This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/0FFCC5E8AFAE11EFAC818674C4F9AE02.roa
File: 0FFCC5E8AFAE11EFAC818674C4F9AE02.roa (raw, json)
Hash identifier: 3iz7wj1YXwc+8ZUE8ZccL2zY0SUrahR9tPAyGcy55nk=
Subject key identifier: 1D:AF:1F:D6:87:58:CE:46:9D:21:BF:88:FB:DE:94:C5:8C:BE:BF:D3
Certificate issuer: /CN=A9186363/serialNumber=171EDD3F7785E0F538556F9EF26BED71669E8D8C
Certificate serial: BC
Authority key identifier: 17:1E:DD:3F:77:85:E0:F5:38:55:6F:9E:F2:6B:ED:71:66:9E:8D:8C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/0FFCC5E8AFAE11EFAC818674C4F9AE02.roa
Signing time: Sat 29 Nov 2025 04:03:19 +0000
ROA not before: Sat 29 Nov 2025 04:03:19 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 153470
IP address blocks: 160.250.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl
rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 04:18:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188 (0xbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186363, serialNumber=171EDD3F7785E0F538556F9EF26BED71669E8D8C
Validity
Not Before: Nov 29 04:03:19 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=692a7087-d248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:67:9c:f1:df:84:05:29:55:a5:b1:a3:a4:3e:
61:88:f2:37:d4:32:5b:a7:36:c1:70:12:12:d4:fa:
b8:c7:dd:f4:08:6f:a0:a2:0d:40:64:e7:42:ad:90:
01:4a:77:7d:31:b0:2c:68:4b:53:57:e0:f3:71:20:
8b:3d:a1:54:b5:a4:f5:d7:04:73:fd:19:d8:df:96:
78:15:23:29:3f:4d:24:b7:7e:52:92:c9:98:1b:65:
d2:8e:e9:7a:e2:2b:77:a2:91:a9:67:07:49:33:7d:
3e:68:ee:00:8c:08:0f:78:9a:dc:d6:7b:30:b5:b0:
a1:ff:f3:79:31:22:45:7e:d1:be:f7:80:42:2e:be:
75:d8:e4:d0:a1:2f:fb:a8:f4:f5:ed:37:01:80:ae:
26:a3:e7:11:bc:ee:42:73:f6:08:68:63:c7:6e:f1:
90:45:31:15:01:de:f6:b2:09:a2:4a:d1:6c:8c:3b:
c7:2f:28:fe:da:b8:b2:ec:1e:4e:45:b4:a1:94:4c:
44:d3:df:17:a4:08:d5:fd:57:fe:3b:06:29:05:3f:
06:93:1f:11:2f:9d:b2:7d:32:2d:49:8b:02:9b:39:
ae:06:aa:e8:79:af:66:0c:ce:4f:3c:df:6d:3d:bf:
94:3d:30:9b:e3:c1:70:51:fc:58:15:d2:40:f0:6c:
66:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:AF:1F:D6:87:58:CE:46:9D:21:BF:88:FB:DE:94:C5:8C:BE:BF:D3
X509v3 Authority Key Identifier:
keyid:17:1E:DD:3F:77:85:E0:F5:38:55:6F:9E:F2:6B:ED:71:66:9E:8D:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/0FFCC5E8AFAE11EFAC818674C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.107.0/24
Signature Algorithm: sha256WithRSAEncryption
41:e5:dd:b6:07:62:a2:c8:30:bf:fc:9c:1e:fc:2e:f6:28:e5:
a9:1b:1b:46:69:9b:d3:d2:1d:c4:27:f5:a1:0c:ce:ab:36:9c:
9a:c8:6f:47:3f:20:31:c7:bd:3a:ce:e1:3e:66:2a:83:8b:75:
58:be:41:71:10:2f:86:eb:2c:78:a5:4a:c1:d7:cc:36:35:de:
7a:e8:64:ba:2f:07:e3:11:9c:ea:23:d3:cd:af:a5:23:6c:a4:
9e:22:80:de:d0:c6:47:16:11:18:09:77:53:eb:de:e8:a4:6a:
33:f3:c4:ef:82:95:f3:30:32:3f:7f:3f:3c:74:74:e0:d4:f0:
c5:27:38:1c:09:f0:c4:34:b9:8c:b2:a8:92:d9:27:d5:ba:7e:
34:bf:c2:4e:9d:d6:76:2c:7e:b6:83:7a:3b:06:16:a1:db:b1:
cf:12:ba:48:78:ca:d6:78:f1:6d:1b:8e:a7:74:20:58:f4:81:
4e:3a:8c:87:25:4b:30:00:39:57:52:5e:5c:a8:dc:cc:00:7a:
fc:ee:df:a5:54:bd:4a:65:b2:c7:bd:06:6c:bf:31:7e:20:a5:
aa:2b:a9:02:f7:f4:ac:60:aa:52:96:a8:42:a1:c0:b3:30:6f:
fe:20:57:0e:31:16:d3:ef:39:8a:18:25:ee:73:0d:be:aa:57:
2b:a5:50:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:52:59 2025 by rpki-client