This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/0DFAD3529E1611E98059B049C4F9AE02.roa
File: 0DFAD3529E1611E98059B049C4F9AE02.roa (raw, json)
Hash identifier: Fk/MM5a7XloGNvh5BBzETAolL1qXnjEN3DS8ILJUook=
Subject key identifier: 99:96:1D:FE:B7:C5:FD:D4:F6:C3:F8:02:A0:C0:5B:F0:FE:21:12:4B
Certificate issuer: /CN=A919FEA1/serialNumber=EF6C194BB2894D33E6DE0642232D94CE4E9EF194
Certificate serial: 0EB9
Authority key identifier: EF:6C:19:4B:B2:89:4D:33:E6:DE:06:42:23:2D:94:CE:4E:9E:F1:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/0DFAD3529E1611E98059B049C4F9AE02.roa
Signing time: Fri 12 Dec 2025 17:35:06 +0000
ROA not before: Fri 12 Dec 2025 17:35:06 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 59263
IP address blocks: 103.255.170.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.crl
rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 17:19:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3769 (0xeb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919FEA1, serialNumber=EF6C194BB2894D33E6DE0642232D94CE4E9EF194
Validity
Not Before: Dec 12 17:35:06 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=693c524a-4621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:73:1a:db:e6:89:61:76:de:ac:1d:b0:3a:12:
03:0f:32:88:56:56:e8:97:ed:93:1f:f9:eb:66:8e:
b0:39:3d:62:8d:c1:72:fe:e3:1d:64:d4:07:39:b5:
c0:c0:16:ee:5d:19:0c:70:09:0b:a2:3f:e8:e8:d8:
e8:79:37:89:28:31:ea:c3:51:8d:48:8f:cd:81:95:
9a:c6:17:45:ed:36:76:96:2b:20:82:87:65:2e:2b:
11:f2:07:56:a2:b7:b5:cb:4f:3d:1e:73:31:34:2b:
45:2d:d3:b3:31:53:3e:e2:8d:a0:a8:83:f6:ae:66:
5d:7a:25:10:47:b7:46:a2:88:e9:5f:cf:f3:fb:15:
9e:71:d5:13:17:76:f2:83:1d:8b:7a:c2:02:48:c9:
81:a0:06:ac:42:a4:a0:1f:11:d1:f0:45:39:b1:01:
77:c1:9d:d7:f9:6c:63:66:f4:94:91:b0:2b:f9:2e:
89:5d:bc:2e:02:95:3b:77:39:a4:ef:ff:0e:54:37:
41:e6:de:30:d0:8f:b4:9e:12:de:e7:59:84:81:12:
9a:61:23:22:9e:5d:fb:20:0e:54:72:49:50:60:06:
78:6a:b8:3c:1b:17:2e:b7:f4:12:8c:a2:27:2c:4e:
25:47:0b:58:be:17:1d:d3:60:61:90:21:95:33:53:
2f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:96:1D:FE:B7:C5:FD:D4:F6:C3:F8:02:A0:C0:5B:F0:FE:21:12:4B
X509v3 Authority Key Identifier:
keyid:EF:6C:19:4B:B2:89:4D:33:E6:DE:06:42:23:2D:94:CE:4E:9E:F1:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/0DFAD3529E1611E98059B049C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.255.170.0/23
Signature Algorithm: sha256WithRSAEncryption
35:86:9f:0c:2c:68:45:9f:1b:26:ae:77:9d:89:c0:ac:08:8f:
07:64:e5:8a:43:f9:44:7a:a1:f0:9e:52:42:f4:cf:96:c2:f7:
25:cf:c6:97:0f:d5:0c:56:17:de:a3:81:f3:42:df:b7:67:60:
fb:3b:4b:e3:49:87:dc:77:4d:18:8f:51:b6:26:83:72:cc:08:
1c:4f:d7:91:e6:a8:06:1e:e7:e9:63:27:5a:7d:ab:a6:9a:7c:
eb:3b:72:68:6b:7a:f6:db:be:3d:80:4c:0e:f3:a8:ce:39:e8:
3a:4d:ed:7e:08:72:71:5f:e9:c9:37:bf:9e:fd:b4:a9:c3:9c:
8b:7e:58:bb:1c:5e:ba:13:1a:62:74:b4:a9:18:1f:35:24:da:
70:b4:f9:22:31:ca:63:ae:7e:d0:a7:41:75:03:a0:00:d0:ec:
0d:2d:86:f0:47:3b:1b:43:2e:c6:9a:45:2a:f1:48:0a:06:6f:
73:1c:8e:6f:4a:77:3e:b5:41:d9:09:58:38:2a:1a:75:ae:f2:
e6:a2:18:c2:34:87:f0:58:a6:65:5e:fe:b4:7a:88:91:0d:28:
1b:6c:16:72:48:47:a4:b3:26:03:17:74:10:26:bd:39:e4:c7:
b5:c0:26:90:14:64:79:ff:a9:12:ff:b0:75:ad:d4:ad:60:ec:
a6:70:d8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:44:56 2025 by rpki-client