This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/9BC8AC96555C11F0AF866966C4F9AE02.roa
File: 9BC8AC96555C11F0AF866966C4F9AE02.roa (raw, json)
Hash identifier: ktBWqYwJGn+fOJr07wOaX0WHMtmcG2JSCJbdyakvZ/M=
Subject key identifier: 45:B1:9D:46:39:C5:55:3B:90:0C:3D:C1:E5:3B:0D:CE:3A:B0:79:73
Certificate issuer: /CN=A917C716/serialNumber=875EC72E46F2CD163F06B822E704129AEFE31910
Certificate serial: 66
Authority key identifier: 87:5E:C7:2E:46:F2:CD:16:3F:06:B8:22:E7:04:12:9A:EF:E3:19:10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h17HLkbyzRY_Brgi5wQSmu_jGRA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/9BC8AC96555C11F0AF866966C4F9AE02.roa
Signing time: Thu 01 Jan 2026 01:20:12 +0000
ROA not before: Thu 01 Jan 2026 01:20:12 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 148976
IP address blocks: 103.175.34.0/23 maxlen: 24
2400:9de0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.crl
rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h17HLkbyzRY_Brgi5wQSmu_jGRA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102 (0x66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C716, serialNumber=875EC72E46F2CD163F06B822E704129AEFE31910
Validity
Not Before: Jan 1 01:20:12 2026 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=6955cbcc-530e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:31:07:4d:dd:6f:84:48:ca:6f:75:25:a2:d1:
dc:e7:0a:e9:7d:85:7b:58:2a:15:98:d6:53:34:9c:
57:0c:8e:bd:23:34:f4:c0:51:98:70:4a:d8:9d:a6:
90:41:b9:80:f1:3a:f5:51:d9:bf:de:18:38:3b:52:
92:61:ae:44:50:d6:af:06:3e:b1:03:df:28:f7:ac:
72:97:27:dc:6e:b2:21:e2:02:a5:80:37:10:02:c9:
9c:0d:01:2e:a5:fc:12:40:46:fa:a6:20:71:17:e5:
e1:6b:76:83:49:3a:7c:40:8f:d6:19:96:a4:52:02:
ca:c2:62:3b:16:e4:8c:86:94:2c:c2:8e:14:2b:ba:
9f:52:b4:63:53:ee:f7:ed:dc:f4:e1:4c:47:62:3e:
86:f2:59:2e:24:9f:2c:b8:44:cc:00:07:9b:74:24:
53:7e:8e:34:56:b5:c2:85:d4:f6:11:60:f0:61:df:
c7:bc:51:fa:95:65:c1:e8:8e:a0:c6:59:5c:81:96:
5a:1f:09:c0:db:e9:11:8b:50:d0:1d:0d:5a:f5:3c:
09:e7:08:75:7c:b9:37:98:e1:e5:86:91:53:af:7d:
0d:8f:bf:0f:d0:67:e0:b7:9f:31:2d:8d:63:a8:23:
82:c9:b0:53:e7:84:e6:82:bb:9d:b6:4b:87:0d:34:
76:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B1:9D:46:39:C5:55:3B:90:0C:3D:C1:E5:3B:0D:CE:3A:B0:79:73
X509v3 Authority Key Identifier:
keyid:87:5E:C7:2E:46:F2:CD:16:3F:06:B8:22:E7:04:12:9A:EF:E3:19:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h17HLkbyzRY_Brgi5wQSmu_jGRA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/9BC8AC96555C11F0AF866966C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.175.34.0/23
IPv6:
2400:9de0::/32
Signature Algorithm: sha256WithRSAEncryption
58:5d:ba:b7:bd:94:ee:5f:35:65:6f:8f:2c:8f:de:9a:9d:c7:
94:28:66:75:ff:fe:d9:b5:fb:b4:2d:da:24:83:3a:c7:3d:a5:
25:cb:c1:6b:0a:ef:18:f5:53:f3:eb:43:b0:b3:45:0f:a1:0b:
d6:c7:d4:1d:aa:e7:bb:27:2e:0e:f5:ee:3d:89:e0:b3:be:32:
ec:39:ca:30:be:e9:96:55:24:fd:ac:9d:94:01:32:42:4a:ea:
d4:ba:0b:96:a1:d9:75:3e:79:e8:0e:02:1c:a9:e3:f4:8b:25:
1f:1b:57:48:c4:f2:51:c6:f8:59:fb:f3:e2:1b:7a:4a:f2:e7:
6b:b2:56:48:0b:19:f5:6c:5a:06:c0:ba:7d:09:85:1c:74:a2:
ca:77:96:4d:1d:5e:99:a8:b1:85:8e:1a:0e:09:37:c6:a5:21:
07:e1:b4:e4:bb:37:eb:0f:25:96:e0:50:3f:ca:96:3c:21:59:
b0:e6:d3:07:fd:6f:0b:e7:bc:a5:d9:bf:c0:e4:4e:3b:7e:c4:
7c:1d:34:9c:be:8c:6d:b7:7f:0a:a8:54:60:37:b6:78:75:d7:
ee:eb:48:7e:47:47:d9:e2:5d:3a:79:14:2f:44:ed:10:07:13:
63:9d:ac:7b:e9:20:36:4e:e7:d4:a5:1f:cf:fa:35:a4:2e:34:
90:a6:29:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:00:14 2026 by rpki-client