This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/2C6BA5E82EB511EFBCC65925C4F9AE02.roa
File: 2C6BA5E82EB511EFBCC65925C4F9AE02.roa (raw, json)
Hash identifier: Lss+xMSjsVW/Iz01A+UAitwGdTNiOgTBuwOADNSWYt0=
Subject key identifier: 23:94:73:64:4C:10:BE:D6:BF:63:39:A2:3B:AE:DD:F1:65:44:26:CC
Certificate issuer: /CN=A9118FFA/serialNumber=9FE881D8BD32AD15AB7BE7B4EC4F752212546C76
Certificate serial: 010C
Authority key identifier: 9F:E8:81:D8:BD:32:AD:15:AB:7B:E7:B4:EC:4F:75:22:12:54:6C:76
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/2C6BA5E82EB511EFBCC65925C4F9AE02.roa
Signing time: Wed 05 Nov 2025 05:20:12 +0000
ROA not before: Wed 05 Nov 2025 05:20:12 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 138194
IP address blocks: 103.122.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.crl
rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:55:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 268 (0x10c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118FFA, serialNumber=9FE881D8BD32AD15AB7BE7B4EC4F752212546C76
Validity
Not Before: Nov 5 05:20:12 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=690ade8b-b9b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:11:93:e0:b1:95:38:b6:7e:c2:6b:8b:99:fb:
91:33:6a:79:fa:ac:ef:fb:8d:03:00:f1:1d:ad:36:
e6:fb:69:4d:bf:6f:8f:37:72:6c:f7:2d:1c:6f:8b:
d5:0d:9f:a0:65:b7:72:2c:ba:35:c2:2e:6f:71:7c:
fd:9f:2d:35:04:c6:b8:cf:e6:d5:e0:ca:84:53:bd:
50:38:c5:69:f0:8a:ea:7c:83:c6:8b:ac:08:bb:1a:
b8:ab:de:fd:48:56:82:06:77:da:bd:ac:8e:c5:0a:
97:62:c8:b6:f6:4f:01:aa:7c:2b:50:8a:5b:9a:64:
28:fa:8a:05:14:a6:ac:a2:b4:4d:44:8d:9b:22:c4:
61:cb:c2:10:71:17:ab:49:e7:7a:50:3e:b5:03:89:
fa:cc:65:a2:7c:16:86:40:d9:ce:4d:19:09:9a:68:
b1:58:d9:5f:d3:b5:e0:ab:c5:71:3e:d7:5c:c0:47:
7d:de:3e:b8:35:e5:3d:7d:06:ab:e5:91:fa:a9:c0:
90:73:56:9a:b4:2c:23:be:03:fc:ac:0c:54:60:99:
19:bc:87:72:bd:d4:c9:55:49:3a:d3:6b:26:e4:37:
b7:a3:da:e1:05:1b:5f:a0:b2:9e:5f:7c:1c:c8:7b:
c0:0a:89:16:c2:75:cb:92:de:23:dc:66:75:fc:95:
a9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:94:73:64:4C:10:BE:D6:BF:63:39:A2:3B:AE:DD:F1:65:44:26:CC
X509v3 Authority Key Identifier:
keyid:9F:E8:81:D8:BD:32:AD:15:AB:7B:E7:B4:EC:4F:75:22:12:54:6C:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/2C6BA5E82EB511EFBCC65925C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.4.0/24
Signature Algorithm: sha256WithRSAEncryption
