This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/7E99DBC2F73711F0916171B3376F56BC.roa
File: 7E99DBC2F73711F0916171B3376F56BC.roa (raw, json)
Hash identifier: q0EmSPjBnfYz635amSUFAosWVVmgeUSEukQMopNPmls=
Subject key identifier: 37:B2:9B:79:9E:06:A2:E9:DB:9E:49:50:EE:6E:FE:3F:65:DC:72:7A
Certificate issuer: /CN=A9112FE1/serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E
Certificate serial: C0
Authority key identifier: 3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/7E99DBC2F73711F0916171B3376F56BC.roa
Signing time: Thu 22 Jan 2026 02:10:17 +0000
ROA not before: Thu 22 Jan 2026 02:10:17 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 152450
IP address blocks: 103.161.138.0/24 maxlen: 24
103.161.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl
rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 05:32:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192 (0xc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112FE1, serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E
Validity
Not Before: Jan 22 02:10:17 2026 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69718709-5f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3d:2e:5a:a9:75:38:56:99:9d:4d:2a:f3:c3:
25:38:53:11:fb:20:6a:f9:0e:3c:b5:43:9f:73:04:
61:9d:ba:fe:0a:13:4e:32:e1:95:c7:be:1e:df:0a:
ff:24:ef:01:0d:c1:96:3f:dc:ac:06:7b:2b:85:ee:
97:c2:cd:41:ca:44:80:d4:61:74:11:47:f6:43:96:
03:b9:a4:ab:86:f8:21:4a:f1:47:3d:c2:e2:5d:a5:
6d:9e:f2:4d:6a:dc:55:0c:7a:19:67:e6:fe:a5:b8:
3d:da:2e:10:b6:69:d6:ce:17:3a:82:ee:3a:56:7f:
36:f0:a7:32:85:18:c0:5a:d1:0b:7d:c0:05:d6:30:
8e:8c:d3:ae:a7:b8:8b:33:86:54:72:7d:bf:d6:db:
e7:1e:1a:f8:fe:70:e3:00:9f:db:c3:aa:49:4f:42:
f3:48:79:5b:d2:ec:d6:bd:77:4e:a1:ca:76:8b:c0:
5b:68:70:7b:c8:97:2e:11:56:47:5d:ff:1e:3c:9d:
e1:07:fb:7e:32:11:6f:55:cc:65:f1:28:33:f7:04:
b2:75:a7:17:2f:dd:b5:37:88:df:ac:fc:22:44:4d:
09:e2:46:10:af:ef:9b:f9:df:cf:c9:f1:40:95:6e:
4a:0c:c8:d8:4d:ff:79:f6:8c:4b:c8:72:54:e0:58:
c7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B2:9B:79:9E:06:A2:E9:DB:9E:49:50:EE:6E:FE:3F:65:DC:72:7A
X509v3 Authority Key Identifier:
keyid:3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/7E99DBC2F73711F0916171B3376F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.161.138.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:be:4a:17:a1:6c:f7:e4:f0:04:af:8d:f4:07:bd:56:44:6e:
d3:43:ac:a9:34:92:22:60:9b:7d:95:02:5d:2d:55:37:be:60:
a8:d6:43:93:25:90:24:af:fc:b0:c0:c2:bd:5f:32:76:22:21:
e9:e1:7c:38:be:e9:a5:0e:d5:fc:8b:90:11:70:3c:06:17:83:
d1:c0:c5:6e:c9:70:a5:31:ad:f0:62:c4:9b:2f:4c:d5:03:7e:
08:ef:5d:14:15:8a:9d:83:99:41:ac:7e:b5:94:f6:3d:cc:cd:
2a:4e:a2:16:df:5b:04:64:55:19:d6:2f:e7:3d:fa:07:ad:cf:
ce:fc:a8:63:1d:8d:bf:49:ac:0a:c4:f4:02:87:67:ff:7c:9e:
60:d3:db:2d:e2:cc:3a:11:50:dd:e2:b0:12:e6:21:c9:32:76:
f4:dd:cd:33:fd:0d:b5:60:09:f0:b5:10:7e:12:90:50:02:a6:
4e:9b:4a:67:d2:d3:fa:85:13:42:e5:d9:0c:9f:09:8e:1e:26:
04:a5:10:1f:ce:7a:11:56:29:25:80:c9:fb:df:4a:68:f1:3e:
06:d4:30:2a:7d:5b:82:3d:df:0e:16:12:1d:e6:24:de:da:42:
cf:cb:b6:a1:f5:62:1c:0c:c3:24:eb:12:dc:90:19:d5:e9:1a:
38:eb:a9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:01:20 2026 by rpki-client