This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/4E1F212A15C711EB8720DC71C4F9AE02.roa
File: 4E1F212A15C711EB8720DC71C4F9AE02.roa (raw, json)
Hash identifier: mzfP7cRrxNz2Kg58jiJEQRZoLcbYz297WZboxMM7e8A=
Subject key identifier: A2:A4:B3:3D:7C:A8:39:E1:F2:5F:04:77:7A:93:73:26:60:9F:7A:53
Certificate issuer: /CN=A9126259/serialNumber=9752DD1A15F5EC61D97691CB5ECCEBECBD3A6137
Certificate serial: 076B
Authority key identifier: 97:52:DD:1A:15:F5:EC:61:D9:76:91:CB:5E:CC:EB:EC:BD:3A:61:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/4E1F212A15C711EB8720DC71C4F9AE02.roa
Signing time: Sun 30 Mar 2025 21:22:31 +0000
ROA not before: Sun 30 Mar 2025 21:22:31 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 56087
IP address blocks: 103.204.28.0/23 maxlen: 23
180.235.108.0/22 maxlen: 22
180.235.108.0/24 maxlen: 24
180.235.109.0/24 maxlen: 24
180.235.110.0/24 maxlen: 24
180.235.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.crl
rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 20:16:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1899 (0x76b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126259, serialNumber=9752DD1A15F5EC61D97691CB5ECCEBECBD3A6137
Validity
Not Before: Mar 30 21:22:31 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67e9b617-77ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:be:c2:d9:b3:d6:b9:5f:22:d0:6d:04:82:b1:
c5:da:70:0e:86:e3:4c:53:58:e3:c7:fd:7e:71:df:
76:d6:4b:64:df:9f:19:7f:d1:1d:0b:ab:9d:8e:f4:
c2:fc:d9:fc:30:c5:d6:c4:0f:3d:3b:d4:3f:64:8d:
35:02:40:11:b2:61:c7:6c:f7:83:d2:ca:20:e2:45:
ad:62:71:e8:5a:c2:4c:47:70:aa:49:8d:f3:e6:37:
09:73:7a:91:d1:1a:3e:67:22:39:c9:2e:cf:c4:23:
e0:ce:32:f2:51:4e:8c:d4:21:4b:73:8f:68:83:ee:
58:64:c7:1e:b0:6d:2b:6e:eb:d7:11:db:fc:d2:22:
fe:ca:87:68:09:06:c5:e7:f7:25:ab:dc:5c:0f:f2:
3c:76:4d:7e:81:46:11:85:88:4b:89:c8:7e:9c:12:
c5:3e:f0:2a:49:76:f5:11:2b:af:28:04:99:a3:18:
05:2e:1d:b3:17:c3:61:2d:aa:84:7d:68:5b:4d:7d:
ea:96:cd:d7:fe:a8:3f:ec:15:63:a6:4e:4d:bd:b7:
4f:d1:78:30:4b:57:0b:51:5e:8a:48:5e:ea:8a:90:
9e:a4:ef:d1:ce:fa:9c:bc:1d:4d:b1:63:7d:39:b9:
ea:9b:84:e7:50:b0:2b:b3:6a:25:d4:71:39:e4:bc:
e5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A4:B3:3D:7C:A8:39:E1:F2:5F:04:77:7A:93:73:26:60:9F:7A:53
X509v3 Authority Key Identifier:
keyid:97:52:DD:1A:15:F5:EC:61:D9:76:91:CB:5E:CC:EB:EC:BD:3A:61:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/4E1F212A15C711EB8720DC71C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.204.28.0/23
180.235.108.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:0e:5c:c9:50:ce:d8:cf:d5:23:bd:52:8a:8c:d4:16:4e:62:
ca:a1:a7:c1:97:c2:9d:48:85:b9:18:08:6f:37:c8:26:22:ff:
99:1c:b7:4b:c2:db:1a:49:58:31:9c:2e:79:8a:c2:a7:05:e4:
1d:3c:a9:79:a3:7e:38:6e:37:19:5d:fa:5c:4d:d8:f4:30:53:
eb:15:3f:6b:8d:6c:f3:21:25:76:d0:2f:43:85:40:d7:b8:b9:
4a:d4:57:94:85:11:e8:fc:7b:15:d8:98:93:b3:74:5c:0b:0e:
ce:ff:b2:da:d7:b7:a0:21:e3:56:66:4b:bb:aa:85:27:c1:4f:
73:c1:4b:b6:20:e0:d5:94:59:15:69:f8:da:dd:b6:30:1a:19:
26:f1:13:85:99:5d:48:41:33:59:b9:c2:a7:aa:2f:be:a0:4f:
1d:0a:13:a0:29:df:20:61:9b:ff:38:ef:39:bf:5e:ac:52:2b:
b4:a6:71:e6:94:fc:fa:d0:a1:31:05:cf:70:a0:29:c3:36:eb:
cd:12:4f:de:f3:99:e0:19:01:e2:29:7b:bf:62:e5:06:18:e4:
05:c3:cc:7e:f1:43:0d:ec:93:5a:4d:8f:0d:58:99:da:34:ad:
41:b3:1a:99:01:4d:13:d8:73:25:8e:5c:e9:19:fb:fd:f0:92:
20:2d:59:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:43:26 2025 by rpki-client