This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/849DE48AB8DC11F0AFE11A3EC4F9AE02.roa
File: 849DE48AB8DC11F0AFE11A3EC4F9AE02.roa (raw, json)
Hash identifier: TmSgj2BbfJrSYYFTQM+K5zkNfjyQBni5tmx0lg44eIo=
Subject key identifier: B1:E0:22:7A:14:12:59:64:C6:0C:6E:75:54:30:DF:4F:8C:98:BF:F7
Certificate issuer: /CN=A912F22D/serialNumber=2DAB82A0A9B8E4496A9DA0DDEDEF7E9316251768
Certificate serial: 0BCE
Authority key identifier: 2D:AB:82:A0:A9:B8:E4:49:6A:9D:A0:DD:ED:EF:7E:93:16:25:17:68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/849DE48AB8DC11F0AFE11A3EC4F9AE02.roa
Signing time: Tue 20 Jan 2026 19:16:07 +0000
ROA not before: Tue 20 Jan 2026 19:16:07 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 141351
IP address blocks: 103.132.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.crl
rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 18:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3022 (0xbce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F22D, serialNumber=2DAB82A0A9B8E4496A9DA0DDEDEF7E9316251768
Validity
Not Before: Jan 20 19:16:07 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=696fd477-7961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ef:98:dd:54:c7:43:f7:ca:32:78:b3:97:3f:
66:bb:e6:9c:8d:a2:2c:a3:48:25:6f:09:16:1c:52:
44:8a:40:5d:e6:1c:0d:4a:3b:0b:3f:77:e7:25:90:
97:a4:74:4c:47:34:a4:c7:8d:31:e9:86:e8:39:b6:
69:73:3c:93:16:80:1a:2b:87:8a:22:31:ef:bc:57:
20:3b:b9:23:2e:c3:7d:94:4c:92:d5:95:2b:b0:6e:
18:db:87:77:be:88:4c:b8:4d:ae:72:4c:4a:e3:2c:
95:d2:df:20:d7:bd:df:7e:3c:60:c9:2b:37:ad:37:
9e:26:01:3d:6b:94:02:91:9e:55:79:19:a8:ea:d2:
e4:1f:16:6f:2d:48:f6:6b:ec:eb:9f:51:4e:32:98:
6f:ec:16:ab:2f:17:16:de:7b:58:77:8b:fa:f2:44:
ff:42:99:bc:a8:c6:05:2e:07:ac:29:4d:55:3f:37:
fc:0b:17:92:3c:13:96:95:a9:72:58:c5:14:e8:1a:
4c:1e:dc:63:02:24:75:4b:62:83:85:f5:82:1c:1a:
38:b5:80:ae:0f:d5:3f:46:56:20:83:c5:21:aa:ea:
d6:6f:d4:81:5d:8f:c0:33:d6:b3:b9:b8:ca:8e:88:
c3:1c:17:2c:f6:c1:3e:b0:d4:9f:f4:c6:32:4b:12:
8f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E0:22:7A:14:12:59:64:C6:0C:6E:75:54:30:DF:4F:8C:98:BF:F7
X509v3 Authority Key Identifier:
keyid:2D:AB:82:A0:A9:B8:E4:49:6A:9D:A0:DD:ED:EF:7E:93:16:25:17:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/849DE48AB8DC11F0AFE11A3EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.132.216.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:52:63:69:1a:8e:12:b7:5f:7a:64:42:47:57:53:38:77:a4:
