This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/AC21E1E8924411EE96AA9544C4F9AE02.roa
File: AC21E1E8924411EE96AA9544C4F9AE02.roa (raw, json)
Hash identifier: 84BaytmnsBEk+UaP5PFkzVU27GE8sU0iFIMHsasg/ys=
Subject key identifier: C5:68:19:56:12:02:70:31:01:2C:35:5A:26:4C:80:BA:F9:55:6F:9F
Certificate issuer: /CN=A912A471/serialNumber=A56AE72C66A64E6279C8CC9C0EFE4F3636902780
Certificate serial: 015C
Authority key identifier: A5:6A:E7:2C:66:A6:4E:62:79:C8:CC:9C:0E:FE:4F:36:36:90:27:80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWrnLGamTmJ5yMycDv5PNjaQJ4A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/AC21E1E8924411EE96AA9544C4F9AE02.roa
Signing time: Fri 03 Oct 2025 04:30:37 +0000
ROA not before: Fri 03 Oct 2025 04:30:37 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 151649
IP address blocks: 103.249.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.crl
rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWrnLGamTmJ5yMycDv5PNjaQJ4A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 02:42:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 348 (0x15c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A471, serialNumber=A56AE72C66A64E6279C8CC9C0EFE4F3636902780
Validity
Not Before: Oct 3 04:30:37 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=68df516d-c501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:45:cc:f7:0d:c5:2a:16:a4:3e:16:c4:1c:bf:
b7:b6:d6:24:a3:e0:eb:d3:e4:ac:b2:f7:99:df:ca:
7f:6e:f2:ce:27:e1:8e:f9:fe:26:cf:23:fa:47:4e:
ad:f1:cd:fe:0e:dc:bb:51:d1:bb:e9:b6:16:dd:e1:
a2:90:2a:85:37:8b:0e:f9:79:4e:89:d9:43:5e:41:
2c:7f:4d:eb:b7:09:80:77:12:95:5d:56:06:52:58:
b8:92:bb:f3:93:80:aa:b9:b4:a4:b6:28:cd:c6:c7:
c7:b3:59:f7:ad:fa:bc:20:75:47:c6:d6:6e:40:77:
c2:0d:cd:17:8a:a5:4f:fe:fb:db:ac:7f:d6:49:ca:
ed:ae:17:0a:73:68:ea:65:0d:22:9b:13:eb:30:50:
bf:dc:b2:a9:e8:ea:87:cf:09:c0:8c:58:e4:96:25:
e1:94:2c:ea:37:80:a7:96:23:c4:dd:95:22:d3:cb:
26:b7:3c:eb:5b:63:bf:a8:84:d3:2e:b9:d8:27:52:
01:e9:8d:bd:c2:78:51:8c:1a:60:8a:9c:6f:b2:29:
c8:66:d1:ea:f8:93:0c:1c:65:54:13:72:f2:29:44:
e3:5d:dc:aa:78:85:06:9f:be:0f:a5:4a:30:7d:86:
dc:9a:88:c3:c4:18:be:13:5b:2d:dc:00:2e:84:c3:
d9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:68:19:56:12:02:70:31:01:2C:35:5A:26:4C:80:BA:F9:55:6F:9F
X509v3 Authority Key Identifier:
keyid:A5:6A:E7:2C:66:A6:4E:62:79:C8:CC:9C:0E:FE:4F:36:36:90:27:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWrnLGamTmJ5yMycDv5PNjaQJ4A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/AC21E1E8924411EE96AA9544C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.249.202.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:55:13:37:22:56:68:18:8e:3b:5b:9c:32:a3:5e:2e:1d:e5:
