This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/375E8232C13411F0A297231CC4F9AE02.roa
File: 375E8232C13411F0A297231CC4F9AE02.roa (raw, json)
Hash identifier: faIT1KQ9aho1SVLdZnkQF7oKUH4537D0LIq6gOBowBs=
Subject key identifier: 4B:5F:22:C3:FE:18:53:AD:CD:27:BA:34:8E:C8:04:F6:66:D5:71:4D
Certificate issuer: /CN=A9161857/serialNumber=DEA63E3101BF1599020A4083FA1C3D964B2130C0
Certificate serial: 5A
Authority key identifier: DE:A6:3E:31:01:BF:15:99:02:0A:40:83:FA:1C:3D:96:4B:21:30:C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qY-MQG_FZkCCkCD-hw9lkshMMA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/375E8232C13411F0A297231CC4F9AE02.roa
Signing time: Fri 14 Nov 2025 08:30:46 +0000
ROA not before: Fri 14 Nov 2025 08:30:46 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 153913
IP address blocks: 203.169.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.crl
rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qY-MQG_FZkCCkCD-hw9lkshMMA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 05:18:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90 (0x5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161857, serialNumber=DEA63E3101BF1599020A4083FA1C3D964B2130C0
Validity
Not Before: Nov 14 08:30:46 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=6916e8b6-c48c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f7:80:b3:85:6d:0b:05:7a:52:d4:31:53:38:
8b:66:95:1d:1f:8b:94:a2:6d:b4:00:d9:a7:ab:44:
63:48:c0:5f:72:99:bb:9b:4b:19:71:50:c5:f1:77:
27:f5:3e:d4:34:c8:e0:5f:88:d6:cf:ec:65:6c:ac:
d9:ce:91:d6:73:df:b3:22:fe:af:57:a0:52:39:98:
28:ff:9b:1d:64:6a:02:14:3a:12:73:5a:6f:32:f0:
4e:ec:77:f4:47:34:92:a0:cb:bc:6d:c7:bf:14:91:
5b:2e:d0:73:fa:14:e3:d9:32:ef:46:21:c5:a9:cd:
bf:56:17:a4:7b:1b:6c:3a:cc:74:4b:cf:07:05:43:
53:c2:f5:b4:9a:ee:56:1b:b6:53:d2:2e:de:f0:b8:
05:94:18:b7:54:5b:f6:e5:d8:b7:bc:f0:ac:a6:c2:
12:08:54:4b:c8:9c:ea:10:3f:1c:5c:af:31:90:d3:
b3:62:8c:56:37:c2:f0:71:dd:70:9e:7e:95:59:01:
fe:f4:85:a3:e2:6e:8c:b3:31:1b:0c:d8:d1:c5:b2:
f0:f7:b5:d0:ca:63:5a:8b:cf:3a:0e:af:3d:84:94:
93:27:6f:b3:d1:e2:61:ca:3d:af:99:a9:a0:3c:df:
8b:4c:7e:6d:fc:de:0d:f4:34:a1:29:c4:7d:c7:1b:
79:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5F:22:C3:FE:18:53:AD:CD:27:BA:34:8E:C8:04:F6:66:D5:71:4D
X509v3 Authority Key Identifier:
keyid:DE:A6:3E:31:01:BF:15:99:02:0A:40:83:FA:1C:3D:96:4B:21:30:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qY-MQG_FZkCCkCD-hw9lkshMMA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/375E8232C13411F0A297231CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.169.7.0/24
Signature Algorithm: sha256WithRSAEncryption
99:2b:4b:b9:ab:03:36:78:76:99:3c:2a:f2:a4:bc:82:0e:45:
4f:45:ac:82:a6:62:7c:49:93:df:82:fb:37:0d:fa:9e:f9:e8:
76:c6:7f:a7:0b:d2:ae:c7:41:ae:e1:f6:57:40:53:30:72:40:
11:5d:5f:0c:0d:cd:ea:72:6f:76:59:10:ed:54:d1:52:98:bb:
06:77:15:60:cd:2a:9f:ba:ec:9f:32:08:fa:d6:f8:a6:52:ff:
47:39:9e:70:e4:ab:b0:6c:87:76:ae:e3:85:43:b2:55:08:7b:
4f:98:56:a6:4b:82:f2:02:37:22:fe:28:29:f2:70:82:34:0d:
9c:0d:a6:90:2f:8a:7a:11:34:11:0c:1c:c1:a2:b0:e9:f7:7a:
bc:d0:5f:1b:9b:fc:d5:c2:e6:16:c0:ec:15:9e:bd:c7:6c:b9:
66:1a:2f:5c:c3:34:31:1c:d2:36:1e:ca:d0:5f:1e:50:8e:ec:
31:cb:63:dc:27:41:8c:a7:19:41:6d:ff:45:fa:5c:ae:85:44:
ae:77:2f:74:22:57:ce:37:9e:b7:ee:f7:2b:78:70:cf:60:43:
44:c1:9a:dc:36:e6:04:94:9c:f7:bf:1e:3c:f7:69:04:aa:a1:
20:e8:c5:9d:55:6c:0e:4d:55:9b:11:0a:06:3e:68:5e:f4:e7:
5f:1a:77:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 17:36:47 2025 by rpki-client