This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/6B47EC68529E11EC9C7C2081C4F9AE02.roa
File: 6B47EC68529E11EC9C7C2081C4F9AE02.roa (raw, json)
Hash identifier: LLpqzktmy/i0p/yMDD90KQ0Uru5Dr8T7c0G+T8iss+o=
Subject key identifier: D9:53:2F:37:97:C1:0E:A9:CC:C5:88:88:72:A3:03:7D:36:46:1C:02
Certificate issuer: /CN=A9143035/serialNumber=89ABC1398B25B1D6CE8FF7BFB32B12E9F09673F9
Certificate serial: 04D5
Authority key identifier: 89:AB:C1:39:8B:25:B1:D6:CE:8F:F7:BF:B3:2B:12:E9:F0:96:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iavBOYslsdbOj_e_sysS6fCWc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/6B47EC68529E11EC9C7C2081C4F9AE02.roa
Signing time: Tue 20 Jan 2026 23:19:38 +0000
ROA not before: Tue 20 Jan 2026 23:19:38 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 149037
IP address blocks: 103.177.68.0/23 maxlen: 24
2400:3860::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.crl
rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iavBOYslsdbOj_e_sysS6fCWc_k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1237 (0x4d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143035, serialNumber=89ABC1398B25B1D6CE8FF7BFB32B12E9F09673F9
Validity
Not Before: Jan 20 23:19:38 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69700d8a-b8ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9e:c6:1a:fa:91:44:e8:e2:ac:f6:e0:d0:29:
63:57:99:d0:81:53:b2:76:33:3e:25:72:57:ca:51:
a6:8d:11:1d:07:58:89:7a:4b:ac:85:ca:ad:2f:8e:
ac:00:ed:d7:12:e0:fa:05:85:4a:e4:07:ca:42:32:
6d:54:e6:6d:a6:36:b7:9f:f7:cc:ed:c2:bc:74:48:
29:c4:ad:31:e2:1a:0b:31:53:5e:bf:3a:50:6d:6a:
e5:9a:81:e5:02:8f:85:a8:a7:79:5c:79:fb:ca:81:
d0:4a:78:79:a7:fb:c8:8f:59:f3:10:9b:60:18:4c:
ba:86:de:40:51:f2:86:29:36:1e:26:87:48:cf:b3:
e5:51:38:9c:22:b9:c5:7b:b4:62:41:11:cf:78:ce:
e2:21:c1:d5:ce:ea:a2:e0:4f:93:28:3d:89:7e:8a:
4b:22:5d:15:cd:8c:71:f6:c5:cb:6a:17:9d:6d:7e:
2a:78:a6:14:46:0a:3e:35:b1:b6:ed:73:9f:59:f2:
32:53:68:88:0a:e1:8c:ad:33:2b:5a:24:5e:f0:88:
f0:eb:ed:4a:ab:62:77:04:a7:5e:a9:64:8e:9e:14:
4c:f9:0d:56:28:ab:42:08:95:c4:2e:51:d5:32:6d:
e2:dc:dd:23:0c:68:7d:0b:b9:2b:1b:49:50:ec:36:
cb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:53:2F:37:97:C1:0E:A9:CC:C5:88:88:72:A3:03:7D:36:46:1C:02
X509v3 Authority Key Identifier:
keyid:89:AB:C1:39:8B:25:B1:D6:CE:8F:F7:BF:B3:2B:12:E9:F0:96:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iavBOYslsdbOj_e_sysS6fCWc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/6B47EC68529E11EC9C7C2081C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.177.68.0/23
