This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/987E6D9E985711F08C4D1E11C4F9AE02.roa
File: 987E6D9E985711F08C4D1E11C4F9AE02.roa (raw, json)
Hash identifier: t0aqBhUy2E1vHGSzZ+V/fFaWtfLzEKA+l6C3kep9pTU=
Subject key identifier: D7:2D:78:6E:0D:79:F1:B5:08:8E:6D:D4:E2:73:41:5B:24:52:8C:D3
Certificate issuer: /CN=A916B18B/serialNumber=368F3C938B601412521A3A819009978FCFE91E7E
Certificate serial: 17B5
Authority key identifier: 36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/987E6D9E985711F08C4D1E11C4F9AE02.roa
Signing time: Thu 04 Dec 2025 16:15:59 +0000
ROA not before: Thu 04 Dec 2025 16:15:59 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 152335
IP address blocks: 143.9.0.0/16 maxlen: 16
143.9.0.0/22 maxlen: 22
143.9.0.0/23 maxlen: 23
143.9.4.0/22 maxlen: 22
143.9.8.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl
rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 16:10:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6069 (0x17b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B18B, serialNumber=368F3C938B601412521A3A819009978FCFE91E7E
Validity
Not Before: Dec 4 16:15:59 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6931b3bf-33b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a3:ea:f7:49:f2:3e:09:73:58:2a:b7:2f:63:
7f:a6:dd:0e:2c:c1:6b:eb:11:c1:6d:a6:3a:72:f7:
2f:9b:18:46:ec:eb:b5:54:16:14:f7:20:94:df:ff:
ff:da:df:6a:c2:54:5f:c9:ff:fa:08:d6:50:8d:c2:
a7:0f:0f:a5:ca:8c:d6:e5:f2:b2:6a:e3:33:d1:c8:
01:6a:df:7f:a5:21:e0:1b:d4:4b:54:dc:a7:3a:1f:
b1:c9:75:e1:95:78:c1:cb:f2:2e:bf:e3:e1:3c:cc:
d2:7b:90:83:50:57:42:a2:b7:e4:bd:ac:25:31:ea:
97:a0:90:42:2f:9f:ac:92:0d:8e:e7:33:ca:e5:ac:
63:3d:ee:0d:ad:16:55:6b:e3:c7:c4:4e:df:01:e3:
a4:35:dc:dd:25:87:05:28:ab:32:4a:f7:50:cf:69:
9c:93:d4:b7:fb:db:01:64:a5:5b:1d:c1:6f:6a:52:
17:ea:3c:15:eb:e5:24:73:7f:fb:13:89:4c:1c:48:
81:c8:4e:6c:6b:1d:49:cc:bd:8d:b1:af:68:d3:d7:
10:3d:0a:c9:69:64:5c:ea:78:82:ee:97:26:97:40:
32:5c:c1:cf:d2:77:74:3e:24:d4:55:d8:a5:a4:2c:
19:a6:54:92:d7:11:49:6c:94:3c:b7:7d:30:96:24:
ba:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:2D:78:6E:0D:79:F1:B5:08:8E:6D:D4:E2:73:41:5B:24:52:8C:D3
X509v3 Authority Key Identifier:
keyid:36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/987E6D9E985711F08C4D1E11C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
143.9.0.0/16
Signature Algorithm: sha256WithRSAEncryption
49:cb:81:39:e6:84:0d:e8:89:76:e1:05:56:4e:98:62:f3:97:
91:30:a6:f1:5e:a3:8b:bc:c1:59:7c:e4:23:49:85:76:bf:6b:
af:b8:e7:de:85:0a:d0:e5:3b:4c:9c:af:10:7d:96:2b:e8:39:
f2:2e:cf:7e:f0:6c:75:d1:25:66:c4:6b:4d:49:11:a4:c4:d9:
9a:89:93:6c:d4:c5:8a:bf:15:e9:42:62:e4:8c:32:b1:91:b7:
28:35:29:16:b9:e6:6f:49:30:d6:36:86:66:c6:9e:9c:0b:41:
1e:e4:2b:27:bc:bb:9f:c9:75:49:0d:d2:c2:2a:9e:74:5f:70:
0d:82:a2:52:07:c7:49:f1:8c:74:86:5a:37:5d:0a:7c:cd:cf:
0c:76:a7:67:f0:b9:ce:5b:b0:2e:51:a1:86:12:05:10:b2:23:
f5:6c:6d:ba:7d:d3:18:30:88:1e:de:ea:ba:9d:21:43:ce:62:
c2:f9:12:57:42:80:2e:7d:fd:68:4c:52:87:45:ba:14:96:1f:
02:a8:c3:e6:e4:a8:2e:4c:4f:c8:80:7d:07:17:ad:27:e1:e0:
a7:c4:d0:26:0b:b6:fe:e3:c8:87:5c:2f:84:e1:4d:fd:11:69:
f0:c2:9b:ea:60:68:27:09:b7:c3:1c:dc:24:1c:a0:c3:03:6f:
c8:d6:68:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 23:47:10 2025 by rpki-client