This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/9A1481AAB2F411EF9B46DC64C4F9AE02.roa
File: 9A1481AAB2F411EF9B46DC64C4F9AE02.roa (raw, json)
Hash identifier: 9KIEZWjUexSz+mpVvITqSBKQ/+dm8ULo43WzGRktSYM=
Subject key identifier: D1:5A:43:60:6F:AB:30:BC:EE:F6:EE:7E:CE:3E:DD:F0:55:61:AD:8C
Certificate issuer: /CN=A913D30A/serialNumber=EB811B1488B20F12664E648A82624A3050689F25
Certificate serial: 0DED
Authority key identifier: EB:81:1B:14:88:B2:0F:12:66:4E:64:8A:82:62:4A:30:50:68:9F:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64EbFIiyDxJmTmSKgmJKMFBonyU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/9A1481AAB2F411EF9B46DC64C4F9AE02.roa
Signing time: Thu 08 Jan 2026 18:14:49 +0000
ROA not before: Thu 08 Jan 2026 18:14:49 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 136156
IP address blocks: 103.82.8.0/23 maxlen: 24
103.82.10.0/23 maxlen: 24
202.52.40.0/24 maxlen: 24
203.4.187.0/24 maxlen: 24
2402:d3c0::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.crl
rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64EbFIiyDxJmTmSKgmJKMFBonyU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3565 (0xded)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D30A, serialNumber=EB811B1488B20F12664E648A82624A3050689F25
Validity
Not Before: Jan 8 18:14:49 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=695ff418-617b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b0:4a:8b:fe:7f:b2:e4:fa:b9:da:d5:87:8f:
a6:79:7d:24:6c:43:7c:ab:29:4f:ed:c4:d2:f9:76:
f6:61:fa:d8:f3:a9:61:86:42:66:15:84:c8:bc:32:
04:96:af:cf:dd:1b:c5:e3:48:79:0e:86:6e:db:15:
f1:26:8a:4d:9c:4e:05:27:6f:10:7d:f9:e6:1a:d1:
69:87:07:86:50:89:1d:0c:9f:6e:c1:85:30:22:8e:
45:6e:db:1f:e9:06:63:d4:17:fb:b0:e6:ba:87:c7:
71:59:85:1d:75:4f:36:8b:da:54:83:64:e3:7a:a3:
77:d1:19:40:0a:e5:4d:2b:3b:50:d9:05:37:0b:14:
87:a0:ed:55:86:1d:54:64:17:6a:28:45:ba:db:bf:
17:84:ca:00:fe:a2:7f:af:4e:87:e7:a9:a3:e1:22:
93:22:9d:5b:86:45:be:c3:ce:23:6b:22:65:35:22:
18:95:5e:91:90:9c:0f:22:ae:a0:c6:6e:5e:9a:ca:
d8:fd:ff:4f:02:40:0e:ac:9a:09:6c:54:37:0e:68:
3c:9b:f7:c6:28:83:70:fc:19:be:26:5b:5d:25:23:
93:80:e7:97:3c:ba:81:cf:2a:bd:b7:96:e1:b0:ee:
17:d3:ae:d7:3e:82:ad:6e:b0:3f:53:57:67:1b:0f:
77:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5A:43:60:6F:AB:30:BC:EE:F6:EE:7E:CE:3E:DD:F0:55:61:AD:8C
X509v3 Authority Key Identifier:
keyid:EB:81:1B:14:88:B2:0F:12:66:4E:64:8A:82:62:4A:30:50:68:9F:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64EbFIiyDxJmTmSKgmJKMFBonyU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/9A1481AAB2F411EF9B46DC64C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.82.8.0/22
202.52.40.0/24
203.4.187.0/24
IPv6:
2402:d3c0::/32
Signature Algorithm: sha256WithRSAEncryption
5d:d9:54:0d:84:ff:22:6d:9b:57:fd:e6:3f:05:e6:87:4b:ee:
07:2e:c3:32:cb:0f:71:9e:94:5a:92:f5:8f:6e:1c:d2:c6:aa:
58:da:0d:b9:4a:77:ca:7a:54:ec:79:46:b6:5c:ed:c7:ad:19:
b5:12:9a:00:29:dc:9b:34:22:05:fd:a2:25:77:1f:75:61:e2:
39:5c:44:b5:96:ea:e9:7c:94:57:78:b6:be:bd:77:d0:a6:b1:
7f:61:db:e0:8e:30:ac:7a:24:4c:79:ab:50:33:cf:a1:49:50:
5b:d6:96:e9:0a:46:06:99:30:93:ea:e2:c8:cd:75:dd:cb:48:
cc:51:11:c5:a9:bb:29:9f:c3:36:a6:c6:24:1c:c1:a6:7a:b1:
91:14:66:38:df:50:04:58:57:7c:af:a3:41:f7:e2:d5:7a:02:
e7:04:cf:b2:ec:e9:52:4c:ee:f9:c0:88:33:90:3a:e3:65:b7:
51:22:d9:c5:b6:ba:2c:b9:53:07:9f:8c:6f:43:d4:36:4c:19:
0c:d0:b5:25:90:49:de:27:b1:0e:db:3b:c2:35:a9:eb:16:3a:
55:03:f0:15:e1:89:c0:67:d7:2c:78:43:e3:2b:7d:77:76:5e:
41:c7:ca:22:99:d4:bb:90:5e:aa:2e:1f:51:73:a1:95:37:1d:
fd:49:bf:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:23:09 2026 by rpki-client