e2:b9:41:1c:76:2c:2c:ab:c6:11:5b:64:62:fe:32:54:06:21:
cf:a7:02:78:82:14:39:69:39:87:d1:8f:19:40:ca:37:9e:b6:
c9:2e:7a:90:94:2c:66:8f:fd:1a:7b:5c:2f:e5:fa:a5:1a:9d:
37:ce:30:f3:67:75:19:91:4d:e2:f2:63:7c:53:6a:06:24:3a:
a6:f2:75:71:a8:30:08:07:8b:5d:7a:c4:a6:bd:7b:d6:0f:fa:
6e:eb:5a:05:70:30:09:c3:fd:1d:4b:47:70:d1:37:d4:ef:dd:
57:86:09:2b:c9:a7:a4:81:7a:0f:d6:4e:56:7d:43:73:4c:c2:
9a:68:2b:33:18:d9:bd:ba:27:40:40:54:0c:1e:41:b7:71:27:
7a:c1:cf:44:89:28:13:bb:ae:75:cb:9b:38:53:52:a3:ec:64:
a4:98:ee:35:50:0b:c8:fa:8c:ca:75:fd:76:93:ec:e8:5e:aa:
dd:8d:36:dd:53:b9:0e:69:3e:30:8a:26:98:e6:93:e0:f5:24:
49:67:4d:29:12:c1:d6:7d:73:0e:fb:a9:4e:9f:10:89:07:d5:
f7:64:ec:a2:19:f3:05:d3:3e:f8:0e:f3:2a:8c:81:5b:01:d7:
5d:31:04:00
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkE0NzExMTAvBgNVBAUTKEE1NkFFNzJDNjZBNjRFNjI3OUM4Q0M5QzBFRkU0RjM2
MzY5MDI3ODAwHhcNMjUxMDAzMDQzMDM3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGRmNTE2ZC1jNTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkkXM9w3FKhakPhbEHL+3ttYko+Dr0+SssveZ38p/bvLOJ+GO+f4mzyP6R06t
8c3+Dty7UdG76bYW3eGikCqFN4sO+XlOidlDXkEsf03rtwmAdxKVXVYGUli4krvz
k4CqubSktijNxsfHs1n3rfq8IHVHxtZuQHfCDc0XiqVP/vvbrH/WScrtrhcKc2jq
ZQ0imxPrMFC/3LKp6OqHzwnAjFjkliXhlCzqN4CnliPE3ZUi08smtzzrW2O/qITT
LrnYJ1IB6Y29wnhRjBpgipxvsinIZtHq+JMMHGVUE3LyKUTjXdyqeIUGn74PpUow
fYbcmojDxBi+E1st3AAuhMPZGwIDAQABo4IClTCCApEwHQYDVR0OBBYEFMVoGVYS
AnAxASw1WiZMgLr5VW+fMB8GA1UdIwQYMBaAFKVq5yxmpk5iecjMnA7+TzY2kCeA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTQ3MS82RkU4QTJFRTky
M0UxMUVFQjg0RjU2MkZDNEY5QUUwMi9wV3JuTEdhbVRtSjV5TXljRHY1UE5qYVFK
NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BXcm5MR2FtVG1KNXlNeWNEdjVQTmphUUo0QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkE0NzEvNkZFOEEyRUU5MjNFMTFFRUI4NEY1NjJGQzRGOUFFMDIvQUMyMUUxRTg5
MjQ0MTFFRTk2QUE5NTQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABn+cowDQYJKoZIhvcNAQELBQADggEBAD9VEzciVmgYjjtb
nDKjXi4d5eK5QRx2LCyrxhFbZGL+MlQGIc+nAniCFDlpOYfRjxlAyjeetskuepCU
LGaP/Rp7XC/l+qUanTfOMPNndRmRTeLyY3xTagYkOqbydXGoMAgHi116xKa9e9YP
+m7rWgVwMAnD/R1LR3DRN9Tv3VeGCSvJp6SBeg/WTlZ9Q3NMwppoKzMY2b26J0BA
VAweQbdxJ3rBz0SJKBO7rnXLmzhTUqPsZKSY7jVQC8j6jMp1/XaT7Oheqt2NNt1T
uQ5pPjCKJpjmk+D1JElnTSkSwdZ9cw77qU6fEIkH1fdk7KIZ8wXTPvgO8yqMgVsB
110xBAA=
-----END CERTIFICATE-----
Generated at Wed Dec 24 21:21:20 2025 by rpki-client