This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/2E680D2AC99911F0BDA2F55CC4F9AE02.roa
File: 2E680D2AC99911F0BDA2F55CC4F9AE02.roa (raw, json)
Hash identifier: EiMOxmgDdeQS71DiadCvwBaFB8K5LkJbRgnGcwVdsHc=
Subject key identifier: D1:B0:C5:C7:1F:8D:EE:33:10:CE:F1:2A:8E:88:F3:94:5F:29:A7:41
Certificate issuer: /CN=A9130F4B/serialNumber=9930D0FFEB870701B4E8EB4DB3C0866233FC5B50
Certificate serial: 10A6
Authority key identifier: 99:30:D0:FF:EB:87:07:01:B4:E8:EB:4D:B3:C0:86:62:33:FC:5B:50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTDQ_-uHBwG06OtNs8CGYjP8W1A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/2E680D2AC99911F0BDA2F55CC4F9AE02.roa
Signing time: Tue 25 Nov 2025 01:23:27 +0000
ROA not before: Tue 25 Nov 2025 01:23:27 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 24511
IP address blocks: 103.138.131.0/24 maxlen: 24
2001:df6:5c40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.crl
rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTDQ_-uHBwG06OtNs8CGYjP8W1A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 16:55:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4262 (0x10a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130F4B, serialNumber=9930D0FFEB870701B4E8EB4DB3C0866233FC5B50
Validity
Not Before: Nov 25 01:23:27 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=6925050f-d08d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3d:d0:32:cf:fd:0d:33:2f:a5:90:71:0b:50:
dc:03:a3:60:95:ad:55:3b:23:1d:4f:34:3e:22:1d:
0e:87:b9:96:bd:4e:0e:5e:89:ee:6d:68:45:a0:c6:
00:99:4a:4d:4e:1a:3b:c0:5b:81:12:07:78:8c:08:
c7:02:05:b9:39:67:67:f7:db:7f:c6:09:19:1b:d8:
d8:e4:dc:6e:d6:a9:a5:16:50:5b:b7:c5:19:ab:7f:
0c:b2:7e:4c:7e:bb:9f:e9:42:d6:e7:a8:8c:e2:43:
e2:f2:00:a0:3c:c4:ee:8d:72:25:e1:9e:ad:9c:2f:
78:fb:46:17:21:2d:b5:c7:02:31:8d:5f:27:ed:22:
9e:7c:7d:9b:a7:7a:45:8c:78:c9:eb:87:26:e4:85:
83:34:a1:03:2b:5a:fe:16:a0:0b:ab:d7:ac:3b:aa:
05:97:aa:30:f1:25:22:5e:7a:3e:7e:6d:27:15:30:
09:f8:78:53:1b:90:44:90:12:f2:75:d2:a8:02:d7:
23:ee:5e:19:e1:30:31:5d:f0:71:3a:ea:d0:10:85:
b6:07:da:3b:a8:0c:93:91:ce:e7:e7:0e:bb:e9:a2:
b4:96:88:29:23:7c:1c:e4:98:33:68:04:0a:16:7d:
6b:47:c5:d0:14:c4:64:a8:32:dc:ac:b6:b4:c5:18:
89:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B0:C5:C7:1F:8D:EE:33:10:CE:F1:2A:8E:88:F3:94:5F:29:A7:41
X509v3 Authority Key Identifier:
keyid:99:30:D0:FF:EB:87:07:01:B4:E8:EB:4D:B3:C0:86:62:33:FC:5B:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTDQ_-uHBwG06OtNs8CGYjP8W1A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/2E680D2AC99911F0BDA2F55CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.131.0/24
