This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/4025C8DC78E811E79F549F43C4F9AE02.roa
File: 4025C8DC78E811E79F549F43C4F9AE02.roa (raw, json)
Hash identifier: +ppLPCGqx4O8ApmdjHDI1MWcO70xph4YKHbWB46HaOQ=
Subject key identifier: 7E:C3:B7:23:D4:0D:52:E4:5F:6F:77:B1:35:5B:19:39:50:E2:1D:B0
Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial: 3798
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/4025C8DC78E811E79F549F43C4F9AE02.roa
Signing time: Fri 16 Jan 2026 16:13:50 +0000
ROA not before: Fri 16 Jan 2026 16:13:50 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 58401
IP address blocks: 103.23.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:26:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14232 (0x3798)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Validity
Not Before: Jan 16 16:13:50 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=696a63be-4353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:63:a2:24:71:32:df:0e:56:a2:fc:06:74:fc:
e1:85:fe:b1:d4:5f:ea:dd:63:1e:75:be:7e:b4:e6:
a5:2f:41:c2:26:9d:cd:5f:57:4f:30:a4:23:ce:54:
c1:39:fe:2e:3a:02:27:55:2a:d8:8e:f1:ad:f8:fc:
ce:f9:49:ef:c5:65:30:a6:a4:df:a1:3f:20:4a:7a:
70:bc:e6:03:cc:44:62:83:af:65:80:7c:1b:d3:cd:
08:fb:07:ee:f8:b4:0d:bf:88:ed:5c:6e:1e:85:2f:
e0:cb:f7:e8:9a:c5:38:41:22:96:c7:47:e4:7f:00:
a5:69:55:cc:b3:a0:d4:c1:d2:cc:a1:b8:ee:69:8a:
14:33:13:4f:b8:75:03:3a:69:75:05:f9:22:8d:3a:
12:8a:c5:43:e0:fd:9d:bd:bf:20:fa:23:9d:be:13:
6b:65:f6:ea:80:c5:a7:39:96:96:5a:cc:0c:14:8a:
c0:20:f1:0d:d4:2a:30:c5:53:df:49:04:f1:61:af:
3b:b5:76:95:e5:30:bb:0e:75:d3:39:9f:a0:3e:52:
3e:da:fa:eb:31:2d:d8:b2:43:7e:72:3d:3e:c7:90:
0b:7c:af:fe:be:81:1d:1d:81:fe:36:1e:e5:e9:b6:
f9:5c:2e:63:8e:3c:76:48:53:3b:72:3b:bf:10:23:
8f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C3:B7:23:D4:0D:52:E4:5F:6F:77:B1:35:5B:19:39:50:E2:1D:B0
X509v3 Authority Key Identifier:
keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/4025C8DC78E811E79F549F43C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.23.141.0/24
Signature Algorithm: sha256WithRSAEncryption
16:fd:b2:7f:a1:19:34:cf:1e:84:c7:b6:39:68:ee:9e:86:c2:
e2:c0:45:57:e1:69:7d:ef:b8:a7:38:be:c2:54:f1:de:6e:51:
47:fd:d0:01:f9:49:76:15:12:8f:25:65:3b:9e:5a:11:7f:06:
8b:af:23:9b:1b:19:bd:b3:b9:9a:b0:24:44:21:55:59:8c:c2:
20:66:e4:cc:65:9f:23:fa:5c:28:c9:6c:bc:03:b7:ab:b4:7c:
54:24:9e:da:e3:5f:95:e1:39:af:83:88:e5:4d:b3:3b:1c:a8:
7c:30:fa:0e:55:ac:08:05:cb:68:51:31:42:15:89:0c:e4:77:
28:c2:da:17:7c:d9:8e:3f:43:85:60:dd:80:b4:1a:c0:af:d4:
1a:0c:f9:c6:38:14:7a:b5:c9:ea:8b:b5:b6:61:92:f9:b7:9b:
9d:3d:3c:db:c4:b2:48:48:58:ca:85:5f:d1:4d:1e:75:13:aa:
25:63:2c:fa:73:43:55:36:1b:87:f0:ac:76:75:cf:d3:7d:59:
3f:ac:0e:ae:c5:09:6f:ed:4f:fd:c4:9a:29:48:c1:db:24:4a:
0a:ae:d3:49:16:33:2d:f3:51:89:6d:43:51:40:16:5d:9e:89:
8e:ba:40:34:5a:7e:f8:0e:1f:c8:9b:d4:6a:77:84:c2:d5:d5:
ec:2e:0e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:21:45 2026 by rpki-client