This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/EC7B7E82DFD811F08F00FF64536F56BC.roa
File: EC7B7E82DFD811F08F00FF64536F56BC.roa (raw, json)
Hash identifier: QD91TSR3ZuXrQJclCdD9lmSV7b6jH/GHsZe7m6lielA=
Subject key identifier: 6E:9A:E4:CE:2C:D4:A6:AF:74:88:94:5F:4C:54:9B:31:F7:A3:DF:43
Certificate issuer: /CN=A917C81C/serialNumber=3F3B2F5B3BAE52A6B5692CAF92A2554B06DA863D
Certificate serial: 0596
Authority key identifier: 3F:3B:2F:5B:3B:AE:52:A6:B5:69:2C:AF:92:A2:55:4B:06:DA:86:3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzsvWzuuUqa1aSyvkqJVSwbahj0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/EC7B7E82DFD811F08F00FF64536F56BC.roa
Signing time: Tue 23 Dec 2025 08:25:53 +0000
ROA not before: Tue 23 Dec 2025 08:25:53 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 141727
IP address blocks: 103.162.204.0/24 maxlen: 24
2001:df5:fb80::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.crl
rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzsvWzuuUqa1aSyvkqJVSwbahj0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 09:19:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1430 (0x596)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C81C, serialNumber=3F3B2F5B3BAE52A6B5692CAF92A2554B06DA863D
Validity
Not Before: Dec 23 08:25:53 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=694a5211-171a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d5:61:c8:26:65:03:26:fb:47:73:81:5a:b1:
b7:7c:aa:a2:c3:89:13:33:96:3b:cf:6e:d6:8b:14:
ed:d1:39:30:5f:96:ab:1c:66:c2:e4:0b:b5:2d:48:
04:94:ec:d0:4f:4b:c0:24:e8:de:43:d0:a3:22:3c:
ac:32:8a:df:4f:02:b3:ae:2a:64:44:ae:65:94:78:
c8:5d:f2:a7:98:77:58:b6:d1:79:cb:be:db:4f:91:
eb:11:e4:35:d3:77:eb:41:e3:ef:ca:73:c3:64:70:
db:1f:30:29:6a:4a:6d:4d:02:be:20:c8:44:4a:b9:
7f:97:97:02:c9:5d:ff:55:80:32:c2:16:2a:e4:d4:
a3:5c:f1:f9:8b:ab:2d:61:ec:03:59:df:54:9a:38:
aa:5b:4c:29:86:29:cd:18:ef:c2:91:bf:02:d9:12:
b6:0c:e3:71:90:39:7d:62:e4:95:da:68:18:b8:78:
a1:d6:91:7c:76:eb:fb:3c:a5:41:ec:98:9d:1a:9f:
72:25:84:dd:d4:45:cc:88:d5:b4:ce:54:61:ec:fe:
53:6b:52:89:1d:02:05:5b:39:44:ed:cd:1d:ce:86:
05:84:0f:8f:6c:6e:bf:d6:c6:3d:e2:b5:cb:3a:2a:
1c:bc:ad:bc:0f:ad:22:f1:5f:76:31:e7:8e:82:65:
a6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:9A:E4:CE:2C:D4:A6:AF:74:88:94:5F:4C:54:9B:31:F7:A3:DF:43
X509v3 Authority Key Identifier:
keyid:3F:3B:2F:5B:3B:AE:52:A6:B5:69:2C:AF:92:A2:55:4B:06:DA:86:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzsvWzuuUqa1aSyvkqJVSwbahj0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/EC7B7E82DFD811F08F00FF64536F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.162.204.0/24
IPv6:
2001:df5:fb80::/47
Signature Algorithm: sha256WithRSAEncryption
01:d8:34:95:c2:8c:fb:9f:04:48:83:eb:01:4b:bd:c2:f5:d2:
56:81:d5:15:3b:5c:80:df:0c:48:fe:66:e2:a8:7e:f1:72:d5:
88:0d:22:15:09:36:43:2e:de:72:2d:30:47:ba:c1:4c:f4:29:
c9:b2:6a:91:0b:64:a6:a8:c3:83:fd:51:3e:65:41:a0:41:43:
ef:da:5f:59:08:b2:23:ee:17:57:b4:5c:7f:13:46:39:1f:86:
48:66:3a:41:f6:71:a9:8e:b4:6b:d3:4e:8a:da:d2:f5:92:e9:
a3:a3:29:08:80:2a:9f:2b:59:d3:96:d3:fa:c9:e3:d6:b6:01:
12:e5:11:1b:b1:da:46:e0:82:f1:fa:c7:e5:ba:c8:79:08:e5:
e9:a2:55:6b:27:0d:f1:cd:14:58:87:bb:20:30:85:71:e2:43:
0c:f9:9b:23:5b:0a:ae:9d:8d:be:e9:b5:59:0a:1f:e1:22:87:
49:33:3e:e7:81:da:51:5b:a6:34:fe:91:2c:37:55:b3:f7:c9:
d3:31:c1:bd:cc:fd:e0:cd:f0:24:26:f8:89:a8:a1:f0:5f:94:
a2:92:b9:4f:d8:32:39:b8:94:73:8c:1d:ee:fc:fa:1b:54:ed:
6b:65:f3:8d:8e:a0:b7:3c:c1:e7:d1:24:f7:aa:f7:9f:26:83:
37:59:17:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:48:31 2025 by rpki-client