This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/C5B008F2E19211F09AA40CD1456F56BC.roa
File: C5B008F2E19211F09AA40CD1456F56BC.roa (raw, json)
Hash identifier: VO8kfXsXZKQwiN2WwM+bJ/iyFint2k9di7zesBn7B98=
Subject key identifier: 39:60:C3:86:38:27:D4:7E:A9:A4:80:FE:2A:80:01:76:6B:88:BD:93
Certificate issuer: /CN=A9172D88/serialNumber=B2F05C2CEC3550D2D3C9EB513839F47A002A872E
Certificate serial: 042D
Authority key identifier: B2:F0:5C:2C:EC:35:50:D2:D3:C9:EB:51:38:39:F4:7A:00:2A:87:2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svBcLOw1UNLTyetRODn0egAqhy4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/C5B008F2E19211F09AA40CD1456F56BC.roa
Signing time: Thu 25 Dec 2025 13:23:35 +0000
ROA not before: Thu 25 Dec 2025 13:23:35 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 136905
IP address blocks: 103.162.2.0/23 maxlen: 24
2407:b40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.crl
rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svBcLOw1UNLTyetRODn0egAqhy4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:31:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1069 (0x42d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172D88, serialNumber=B2F05C2CEC3550D2D3C9EB513839F47A002A872E
Validity
Not Before: Dec 25 13:23:35 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=694d3ad6-cd15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9c:8e:7a:a2:e7:46:73:92:e3:90:d1:aa:e9:
41:be:a0:e2:a7:2a:65:f5:0a:02:a5:df:f3:27:5a:
cd:75:cb:fe:86:47:1e:4b:d9:7c:66:20:59:ee:bd:
45:ab:32:d9:79:e4:24:cf:93:82:b2:3b:73:1f:f9:
dd:f3:71:e9:62:56:26:17:d9:60:b8:23:03:77:e0:
36:b2:4a:fa:7f:73:07:2d:06:48:33:d7:00:13:a6:
89:48:14:21:fd:b6:a8:44:69:cb:f8:84:b5:03:87:
04:9f:15:29:91:bc:d8:4d:21:46:8f:46:30:b6:d3:
4e:28:d9:a9:6c:67:d0:74:79:33:35:6f:07:91:1c:
d2:7b:8b:42:c4:89:fe:6a:7d:60:90:ed:95:31:16:
97:c1:0c:86:cb:81:fa:ba:4d:5c:6d:1a:a3:cd:f5:
69:32:f0:6d:28:16:c5:d7:e7:0c:e7:46:b7:3c:d1:
26:de:c5:c9:e0:23:f7:61:99:50:a5:d6:c7:49:93:
5c:02:5a:ea:b6:27:90:4d:25:1b:b4:1a:ed:52:19:
35:d3:b3:f5:a8:0c:d5:fe:c5:8b:43:4e:75:66:df:
18:8c:13:c2:56:24:42:ca:a4:9c:71:f7:0b:b9:f9:
6d:ec:f7:08:3e:33:5a:54:9c:db:7c:37:28:ad:2d:
d3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:60:C3:86:38:27:D4:7E:A9:A4:80:FE:2A:80:01:76:6B:88:BD:93
X509v3 Authority Key Identifier:
keyid:B2:F0:5C:2C:EC:35:50:D2:D3:C9:EB:51:38:39:F4:7A:00:2A:87:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svBcLOw1UNLTyetRODn0egAqhy4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/C5B008F2E19211F09AA40CD1456F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.162.2.0/23
IPv6:
2407:b40::/32
Signature Algorithm: sha256WithRSAEncryption
0d:a2:c3:1a:df:63:0a:91:37:0b:00:e9:3d:c7:8a:e8:74:69:
22:4b:4f:ef:72:11:42:58:74:b0:0d:b4:0f:ea:2f:15:48:fc:
30:a2:79:e4:cd:05:1e:db:25:3c:51:39:7e:08:ed:1c:de:c6:
c9:79:02:71:a0:37:77:97:37:03:2c:59:40:eb:78:28:8e:24:
6c:98:33:00:ff:41:df:c6:62:82:1f:22:f7:dd:d7:59:41:ac:
0b:47:53:b4:b9:64:40:aa:34:bc:47:cd:01:e0:7c:1d:78:31:
f2:22:b6:44:8d:c5:57:57:e7:98:57:e7:c5:70:63:66:52:b8:
0f:5d:1d:e9:a6:2b:9f:41:a3:1a:e2:3d:7c:0c:a3:f8:9e:14:
17:1a:e6:a3:c2:44:50:03:dc:d3:b1:3c:11:e2:45:19:2f:a1:
ef:99:14:c5:f9:47:cd:37:e5:9c:da:ca:02:06:0b:96:e5:4d:
7d:98:99:f2:c7:31:0f:88:82:07:77:3a:80:d6:5a:ce:d6:77:
a3:bb:b1:a4:b3:90:37:37:3a:29:e5:5b:44:b8:50:d9:23:d4:
9f:b2:b6:f8:bf:08:a5:99:d6:7e:57:7e:5a:fe:be:95:9f:26:
5d:fe:74:bf:e9:da:3e:68:ea:5b:60:fb:46:f5:d0:d9:24:6d:
7b:22:59:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:27:28 2026 by rpki-client