This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/DA37C95AB14511E5B83D2120C4F9AE02.roa
File: DA37C95AB14511E5B83D2120C4F9AE02.roa (raw, json)
Hash identifier: ARvhdF03jn08FnkPuGyPsUdLGmIPEz8JSlhGmy6zysU=
Subject key identifier: 81:0B:59:09:66:80:FF:08:8B:01:FA:80:01:D6:2C:46:30:F4:45:5D
Certificate issuer: /CN=A9127342/serialNumber=C49663D96BC932D743840BC67FD87BF8E015467C
Certificate serial: 2383
Authority key identifier: C4:96:63:D9:6B:C9:32:D7:43:84:0B:C6:7F:D8:7B:F8:E0:15:46:7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/DA37C95AB14511E5B83D2120C4F9AE02.roa
Signing time: Fri 02 Jan 2026 16:14:35 +0000
ROA not before: Fri 02 Jan 2026 16:14:35 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 134831
IP address blocks: 103.222.238.0/24 maxlen: 24
103.247.180.0/24 maxlen: 24
2001:df7:a400::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl
rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:39:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9091 (0x2383)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127342, serialNumber=C49663D96BC932D743840BC67FD87BF8E015467C
Validity
Not Before: Jan 2 16:14:35 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6957eeea-f69b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4b:40:3f:22:34:eb:e3:3a:22:9a:50:72:8b:
e4:d6:44:6c:02:df:1e:bb:f5:9e:ba:21:14:41:f6:
70:d6:3f:cb:03:72:d1:62:37:1c:e6:c9:1f:d9:9f:
1d:a8:ba:df:24:1d:cd:d4:77:a5:aa:15:8e:f2:e8:
31:48:5f:0e:fa:90:72:35:71:36:ff:38:e2:90:5e:
b0:df:cd:68:7d:ac:8c:f5:02:ba:ab:16:11:3c:3e:
41:0e:a2:44:7e:e7:4a:7e:92:3f:06:29:da:79:de:
3c:cd:b1:9c:19:9b:be:1e:f4:8c:03:e7:4c:80:a0:
32:91:e1:4a:a6:da:e5:24:b1:88:4a:c7:f2:bb:c9:
fe:9f:33:9b:89:32:3e:c1:73:af:89:33:e1:6c:e0:
d4:8b:f4:6d:58:6d:81:64:a5:14:2e:54:df:e0:c6:
7d:18:4d:fb:4b:20:96:b7:c7:08:e4:bc:61:d5:cd:
ef:ed:65:58:fb:c2:42:c1:82:03:55:64:20:d9:f0:
b7:9b:75:71:8c:9f:99:44:4f:68:0c:29:b9:34:73:
59:0d:40:72:8f:c5:88:d3:50:52:7d:87:fb:d7:60:
b4:18:8c:12:1f:1e:ba:cc:da:b2:cd:c5:81:b5:59:
14:78:47:44:11:9c:c2:1c:e4:a8:22:59:fe:c7:a1:
ac:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:0B:59:09:66:80:FF:08:8B:01:FA:80:01:D6:2C:46:30:F4:45:5D
X509v3 Authority Key Identifier:
keyid:C4:96:63:D9:6B:C9:32:D7:43:84:0B:C6:7F:D8:7B:F8:E0:15:46:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/DA37C95AB14511E5B83D2120C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.222.238.0/24
103.247.180.0/24
IPv6:
2001:df7:a400::/48
Signature Algorithm: sha256WithRSAEncryption
9f:42:be:69:94:40:5a:26:a5:22:44:5a:4c:24:25:2c:8b:66:
e2:5c:c4:58:a0:0b:ca:47:e4:0b:b6:1b:0f:83:f6:a6:e6:00:
b5:2e:3c:dd:26:ef:e0:57:88:c0:c6:e4:13:63:29:76:b9:92:
f1:b7:61:6f:ff:96:fc:43:89:0a:61:c9:a9:94:93:9a:90:79:
45:03:29:8c:56:1f:6b:a9:3f:e6:19:ed:17:e5:84:35:cb:4a:
d9:88:8b:5e:d8:89:2b:c1:69:b0:5d:36:6c:df:7b:3a:73:56:
86:9d:2c:d6:31:91:a0:39:7d:bb:a8:10:53:8c:66:57:ea:df:
a8:68:f5:c7:8e:29:65:c2:f4:c2:30:69:a3:e3:e6:fa:fe:a0:
16:da:55:5f:c2:3d:be:8b:e4:4b:08:1a:f6:93:cc:bf:73:ab:
52:d6:15:f0:e7:c0:9e:4a:2e:45:b1:bf:a1:af:fa:0f:3c:fa:
27:56:9b:b2:58:8a:8b:f7:e2:7f:12:ca:19:23:5d:67:8a:a4:
de:95:7c:01:03:33:3a:d4:d3:2b:c6:ac:70:32:5c:f5:22:48:
99:d5:a7:4b:f7:93:12:24:c8:e2:0e:43:4f:52:aa:bb:70:d4:
85:68:fd:67:0a:b6:85:93:ae:ae:2c:15:66:1b:b6:6b:95:58:
d7:64:dc:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:18:42 2026 by rpki-client