This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/4DC77C600A9111EEB13EAF44C4F9AE02.roa
File: 4DC77C600A9111EEB13EAF44C4F9AE02.roa (raw, json)
Hash identifier: FwgzcLz0ulXMRpFgzbkDkNByfvZ6IbVg9iuXnMBlPn8=
Subject key identifier: DC:D6:AC:CA:98:86:7F:50:55:1C:E9:9E:5C:5C:86:B8:50:52:C9:F9
Certificate issuer: /CN=A911057B/serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5
Certificate serial: 0C42
Authority key identifier: 07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/4DC77C600A9111EEB13EAF44C4F9AE02.roa
Signing time: Thu 08 Jan 2026 19:15:44 +0000
ROA not before: Thu 08 Jan 2026 19:15:44 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 64098
IP address blocks: 103.143.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl
rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 18:22:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3138 (0xc42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911057B, serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5
Validity
Not Before: Jan 8 19:15:44 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69600260-0f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a2:9b:e1:46:87:fc:65:60:89:d3:d4:0f:62:
69:9b:be:fa:25:13:bd:77:bf:a7:5f:94:ab:80:2c:
5e:b5:d2:3f:5b:e3:82:fb:21:95:41:23:08:0f:bd:
d4:54:30:e4:b2:4f:b5:41:b8:89:b6:c1:40:0b:67:
8e:ab:e3:ef:7b:24:f6:7c:31:ee:53:7a:b2:e8:28:
a6:2c:c2:96:cd:a2:54:5d:1b:7d:d8:8d:e2:c6:50:
bd:b4:7a:fa:55:05:99:ca:34:15:fe:7c:2f:29:02:
e2:a2:f8:f7:2b:32:7e:0f:71:ab:47:d0:d5:dc:66:
5e:d3:d7:20:7a:83:3c:7a:2f:9d:6b:70:04:85:99:
0b:68:99:9b:ba:45:8f:ed:58:7c:82:6f:5f:20:23:
94:30:1e:02:81:7f:7a:0e:d7:77:3b:f4:cc:e9:f3:
75:c9:5b:e1:a6:80:52:ea:e8:b9:20:36:32:c2:21:
95:ff:be:94:5f:9f:66:35:f2:f9:36:05:78:01:4c:
ef:f1:d5:ee:9e:e3:a4:2e:92:5a:63:ac:76:de:c5:
df:30:ea:49:19:d9:ff:77:a5:a0:30:d2:96:c9:7e:
11:f5:ea:8a:3f:97:58:b2:6e:09:0b:c1:ae:bd:20:
5b:47:ed:18:5f:82:60:c5:57:70:20:89:84:ef:60:
42:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D6:AC:CA:98:86:7F:50:55:1C:E9:9E:5C:5C:86:B8:50:52:C9:F9
X509v3 Authority Key Identifier:
keyid:07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/4DC77C600A9111EEB13EAF44C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.143.172.0/24
Signature Algorithm: sha256WithRSAEncryption
91:1d:cc:6d:b8:09:d7:6c:0f:6a:c1:34:fa:08:e1:17:0d:19:
85:eb:3b:70:23:10:8d:ff:4f:1d:67:c7:38:16:e3:c8:89:19:
6d:e0:16:35:86:1a:81:ab:62:0b:23:cc:03:a6:87:c4:a6:98:
0c:e3:34:c0:dc:34:65:e2:39:a5:db:4b:37:66:9a:34:48:c2:
b2:d0:c4:d2:c5:e6:2e:08:b8:ab:ce:79:f6:3d:48:06:6e:02:
e6:94:77:c4:7c:e7:b0:a1:2b:de:c0:c2:fd:7b:36:14:7a:2e:
dc:d0:fd:28:bc:0f:d0:44:47:24:eb:3d:4f:ef:79:a7:92:f0:
ca:52:ef:59:3c:51:2c:2f:f5:5a:27:9e:c5:fe:13:8c:99:cb:
3d:2c:1f:95:89:14:19:75:bf:ba:71:7c:aa:39:31:e4:b8:52:
0d:e0:5b:da:6c:eb:2a:d8:dd:15:5d:5d:24:a2:35:88:9c:dd:
ef:9c:9b:90:b4:f4:d7:fd:74:cf:d8:1e:59:90:6c:f3:d6:7b:
6a:ad:c0:7d:84:df:e7:2a:8e:1b:2d:81:5f:47:77:53:4d:b3:
1d:18:b3:c8:d6:4f:76:af:03:ab:78:6a:26:85:50:19:ea:f8:
4d:83:b2:f1:f2:bc:7a:50:ac:36:a1:3a:f5:66:ed:21:00:03:
3b:7b:ba:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:50:45 2026 by rpki-client