This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/9E173D98C3A011F09FB4B135C4F9AE02.roa
File: 9E173D98C3A011F09FB4B135C4F9AE02.roa (raw, json)
Hash identifier: mp9i2R/ngejmd37hDI0tFLDUgMITvSpZ99ERZ19lBbI=
Subject key identifier: AB:DC:07:4A:E0:D1:45:BF:77:59:28:31:C3:56:C6:DC:97:8E:FC:CC
Certificate issuer: /CN=A912C8AF/serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4
Certificate serial: 0C14
Authority key identifier: 76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/9E173D98C3A011F09FB4B135C4F9AE02.roa
Signing time: Thu 08 Jan 2026 10:13:57 +0000
ROA not before: Thu 08 Jan 2026 10:13:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 140666
IP address blocks: 103.198.203.0/24 maxlen: 24
2404:a140:50::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl
rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 18:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3092 (0xc14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C8AF, serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4
Validity
Not Before: Jan 8 10:13:57 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=695f8365-8036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1e:26:87:37:5d:03:87:fb:a8:96:8e:24:5e:
3f:b2:9e:9a:9b:6f:b2:11:5f:3e:61:29:0d:9f:65:
d6:31:36:f8:7d:e6:d0:62:9a:c6:db:bd:14:a6:2f:
88:69:83:3c:ae:12:0a:79:4a:d6:dd:87:40:ac:54:
9b:81:d2:16:1c:7d:0a:0b:6d:e5:63:88:ee:78:d6:
d0:f9:67:f9:d2:52:14:3e:03:53:49:05:da:df:1a:
28:da:f4:34:76:60:eb:5a:33:48:f3:32:80:3f:fd:
04:43:c5:0b:a2:20:b5:10:06:8e:6e:0e:dd:02:79:
57:02:a9:f2:ac:7d:4f:dd:d0:e0:d1:e9:85:d8:73:
5e:6a:d5:30:8e:f6:e1:8c:cb:98:88:8f:08:db:d3:
b3:40:ea:cb:25:3f:b3:df:a9:f2:e2:e0:81:3d:50:
13:90:65:51:ac:61:37:dd:a5:bc:26:d8:c9:09:e0:
9d:12:00:82:c0:e2:de:8e:c1:b1:54:de:8a:4c:b2:
3a:95:a4:84:03:9a:15:e8:eb:e8:83:4e:2d:53:00:
72:3d:58:34:cc:df:34:96:7d:33:88:c5:f2:a7:51:
74:9a:d5:8d:39:81:a7:9e:ef:c3:45:70:38:36:e4:
d8:cf:59:6e:07:36:c6:b1:1b:a8:c3:6a:20:74:8d:
16:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:DC:07:4A:E0:D1:45:BF:77:59:28:31:C3:56:C6:DC:97:8E:FC:CC
X509v3 Authority Key Identifier:
keyid:76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/9E173D98C3A011F09FB4B135C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.198.203.0/24
IPv6:
2404:a140:50::/48
Signature Algorithm: sha256WithRSAEncryption
9a:59:1b:9d:89:56:a0:2f:7b:1a:87:11:93:ee:e5:6a:7c:a6:
2f:58:99:41:68:8d:51:98:b8:3d:52:a3:c0:54:4d:43:84:2e:
d6:37:00:ec:9b:5b:51:0a:20:e1:96:58:31:22:e0:22:1d:ae:
28:43:3e:d3:22:ea:4c:ae:0b:87:d2:93:fc:8c:5f:1f:56:d7:
ee:e1:e7:9a:55:75:6c:10:c9:9b:68:f5:99:72:97:e9:93:87:
fe:70:69:1c:21:b7:9f:63:94:30:90:d1:f9:21:e9:f8:66:ce:
98:89:89:a5:b0:6e:2b:2d:f0:ca:e7:01:b7:0e:df:df:44:96:
c6:d4:a2:b0:18:a3:d9:d0:c2:e2:b0:5a:53:b5:85:70:73:63:
a7:44:d1:4b:00:88:11:5f:89:19:95:ac:c1:a5:89:e8:36:bb:
3e:6f:56:9c:58:da:f0:51:66:93:0f:81:ba:3a:98:33:fc:60:
a4:c9:dc:65:6d:d0:c1:b8:ec:37:d0:ca:fd:60:7c:e5:7a:aa:
8a:07:72:37:30:43:64:82:a6:5e:2f:d4:59:0d:2f:59:fb:be:
61:e4:96:b6:ca:a3:68:f7:a2:f6:da:10:95:fb:1b:13:9a:9e:
2f:b9:15:89:93:9d:83:01:98:ac:8f:3b:ea:33:22:ab:d9:fb:
9a:d1:7b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:45:24 2026 by rpki-client