This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/A3C84616C50211F09AF17973C4F9AE02.roa
File: A3C84616C50211F09AF17973C4F9AE02.roa (raw, json)
Hash identifier: NdVLHYhZq68hyCHbrDBL5VR/VYx0cW6RVaPwpxn9ZdI=
Subject key identifier: C1:9E:0F:72:8F:D1:76:4B:FA:7C:52:EF:0F:84:0D:D9:B3:C0:13:D5
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 39F3
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/A3C84616C50211F09AF17973C4F9AE02.roa
Signing time: Wed 19 Nov 2025 04:45:58 +0000
ROA not before: Wed 19 Nov 2025 04:45:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 111.88.96.0/19 maxlen: 24
111.88.132.0/23 maxlen: 24
111.88.168.0/24 maxlen: 24
111.88.169.0/24 maxlen: 24
111.88.224.0/21 maxlen: 24
115.186.44.0/23 maxlen: 23
115.186.46.0/24 maxlen: 24
115.186.62.0/24 maxlen: 24
115.186.104.0/24 maxlen: 24
203.81.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 29 Nov 2025 14:27:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14835 (0x39f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: Nov 19 04:45:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=691d4b86-b404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e9:34:9e:c9:7a:27:5d:50:fd:23:1a:ee:e1:
85:65:8b:00:2c:cd:a1:ed:7a:4a:39:54:01:61:6c:
fb:7d:55:57:bd:1a:f4:85:82:4d:d0:32:ef:e8:d0:
04:00:3d:d7:ad:dc:05:1a:49:86:fb:57:10:64:bc:
7c:f5:b2:a7:bd:43:18:28:1c:15:8d:2a:0a:27:60:
ac:1c:27:40:8f:15:b7:c3:85:c4:b0:b7:a8:c8:e8:
fe:00:39:9a:a7:31:f0:8d:57:d7:32:96:64:94:df:
18:95:f1:2b:b8:2a:68:b7:d1:94:c0:44:2d:3f:e4:
df:a5:9c:5e:0e:33:54:66:b9:5b:ab:28:6c:2d:f2:
ed:99:3d:ed:73:92:3c:08:31:e9:0c:ea:3b:29:8c:
da:37:e5:9f:8f:8e:83:18:3f:3f:3a:53:87:cf:b6:
6b:ce:17:06:89:63:ac:5c:b8:96:59:64:07:ee:b5:
e0:4a:7f:1d:2e:f1:f7:11:51:d7:ec:f0:44:bf:cc:
3a:a7:e3:1e:a8:24:c4:e5:ca:ff:93:47:7f:26:aa:
7e:62:be:20:48:26:7f:01:90:bb:8d:49:2a:c7:db:
65:3f:1f:c1:e5:83:ce:21:74:0d:0e:d0:ca:f4:ff:
5f:d3:99:5e:c9:33:c2:ee:52:49:3c:1e:fd:49:40:
ef:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9E:0F:72:8F:D1:76:4B:FA:7C:52:EF:0F:84:0D:D9:B3:C0:13:D5
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/A3C84616C50211F09AF17973C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.88.96.0/19
111.88.132.0/23
111.88.168.0/23
111.88.224.0/21
115.186.44.0-115.186.46.255
115.186.62.0/24
115.186.104.0/24
203.81.235.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:a3:8f:22:a4:d9:73:c7:b7:da:fb:bd:74:f7:a6:92:bf:68:
05:9b:47:fc:37:82:48:84:83:9d:1f:bd:1f:00:fd:5f:4b:01:
d5:af:cc:f3:c9:ae:57:54:cb:60:06:6b:6b:59:eb:bd:53:e9:
aa:c2:36:34:08:5c:77:fa:aa:e1:f6:69:cf:a7:ae:73:41:5b:
c0:00:55:fa:76:bb:b1:87:56:5b:63:61:29:b7:bf:e6:38:2a:
17:aa:b3:6e:ac:7a:c6:05:8c:d1:bb:24:61:a5:88:e5:d6:a3:
7e:1c:31:bd:38:7e:ee:32:49:42:f6:d9:31:24:a0:e4:17:07:
b0:e8:1c:7f:84:dd:07:d8:fa:9b:10:d5:d9:23:7b:ec:09:a5:
49:35:09:48:b6:52:aa:a6:d0:10:eb:44:2e:aa:73:46:3e:aa:
f3:10:cf:55:10:1c:32:bc:d0:34:7f:7d:ab:63:35:81:82:53:
07:2c:8e:2e:eb:57:6e:74:92:40:1c:14:5c:32:1b:69:3e:53:
77:e2:18:32:10:69:ac:bc:7b:53:59:81:34:a5:1f:92:de:4f:
84:da:aa:2c:8e:d7:38:d0:b1:a6:01:b5:2f:25:71:0a:30:a0:
c4:3c:d2:c8:b4:cf:75:8c:61:d1:1c:6e:97:32:56:00:ef:a2:
40:34:74:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:37:01 2025 by rpki-client