This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/7B4FD608BEEB11F0AEDDAC25C4F9AE02.roa
File: 7B4FD608BEEB11F0AEDDAC25C4F9AE02.roa (raw, json)
Hash identifier: iwbEqaCxKmbwG8HWY/Xyjd6spo1BsNrw7Oh89SRylss=
Subject key identifier: 12:92:42:D0:2D:03:51:20:79:B2:92:3F:54:EF:6D:82:66:0C:11:B1
Certificate issuer: /CN=A9127EEB/serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9
Certificate serial: B3
Authority key identifier: DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/7B4FD608BEEB11F0AEDDAC25C4F9AE02.roa
Signing time: Tue 11 Nov 2025 10:45:04 +0000
ROA not before: Tue 11 Nov 2025 10:45:04 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 21840
IP address blocks: 103.49.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl
rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:13:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179 (0xb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127EEB, serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9
Validity
Not Before: Nov 11 10:45:04 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=691313b0-3605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:51:7b:1d:2b:ef:c8:a3:55:30:32:ba:d7:a3:
87:b7:2e:9f:24:bc:16:71:50:0e:1c:63:e1:1f:d0:
9a:6b:55:c4:41:4e:0b:6f:3a:e3:46:7b:26:7b:4c:
b2:c4:30:94:f4:b8:c2:7c:b8:55:1a:6e:83:49:74:
27:c7:07:3c:05:51:40:a0:df:5d:42:5e:08:66:cc:
91:85:e5:ea:43:0c:d4:4b:1f:e0:44:c0:f9:a2:0e:
33:85:d3:30:e5:a3:7c:89:b6:25:c3:7d:10:af:05:
2b:97:2b:a8:18:1c:2c:28:27:38:c3:73:0c:fc:d6:
6d:b2:c8:95:75:c4:df:fb:a6:93:4d:33:2d:0e:7d:
40:23:e6:16:65:b0:72:0a:01:d7:f2:c4:11:d0:bf:
88:3d:3d:8f:45:41:38:5c:06:5c:2d:8b:39:20:8b:
bb:28:be:8c:fd:2d:69:ae:4c:0a:38:09:2d:3f:72:
60:82:59:0e:fc:02:49:0e:96:32:dc:38:5c:d9:3a:
51:aa:fd:8a:fc:fa:2d:48:53:9a:87:47:8e:2f:fd:
26:85:ea:b8:ed:06:00:a3:e6:fa:b6:bc:c7:45:81:
2a:34:8a:88:f2:00:a6:42:cf:64:d2:20:ab:1a:e7:
cf:c9:c1:a6:ec:a6:ce:58:51:cc:a0:95:e7:85:eb:
55:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:92:42:D0:2D:03:51:20:79:B2:92:3F:54:EF:6D:82:66:0C:11:B1
X509v3 Authority Key Identifier:
keyid:DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/7B4FD608BEEB11F0AEDDAC25C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.49.40.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:af:67:5b:a4:0b:78:b4:fa:d4:b6:53:68:2e:c7:44:fa:6f:
9d:2a:8a:70:3c:52:11:d5:bf:42:48:b5:cf:64:a8:80:bf:66:
1a:41:15:61:63:ee:ef:96:8b:a6:6d:97:e9:95:0b:cc:f9:c0:
10:9b:f4:9c:ab:8f:16:5f:eb:21:e2:ae:6b:c2:8b:5f:88:f0:
db:68:48:05:6e:1c:c7:1e:4d:ac:1a:c7:5b:3f:4c:fc:7e:f0:
46:2b:c1:9f:0b:f4:51:b8:3c:fc:64:2e:fa:32:83:f0:c7:a3:
4e:fa:c3:1a:46:65:11:50:e8:0d:66:09:52:da:f5:e9:98:6e:
8b:27:3c:2b:74:e8:eb:27:e3:a2:02:3a:1a:4e:94:30:e7:bb:
59:ee:69:af:f4:22:78:42:a1:46:1e:8d:d9:49:2a:09:ac:b8:
d8:d5:7d:4e:44:71:1e:a0:04:84:85:73:15:db:b5:34:49:70:
18:4d:90:b8:cc:22:be:89:f6:dc:cf:67:b3:63:4c:f1:22:b6:
da:09:3f:fb:d9:da:53:2b:d9:d0:24:7d:13:d2:db:a4:b6:59:
f1:ea:1b:1e:5d:f0:9b:0b:c9:3e:c1:c9:7a:0e:3f:e7:dd:3f:
69:01:a3:d6:5a:13:14:55:a2:8e:67:9c:2a:12:7f:21:7f:cd:
ed:83:e5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 06:43:03 2025 by rpki-client