This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/8EF0A700973911EDB1E3C460C4F9AE02.roa
File: 8EF0A700973911EDB1E3C460C4F9AE02.roa (raw, json)
Hash identifier: TDarhWWNunMUEihNsRvNyQ9nUVUza0qp3zpEY9zkbe0=
Subject key identifier: 31:71:50:2D:60:E8:97:5A:F9:47:05:06:7B:5D:41:FF:16:B0:1D:B8
Certificate issuer: /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial: 2695
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/8EF0A700973911EDB1E3C460C4F9AE02.roa
Signing time: Wed 31 Dec 2025 18:14:46 +0000
ROA not before: Wed 31 Dec 2025 18:14:46 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 4294967200
IP address blocks: 103.138.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:14:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9877 (0x2695)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B805, serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Validity
Not Before: Dec 31 18:14:46 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69556816-7f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c6:f9:d4:9f:cf:9a:25:b8:b6:ab:cf:43:ab:
92:7b:74:b1:fb:e9:29:f4:32:7b:b3:dc:95:98:8e:
d2:1a:74:85:10:b4:10:88:06:ce:ad:30:4a:f9:91:
ad:df:83:67:9e:3e:4a:16:40:fe:cf:6a:82:f1:cc:
d3:7b:41:f6:72:9c:13:80:25:4e:48:e4:f4:9e:0f:
8c:ba:37:29:ee:0b:14:78:03:ef:3d:60:be:43:45:
86:5e:9e:1f:32:d5:66:d1:43:b8:2b:65:64:c9:f0:
45:b4:32:71:5f:54:31:7e:7b:fb:3f:6b:e5:de:42:
a8:27:a8:72:5c:fe:de:f4:c9:ce:e3:51:ac:f2:65:
8c:ff:ec:0d:70:f0:14:92:76:c2:d6:17:b8:d2:c8:
23:0a:e2:63:42:ac:28:87:32:05:87:13:a6:67:37:
ce:5c:56:da:b5:3f:72:11:12:f4:80:84:dc:fc:fe:
e2:a3:0e:52:dc:4a:78:92:b3:75:cf:55:ac:e5:9c:
1a:8b:bb:69:8d:41:c3:82:05:da:98:f0:4a:3f:17:
71:a9:fd:d2:6f:29:19:02:28:56:40:45:cb:50:87:
16:4c:35:33:b7:48:19:20:f5:a9:3f:63:ff:73:7e:
19:55:50:5c:7d:5d:f1:a7:97:2e:8d:68:9b:82:8c:
b9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:71:50:2D:60:E8:97:5A:F9:47:05:06:7B:5D:41:FF:16:B0:1D:B8
X509v3 Authority Key Identifier:
keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/8EF0A700973911EDB1E3C460C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.210.0/24
Signature Algorithm: sha256WithRSAEncryption
76:f8:ca:24:40:4b:f8:aa:43:c5:0b:7d:af:ac:2c:25:03:b5:
3a:00:7b:b4:38:25:55:d8:20:63:a9:91:40:95:a1:b0:3f:c3:
d5:92:4e:77:7c:fc:31:7e:04:cb:70:85:57:93:bf:5d:c8:2c:
b6:30:be:9e:3b:42:c1:f9:4c:b9:e3:5f:d7:b1:c6:3a:49:2b:
3b:e8:08:30:69:52:24:fb:aa:6c:81:dd:20:4e:1c:96:90:05:
a6:aa:2b:34:4d:39:64:46:28:32:c0:80:ef:59:33:c9:56:1d:
ab:fe:6f:20:d1:c0:2a:6b:0e:5b:85:ca:63:1b:39:e9:ec:ce:
d6:0f:17:84:09:a9:05:93:01:6a:0d:1b:a1:69:76:50:0e:9a:
46:77:fb:e8:b9:a5:65:6c:4d:0e:02:a9:85:5a:6b:dc:96:0d:
c8:48:39:4b:f1:53:a4:5c:08:0f:fb:1f:05:82:bc:cb:2c:68:
ec:02:af:e8:ed:c9:3b:ea:91:3a:ef:b9:a8:4c:02:a9:27:d8:
13:ef:60:e3:5b:71:15:8f:59:29:b0:42:27:98:07:e9:eb:20:
3e:0b:31:d5:9a:8c:34:fb:ac:22:fa:cd:51:f5:98:69:38:a5:
c9:dc:d4:b5:41:3b:5f:ec:44:19:a3:db:73:66:c4:58:a9:a5:
3b:11:f0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:03:29 2026 by rpki-client