This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/5E54C4BEA06411EBB6AFCD55C4F9AE02.roa
File: 5E54C4BEA06411EBB6AFCD55C4F9AE02.roa (raw, json)
Hash identifier: v8WvShcN74CM0102tLWAsbLMeXYpIAFd/e2h34MlI7k=
Subject key identifier: 88:AE:A2:53:77:F1:63:9C:43:CE:C4:8B:33:75:65:50:AD:27:DE:16
Certificate issuer: /CN=A912346E/serialNumber=902496C12B1DAA584E42B34334CF17201236B27C
Certificate serial: 0690
Authority key identifier: 90:24:96:C1:2B:1D:AA:58:4E:42:B3:43:34:CF:17:20:12:36:B2:7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/5E54C4BEA06411EBB6AFCD55C4F9AE02.roa
Signing time: Tue 06 Jan 2026 22:18:29 +0000
ROA not before: Tue 06 Jan 2026 22:18:29 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 134804
IP address blocks: 103.13.132.0/23 maxlen: 23
103.13.132.0/24 maxlen: 24
103.13.133.0/24 maxlen: 24
2001:df6:89c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.crl
rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 21:44:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1680 (0x690)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912346E, serialNumber=902496C12B1DAA584E42B34334CF17201236B27C
Validity
Not Before: Jan 6 22:18:29 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=695d8a35-6e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:eb:5b:37:68:7a:cb:c9:77:ca:16:f2:cd:0d:
eb:36:cd:ef:f1:7d:71:23:18:1c:ad:ea:70:72:b0:
83:11:d3:36:71:aa:90:ba:7a:5d:fa:b4:41:d1:8a:
a9:0a:82:4b:6d:f1:e7:28:c9:e6:fc:35:8f:14:33:
4e:6c:56:a1:03:32:3c:d6:b7:a6:4a:dd:65:25:36:
9e:c2:a5:fc:3e:b0:fb:dc:8b:c5:e5:7a:13:5c:56:
41:0d:b5:fe:78:e7:ce:14:3a:9d:cd:0d:d9:90:5c:
fd:93:ef:70:db:f4:ee:24:78:5c:f7:a5:2e:b9:19:
8e:bf:3f:c9:d1:a5:a1:61:6f:32:5e:bf:d3:1d:f3:
13:59:53:63:01:b4:6c:93:99:fd:cf:eb:f6:d2:df:
61:dc:af:40:04:18:fc:22:ee:78:ef:08:8f:c3:b4:
3c:49:40:da:9f:8b:c8:40:70:ac:74:6f:cd:0f:3c:
74:6f:41:bd:4c:df:09:0b:50:26:a7:da:59:89:ab:
5a:0f:61:c2:34:67:5c:15:30:f0:3d:54:69:a1:dc:
23:b0:59:95:2c:2d:78:cf:94:3b:1a:fa:5f:a3:a4:
14:55:b4:e8:79:0b:c4:53:6d:3a:67:50:8e:bd:46:
2e:4b:10:34:de:a8:41:a6:a1:08:fa:f2:1f:aa:09:
b2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:AE:A2:53:77:F1:63:9C:43:CE:C4:8B:33:75:65:50:AD:27:DE:16
X509v3 Authority Key Identifier:
keyid:90:24:96:C1:2B:1D:AA:58:4E:42:B3:43:34:CF:17:20:12:36:B2:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/5E54C4BEA06411EBB6AFCD55C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.13.132.0/23
IPv6:
2001:df6:89c0::/48
Signature Algorithm: sha256WithRSAEncryption
50:f7:f5:a3:75:fe:cd:54:18:cc:d2:20:6c:ba:96:d1:cf:37:
91:ef:04:6a:f9:cd:3b:75:24:2e:af:75:b0:43:6c:33:f9:ee:
44:7a:fe:e8:63:cf:c2:82:19:2b:1a:f0:a7:86:25:ef:39:fd:
f6:54:c3:1d:50:a0:fa:de:55:a8:a5:d7:09:77:a4:f1:62:d3:
8a:33:e2:d9:81:36:b5:a0:2d:86:af:e2:99:12:c4:53:fb:97:
3d:7c:ec:d0:8b:f1:41:a0:09:f5:db:4a:c4:1b:04:f6:37:71:
c5:e7:eb:76:5f:8a:d3:4c:63:48:63:f4:fc:40:f7:ec:a7:ac:
75:c9:f9:bf:ef:7b:c0:02:cf:0f:c4:30:45:99:96:f6:d1:e4:
70:6f:f6:d0:48:bc:89:b0:b0:e9:61:9f:6b:df:81:6c:5e:67:
1a:ea:de:97:d9:d8:c1:83:19:39:20:bc:3f:11:f1:29:30:82:
d2:1d:59:8c:18:94:71:25:ae:e0:c1:d8:f7:1f:26:25:cc:33:
b7:80:1d:12:ef:f1:01:f1:b0:ee:33:4d:40:49:66:12:7b:31:
32:b2:c1:3b:e8:e4:47:69:89:8c:0b:c4:61:f0:e2:78:63:cf:
83:b9:c7:aa:1d:62:ca:77:53:d2:76:78:d7:7b:ef:bb:58:e2:
2b:a7:73:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:11:23 2026 by rpki-client