This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/C435900ACF7C11F0AAC14644C4F9AE02.roa
File: C435900ACF7C11F0AAC14644C4F9AE02.roa (raw, json)
Hash identifier: 8rPBOsaa7rJzdB0g/EXgDCRIVsB3I1n1M1fgVfp0lqU=
Subject key identifier: 80:16:AA:95:E9:FA:09:04:0C:87:59:39:47:B3:4F:C5:3E:AC:F2:D4
Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial: 11A9
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/C435900ACF7C11F0AAC14644C4F9AE02.roa
Signing time: Tue 02 Dec 2025 12:45:22 +0000
ROA not before: Tue 02 Dec 2025 12:45:22 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 8796
IP address blocks: 103.140.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4521 (0x11a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91803DB, serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Validity
Not Before: Dec 2 12:45:22 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=692edf62-30af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:35:ea:7d:de:5e:9d:8f:e4:9a:46:30:16:7f:
f6:66:17:23:4f:54:19:34:db:89:28:b5:20:42:52:
e6:ac:93:e2:ca:62:02:0c:0f:3d:22:30:c9:fb:a5:
61:00:13:34:fc:39:15:30:b8:e9:c7:da:8a:45:80:
2c:08:2a:e6:57:b9:ec:72:28:db:c4:21:23:99:d6:
92:5b:c8:b7:3e:e8:fd:48:7e:1d:f6:7f:e5:2f:a8:
55:df:6c:a9:0f:30:82:8b:5f:85:45:72:1a:d3:40:
09:a5:2e:d5:e3:93:46:7e:09:9d:fa:79:18:ea:32:
e3:7e:aa:a9:db:8e:75:cc:ab:6f:2b:dc:3c:0d:99:
4e:c7:76:ad:81:9b:7f:eb:d6:2d:cb:9f:7c:5b:91:
1a:8d:52:21:8e:dd:11:31:bc:62:88:03:6a:ac:1e:
df:78:b5:02:66:3c:c3:ca:d3:ad:48:67:42:e9:4a:
a9:69:11:a8:55:a6:a3:f3:af:ef:9c:14:96:86:19:
a2:bf:08:c1:0a:90:36:d7:3f:5b:06:a5:8c:c7:22:
e5:00:bb:46:2a:09:0e:23:72:d9:ed:45:4c:45:60:
f8:aa:fb:78:a6:28:31:f5:14:ca:5f:b0:8b:4f:5f:
ac:22:e6:08:d4:5e:22:4d:d0:50:60:7f:58:e9:bd:
00:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:16:AA:95:E9:FA:09:04:0C:87:59:39:47:B3:4F:C5:3E:AC:F2:D4
X509v3 Authority Key Identifier:
keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/C435900ACF7C11F0AAC14644C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.140.9.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:ee:5f:37:a8:5f:f7:63:aa:b3:48:84:fe:74:03:30:cc:dc:
9d:90:89:1d:f7:25:59:7d:ae:b3:5e:06:86:7a:70:f8:3a:df:
65:ae:d0:db:64:1a:56:6b:3a:e7:f2:70:7f:95:43:00:b6:94:
1a:6a:f0:55:94:af:44:df:2a:36:78:8d:84:0f:c0:fd:ae:9b:
ce:1a:f8:55:b4:ac:eb:75:51:b9:f9:ec:be:23:64:6e:c2:25:
34:f9:3b:f2:67:1a:bb:2e:f5:76:1a:7b:2d:f2:16:0c:97:8b:
f4:5b:ac:21:38:d7:6f:3e:e4:5c:6a:1c:a0:a0:86:ee:10:96:
e3:48:8a:9b:be:85:fe:09:4c:f4:fe:fe:d2:a8:27:ac:b8:78:
4b:9a:b5:3e:7d:cb:30:48:b8:41:2c:a3:06:1c:fa:a1:5c:24:
be:14:e6:e4:f8:bf:53:28:31:13:47:7c:b1:52:55:58:11:6a:
de:6b:8a:55:72:b3:ed:43:9f:bb:ce:0b:29:81:d3:b6:3f:73:
f9:df:84:96:24:3e:6b:ef:91:98:1c:80:66:5b:ca:4e:9b:cc:
3a:14:df:2c:ce:5b:21:1a:28:8d:34:a5:72:6b:cd:86:35:d2:
55:06:5e:52:d7:53:0f:9a:b6:14:90:32:b9:fe:43:b3:5c:52:
2f:42:7f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:44:44 2025 by rpki-client