This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/A7982B82B88011F081A7B245C4F9AE02.roa
File: A7982B82B88011F081A7B245C4F9AE02.roa (raw, json)
Hash identifier: LvTJBLnJPXcw1Th5AV7X1RP31W6NL3Gb75mx55CzI/c=
Subject key identifier: D2:F1:71:1A:9B:21:C3:73:72:37:64:94:CF:12:0C:4A:80:AF:E8:E9
Certificate issuer: /CN=A912F22D/serialNumber=2DAB82A0A9B8E4496A9DA0DDEDEF7E9316251768
Certificate serial: 0BCD
Authority key identifier: 2D:AB:82:A0:A9:B8:E4:49:6A:9D:A0:DD:ED:EF:7E:93:16:25:17:68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/A7982B82B88011F081A7B245C4F9AE02.roa
Signing time: Tue 20 Jan 2026 19:16:06 +0000
ROA not before: Tue 20 Jan 2026 19:16:06 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 138557
IP address blocks: 103.132.217.0/24 maxlen: 24
103.132.218.0/23 maxlen: 23
103.132.218.0/24 maxlen: 24
103.132.219.0/24 maxlen: 24
2404:4040::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.crl
rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 18:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3021 (0xbcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F22D, serialNumber=2DAB82A0A9B8E4496A9DA0DDEDEF7E9316251768
Validity
Not Before: Jan 20 19:16:06 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=696fd476-cd3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:62:8f:9c:1e:11:d4:4f:fe:3d:65:95:49:36:
90:1f:c2:06:42:ac:16:ea:99:f2:3d:25:f0:7f:bd:
be:78:37:45:7a:59:ed:d4:d3:18:dc:26:99:aa:23:
bb:35:b0:c0:61:8b:ed:8f:1f:9d:df:08:3b:32:9a:
9c:5e:3d:a9:08:f5:7c:c5:85:5f:2b:29:11:e7:98:
b6:a6:8b:cd:d5:47:64:fb:38:6e:29:ec:7a:ab:f9:
50:fd:ad:b7:60:24:37:2c:fe:ef:1d:57:e8:c3:98:
61:d5:6e:dc:45:19:4b:e3:5c:6a:f3:04:4c:e9:00:
ee:7e:cc:ac:3d:08:14:87:0a:ef:57:42:9f:22:0d:
28:5b:f0:5d:3f:55:cf:e9:58:8c:a9:73:da:6b:30:
0d:83:2b:fc:65:76:7f:21:3c:58:3c:79:4e:b2:8f:
2e:86:a4:a9:b7:37:ea:90:d1:ae:61:8a:53:b5:34:
69:df:72:f0:06:07:26:b6:cc:f7:12:32:00:a1:22:
05:1f:68:15:58:bc:75:e9:ae:20:9c:e6:56:7e:bd:
80:cd:29:eb:76:74:bb:6a:6f:2e:fa:c8:37:b0:21:
2f:81:cf:82:0f:88:a1:e6:74:1f:39:1e:b5:7c:56:
ca:f2:39:e8:aa:71:2e:f6:50:2c:15:9a:da:4b:01:
e8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F1:71:1A:9B:21:C3:73:72:37:64:94:CF:12:0C:4A:80:AF:E8:E9
X509v3 Authority Key Identifier:
keyid:2D:AB:82:A0:A9:B8:E4:49:6A:9D:A0:DD:ED:EF:7E:93:16:25:17:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/A7982B82B88011F081A7B245C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.132.217.0-103.132.219.255
IPv6:
2404:4040::/32
Signature Algorithm: sha256WithRSAEncryption
2b:11:ce:6f:e9:62:6e:6f:90:36:d1:a3:69:d4:a8:30:b7:83:
e7:33:e6:26:15:f9:ab:2e:be:ea:6d:95:c2:37:d4:df:02:bf:
d9:f7:0d:f1:0e:2d:1f:80:7d:56:98:09:20:f3:fa:96:ba:d9:
ca:14:7f:28:d6:5a:6a:55:d3:5b:e7:c0:45:0b:60:76:f3:a1:
32:62:24:c0:36:ec:8e:bc:b8:85:eb:79:70:43:c2:8a:cd:36:
63:cc:ff:27:ba:64:7e:d8:e5:72:e6:10:ad:d8:71:fe:c7:08:
5b:ff:09:c5:b2:b9:21:c9:a5:77:a6:d7:e5:48:b8:ae:a8:88:
e1:a4:35:85:0a:64:3c:1f:e3:00:c7:d4:7c:7a:65:83:6e:cf:
91:80:23:82:f8:64:1a:55:cc:b2:12:63:ff:84:51:f8:e8:66:
0b:88:3d:c2:e1:1c:47:9a:59:f9:db:bd:13:98:19:bd:b1:be:
ee:20:69:7c:6e:a2:e6:c2:5a:a4:cc:57:ad:e8:56:6c:30:f7:
8c:cb:10:fa:fa:80:5c:c2:5f:5d:ee:76:41:a9:7b:78:de:c5:
34:88:5c:42:37:ff:94:f9:52:bd:ba:0d:d4:dd:7a:c8:c5:e3:
c1:ad:9e:d8:6c:d7:83:e8:2c:0a:12:4f:99:9b:1a:e2:e4:f7:
05:55:cc:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:46:12 2026 by rpki-client