This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/670793E8F0EC11EFB7FBC612C4F9AE02.roa
File: 670793E8F0EC11EFB7FBC612C4F9AE02.roa (raw, json)
Hash identifier: 1lG1rPWv/sE0uQg05K0p89lk63PvRPQXtLIv4iZG1Fc=
Subject key identifier: 89:58:A8:4A:F8:6C:96:01:2A:E0:67:FC:46:11:33:E5:11:39:1D:C8
Certificate issuer: /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial: 268E
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/670793E8F0EC11EFB7FBC612C4F9AE02.roa
Signing time: Wed 31 Dec 2025 18:14:39 +0000
ROA not before: Wed 31 Dec 2025 18:14:39 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 1221
IP address blocks: 103.138.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:14:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9870 (0x268e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B805, serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Validity
Not Before: Dec 31 18:14:39 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=6955680f-0094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a3:71:2e:a0:da:bc:26:a0:34:c5:fc:cb:dc:
1f:e0:a0:05:fd:75:92:41:a6:9f:a7:78:bb:4f:db:
ae:6b:0d:f4:79:bf:24:74:5a:88:52:ab:d3:ea:4e:
42:31:f2:07:2b:5f:06:02:6a:22:de:63:40:7e:4d:
ef:b5:0f:d7:60:dd:a2:e3:41:bc:f3:c1:ce:dd:af:
6f:22:10:69:07:f0:e3:7d:de:30:14:c0:6c:90:d2:
6e:76:8d:cf:48:aa:54:84:2d:ce:d2:88:80:48:3e:
5a:ae:8d:70:ad:ee:3e:94:7c:c3:13:13:c0:35:b3:
3c:ea:46:80:30:5b:15:ea:d5:a4:a4:49:4a:25:55:
ce:fa:03:d7:b1:3f:b0:19:40:ec:36:29:c2:bb:6e:
0d:96:ae:ae:2d:c9:00:1d:89:6d:02:11:80:d7:44:
34:dc:a6:db:71:dc:4a:4c:c0:36:2f:e8:04:53:0b:
38:71:79:80:f7:bd:d5:46:dc:a0:be:13:17:0e:66:
e5:fd:7b:33:eb:72:b3:15:71:a7:64:06:54:2d:a1:
6a:ee:2c:d9:28:8e:e5:00:83:12:72:f1:df:b9:dd:
57:88:c8:b2:0d:8b:6e:00:76:75:36:2e:2f:56:1c:
e9:9b:62:d2:4e:e5:1b:ee:d8:b7:19:86:7c:52:c9:
5d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:58:A8:4A:F8:6C:96:01:2A:E0:67:FC:46:11:33:E5:11:39:1D:C8
X509v3 Authority Key Identifier:
keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/670793E8F0EC11EFB7FBC612C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.210.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:95:92:52:ad:ed:5e:56:1b:69:df:3a:02:11:d8:6b:ce:69:
44:e3:89:a1:1a:f7:5b:fa:4b:f3:96:6d:0b:1d:fa:d2:d5:98:
e6:2e:4c:d6:4a:29:05:42:21:2f:a2:b2:0f:67:e7:3a:e0:27:
72:1b:e2:9e:47:74:ab:e8:0f:8b:74:5a:a9:7f:c8:5b:e4:01:
ac:76:7e:0a:b4:a0:87:03:b2:c0:c3:63:91:94:69:dc:aa:9c:
cc:45:97:4f:b0:90:9f:c0:be:75:04:57:17:61:57:6a:af:e9:
92:ef:82:fd:34:14:57:c3:73:02:b3:3e:55:08:0f:8e:a1:34:
28:f4:d3:86:98:fc:43:b5:c0:8c:15:85:85:d6:ec:4b:f1:a6:
1e:8f:b9:4e:50:59:a1:36:c7:b0:a4:9e:75:d1:2c:6e:98:f9:
2d:be:c9:aa:45:44:2f:1c:bb:9b:b6:8a:d7:43:15:e0:bc:2a:
85:42:d7:93:1b:09:f1:93:37:ac:92:c5:35:1b:2e:2f:96:d5:
9c:f0:91:95:c9:6f:9e:6f:5e:bb:59:ec:0a:de:ba:a5:11:cd:
89:f4:01:c6:70:90:76:68:c8:6c:6e:53:bd:6b:f7:34:b5:65:
2e:8c:c1:49:ea:e7:68:6c:50:e5:70:04:e4:a7:db:35:c0:e6:
70:a6:59:7e
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICJo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
M0I4MDUxMTAvBgNVBAUTKDQyRDNFQ0I5Qzg1NzBBQjA5MEVCNjAxRURCMzM3OUMw
RDNEOEE2RDAwHhcNMjUxMjMxMTgxNDM5WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTU1NjgwZi0wMDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn6NxLqDavCagNMX8y9wf4KAF/XWSQaafp3i7T9uuaw30eb8kdFqIUqvT6k5C
MfIHK18GAmoi3mNAfk3vtQ/XYN2i40G888HO3a9vIhBpB/Djfd4wFMBskNJudo3P
SKpUhC3O0oiASD5aro1wre4+lHzDExPANbM86kaAMFsV6tWkpElKJVXO+gPXsT+w
GUDsNinCu24Nlq6uLckAHYltAhGA10Q03KbbcdxKTMA2L+gEUws4cXmA973VRtyg
vhMXDmbl/Xsz63KzFXGnZAZULaFq7izZKI7lAIMScvHfud1XiMiyDYtuAHZ1Ni4v
Vhzpm2LSTuUb7ti3GYZ8UsldnwIDAQABo4IClTCCApEwHQYDVR0OBBYEFIlYqEr4
bJYBKuBn/EYRM+UROR3IMB8GA1UdIwQYMBaAFELT7LnIVwqwkOtgHtszecDT2KbQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjgwNS9GODA3NkI4QTdC
N0IxMUU5OEI2RUMwNzRDNEY5QUUwMi9RdFBzdWNoWENyQ1E2MkFlMnpONXdOUFlw
dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1F0UHN1Y2hYQ3JDUTYyQWUyek41d05QWXB0QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0I4MDUvRjgwNzZCOEE3QjdCMTFFOThCNkVDMDc0QzRGOUFFMDIvNjcwNzkzRThG
MEVDMTFFRkI3RkJDNjEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnitIwDQYJKoZIhvcNAQELBQADggEBAAqVklKt7V5WG2nf
OgIR2GvOaUTjiaEa91v6S/OWbQsd+tLVmOYuTNZKKQVCIS+isg9n5zrgJ3Ib4p5H
dKvoD4t0Wql/yFvkAax2fgq0oIcDssDDY5GUadyqnMxFl0+wkJ/AvnUEVxdhV2qv
6ZLvgv00FFfDcwKzPlUID46hNCj004aY/EO1wIwVhYXW7Evxph6PuU5QWaE2x7Ck
nnXRLG6Y+S2+yapFRC8cu5u2itdDFeC8KoVC15MbCfGTN6ySxTUbLi+W1ZzwkZXJ
b55vXrtZ7AreuqURzYn0AcZwkHZoyGxuU71r9zS1ZS6MwUnq52hsUOVwBOSn2zXA
5nCmWX4=
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:39:11 2026 by rpki-client