This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/C045A11ECE5B11F0B7194245C4F9AE02.roa
File: C045A11ECE5B11F0B7194245C4F9AE02.roa (raw, json)
Hash identifier: 6cxQqf7QdE+UuZWInOx/iejAmskiE4XHL23BpbFt9/k=
Subject key identifier: 3D:FF:86:E1:FF:DD:EE:72:6A:6D:CA:E4:32:42:7C:B8:47:AC:FC:7A
Certificate issuer: /CN=A912176D/serialNumber=96F42E19F69D596A0318921590A17DD53233E595
Certificate serial: 088D
Authority key identifier: 96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/C045A11ECE5B11F0B7194245C4F9AE02.roa
Signing time: Mon 01 Dec 2025 02:16:31 +0000
ROA not before: Mon 01 Dec 2025 02:16:31 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 55720
IP address blocks: 14.192.67.0/24 maxlen: 24
14.192.68.0/24 maxlen: 24
14.192.69.0/24 maxlen: 24
43.231.6.0/24 maxlen: 24
43.231.7.0/24 maxlen: 24
45.116.160.0/24 maxlen: 24
45.116.161.0/24 maxlen: 24
45.116.162.0/24 maxlen: 24
45.116.163.0/24 maxlen: 24
45.120.52.0/24 maxlen: 24
45.120.53.0/24 maxlen: 24
45.120.54.0/24 maxlen: 24
45.120.55.0/24 maxlen: 24
61.4.97.0/24 maxlen: 24
61.4.98.0/24 maxlen: 24
61.4.99.0/24 maxlen: 24
61.4.100.0/22 maxlen: 24
61.4.104.0/22 maxlen: 24
61.4.109.0/24 maxlen: 24
61.4.110.0/24 maxlen: 24
103.4.28.0/24 maxlen: 24
103.4.29.0/24 maxlen: 24
103.4.30.0/24 maxlen: 24
103.4.31.0/24 maxlen: 24
103.15.104.0/24 maxlen: 24
103.15.105.0/24 maxlen: 24
103.15.106.0/24 maxlen: 24
103.15.107.0/24 maxlen: 24
103.21.88.0/24 maxlen: 24
103.21.89.0/24 maxlen: 24
103.21.90.0/24 maxlen: 24
103.21.91.0/24 maxlen: 24
103.23.46.0/24 maxlen: 24
103.23.47.0/24 maxlen: 24
103.71.176.0/24 maxlen: 24
103.71.177.0/24 maxlen: 24
103.71.178.0/24 maxlen: 24
103.71.179.0/24 maxlen: 24
103.243.212.0/24 maxlen: 24
103.243.213.0/24 maxlen: 24
103.243.214.0/24 maxlen: 24
103.243.215.0/24 maxlen: 24
103.246.112.0/24 maxlen: 24
103.246.113.0/24 maxlen: 24
103.246.114.0/24 maxlen: 24
118.107.212.0/24 maxlen: 24
118.107.213.0/24 maxlen: 24
118.107.214.0/24 maxlen: 24
118.107.215.0/24 maxlen: 24
118.107.216.0/24 maxlen: 24
118.107.217.0/24 maxlen: 24
118.107.218.0/24 maxlen: 24
118.107.219.0/24 maxlen: 24
118.107.220.0/24 maxlen: 24
118.107.221.0/24 maxlen: 24
118.107.222.0/24 maxlen: 24
118.107.223.0/24 maxlen: 24
150.107.76.0/24 maxlen: 24
150.107.77.0/24 maxlen: 24
150.107.78.0/24 maxlen: 24
150.107.79.0/24 maxlen: 24
202.9.36.0/24 maxlen: 24
202.9.37.0/24 maxlen: 24
202.9.38.0/24 maxlen: 24
202.9.39.0/24 maxlen: 24
202.73.12.0/24 maxlen: 24
202.73.13.0/24 maxlen: 24
202.73.14.0/24 maxlen: 24
202.73.15.0/24 maxlen: 24
202.87.220.0/24 maxlen: 24
202.87.221.0/24 maxlen: 24
202.87.222.0/24 maxlen: 24
202.87.223.0/24 maxlen: 24
223.25.240.0/24 maxlen: 24
223.25.241.0/24 maxlen: 24
223.25.242.0/24 maxlen: 24
223.25.243.0/24 maxlen: 24
223.25.244.0/24 maxlen: 24
223.25.245.0/24 maxlen: 24
223.25.246.0/24 maxlen: 24
223.25.247.0/24 maxlen: 24
2402:9500::/32 maxlen: 32
2402:9500::/48 maxlen: 48
2402:9500:a00::/48 maxlen: 48
2402:9500:b00::/48 maxlen: 48
2402:9500:c00::/48 maxlen: 48
2402:9500:d00::/48 maxlen: 48
2402:9500:1000::/48 maxlen: 48
