This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/64F7DCE4D3BD11EFA52FF783C4F9AE02.roa
File: 64F7DCE4D3BD11EFA52FF783C4F9AE02.roa (raw, json)
Hash identifier: ARrRp5d+jbcueoasHqvpYTQeegwOc/Tq8BgswRWlBxg=
Subject key identifier: 4E:91:00:2D:18:E3:C8:03:E2:19:29:DD:25:75:76:D2:1A:AF:E8:F4
Certificate issuer: /CN=A9172A52/serialNumber=674AC57C099876A06657180B34E24E6EEE884411
Certificate serial: 0110
Authority key identifier: 67:4A:C5:7C:09:98:76:A0:66:57:18:0B:34:E2:4E:6E:EE:88:44:11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/64F7DCE4D3BD11EFA52FF783C4F9AE02.roa
Signing time: Mon 01 Dec 2025 04:32:29 +0000
ROA not before: Mon 01 Dec 2025 04:32:29 +0000
ROA not after: Mon 30 Mar 2026 00:00:00 +0000
asID: 14618
IP address blocks: 103.78.222.0/24 maxlen: 24
103.78.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.crl
rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 04:07:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 272 (0x110)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172A52, serialNumber=674AC57C099876A06657180B34E24E6EEE884411
Validity
Not Before: Dec 1 04:32:29 2025 GMT
Not After : Mar 30 00:00:00 2026 GMT
Subject: CN=692d1a5d-892d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cf:a7:8a:4c:8f:2b:4c:7c:86:e0:1b:4e:5e:
ce:b6:d1:76:3e:0f:0d:6f:70:09:63:78:aa:d6:16:
2b:b0:b4:71:54:88:76:4f:da:69:67:50:6b:8c:ca:
c0:cd:9e:52:d3:1b:74:75:1d:6c:a7:75:af:8f:bd:
76:2d:43:8d:9a:d5:ef:04:f5:20:aa:c5:af:ea:a1:
35:47:b1:31:7e:30:59:c2:1a:a6:b3:40:b1:b5:05:
ca:40:91:88:aa:01:62:e9:e2:1b:3e:49:6b:10:d8:
40:46:08:a9:ca:27:93:74:45:9e:a6:af:ce:2b:e9:
aa:42:86:bf:b1:5e:30:e1:09:36:43:09:e7:11:99:
67:3e:e8:7c:17:3b:f3:9d:41:f8:d6:96:73:4e:9f:
65:0d:02:4c:b0:6a:fc:49:d5:fc:db:5a:e2:8d:fc:
1b:73:70:2e:4c:74:16:c8:ed:06:c5:57:fa:30:bd:
21:11:ad:93:70:44:aa:bf:dd:7b:9d:2f:80:16:fc:
a5:f1:60:37:fe:c9:b4:78:c3:1e:9e:81:b1:7c:56:
48:7b:38:0d:55:51:db:9f:f0:a5:eb:4b:30:11:39:
3e:d7:57:ca:34:90:87:83:cb:69:22:09:a8:ab:d8:
1e:9f:b8:eb:29:e1:2d:00:3a:40:66:df:8a:a9:d6:
b7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:91:00:2D:18:E3:C8:03:E2:19:29:DD:25:75:76:D2:1A:AF:E8:F4
X509v3 Authority Key Identifier:
keyid:67:4A:C5:7C:09:98:76:A0:66:57:18:0B:34:E2:4E:6E:EE:88:44:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/64F7DCE4D3BD11EFA52FF783C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.78.222.0/23
Signature Algorithm: sha256WithRSAEncryption
89:33:da:a8:77:f2:3b:a9:28:60:40:4f:54:aa:c4:31:65:1f:
3c:24:08:33:e2:47:95:2e:22:85:9c:3d:b0:0a:ff:cb:39:2a:
8d:9e:fb:c6:56:fc:69:ad:95:d0:66:9d:a1:ab:29:ad:c2:85:
76:3e:f2:76:dc:30:e3:85:51:d1:bb:2d:a7:8b:f0:65:6a:10:
f0:78:a8:36:7b:66:dd:d0:a1:9e:54:6b:3e:30:26:ac:d9:1a:
f3:1f:b6:1b:15:ce:67:4f:f6:78:de:ba:81:88:d6:54:09:f2:
5b:6a:58:f4:00:e1:b8:51:cf:0c:ff:d4:4d:53:52:bd:d3:f4:
02:36:8f:d1:10:4c:70:a0:e3:43:b9:24:e8:c0:e0:de:0b:29:
9d:9d:0d:ec:a2:0e:76:d0:72:92:e2:a4:bf:b2:06:8d:01:8d:
5e:2b:48:ed:da:0a:ce:16:c3:87:77:5c:8c:11:43:3c:83:a5:
13:e8:04:38:a4:2e:3a:d1:a1:6f:a9:d6:db:48:74:e9:ed:8a:
f1:da:55:cb:41:68:6c:f5:7c:a6:88:cd:78:24:9e:fd:01:98:
35:72:ee:bb:8a:79:8f:15:a4:c9:32:8d:a2:1a:10:e6:88:5b:
84:2b:1c:2e:48:f7:ee:6a:a9:ac:64:2b:cb:c8:21:af:ea:97:
ae:fe:db:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 12:19:15 2025 by rpki-client