This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/18498E84AA4911F0909AC335C4F9AE02.roa
File: 18498E84AA4911F0909AC335C4F9AE02.roa (raw, json)
Hash identifier: /nv+BWm8Pbai+ypGbGRHN+LGWddsvNd6k16CLCDQGr0=
Subject key identifier: 10:02:FC:AA:6E:6A:FD:F4:45:F2:78:84:C8:E9:A5:AA:C2:77:10:2F
Certificate issuer: /CN=A911E9B6/serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C
Certificate serial: 0258
Authority key identifier: 2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/18498E84AA4911F0909AC335C4F9AE02.roa
Signing time: Sun 07 Dec 2025 00:40:07 +0000
ROA not before: Sun 07 Dec 2025 00:40:07 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 137474
IP address blocks: 203.214.173.0/24 maxlen: 24
203.214.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl
rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 16 Dec 2025 00:20:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 600 (0x258)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E9B6, serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C
Validity
Not Before: Dec 7 00:40:07 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6934cce6-06c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:36:20:af:70:5b:2e:fd:44:4b:ec:d4:8e:5a:
30:7e:5f:93:16:fc:5a:47:71:5d:e5:c5:7b:8d:fb:
ba:91:d2:51:67:26:63:e4:9f:a9:15:a7:c0:58:e9:
83:fb:e4:7f:76:6b:f0:61:61:1a:71:84:24:a3:4f:
db:40:93:63:06:33:61:8c:42:88:0e:d9:a2:1c:98:
e5:27:01:5a:34:e0:74:c7:0b:4d:c7:32:b1:4a:58:
c0:90:c9:93:07:17:c8:7a:4f:57:c7:4d:b5:e8:63:
af:4b:2f:7f:fc:5a:da:bd:5d:d2:9d:56:03:25:8f:
55:ab:c8:6b:d0:99:92:da:90:2b:54:ea:97:52:b0:
f6:cc:68:c9:cd:f4:8d:92:10:f7:ac:74:ce:3b:d0:
8b:76:33:44:dc:78:6c:7d:69:89:b2:87:33:0b:b3:
af:08:d8:02:b4:01:e4:09:84:71:bf:d5:22:b9:c3:
dd:e8:ff:1b:5a:0b:e9:7a:d1:d5:58:37:9c:7b:21:
05:48:a6:24:79:69:66:6f:99:48:18:76:80:51:b1:
3e:d4:74:cc:9f:46:a8:6f:ab:ec:05:52:68:36:6e:
4b:38:49:cb:21:36:0c:93:58:52:7d:a0:c9:29:ff:
71:5a:9b:98:4a:fc:ef:1e:b5:19:9b:43:87:50:d5:
34:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:02:FC:AA:6E:6A:FD:F4:45:F2:78:84:C8:E9:A5:AA:C2:77:10:2F
X509v3 Authority Key Identifier:
keyid:2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/18498E84AA4911F0909AC335C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.214.173.0/24
203.214.191.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:4f:e7:d8:1f:3f:a6:7d:4c:9b:6a:79:03:f1:2f:55:9d:4e:
b1:c7:ea:fa:a0:b5:fa:3d:66:1b:fa:6f:26:01:37:4a:86:a2:
aa:db:61:69:31:fa:9a:a9:db:12:a0:af:9d:fa:2f:42:32:39:
56:7a:58:58:ef:67:a3:33:b6:1a:5c:36:92:b2:23:6c:a9:83:
fa:ab:0d:fd:a0:5c:aa:94:54:dc:64:71:32:eb:eb:a4:17:df:
86:70:4c:6f:20:2d:3b:ec:4d:41:8a:c5:96:c1:76:dc:93:5b:
82:55:59:ff:20:fe:2b:3e:81:70:f4:a9:ae:9b:94:e6:ac:fc:
e3:1d:e0:98:e6:28:68:16:fe:ef:5a:1e:75:98:af:8f:d5:f3:
c7:83:f7:98:0c:5e:16:83:dd:e6:41:78:1d:a2:35:71:0b:08:
c8:12:da:a4:10:4a:3e:8c:6d:d8:ce:1f:d0:2e:45:f7:be:9d:
18:db:f0:13:fd:ec:2f:d8:49:15:21:29:f8:6c:74:ad:66:a0:
c9:1e:07:cf:b7:2b:ba:54:f3:f7:d9:e8:87:e4:d8:2b:fa:69:
cd:b7:c3:9e:7a:c9:a5:a2:29:63:8a:be:43:05:ea:57:12:51:
92:f1:ef:c7:26:b9:34:9b:85:9b:fc:15:ac:6a:ad:c4:c8:0b:
2b:df:d0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 02:33:53 2025 by rpki-client