This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/63E3EB3EEF6611EB9A7EFE0EC4F9AE02.roa
File: 63E3EB3EEF6611EB9A7EFE0EC4F9AE02.roa (raw, json)
Hash identifier: +wwZvfyRXDthJJkJ0XOqFhEVzeFcdp8Qe5FfX5dJEpg=
Subject key identifier: FD:99:D7:2B:BD:BE:D7:D0:7A:4F:C8:10:73:AB:4F:11:EF:E2:31:7D
Certificate issuer: /CN=A918E0B2/serialNumber=0B3EBA88F1ADA1A1B50891B26531A3E709BF659A
Certificate serial: 05AC
Authority key identifier: 0B:3E:BA:88:F1:AD:A1:A1:B5:08:91:B2:65:31:A3:E7:09:BF:65:9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/63E3EB3EEF6611EB9A7EFE0EC4F9AE02.roa
Signing time: Fri 14 Nov 2025 22:13:42 +0000
ROA not before: Fri 14 Nov 2025 22:13:42 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 133154
IP address blocks: 103.252.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl
rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 21:56:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1452 (0x5ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E0B2, serialNumber=0B3EBA88F1ADA1A1B50891B26531A3E709BF659A
Validity
Not Before: Nov 14 22:13:42 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6917a996-8273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8d:14:0e:0d:b8:b6:89:3f:5f:04:85:ff:c2:
3b:32:77:01:e6:7b:49:5b:d3:5b:c2:38:bc:d4:a1:
c7:82:77:89:33:4d:e4:7d:ed:77:6f:1c:ef:65:0c:
da:71:f1:ef:5e:a5:cc:d5:36:5f:b2:82:82:44:b0:
47:1c:99:ec:57:fa:81:f9:fe:5b:08:43:d7:f4:fa:
b2:2a:c6:a9:15:2a:fb:a3:c6:36:9d:5f:de:52:66:
8c:70:a4:ef:82:64:49:ef:c4:60:e5:d4:7e:6a:f3:
77:92:fc:a7:0a:2a:6f:72:a4:a6:d7:22:f9:81:cc:
38:bf:25:b7:f8:a2:a0:7b:3f:b1:ea:e5:2d:50:71:
bb:78:83:6d:bd:b9:9b:40:d3:9a:bd:db:6d:29:d9:
e6:f5:a4:55:0c:cd:88:de:a9:5f:6e:27:14:27:81:
47:96:f7:90:03:5d:9c:a3:bc:0c:29:04:d0:ab:0d:
66:85:97:25:4a:13:ca:07:2c:03:95:0c:b3:06:01:
63:00:99:37:fb:81:b0:1e:81:b0:85:dc:75:0f:96:
47:8d:d3:02:88:f1:ef:92:9d:d9:ae:71:bd:b7:fb:
d9:7c:08:51:a7:8f:e0:75:b2:34:51:bb:a4:2f:39:
42:e0:f4:f0:06:bf:7e:31:99:14:c9:73:49:49:96:
4b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:99:D7:2B:BD:BE:D7:D0:7A:4F:C8:10:73:AB:4F:11:EF:E2:31:7D
X509v3 Authority Key Identifier:
keyid:0B:3E:BA:88:F1:AD:A1:A1:B5:08:91:B2:65:31:A3:E7:09:BF:65:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/63E3EB3EEF6611EB9A7EFE0EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.252.247.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:35:23:1c:25:dd:dd:07:db:10:8f:d2:41:13:07:8f:d7:89:
4d:e7:3f:65:b4:7d:d9:32:f3:d5:d5:77:f3:a5:ac:ed:a5:29:
fa:3a:e5:f5:9b:6b:a6:67:f3:23:93:bf:5d:06:55:93:fc:7a:
b2:89:dd:9e:77:43:d1:6c:78:1d:f7:f9:0a:34:db:ce:5f:11:
7c:df:4f:0d:5d:4c:10:50:13:12:1d:11:34:29:09:a7:61:bb:
ca:dc:1d:ef:3f:74:01:4d:ef:90:04:c5:25:01:d2:91:7b:bd:
6c:2e:55:52:dc:ee:2a:10:8b:b2:6e:04:5f:fe:6f:ed:1a:f0:
0f:a6:df:06:e1:96:3a:7a:70:1f:d2:02:16:59:24:96:d4:d8:
70:8a:a1:c6:d7:56:62:cb:ce:dd:f6:99:f0:cc:5b:14:a5:37:
33:d3:fc:a7:a0:40:9b:5b:66:eb:fa:32:3e:7f:ea:cb:72:28:
5c:01:b2:71:e2:58:81:1c:91:17:29:c8:24:da:06:21:b8:18:
f6:13:b2:81:f9:a5:fd:ed:2d:92:05:f3:60:f8:a2:f3:a1:f2:
21:0e:ea:ae:e5:d8:e3:69:c4:ac:fc:ce:d1:f1:98:2a:c9:c9:
d1:61:e1:35:7b:5a:f0:28:07:b7:0e:57:32:0d:8b:68:89:fb:
57:d4:f5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 06:57:02 2025 by rpki-client