This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/32E51F32BFD511F0A2819A6CC4F9AE02.roa
File: 32E51F32BFD511F0A2819A6CC4F9AE02.roa (raw, json)
Hash identifier: F1lW9hmxvt41C5xkhdjcvHKPJY5n1+jsbAmRkSRRqEI=
Subject key identifier: CB:37:42:B5:C9:C0:6B:65:85:37:B8:11:B6:E6:F0:A7:6C:69:9A:BC
Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial: 376A
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/32E51F32BFD511F0A2819A6CC4F9AE02.roa
Signing time: Fri 16 Jan 2026 16:13:05 +0000
ROA not before: Fri 16 Jan 2026 16:13:05 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 134659
IP address blocks: 103.209.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:26:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14186 (0x376a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Validity
Not Before: Jan 16 16:13:05 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=696a6391-0bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6e:78:f0:29:9e:ee:7f:d2:1d:c4:03:d3:d1:
d5:55:49:ac:36:7d:64:90:52:47:b2:e3:55:57:51:
e2:e6:cb:30:ef:ad:f6:96:72:77:2b:28:97:1e:44:
f6:04:c4:5b:4c:68:68:c1:22:db:a5:6c:3e:d6:d8:
28:e7:d2:52:08:cd:c0:f4:ee:8d:f4:84:c3:0d:d2:
e5:6d:43:5b:da:96:5f:ce:4b:15:f1:50:29:6f:c6:
0e:5e:2b:0c:5c:a1:86:4e:01:0b:e8:ad:84:01:b8:
6c:be:f4:74:8d:2a:cd:01:dd:6a:bf:fc:d1:a1:22:
9b:e2:5b:f4:1c:9e:be:cf:d2:17:32:c6:e3:f2:98:
e8:e4:ee:09:a2:f5:a6:72:a7:56:ed:1d:87:41:ff:
db:e0:74:6f:09:38:ca:88:19:ca:85:62:40:3b:f6:
02:a1:8b:3a:d3:8a:6f:5e:a9:df:5f:7f:7b:56:df:
ca:b8:ca:48:82:f6:e8:90:27:51:76:f5:00:02:73:
15:b7:31:66:87:14:a6:77:1b:bf:21:ef:96:ea:42:
f6:d4:10:79:e1:4a:17:26:c5:b3:ca:b7:16:f2:7b:
93:92:8f:b6:d2:65:6b:68:46:f6:dc:29:da:46:80:
9c:42:aa:63:d7:75:de:9f:7a:98:4e:1c:d8:9b:61:
10:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:37:42:B5:C9:C0:6B:65:85:37:B8:11:B6:E6:F0:A7:6C:69:9A:BC
X509v3 Authority Key Identifier:
keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/32E51F32BFD511F0A2819A6CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.209.7.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:9a:86:46:ac:a4:c1:ff:1d:7d:61:c7:da:6b:75:4b:26:2d:
96:18:a4:69:f3:96:94:4a:77:66:21:fa:b1:e8:ce:7a:09:c7:
c3:40:e9:32:90:34:38:3f:83:77:a9:f7:c4:c5:da:d0:52:5f:
c7:c2:80:6e:92:94:2a:34:0a:84:f1:64:04:ee:17:15:b4:58:
6c:bc:97:e9:5b:2d:1a:05:06:12:96:09:31:2b:b8:b2:c6:18:
8a:8d:06:88:c0:29:7a:28:b7:ac:39:05:25:35:5d:e2:3d:1d:
b0:df:6d:9d:ee:f4:ea:30:e0:51:90:09:2b:e9:c0:41:3e:7b:
54:a5:e3:bd:f1:57:ec:e6:09:20:6d:7f:7c:02:da:8b:15:28:
e8:2d:85:11:32:f8:ae:cf:1c:10:dd:a2:e2:e3:b6:13:ee:27:
e2:84:4d:a2:b5:0b:bd:1b:3a:40:ce:fd:c9:62:78:db:59:39:
25:fb:8a:cb:f3:c0:cf:04:81:e3:99:7a:b6:e0:5a:60:2d:f6:
b8:5a:fa:f9:02:e4:18:74:96:fe:84:9e:8d:68:5c:10:68:24:
ef:47:d2:70:cb:17:7a:1c:9f:91:9a:a7:3d:61:20:95:cd:31:
a4:a9:82:f9:91:fd:6b:92:dc:91:a8:cf:be:1f:21:e8:6c:bb:
66:14:9b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:02:25 2026 by rpki-client