This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/32E51F32BFD511F0A2819A6CC4F9AE02.roa
File: 32E51F32BFD511F0A2819A6CC4F9AE02.roa (raw, json)
Hash identifier: GyJKr0ADEFxLplRdesBqEna45M3ARZFUwQ1X3O9sctw=
Subject key identifier: 0C:BA:53:05:9E:00:24:EC:B3:02:73:44:AA:F4:56:F8:B8:3C:B4:C3
Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial: 371A
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/32E51F32BFD511F0A2819A6CC4F9AE02.roa
Signing time: Wed 12 Nov 2025 14:38:05 +0000
ROA not before: Wed 12 Nov 2025 14:38:05 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 134659
IP address blocks: 103.209.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14106 (0x371a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Validity
Not Before: Nov 12 14:38:05 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=69149bcd-8686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:41:9c:a5:21:fa:b5:c2:20:24:63:d6:ed:38:
8f:19:9d:ef:fd:08:f5:45:79:66:65:21:bc:0a:6c:
c3:1e:d8:66:b4:d3:e2:d6:9c:62:65:b4:72:6b:d8:
80:ae:ee:7b:84:eb:cc:f6:60:97:7a:db:9c:ef:76:
c2:11:4c:2b:3a:e3:5f:6d:85:25:c2:15:95:0b:5f:
5d:15:c2:f1:57:ea:13:9d:c7:eb:8e:2e:c6:1c:61:
36:cd:2a:99:bb:01:2d:e9:be:9a:67:3c:b3:a9:2c:
dc:c0:90:08:09:6f:f9:10:8b:ad:a6:bb:f8:48:14:
db:f3:34:0c:a9:12:6e:d0:61:40:ca:58:ae:da:e1:
eb:42:49:bb:cb:a9:1e:d9:81:73:b6:f4:aa:f7:c8:
c5:f2:59:1f:ba:2a:47:53:48:40:89:2e:3e:ef:bb:
64:8f:41:4e:32:d4:7d:69:16:3b:20:f3:5c:f0:da:
ff:d6:8c:02:91:e7:c8:a6:3e:50:b4:a9:17:7b:56:
fc:67:3b:e1:63:1b:4d:9b:8a:85:02:af:63:55:23:
9b:80:53:bd:21:0a:5f:8c:a3:2a:b7:60:95:3f:0a:
f7:60:de:e2:8a:b7:11:eb:ac:10:9e:fe:54:e1:1f:
4b:e1:c0:d1:91:83:ca:23:71:d4:b3:e4:97:dd:e7:
2c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BA:53:05:9E:00:24:EC:B3:02:73:44:AA:F4:56:F8:B8:3C:B4:C3
X509v3 Authority Key Identifier:
keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/32E51F32BFD511F0A2819A6CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.209.7.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:36:71:8a:31:36:13:e6:5f:5f:b4:db:2f:04:8a:af:78:6e:
e8:2d:e7:4d:f3:4f:3f:33:bd:e6:80:46:ca:f2:9f:99:65:54:
f1:85:7b:56:51:4b:18:97:65:32:a4:dd:7a:a9:03:5d:ee:dc:
7e:f3:ea:cd:b0:cc:44:dd:a1:f2:5e:94:d6:0d:08:31:e7:da:
2c:11:32:21:f5:6a:2f:86:d5:e5:23:89:85:f6:5b:53:55:a7:
70:55:a2:9b:41:1c:9e:ab:ee:84:81:d9:a9:b8:8e:e5:fc:5e:
e5:21:79:21:e5:2e:db:4e:7b:07:22:79:ae:6c:8a:18:17:96:
4d:c5:ca:fb:ec:a5:f1:fc:11:5a:d8:09:d5:fe:54:99:b9:40:
c1:1b:cb:7b:a1:be:a8:c8:17:b9:9b:1e:02:e6:18:06:30:71:
93:7f:4e:40:ff:d8:7f:ce:f6:d3:e0:64:ed:57:74:0e:b0:e8:
02:4d:cf:6a:ba:14:3e:3e:87:ed:6c:54:e2:11:c8:75:46:b1:
a2:d3:38:5c:7e:66:66:d0:48:5a:12:74:77:b6:0d:c3:ec:54:
7f:d1:b7:ba:55:76:a2:f8:ea:6c:62:b6:5d:62:6d:bb:5d:99:
34:7c:b3:d1:5e:59:d5:37:a6:56:e6:ba:81:2f:38:e2:23:b7:
5d:47:49:f0
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICNxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG
QUIyNEQ3RTcwHhcNMjUxMTEyMTQzODA1WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTE0OWJjZC04Njg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp0GcpSH6tcIgJGPW7TiPGZ3v/Qj1RXlmZSG8CmzDHthmtNPi1pxiZbRya9iA
ru57hOvM9mCXetuc73bCEUwrOuNfbYUlwhWVC19dFcLxV+oTncfrji7GHGE2zSqZ
uwEt6b6aZzyzqSzcwJAICW/5EIutprv4SBTb8zQMqRJu0GFAyliu2uHrQkm7y6ke
2YFztvSq98jF8lkfuipHU0hAiS4+77tkj0FOMtR9aRY7IPNc8Nr/1owCkefIpj5Q
tKkXe1b8ZzvhYxtNm4qFAq9jVSObgFO9IQpfjKMqt2CVPwr3YN7iircR66wQnv5U
4R9L4cDRkYPKI3HUs+SX3ecstwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAy6UwWe
ACTsswJzRKr0Vvi4PLTDMB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz
MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx
LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvMzJFNTFGMzJC
RkQ1MTFGMEEyODE5QTZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABn0QcwDQYJKoZIhvcNAQELBQADggEBABo2cYoxNhPmX1+0
2y8Eiq94bugt503zTz8zveaARsryn5llVPGFe1ZRSxiXZTKk3XqpA13u3H7z6s2w
zETdofJelNYNCDHn2iwRMiH1ai+G1eUjiYX2W1NVp3BVoptBHJ6r7oSB2am4juX8
XuUheSHlLttOewciea5sihgXlk3FyvvspfH8EVrYCdX+VJm5QMEby3uhvqjIF7mb
HgLmGAYwcZN/TkD/2H/O9tPgZO1XdA6w6AJNz2q6FD4+h+1sVOIRyHVGsaLTOFx+
ZmbQSFoSdHe2DcPsVH/Rt7pVdqL46mxitl1ibbtdmTR8s9FeWdU3plbmuoEvOOIj
t11HSfA=
-----END CERTIFICATE-----
Generated at Wed Dec 3 16:05:07 2025 by rpki-client