d7:ec:c9:d8:a0:1e:49:4a:1c:b3:ca:7c:85:
c7:1b:56:7b:79:e8:48:32:e6:8a:ca:13:60:6e:e6:
26:ef:48:67:f7:77:e8:65:34:8d:c7:56:a7:63:18:
b8:40:fa:ae:5a:b4:e1:52:c1:09:c2:d5:27:77:84:
0f:1d:7f:f9:14:ae:20:eb:ac:e6:e5:7a:82:e4:4e:
9d:25:13:2b:0a:3b:c5:b6:cf:ea:7d:e7:3d:97:16:
59:b5:a6:2e:d7:30:d1:44:9b:6a:40:c8:aa:98:e3:
2c:62:93:20:d7:c7:17:58:da:13:5a:bb:4d:7f:18:
c9:01:06:d0:fa:93:05:37:b9:e0:37:2f:58:5d:3d:
4f:aa:d6:e5:c2:35:d6:2a:9c:bc:ac:30:8e:a2:25:
29:b3:24:1a:3e:4c:1e:fb:c2:d5:cf:72:36:73:63:
78:56:69:0b:20:52:92:46:61:6e:42:ae:42:c5:2c:
36:02:e4:ab:7e:4c:31:32:95:cd:56:6c:6f:fc:91:
98:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:57:5B:D8:D7:DC:1E:21:1C:B3:B8:06:1B:4C:43:9C:B3:CA:0C:63
X509v3 Authority Key Identifier:
keyid:72:68:74:3E:5C:50:DD:9F:54:D2:A6:95:C5:A0:EB:F5:40:CF:9B:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/4AC993D8D34A11EC8796812AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.43.144.0/22
103.103.182.0/23
Signature Algorithm: sha256WithRSAEncryption
25:f9:52:96:77:f2:3c:ab:11:57:4b:dc:8a:b3:c8:db:14:b2:
b6:0f:a3:e6:6f:67:aa:a9:e1:ad:23:bb:98:f8:d7:ff:b4:88:
5c:ab:be:d6:17:2b:c9:31:fc:d4:4f:eb:ad:0a:cc:9c:7f:b1:
b4:f3:52:d2:54:34:a2:31:47:3d:aa:40:34:c0:0a:0f:10:c0:
ba:81:94:09:cd:d7:61:1d:30:f8:5e:f6:49:e0:ae:7f:0b:68:
7f:ab:88:e5:09:00:12:e7:1b:2a:1c:22:15:b0:b9:a7:1b:17:
b0:2d:57:ce:54:72:56:ef:75:89:fc:d3:21:90:89:be:9f:06:
4f:5d:33:56:4a:a4:db:f6:5d:c6:6b:2d:d4:e9:69:d9:de:20:
60:41:71:1c:ea:b3:bc:be:c4:b8:51:8d:a4:9c:a7:aa:c7:30:
27:fa:90:65:47:9e:e7:5a:78:ed:5d:21:20:e0:ff:27:63:ff:
86:c5:95:ac:db:46:86:0a:ee:75:57:82:1c:d7:28:78:ed:ab:
7c:d6:17:96:22:9d:f9:86:4e:a7:71:f8:e4:5b:aa:ba:41:54:
62:7e:14:fd:0a:02:8a:64:6f:c7:dd:b4:6a:4a:00:ed:e4:4b:
17:7f:19:18:93:38:3a:a0:6e:83:cd:f2:84:8a:5e:67:1b:24:
eb:fc:ca:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 07:27:01 2025 by rpki-client