This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/F593443851B011ECB5188E24C4F9AE02.roa
File: F593443851B011ECB5188E24C4F9AE02.roa (raw, json)
Hash identifier: u6WvYhAV0I8MI//f7K66UR4RMWrbxxWj/3CiMmcMy7M=
Subject key identifier: 4B:78:B0:49:E1:A0:48:7E:05:24:EB:51:65:D4:59:08:F6:1A:E9:06
Certificate issuer: /CN=A916C4BC/serialNumber=4DFEC3437C90BF414D05188B482C7848E6F3161B
Certificate serial: 04C6
Authority key identifier: 4D:FE:C3:43:7C:90:BF:41:4D:05:18:8B:48:2C:78:48:E6:F3:16:1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/F593443851B011ECB5188E24C4F9AE02.roa
Signing time: Mon 22 Dec 2025 23:20:17 +0000
ROA not before: Mon 22 Dec 2025 23:20:17 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 149028
IP address blocks: 103.176.248.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.crl
rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 23:20:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1222 (0x4c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C4BC, serialNumber=4DFEC3437C90BF414D05188B482C7848E6F3161B
Validity
Not Before: Dec 22 23:20:17 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6949d231-6288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9a:9d:ea:f5:04:5d:19:ee:1b:9e:09:cb:6a:
2b:87:39:78:e8:b8:09:eb:7a:79:0b:81:b2:da:07:
be:8b:51:90:4f:f6:41:31:da:1f:63:d5:d9:20:05:
52:35:08:4a:91:28:6b:1f:99:72:dc:93:c4:0e:14:
d8:77:48:2f:cc:2a:9a:81:fc:80:a5:88:1e:9f:88:
a3:a6:0f:4a:4b:53:e2:72:9a:c9:87:ec:4c:54:8e:
a2:d9:a4:5b:5f:d2:80:dc:18:96:95:dd:df:78:51:
b1:55:67:1d:cf:f0:0b:65:fd:66:80:03:d0:37:6f:
09:ca:ca:3d:e1:4b:d1:e0:5b:f1:de:62:ab:d9:72:
20:33:8d:8a:4a:71:7a:dc:f8:c6:e3:a0:0f:21:a5:
15:b0:55:fa:2b:3c:24:fd:3a:02:82:88:2d:b2:69:
2e:44:72:a6:53:f5:4f:db:7e:3b:23:4c:49:22:fe:
40:53:bf:90:10:16:43:79:a7:d5:c7:22:30:9a:05:
ea:b8:d3:7e:6c:7b:4a:60:2f:4a:2a:8a:1e:9b:bf:
33:27:b2:e6:0a:07:e8:34:60:30:cc:8f:92:6c:71:
9e:56:48:dd:a0:47:01:fd:29:a3:0b:5f:17:d4:2f:
72:f8:cc:01:7f:0c:19:5e:5e:d3:22:27:26:41:7a:
df:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:78:B0:49:E1:A0:48:7E:05:24:EB:51:65:D4:59:08:F6:1A:E9:06
X509v3 Authority Key Identifier:
keyid:4D:FE:C3:43:7C:90:BF:41:4D:05:18:8B:48:2C:78:48:E6:F3:16:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/F593443851B011ECB5188E24C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.176.248.0/23
Signature Algorithm: sha256WithRSAEncryption
64:68:af:4e:ed:3b:85:e0:d4:c2:44:24:10:aa:f7:5e:71:a5:
b9:cd:66:bd:67:31:c3:22:45:c5:9e:2d:8a:c4:59:8b:c2:1d:
1a:20:28:f3:f8:b0:d2:79:98:bc:e5:83:bd:83:03:62:bd:d9:
94:6e:fd:0f:0c:e8:07:f2:3a:2d:76:96:4c:d5:36:fa:bd:74:
31:eb:a1:be:3b:97:f7:bf:3b:89:76:24:d5:fd:40:76:91:ae:
9e:e4:9b:11:e5:f6:70:e7:e6:6d:2e:58:73:a9:28:13:8b:6c:
77:fe:c9:76:64:06:b7:e2:c3:8c:af:bc:8f:19:ea:08:ac:48:
19:a5:54:56:31:24:27:bc:d3:09:7e:a4:61:bf:9f:2d:5e:53:
26:6a:59:f7:03:f2:1e:69:8c:4a:9e:6e:9d:db:d9:d8:3b:a0:
f6:6e:bd:fd:9a:41:59:3f:e4:a5:8e:c1:75:10:7d:25:9e:61:
a3:13:11:ea:e3:48:79:e5:0b:45:61:49:96:cd:89:85:c8:28:
b7:e0:60:17:73:1b:b7:43:02:15:75:e6:56:38:10:9a:a4:17:
28:e5:65:3f:75:93:32:c9:aa:a2:44:ca:d0:ee:ee:d2:93:65:
d9:a2:28:2d:bb:e9:f6:2b:52:75:e4:62:a5:84:3d:ab:f0:ce:
93:ad:95:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 21:21:12 2025 by rpki-client