This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/29BE072046FF11EF9A76C461C4F9AE02.roa
File: 29BE072046FF11EF9A76C461C4F9AE02.roa (raw, json)
Hash identifier: oM6Sf/6xTPeOvH01knFGEFzZ6mpJcGKCSF9Jna1G/cw=
Subject key identifier: 92:1A:25:62:D8:0A:78:B0:EC:46:15:DC:19:45:AC:A1:C1:8C:FE:44
Certificate issuer: /CN=A915BCB1/serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517
Certificate serial: 095B
Authority key identifier: 07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/29BE072046FF11EF9A76C461C4F9AE02.roa
Signing time: Fri 19 Dec 2025 00:24:15 +0000
ROA not before: Fri 19 Dec 2025 00:24:15 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 139468
IP address blocks: 45.116.134.0/23 maxlen: 23
45.116.134.0/24 maxlen: 24
103.9.94.0/23 maxlen: 23
103.28.28.0/22 maxlen: 22
103.37.132.0/22 maxlen: 22
103.37.134.0/23 maxlen: 23
103.40.216.0/22 maxlen: 22
103.240.12.0/22 maxlen: 22
103.240.13.0/24 maxlen: 24
103.245.4.0/22 maxlen: 22
103.245.4.0/23 maxlen: 23
103.245.7.0/24 maxlen: 24
2405:9e40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl
rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 19:40:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2395 (0x95b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BCB1, serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517
Validity
Not Before: Dec 19 00:24:15 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69449b2f-8b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:63:8d:86:f0:7e:9a:14:8d:d2:9c:1b:b1:08:
7c:04:c5:50:d2:f6:b3:05:9c:4d:21:19:3a:fa:d9:
96:b2:b0:11:2d:55:dd:34:00:11:7a:4c:01:62:19:
a7:28:6f:f8:a8:0f:57:17:4b:7d:ec:75:9b:fc:90:
bc:3b:3a:3d:ca:74:86:b0:cf:c5:20:68:4d:9d:2a:
ce:12:23:38:32:78:22:47:80:41:41:23:7a:67:99:
3b:d3:17:32:f8:3d:a0:d4:e7:60:6d:46:2d:08:39:
db:7f:30:62:ce:cc:8e:50:47:e4:c2:41:e0:ba:f2:
2e:49:65:e3:8f:47:53:71:3f:31:d8:85:f5:92:46:
26:28:03:d9:76:b1:29:ad:9d:b9:d7:75:83:69:a1:
3f:1c:ac:f1:60:5a:f0:32:80:54:59:53:12:d1:5a:
7c:37:7f:8b:8e:7b:20:58:12:ea:55:c8:c5:88:60:
40:cc:05:a1:6c:57:65:e1:6b:04:d6:e4:2a:95:50:
dc:fb:25:ce:b8:c7:e4:72:cb:1e:90:48:28:99:a1:
2d:89:f8:7c:ce:0c:9e:c7:92:a2:c8:dd:8f:56:69:
57:18:c5:2e:4c:62:9c:6f:9f:6f:22:43:33:a3:64:
5d:aa:ca:81:d2:0e:8e:cc:91:f5:28:d2:7c:ed:bb:
ae:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:1A:25:62:D8:0A:78:B0:EC:46:15:DC:19:45:AC:A1:C1:8C:FE:44
X509v3 Authority Key Identifier:
keyid:07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/29BE072046FF11EF9A76C461C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.116.134.0/23
103.9.94.0/23
103.28.28.0/22
103.37.132.0/22
103.40.216.0/22
103.240.12.0/22
103.245.4.0/22
IPv6:
2405:9e40::/32
Signature Algorithm: sha256WithRSAEncryption
0f:37:a1:df:07:cb:1f:b3:7e:30:8a:e7:66:cf:17:47:54:34:
77:88:1b:d3:2f:d1:15:79:3b:5a:5e:77:18:db:91:4f:02:3d:
e4:96:2e:b6:e0:34:86:46:10:e1:ad:0d:68:e0:33:41:56:54:
0d:95:9c:6c:dc:f4:ab:aa:d4:36:8e:7b:49:8e:50:67:7c:e5:
fd:4f:81:50:10:a4:9c:3e:27:c9:a1:b0:c6:3d:0c:98:cf:3d:
9c:1b:2d:e4:4f:9d:c9:37:f4:67:9b:b4:eb:1c:89:c4:86:ed:
80:a3:57:d1:4e:66:74:79:28:26:af:bb:3f:17:da:0a:b9:fc:
be:0c:68:13:a8:4c:f4:17:9c:2c:3b:4d:10:bc:5b:40:45:26:
45:df:84:ae:3a:c3:70:29:e5:cf:79:a3:98:dd:5a:48:31:14:
46:50:d9:66:54:f1:66:31:4e:96:8d:a0:dc:76:65:48:9e:ca:
1b:34:4a:0d:00:3a:4b:f8:d5:26:a8:ea:79:ee:15:32:ca:70:
85:1b:f8:0c:de:54:b2:df:0e:a9:81:00:6b:31:0f:dc:23:72:
2b:ba:85:e8:42:38:1c:63:98:72:c3:f8:0c:ee:11:77:76:35:
6e:03:16:92:ea:d9:d9:33:87:fc:34:40:ee:83:08:64:c9:59:
dc:fb:76:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 07:07:13 2025 by rpki-client