This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/E88EE726E93611EF9E3FF729C4F9AE02.roa
File: E88EE726E93611EF9E3FF729C4F9AE02.roa (raw, json)
Hash identifier: N+eEbYkVD1rQLJftLU9dJg7J3BbreENHu+CqmvU/UaM=
Subject key identifier: EC:07:1B:2F:77:02:49:9E:48:33:4F:FF:04:E8:5E:48:7C:0E:8D:A4
Certificate issuer: /CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
Certificate serial: 06AC
Authority key identifier: 03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/E88EE726E93611EF9E3FF729C4F9AE02.roa
Signing time: Tue 30 Dec 2025 22:18:41 +0000
ROA not before: Tue 30 Dec 2025 22:18:40 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 138453
IP address blocks: 103.79.17.0/24 maxlen: 24
122.50.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl
rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 22:03:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1708 (0x6ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D8D9, serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
Validity
Not Before: Dec 30 22:18:40 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69544fc0-663f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:09:fb:0b:37:b3:de:47:da:20:73:99:0c:d5:
60:84:d5:27:c3:52:b3:b8:33:52:9e:1e:1c:a9:25:
53:63:68:15:1b:17:ef:04:2e:b7:34:06:83:f3:2e:
39:93:86:1c:d9:b8:92:1e:59:63:f3:27:8a:5f:4f:
49:8f:61:34:08:4b:71:04:f3:36:32:cf:93:66:74:
a3:4f:18:83:09:de:34:d6:5c:bf:6f:cc:51:1f:a8:
f3:3b:b9:38:e2:dc:90:27:86:d5:3f:43:89:5c:ae:
fb:16:18:68:45:37:18:f1:3f:79:02:90:7f:c4:ae:
89:af:d3:81:8d:e4:f0:a3:87:ff:8a:2b:62:e0:92:
ef:35:33:ff:a8:68:9e:59:68:19:2f:d9:62:18:c5:
b5:05:ad:14:93:dc:ae:f8:40:a8:7b:b2:32:e6:36:
26:1f:50:74:62:bc:25:f9:37:98:49:40:ea:82:f6:
2f:04:b2:e1:48:77:bf:62:ce:1e:be:ad:d5:ed:8a:
39:7a:77:f4:99:d1:42:ba:f9:a5:9f:4b:a3:60:fa:
d9:17:59:0a:21:ae:6c:50:fa:1d:34:0c:c5:5f:77:
e6:19:2e:c7:ce:93:06:c6:32:61:f3:d6:e7:86:29:
48:07:c9:2e:16:59:bd:c3:7d:8c:cc:08:56:bd:11:
81:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:07:1B:2F:77:02:49:9E:48:33:4F:FF:04:E8:5E:48:7C:0E:8D:A4
X509v3 Authority Key Identifier:
keyid:03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/E88EE726E93611EF9E3FF729C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.79.17.0/24
122.50.3.0/24
Signature Algorithm: sha256WithRSAEncryption
42:35:53:c5:b2:bc:59:95:1c:e3:c4:ca:64:59:96:c3:5c:a6:
22:88:de:d8:7e:e5:6c:91:57:1e:fb:0a:34:95:21:d7:b2:a4:
83:fa:b5:6f:73:86:a6:c7:16:15:07:aa:b7:3c:7c:28:fb:fd:
9e:64:6d:4e:ba:26:7c:39:37:7e:c2:86:b1:47:8e:7b:2a:e1:
a2:da:33:74:16:8d:21:ef:db:df:6a:28:a8:5c:3a:a7:07:75:
05:ae:a0:31:75:d7:85:87:ff:ed:56:a7:16:00:ac:52:44:ff:
d5:b9:59:78:52:8c:56:f8:72:ec:37:83:8b:d3:a4:0b:37:90:
88:8b:a1:2c:e9:0a:b9:17:72:5c:19:c1:15:fb:f3:d1:bc:2b:
4c:8f:23:1b:1e:3c:03:4a:ff:09:82:cf:fe:d1:b0:62:b3:4b:
61:c3:63:b0:86:96:be:f0:87:ad:a6:fd:97:ba:48:d1:e7:11:
98:97:1c:bd:51:3a:42:ec:d5:1c:28:46:4b:41:4a:81:22:ef:
d5:49:46:5f:c3:38:11:5d:cc:4f:82:8a:eb:35:53:14:22:6c:
66:a0:ba:61:16:3d:2f:98:10:3e:f9:5b:92:00:1f:99:31:e0:
61:bf:0c:aa:fe:22:f0:59:a3:81:7b:22:53:e4:91:e1:ba:f3:
28:ab:7f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:11:12 2026 by rpki-client