This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/3C2CE992BF9111F0AC4B384FC4F9AE02.roa
File: 3C2CE992BF9111F0AC4B384FC4F9AE02.roa (raw, json)
Hash identifier: RB4hi6rzyLvxdCOtxeP5KEjIjY+QDkh83y2QufAXxsQ=
Subject key identifier: 5C:4E:C6:30:DF:BF:75:D2:FA:20:9B:FF:08:92:D3:C3:02:7F:AF:14
Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial: 3718
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/3C2CE992BF9111F0AC4B384FC4F9AE02.roa
Signing time: Wed 12 Nov 2025 06:31:35 +0000
ROA not before: Wed 12 Nov 2025 06:31:35 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 55002
IP address blocks: 103.209.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 15:24:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14104 (0x3718)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Validity
Not Before: Nov 12 06:31:35 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=691429c7-e3fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:11:69:fd:54:5e:77:91:ca:24:05:50:f6:e0:
61:82:12:f7:1e:13:ae:e5:08:30:4e:08:71:26:35:
8c:9b:2e:fc:9d:db:7a:26:b4:1b:f2:60:dd:2f:15:
f4:88:79:94:8a:a6:5d:74:29:4f:e8:9e:1b:8f:e5:
89:ca:61:52:dc:b6:23:57:63:90:37:1c:da:5b:c4:
89:5e:cd:f4:8d:c1:61:7d:dc:75:87:d2:eb:59:02:
53:8f:73:fa:7e:fa:e7:13:fa:14:3c:75:4f:51:68:
9f:3f:3a:c6:eb:42:4d:5f:ee:99:13:ae:5c:e7:49:
78:86:a0:48:96:8f:c0:3b:19:3b:20:65:57:f7:cf:
a8:0b:f2:e2:30:00:0a:c6:3f:e2:83:51:9f:99:1a:
00:ef:57:24:d8:b6:c1:b8:23:10:9b:2b:c9:cb:9c:
0d:2b:0d:02:5d:c3:80:9b:5c:fc:2d:e6:bd:4e:ab:
53:60:4a:7d:e2:9c:d3:d2:4a:12:7b:1b:2e:fd:60:
a8:c0:c9:24:bf:f2:f6:78:54:ae:1e:80:d4:c4:7e:
01:7c:f1:29:e2:3d:75:de:f9:db:15:41:56:09:cd:
01:dc:3b:53:f7:05:86:11:42:6c:0d:8a:87:56:b5:
cf:c7:4c:29:5a:d9:de:73:f6:73:1e:b4:5b:36:db:
96:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4E:C6:30:DF:BF:75:D2:FA:20:9B:FF:08:92:D3:C3:02:7F:AF:14
X509v3 Authority Key Identifier:
keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/3C2CE992BF9111F0AC4B384FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.209.7.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:02:a9:ef:a1:66:03:f8:38:cf:5a:84:b5:ea:4b:be:d3:7a:
dc:d3:d7:a9:2d:0e:62:30:df:ae:b2:a4:88:61:aa:29:9e:9f:
a1:94:20:eb:7b:13:09:26:f3:10:37:d6:26:12:41:6a:5a:61:
e7:12:2b:b3:33:88:ee:36:14:05:a5:40:72:03:a4:7b:d8:bf:
e6:03:d0:30:7d:ad:09:21:e9:8c:f7:54:13:9a:fe:60:ae:bd:
6b:c1:3f:22:94:69:1e:23:ef:07:34:4b:0d:be:ee:f4:30:68:
d7:86:4f:5c:3d:57:b5:ec:cd:49:72:3a:d9:36:f1:db:6e:04:
41:52:e2:0f:6d:cc:22:d3:08:9a:ec:eb:80:6d:ba:15:20:5e:
63:51:cb:4f:58:db:d0:38:38:b2:68:32:97:7f:c2:99:d0:39:
8c:16:10:32:b6:e9:dc:e0:4b:28:b1:75:3a:1b:d9:42:2f:86:
7e:99:df:b8:2e:6e:c5:29:78:be:ab:bb:db:a9:c7:3d:e4:66:
51:5e:2d:69:a5:73:c6:03:ac:4e:5a:ee:64:a3:10:d0:c3:89:
f8:c0:aa:89:24:b1:1b:ff:db:a4:70:11:cd:b6:93:26:a7:96:
f0:19:50:00:78:e4:b2:2a:53:f1:2f:98:9d:30:b0:87:0d:64:
ab:34:00:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:27:37 2025 by rpki-client