IPv6:
2001:df6:5c40::/48
Signature Algorithm: sha256WithRSAEncryption
47:99:0b:bd:4d:3f:a1:77:67:ac:a4:1b:58:46:13:09:0f:38:
63:0d:86:e1:26:92:fc:51:f9:33:05:eb:ae:b6:96:4e:31:84:
af:2c:cf:31:9a:65:82:b6:88:68:71:67:0a:47:25:ca:c4:34:
57:ac:9a:94:8f:41:8c:10:b8:c8:66:13:b7:c3:e4:e0:0f:11:
7c:71:4a:eb:ab:4a:a0:18:a6:45:72:03:c3:7d:ec:d8:5d:e7:
bb:75:cb:d8:01:8c:ea:33:75:7d:c5:ef:62:32:25:0f:1e:be:
11:92:58:cc:45:d7:d1:09:23:15:5b:f2:5e:2a:bb:62:c4:93:
bb:7d:b0:be:6b:46:16:10:34:8d:2b:3c:bc:f2:de:69:f1:0e:
79:b1:ed:af:38:b8:ee:8a:bd:89:e9:82:5d:7a:68:04:f1:a7:
b2:42:01:56:1b:31:b2:d6:fd:09:71:96:77:9f:5e:78:4a:57:
a8:33:53:ea:21:f1:03:04:8a:53:87:29:5f:78:60:43:e7:78:
9b:db:2d:da:5b:21:db:c7:39:32:7e:c1:07:5f:2b:b7:42:fe:
3b:bd:29:12:d0:00:01:d3:76:dd:5a:90:a5:aa:8a:ae:c6:8e:
82:b2:51:69:00:34:e5:cc:d5:17:e3:30:a2:b6:79:cf:f4:61:
3b:8f:5f:a3
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICEKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzBGNEIxMTAvBgNVBAUTKDk5MzBEMEZGRUI4NzA3MDFCNEU4RUI0REIzQzA4NjYy
MzNGQzVCNTAwHhcNMjUxMTI1MDEyMzI3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTI1MDUwZi1kMDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuj3QMs/9DTMvpZBxC1DcA6Ngla1VOyMdTzQ+Ih0Oh7mWvU4OXonubWhFoMYA
mUpNTho7wFuBEgd4jAjHAgW5OWdn99t/xgkZG9jY5Nxu1qmlFlBbt8UZq38Msn5M
fruf6ULW56iM4kPi8gCgPMTujXIl4Z6tnC94+0YXIS21xwIxjV8n7SKefH2bp3pF
jHjJ64cm5IWDNKEDK1r+FqALq9esO6oFl6ow8SUiXno+fm0nFTAJ+HhTG5BEkBLy
ddKoAtcj7l4Z4TAxXfBxOurQEIW2B9o7qAyTkc7n5w676aK0logpI3wc5JgzaAQK
Fn1rR8XQFMRkqDLcrLa0xRiJPQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFNGwxccf
je4zEM7xKo6I85RfKadBMB8GA1UdIwQYMBaAFJkw0P/rhwcBtOjrTbPAhmIz/FtQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEY0Qi81NzcyQUEzMDU0
RTQxMUU5ODUzNkY2NTlDNEY5QUUwMi9tVERRXy11SEJ3RzA2T3ROczhDR1lqUDhX
MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21URFFfLXVIQndHMDZPdE5zOENHWWpQOFcxQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzBGNEIvNTc3MkFBMzA1NEU0MTFFOTg1MzZGNjU5QzRGOUFFMDIvMkU2ODBEMkFD
OTk5MTFGMEJEQTJGNTVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBABnioMwDwQCAAIwCQMHACABDfZcQDANBgkqhkiG9w0BAQsF
AAOCAQEAR5kLvU0/oXdnrKQbWEYTCQ84Yw2G4SaS/FH5MwXrrraWTjGEryzPMZpl
graIaHFnCkclysQ0V6yalI9BjBC4yGYTt8Pk4A8RfHFK66tKoBimRXIDw33s2F3n
u3XL2AGM6jN1fcXvYjIlDx6+EZJYzEXX0QkjFVvyXiq7YsSTu32wvmtGFhA0jSs8
vPLeafEOebHtrzi47oq9iemCXXpoBPGnskIBVhsxstb9CXGWd59eeEpXqDNT6iHx
AwSKU4cpX3hgQ+d4m9st2lsh28c5Mn7BB18rt0L+O70pEtAAAdN23VqQpaqKrsaO
grJRaQA05czVF+MworZ5z/RhO49fow==
-----END CERTIFICATE-----
Generated at Sun Dec 7 05:49:44 2025 by rpki-client