b7:dc:34:27:37:d1:11:95:e6:d1:9a:76:c0:02:6f:38:cd:ee:
1f:e8:5f:aa:78:cb:8e:a3:03:87:d4:12:6c:50:1b:50:2e:13:
58:3a:b8:a3:e4:b6:d6:75:fd:0f:0c:f8:44:e5:76:e3:e3:f1:
80:77:64:2c:5c:f7:f8:f8:7c:75:95:fe:57:3e:08:f7:36:41:
3a:c3:d3:ee:46:9a:5b:47:2e:53:90:83:6d:7b:25:60:63:fe:
22:c1:29:17:2a:63:eb:74:a1:94:a2:eb:99:f0:f1:da:fa:3c:
3a:c9:91:ba:07:84:a7:a0:ab:9f:9e:f1:fb:80:82:cc:31:d9:
90:34:df:c4:3a:15:fe:e7:22:3a:78:41:11:c6:4e:19:e5:2d:
5f:54:ab:c8:d8:e8:50:4e:57:3a:af:ed:aa:d8:3d:b1:bb:e2:
82:83:a7:c6:40:fa:8b:ef:bf:e0:2d:78:0f:00:5a:fb:9e:1a:
13:40:48:cd:69:0e:2c:da:bc:8c:11:5a:35:17:60:11:b1:42:
14:19:53:60:df:1c:c4:5d:6c:07:67:e1:5f:61:7f:f3:f6:87:
0d:5d:72:4b:1e:c6:5b:e2:69:9e:fe:d2:31:b7:3d:9e:91:1a:
c9:5d:1f:1d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICC84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
MkYyMkQxMTAvBgNVBAUTKDJEQUI4MkEwQTlCOEU0NDk2QTlEQTBEREVERUY3RTkz
MTYyNTE3NjgwHhcNMjYwMTIwMTkxNjA3WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTZmZDQ3Ny03OTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1e+Y3VTHQ/fKMnizlz9mu+acjaIso0glbwkWHFJEikBd5hwNSjsLP3fnJZCX
pHRMRzSkx40x6YboObZpczyTFoAaK4eKIjHvvFcgO7kjLsN9lEyS1ZUrsG4Y24d3
vohMuE2uckxK4yyV0t8g173ffjxgySs3rTeeJgE9a5QCkZ5VeRmo6tLkHxZvLUj2
a+zrn1FOMphv7BarLxcW3ntYd4v68kT/Qpm8qMYFLgesKU1VPzf8CxeSPBOWlaly
WMUU6BpMHtxjAiR1S2KDhfWCHBo4tYCuD9U/RlYgg8UhqurWb9SBXY/AM9azubjK
jojDHBcs9sE+sNSf9MYySxKPTwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLHgInoU
EllkxgxudVQw30+MmL/3MB8GA1UdIwQYMBaAFC2rgqCpuORJap2g3e3vfpMWJRdo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjIyRC8yQUFGQ0NFRTM2
OEUxMUVBOTJBNDlFN0RDNEY5QUUwMi9MYXVDb0ttNDVFbHFuYURkN2U5LWt4WWxG
MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xhdUNvS200NUVscW5hRGQ3ZTkta3hZbEYyZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkYyMkQvMkFBRkNDRUUzNjhFMTFFQTkyQTQ5RTdEQzRGOUFFMDIvODQ5REU0OEFC
OERDMTFGMEFGRTExQTNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnhNgwDQYJKoZIhvcNAQELBQADggEBAM1SY2kajhK3X3pk
QkdXUzh3pLfcNCc30RGV5tGadsACbzjN7h/oX6p4y46jA4fUEmxQG1AuE1g6uKPk
ttZ1/Q8M+ETlduPj8YB3ZCxc9/j4fHWV/lc+CPc2QTrD0+5GmltHLlOQg217JWBj
/iLBKRcqY+t0oZSi65nw8dr6PDrJkboHhKegq5+e8fuAgswx2ZA038Q6Ff7nIjp4
QRHGThnlLV9Uq8jY6FBOVzqv7arYPbG74oKDp8ZA+ovvv+AteA8AWvueGhNASM1p
DizavIwRWjUXYBGxQhQZU2DfHMRdbAdn4V9hf/P2hw1dcksexlviaZ7+0jG3PZ6R
GsldHx0=
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:22:18 2026 by rpki-client