This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/A156AB48195E11F0A64EF837C4F9AE02.roa
File: A156AB48195E11F0A64EF837C4F9AE02.roa (raw, json)
Hash identifier: Oz8gWNnWVQro8WUzRGDKljMkzvULjWnM5mz0SBgNjR8=
Subject key identifier: E0:05:33:A3:12:64:CD:7C:91:A9:46:A7:43:03:B0:7B:2C:A2:40:4D
Certificate issuer: /CN=A915D85E/serialNumber=D458051F6DA952297475B484BDDD0FBBE3490E70
Certificate serial: 07A4
Authority key identifier: D4:58:05:1F:6D:A9:52:29:74:75:B4:84:BD:DD:0F:BB:E3:49:0E:70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/A156AB48195E11F0A64EF837C4F9AE02.roa
Signing time: Mon 22 Dec 2025 21:17:44 +0000
ROA not before: Mon 22 Dec 2025 21:17:44 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 136014
IP address blocks: 103.159.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.crl
rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 21:16:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1956 (0x7a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D85E, serialNumber=D458051F6DA952297475B484BDDD0FBBE3490E70
Validity
Not Before: Dec 22 21:17:44 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6949b578-11f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bc:ab:00:a1:f6:4c:72:9c:f3:31:79:42:30:
5a:60:a6:37:ce:3c:dc:76:4e:91:fc:d9:05:44:e2:
2c:86:a1:15:aa:2b:e7:6b:d7:08:ef:29:dd:d8:4e:
02:b9:80:0a:6f:6c:2b:a5:49:ab:db:c8:c3:0d:12:
66:d3:c6:c1:62:4e:80:2b:47:80:fb:f3:d0:05:46:
d9:e9:b0:61:31:25:fb:fa:93:7a:fd:2f:7a:04:8f:
57:28:0f:4d:f1:43:2b:b8:1e:44:e1:9b:87:93:99:
d1:6a:cc:43:5c:2c:9c:73:b1:45:32:5e:0b:1b:16:
7b:66:66:a3:ee:e4:59:94:c3:ec:c3:23:52:d3:7b:
4d:ee:32:3b:36:d7:55:f9:9e:84:da:1c:fe:7f:1f:
eb:ac:c1:44:4b:83:04:85:a3:ce:83:2d:ea:4a:48:
d0:3f:39:15:0e:f6:2a:01:61:d7:69:d9:12:d4:dd:
1c:55:24:d1:b7:3d:7a:e4:b8:0d:1f:80:9b:c2:27:
f4:47:ad:a3:4e:49:4d:8e:11:f1:32:b0:a4:24:0f:
f8:6e:23:41:a4:f4:d7:df:b8:d0:85:de:89:7b:96:
d3:a3:5a:bc:9c:d8:d1:9d:86:f1:c1:3b:94:48:80:
6d:52:76:e8:71:f5:e3:e4:67:89:a8:3f:59:f9:5c:
5f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:05:33:A3:12:64:CD:7C:91:A9:46:A7:43:03:B0:7B:2C:A2:40:4D
X509v3 Authority Key Identifier:
keyid:D4:58:05:1F:6D:A9:52:29:74:75:B4:84:BD:DD:0F:BB:E3:49:0E:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/A156AB48195E11F0A64EF837C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.159.171.0/24
Signature Algorithm: sha256WithRSAEncryption
41:39:20:24:58:30:e0:2b:ca:ac:ce:d7:27:45:b7:34:b6:f3:
b9:d4:12:d9:8f:42:9b:a4:5c:77:87:64:28:5c:71:bb:41:e9:
ba:46:47:d2:49:6b:5c:7e:96:f2:7a:c1:ae:18:ad:a3:58:35:
59:f4:1d:87:ea:91:21:ee:f5:bb:9b:6c:79:63:93:27:10:af:
f2:a8:d2:75:3e:9a:df:4a:21:e2:1f:cc:60:d9:c8:e1:ec:61:
0a:98:69:f2:79:31:4d:53:06:f3:76:c5:31:0c:74:88:4a:5a:
a0:0c:14:f8:c1:fc:66:64:12:b0:7a:c6:18:30:c4:46:1d:1d:
91:87:38:c4:d3:91:93:93:e4:35:cc:81:6a:ec:39:6f:f6:29:
62:66:6f:e3:d8:56:e4:27:2e:b7:86:8b:62:30:03:52:b5:95:
99:1c:91:06:89:f0:96:d4:fb:43:f7:c7:ca:de:82:6f:20:d6:
8a:47:5c:11:62:ea:98:af:4b:21:2e:b5:96:a7:7e:90:ed:47:
5f:c7:50:ba:31:18:ff:f8:7f:32:bb:e3:cc:95:9c:15:97:1f:
e2:74:35:c0:a5:5c:87:62:e8:e4:28:d5:18:0e:e7:97:fb:a3:
b8:e4:12:c1:d2:34:d1:e1:18:86:43:e4:e8:48:72:25:38:cb:
15:9f:b8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 00:03:45 2025 by rpki-client