18:c3:a7:23:10:94:2a:b1:83:26:14:37:ac:61:a1:70:67:31:
9c:54:fb:5e:e8:40:3f:5f:95:fe:50:9c:61:b3:c0:ec:8b:e0:
9f:28:53:5f:97:94:8e:8a:45:ff:4c:30:49:05:f5:38:0e:c0:
13:f1:c8:6b:a9:de:04:69:61:3f:c7:66:56:f2:60:b2:84:f7:
88:3e:2d:66:07:80:52:d1:98:e9:ae:19:0a:21:2c:37:01:79:
69:cf:03:96:31:91:d9:b5:26:8b:12:9b:d1:f8:4e:1f:d9:14:
fc:a6:42:fc:74:51:38:d5:20:03:ab:3b:36:c5:78:54:a5:59:
e2:3f:c9:e5:33:55:ec:74:b2:99:62:46:3e:19:bb:ea:6c:3e:
82:e6:7b:9c:b4:49:66:a9:0f:38:34:16:22:3b:c4:82:3c:16:
20:d0:d3:8b:ba:98:95:52:e7:fd:1c:24:23:16:9d:4d:a0:f7:
da:7c:56:65:11:d4:cb:32:a8:07:2c:55:ff:d9:88:3e:71:fb:
2d:fa:48:de:d9:15:c0:a5:e3:aa:51:b7:cb:8a:bd:11:60:bf:
cf:54:a5:4b:d9:c2:f8:b6:60:e9:7a:1e:44:7e:4d:f4:61:6c:
dc:90:7a:36:29:7f:e2:e0:b7:ee:2d:4e:4f:ae:24:1d:4a:c0:
16:ca:f8:ae
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MThGRkExMTAvBgNVBAUTKDlGRTg4MUQ4QkQzMkFEMTVBQjdCRTdCNEVDNEY3NTIy
MTI1NDZDNzYwHhcNMjUxMTA1MDUyMDEyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTBhZGU4Yi1iOWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqBGT4LGVOLZ+wmuLmfuRM2p5+qzv+40DAPEdrTbm+2lNv2+PN3Js9y0cb4vV
DZ+gZbdyLLo1wi5vcXz9ny01BMa4z+bV4MqEU71QOMVp8IrqfIPGi6wIuxq4q979
SFaCBnfavayOxQqXYsi29k8BqnwrUIpbmmQo+ooFFKasorRNRI2bIsRhy8IQcRer
Sed6UD61A4n6zGWifBaGQNnOTRkJmmixWNlf07Xgq8VxPtdcwEd93j64NeU9fQar
5ZH6qcCQc1aatCwjvgP8rAxUYJkZvIdyvdTJVUk602sm5De3o9rhBRtfoLKeX3wc
yHvACokWwnXLkt4j3GZ1/JWpYQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCOUc2RM
EL7Wv2M5ojuu3fFlRCbMMB8GA1UdIwQYMBaAFJ/ogdi9Mq0Vq3vntOxPdSISVGx2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEZGQS8wNTg2MDY4QTJC
N0MxMUVGODlFODQxNDRDNEY5QUUwMi9uLWlCMkwweXJSV3JlLWUwN0U5MUloSlVi
SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL24taUIyTDB5clJXcmUtZTA3RTkxSWhKVWJIWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MThGRkEvMDU4NjA2OEEyQjdDMTFFRjg5RTg0MTQ0QzRGOUFFMDIvMkM2QkE1RTgy
RUI1MTFFRkJDQzY1OTI1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnegQwDQYJKoZIhvcNAQELBQADggEBABjDpyMQlCqxgyYU
N6xhoXBnMZxU+17oQD9flf5QnGGzwOyL4J8oU1+XlI6KRf9MMEkF9TgOwBPxyGup
3gRpYT/HZlbyYLKE94g+LWYHgFLRmOmuGQohLDcBeWnPA5Yxkdm1JosSm9H4Th/Z
FPymQvx0UTjVIAOrOzbFeFSlWeI/yeUzVex0spliRj4Zu+psPoLme5y0SWapDzg0
FiI7xII8FiDQ04u6mJVS5/0cJCMWnU2g99p8VmUR1MsyqAcsVf/ZiD5x+y36SN7Z
FcCl46pRt8uKvRFgv89UpUvZwvi2YOl6HkR+TfRhbNyQejYpf+Lgt+4tTk+uJB1K
wBbK+K4=
-----END CERTIFICATE-----
Generated at Sun Dec 7 00:56:09 2025 by rpki-client