This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/FD10505CC75011EFBA3D195BC4F9AE02.roa
File: FD10505CC75011EFBA3D195BC4F9AE02.roa (raw, json)
Hash identifier: RFXFLbfPMswavWrUDead3dZJrNbmMrDVn5BBss+224o=
Subject key identifier: 91:8A:53:74:20:45:E4:0D:8C:C8:F8:E4:85:C5:A6:6B:A7:47:D1:5B
Certificate issuer: /CN=A9179EE2/serialNumber=8218524F7A16B58C0D9B73940319397EE4FCA6FD
Certificate serial: 0853
Authority key identifier: 82:18:52:4F:7A:16:B5:8C:0D:9B:73:94:03:19:39:7E:E4:FC:A6:FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghhST3oWtYwNm3OUAxk5fuT8pv0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/FD10505CC75011EFBA3D195BC4F9AE02.roa
Signing time: Sat 10 Jan 2026 20:17:16 +0000
ROA not before: Sat 10 Jan 2026 20:17:16 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 55933
IP address blocks: 103.145.58.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.crl
rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghhST3oWtYwNm3OUAxk5fuT8pv0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 20:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2131 (0x853)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179EE2, serialNumber=8218524F7A16B58C0D9B73940319397EE4FCA6FD
Validity
Not Before: Jan 10 20:17:16 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6962b3cc-7409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:96:78:89:62:10:4f:55:9d:9c:99:d5:bb:26:
cc:9b:d4:20:bb:05:8c:81:ec:af:ed:ff:4f:d1:13:
e7:49:e6:7a:30:55:f6:ff:cd:bc:55:7d:3b:f2:aa:
49:56:96:8c:49:70:e5:89:9e:25:c2:e5:93:65:e0:
80:de:4d:3d:e2:e5:1f:e9:c0:9c:a1:df:a5:8a:df:
52:e3:9f:a5:ec:be:6c:e4:1a:31:61:a0:b0:03:30:
b0:bc:18:cf:e4:c7:13:6f:f7:36:a7:ca:d5:6c:1a:
ab:34:70:d3:d1:f3:7b:23:a3:c5:bb:e0:a7:e8:56:
13:27:6c:1e:8c:ef:b7:ed:42:8c:b2:24:3e:d7:90:
f5:6e:62:f8:01:5c:36:20:61:3d:85:2c:53:2f:56:
00:fc:70:2c:cb:8a:a2:bd:76:91:c1:98:0a:7f:d1:
98:00:de:53:2f:f2:df:2e:f3:34:2a:98:af:0a:f6:
5e:2d:f9:00:c0:7b:53:80:8b:a2:71:bd:3e:19:e0:
1e:08:13:b8:3b:63:f2:c3:31:fb:a9:2a:a2:04:61:
4c:7d:ce:30:2a:31:63:a3:dd:3e:eb:d6:3b:2c:18:
ba:86:c8:e8:1b:85:48:02:1e:21:9e:17:b7:01:44:
51:f3:48:4e:5c:9c:c1:9b:21:47:45:76:f3:92:21:
d1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:8A:53:74:20:45:E4:0D:8C:C8:F8:E4:85:C5:A6:6B:A7:47:D1:5B
X509v3 Authority Key Identifier:
keyid:82:18:52:4F:7A:16:B5:8C:0D:9B:73:94:03:19:39:7E:E4:FC:A6:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghhST3oWtYwNm3OUAxk5fuT8pv0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/FD10505CC75011EFBA3D195BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.145.58.0/23
Signature Algorithm: sha256WithRSAEncryption
21:96:24:3f:87:46:a5:a3:11:67:fe:aa:6e:04:4d:b6:a8:5e:
a3:0b:2c:23:0c:17:04:c9:f2:20:77:ab:8d:ce:eb:75:a2:eb:
e6:68:8f:33:63:a6:47:67:9e:47:20:7f:2f:fa:04:a6:e5:90:
9c:6d:53:f3:3a:85:cb:aa:bc:36:01:71:90:e7:86:a2:34:47:
8a:22:13:95:2a:4a:f4:c0:ec:b9:72:0d:95:d1:b1:33:c3:c3:
f8:86:50:25:bc:17:f3:84:00:78:ef:aa:e6:96:d9:d9:e0:e5:
46:ab:54:82:7b:27:2f:88:c5:09:e3:ae:06:70:de:3f:d5:45:
ea:8f:73:70:57:94:c4:7d:92:b3:b0:70:4e:ee:7c:16:fa:7b:
e1:af:ca:8b:a6:76:21:dd:6c:25:eb:e1:b6:ca:25:a1:0c:af:
30:f7:3c:d7:eb:c1:a5:96:3c:22:dc:10:da:c8:73:8d:9b:cf:
e2:e1:be:a7:22:8c:06:9c:d0:c7:23:54:51:4f:32:71:3a:0f:
c1:f5:32:7a:05:37:5e:de:21:d3:3a:48:f7:61:83:05:98:2f:
bc:2b:43:ea:bd:78:1e:e0:5f:ad:bc:20:d7:7a:a7:a1:6b:b0:
2f:99:9b:b2:84:ac:ae:12:a8:9f:d8:82:76:25:91:7f:75:d6:
8e:bf:01:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:11:35 2026 by rpki-client