IPv6:
2400:3860::/32
Signature Algorithm: sha256WithRSAEncryption
1c:15:e7:30:eb:47:54:0e:ed:cc:b4:23:4d:69:c5:bb:05:fb:
96:fc:71:07:88:6a:4e:91:9e:5f:4e:02:cb:65:2c:57:73:9c:
fe:ed:2a:96:94:de:4a:f2:0a:fe:0a:72:f3:c1:5a:fb:21:c7:
fb:df:73:5a:6a:8b:29:f9:8a:b3:1d:83:88:a2:61:33:e6:73:
c7:84:6f:87:e1:2b:e3:5f:ee:91:3a:f5:e5:26:ab:55:6c:cc:
ff:e1:57:c3:36:a8:e8:96:d7:c1:d9:5e:fd:12:8c:5e:a0:98:
ac:00:35:89:5d:de:04:ea:63:75:43:16:20:2f:aa:6c:c5:6c:
da:6a:d6:3f:d7:d5:46:c7:46:71:69:e0:ff:ef:86:4e:92:46:
9a:fc:ff:9d:8a:95:79:3b:e4:8d:16:e4:99:92:c5:8e:e9:0f:
bc:13:4a:96:ff:c9:85:47:59:de:52:3c:cb:09:c1:65:6c:cd:
d5:79:ae:2a:93:8f:d9:89:99:f1:87:bf:b4:10:05:31:80:b4:
fa:de:48:36:11:54:bb:62:cd:5e:9c:0d:87:77:a4:d8:bd:43:
2b:7e:09:a7:fb:ed:7a:05:01:e1:0e:69:3f:78:37:83:94:66:
63:25:9f:87:82:01:4a:e0:9a:a9:ed:3c:99:93:06:53:01:67:
44:1b:9a:05
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
NDMwMzUxMTAvBgNVBAUTKDg5QUJDMTM5OEIyNUIxRDZDRThGRjdCRkIzMkIxMkU5
RjA5NjczRjkwHhcNMjYwMTIwMjMxOTM4WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTcwMGQ4YS1iOGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3Z7GGvqRROjirPbg0CljV5nQgVOydjM+JXJXylGmjREdB1iJekushcqtL46s
AO3XEuD6BYVK5AfKQjJtVOZtpja3n/fM7cK8dEgpxK0x4hoLMVNevzpQbWrlmoHl
Ao+FqKd5XHn7yoHQSnh5p/vIj1nzEJtgGEy6ht5AUfKGKTYeJodIz7PlUTicIrnF
e7RiQRHPeM7iIcHVzuqi4E+TKD2JfopLIl0VzYxx9sXLahedbX4qeKYURgo+NbG2
7XOfWfIyU2iICuGMrTMrWiRe8Ijw6+1Kq2J3BKdeqWSOnhRM+Q1WKKtCCJXELlHV
Mm3i3N0jDGh9C7krG0lQ7DbLiwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFNlTLzeX
wQ6pzMWIiHKjA302RhwCMB8GA1UdIwQYMBaAFImrwTmLJbHWzo/3v7MrEunwlnP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzAzNS8xOEM2MjkxMjUy
OUIxMUVDOUEwQjBBN0RDNEY5QUUwMi9pYXZCT1lzbHNkYk9qX2Vfc3lzUzZmQ1dj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lhdkJPWXNsc2RiT2pfZV9zeXNTNmZDV2Nfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDMwMzUvMThDNjI5MTI1MjlCMTFFQzlBMEIwQTdEQzRGOUFFMDIvNkI0N0VDNjg1
MjlFMTFFQzlDN0MyMDgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAFnsUQwDQQCAAIwBwMFACQAOGAwDQYJKoZIhvcNAQELBQAD
ggEBABwV5zDrR1QO7cy0I01pxbsF+5b8cQeIak6Rnl9OAstlLFdznP7tKpaU3kry
Cv4KcvPBWvshx/vfc1pqiyn5irMdg4iiYTPmc8eEb4fhK+Nf7pE69eUmq1VszP/h
V8M2qOiW18HZXv0SjF6gmKwANYld3gTqY3VDFiAvqmzFbNpq1j/X1UbHRnFp4P/v
hk6SRpr8/52KlXk75I0W5JmSxY7pD7wTSpb/yYVHWd5SPMsJwWVszdV5riqTj9mJ
mfGHv7QQBTGAtPreSDYRVLtizV6cDYd3pNi9Qyt+Caf77XoFAeEOaT94N4OUZmMl
n4eCAUrgmqntPJmTBlMBZ0QbmgU=
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:56:57 2026 by rpki-client