This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/68D4AD12DE0A11F08D9C3B5C5E6F56BC.roa
File: 68D4AD12DE0A11F08D9C3B5C5E6F56BC.roa (raw, json)
Hash identifier: X2BEx9QpCl80dDA2Fqkq6rcYjq3miEoPaanRKRgBFzw=
Subject key identifier: F3:8F:24:15:91:28:22:D8:2C:3E:77:50:BA:66:9C:E6:6B:71:DC:9A
Certificate issuer: /CN=A9127733/serialNumber=4275515200B039672AFA0E85877D4E3FE70D89D7
Certificate serial: 078E
Authority key identifier: 42:75:51:52:00:B0:39:67:2A:FA:0E:85:87:7D:4E:3F:E7:0D:89:D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/68D4AD12DE0A11F08D9C3B5C5E6F56BC.roa
Signing time: Sun 21 Dec 2025 01:14:34 +0000
ROA not before: Sun 21 Dec 2025 01:14:34 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 6206
IP address blocks: 103.101.0.0/23 maxlen: 24
2401:c740::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.crl
rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 20:57:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1934 (0x78e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127733, serialNumber=4275515200B039672AFA0E85877D4E3FE70D89D7
Validity
Not Before: Dec 21 01:14:34 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=694749fa-3236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:35:f9:9d:64:c1:f6:5c:2d:0c:6c:79:81:2f:
6a:f2:6e:5c:70:3f:01:66:e9:1e:74:60:31:f8:06:
e1:6f:6f:d4:9e:59:7e:a5:4e:ee:22:20:37:3e:ec:
7f:52:d5:93:3e:08:c0:6c:15:55:0e:1f:41:0a:cb:
42:5d:8e:48:7d:11:e5:f3:0c:e7:38:ea:cb:6c:d7:
f9:ad:69:fb:e0:7f:95:ee:04:b3:23:d2:b0:31:e4:
c7:5e:63:ec:37:6d:bb:b8:44:7c:80:9b:72:31:f4:
c9:d8:f4:86:c7:53:c8:8c:e0:40:41:cb:bc:47:ff:
9d:bb:e1:58:fe:b9:06:28:c4:24:64:15:ec:78:bf:
d9:82:4c:e3:2a:97:fe:3e:fc:71:e9:e8:64:9b:89:
68:44:c8:4d:53:8d:4e:15:90:b6:f1:ae:b4:20:bf:
b8:11:d5:e6:5f:bb:ba:c9:4f:4c:ad:5e:c8:fb:bc:
97:58:79:60:65:84:a9:e1:9c:1a:75:9e:ab:fa:d0:
5d:b1:0e:e0:66:df:bf:71:b3:33:b9:21:0d:15:68:
cb:00:d3:f7:68:09:18:fe:46:f5:bb:5b:36:74:48:
ee:ff:e8:b4:3a:a5:cd:83:27:96:d5:73:63:c9:69:
9e:38:ce:0d:93:95:9f:10:9a:40:06:ae:99:86:b6:
a2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8F:24:15:91:28:22:D8:2C:3E:77:50:BA:66:9C:E6:6B:71:DC:9A
X509v3 Authority Key Identifier:
keyid:42:75:51:52:00:B0:39:67:2A:FA:0E:85:87:7D:4E:3F:E7:0D:89:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/68D4AD12DE0A11F08D9C3B5C5E6F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.101.0.0/23
IPv6:
2401:c740::/32
Signature Algorithm: sha256WithRSAEncryption
7e:46:c9:a1:a7:1d:e9:1b:d5:67:dc:d9:0a:e0:7c:e0:2e:d6:
79:11:8c:cc:f4:38:60:05:43:a7:b2:60:8c:68:17:6c:84:df:
70:92:b6:53:72:dc:54:2f:6a:07:ba:c9:b4:2f:55:b4:ee:63:
22:97:88:f2:be:e8:c8:11:35:86:2c:20:f6:58:b6:9c:04:00:
88:79:fb:1e:45:95:bb:af:da:a8:96:18:05:5d:51:6b:b1:c9:
48:4a:02:34:fb:25:d2:91:ae:53:fb:88:f3:54:28:23:ab:35:
1a:b3:be:93:e7:d5:94:0b:09:b8:cb:0d:c0:64:30:e8:2e:ca:
18:57:39:f2:2f:0d:f9:93:31:ef:f9:ef:e3:80:6f:42:db:1b:
96:23:4d:18:6a:33:6c:19:e3:33:77:ac:a1:3a:a5:39:03:f9:
74:4b:ab:19:fa:cf:66:f1:ed:1a:32:fb:85:f8:68:46:ab:2b:
d6:1a:69:bf:2f:fb:09:a9:a8:46:93:49:0a:52:78:a9:46:37:
9b:b0:a7:96:7b:3f:6f:de:41:87:f7:a2:c4:83:b3:c9:62:ca:
41:2e:d7:bb:44:f5:df:2b:15:ef:ac:70:61:35:1a:6b:6a:db:
75:69:c9:63:49:99:53:ec:8a:75:09:bf:a2:7f:c6:da:5e:ea:
c5:31:dd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:04:50 2026 by rpki-client