2402:9500:2000::/48 maxlen: 48
2402:9500:3000::/48 maxlen: 48
2402:9500:4000::/48 maxlen: 48
2402:9500:5000::/48 maxlen: 48
2402:9500:6000::/48 maxlen: 48
2402:9500:7000::/48 maxlen: 48
2402:9500:8000::/48 maxlen: 48
2402:9500:9000::/48 maxlen: 48
2402:9500:e000::/48 maxlen: 48
2402:9500:f000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl
rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 20:19:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2189 (0x88d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912176D, serialNumber=96F42E19F69D596A0318921590A17DD53233E595
Validity
Not Before: Dec 1 02:16:31 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=692cfa7f-3e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4b:24:a6:d7:21:b1:31:4c:62:bd:7b:8a:98:
a1:30:77:e8:47:39:23:f5:9c:8d:9c:40:06:fe:c7:
b6:b2:b8:f9:09:08:bf:36:07:9a:d1:8b:0e:47:8e:
e4:25:ca:fd:c8:15:35:3f:8b:55:7d:49:e3:a6:0b:
1f:a4:78:23:f2:1f:88:d2:60:e8:65:91:09:72:3c:
a1:6a:b0:32:18:fc:bc:31:f9:97:a6:5a:df:0c:a0:
44:a9:57:f4:e4:75:a6:36:73:6f:37:a5:c5:69:c0:
b4:a7:27:6f:9c:7f:ab:48:49:74:ab:43:49:2b:2d:
09:90:47:bc:f8:cd:12:97:7b:a5:41:bf:97:30:55:
61:56:da:2a:1a:4d:3f:af:e9:0d:ef:91:79:69:51:
5f:e6:a5:5a:0b:98:d3:c7:c9:1c:54:40:a3:ee:4c:
55:03:a5:66:c1:14:35:18:0d:17:e4:20:fd:91:7a:
88:1f:af:cb:a7:b9:93:f2:a0:0d:c2:12:55:8a:17:
64:7c:c7:ff:90:26:41:51:f6:fd:fb:de:01:88:54:
84:fc:ca:2a:9a:07:ce:00:06:42:f6:44:34:ab:ef:
f3:17:88:79:0d:d4:62:31:e9:e7:0c:45:ab:d2:67:
a6:28:98:62:31:97:e3:c7:53:ac:00:60:57:3d:c8:
ac:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:FF:86:E1:FF:DD:EE:72:6A:6D:CA:E4:32:42:7C:B8:47:AC:FC:7A
X509v3 Authority Key Identifier:
keyid:96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/C045A11ECE5B11F0B7194245C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.67.0-14.192.69.255
43.231.6.0/23
45.116.160.0/22
45.120.52.0/22
61.4.97.0-61.4.107.255
61.4.109.0-61.4.110.255
103.4.28.0/22
103.15.104.0/22
103.21.88.0/22
103.23.46.0/23
103.71.176.0/22
103.243.212.0/22
103.246.112.0-103.246.114.255
118.107.212.0-118.107.223.255
150.107.76.0/22
202.9.36.0/22
202.73.12.0/22
202.87.220.0/22
223.25.240.0/21
IPv6:
2402:9500::/32
Signature Algorithm: sha256WithRSAEncryption
6d:1f:28:48:07:5a:53:76:d1:7a:64:22:bd:dc:a3:42:fc:c3:
c1:42:6c:77:35:ba:26:62:08:da:e4:ee:a9:6c:b2:2d:cc:a2:
96:c7:23:3d:f4:3e:92:1f:2e:19:76:32:e8:fd:4d:0c:f6:cc:
03:72:7c:f1:61:02:e4:27:43:37:f0:ce:63:6c:4c:03:1d:88:
9e:bc:40:46:ca:4e:46:71:62:70:43:cf:3d:bc:11:7c:b6:af:
c4:29:a4:be:86:3e:e3:32:38:4c:46:25:62:6c:25:fa:7c:b9:
8c:ff:14:d4:e9:1a:67:f0:c0:72:e7:ee:41:94:33:16:e4:a7:
81:76:b3:7e:0c:bd:67:77:09:61:8e:84:e8:11:40:b2:20:c0:
6a:8f:3d:56:98:00:aa:4d:4a:0b:f2:c0:53:76:21:69:12:46:
16:2b:43:b4:a7:60:ac:aa:b3:01:9b:e9:70:02:40:e0:18:a1:
e2:17:a3:3c:8f:14:2f:50:88:b6:b2:06:26:2f:8b:8a:13:fe:
d0:13:3d:67:d1:6d:ee:37:d6:cd:b3:83:38:15:3b:8f:96:e6:
be:49:c0:bd:80:32:a3:1c:c9:0c:db:63:a2:b7:20:1f:28:ce:
1d:af:68:11:a6:54:7d:14:d2:2a:6e:6f:92:c5:a4:41:17:a5:
4a:0d:3f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 18:14:04 2025 by rpki-client