This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/4848A8C83A0411F086BFFE49C4F9AE02.roa
File: 4848A8C83A0411F086BFFE49C4F9AE02.roa (raw, json)
Hash identifier: ei/BLqTtO5UilcGeq4NAPW7uOcnpLjHuTEeJOeYIedk=
Subject key identifier: 19:43:8B:DD:94:05:9F:61:FC:7F:89:6E:5A:AB:01:DF:21:FA:32:BC
Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial: 3790
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/4848A8C83A0411F086BFFE49C4F9AE02.roa
Signing time: Fri 16 Jan 2026 16:13:42 +0000
ROA not before: Fri 16 Jan 2026 16:13:42 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 4787
IP address blocks: 45.126.80.0/22 maxlen: 22
101.50.16.0/21 maxlen: 21
101.50.16.0/24 maxlen: 24
101.50.24.0/21 maxlen: 21
101.50.24.0/24 maxlen: 24
101.128.64.0/18 maxlen: 24
103.61.248.0/22 maxlen: 22
103.86.148.0/22 maxlen: 22
103.86.148.0/23 maxlen: 23
103.86.149.0/24 maxlen: 24
103.86.150.0/23 maxlen: 23
103.86.150.0/24 maxlen: 24
103.86.152.0/22 maxlen: 22
103.86.152.0/24 maxlen: 24
103.86.156.0/22 maxlen: 22
103.86.156.0/24 maxlen: 24
103.86.160.0/22 maxlen: 22
103.87.76.0/22 maxlen: 22
103.87.76.0/24 maxlen: 24
103.87.80.0/22 maxlen: 22
103.87.80.0/24 maxlen: 24
103.87.84.0/22 maxlen: 22
103.87.84.0/24 maxlen: 24
103.87.152.0/22 maxlen: 22
103.87.152.0/24 maxlen: 24
103.109.152.0/22 maxlen: 22
103.109.152.0/24 maxlen: 24
103.109.156.0/22 maxlen: 22
103.109.156.0/24 maxlen: 24
103.109.160.0/22 maxlen: 22
103.109.160.0/24 maxlen: 24
103.109.164.0/22 maxlen: 22
103.109.164.0/24 maxlen: 24
103.109.168.0/22 maxlen: 22
103.109.168.0/24 maxlen: 24
103.109.188.0/22 maxlen: 22
103.109.188.0/24 maxlen: 24
103.109.192.0/22 maxlen: 22
103.109.192.0/24 maxlen: 24
103.109.196.0/22 maxlen: 22
103.109.196.0/24 maxlen: 24
103.109.200.0/22 maxlen: 22
103.109.200.0/24 maxlen: 24
103.111.184.0/22 maxlen: 22
103.111.184.0/24 maxlen: 24
103.111.188.0/22 maxlen: 22
103.111.188.0/24 maxlen: 24
103.111.200.0/22 maxlen: 22
103.111.200.0/24 maxlen: 24
103.111.204.0/22 maxlen: 22
103.111.204.0/24 maxlen: 24
103.111.208.0/22 maxlen: 22
103.111.208.0/24 maxlen: 24
103.111.212.0/22 maxlen: 22
103.111.212.0/24 maxlen: 24
103.113.48.0/22 maxlen: 22
103.113.48.0/24 maxlen: 24
103.113.52.0/22 maxlen: 22
103.113.52.0/24 maxlen: 24
103.113.72.0/22 maxlen: 22
103.113.72.0/24 maxlen: 24
103.113.76.0/22 maxlen: 22
103.113.76.0/24 maxlen: 24
103.113.116.0/22 maxlen: 22
103.113.116.0/24 maxlen: 24
103.113.120.0/22 maxlen: 22
103.113.120.0/24 maxlen: 24
103.113.128.0/22 maxlen: 22
103.113.128.0/24 maxlen: 24
103.113.132.0/22 maxlen: 22
103.113.132.0/24 maxlen: 24
103.114.80.0/22 maxlen: 22
103.114.80.0/24 maxlen: 24
103.114.84.0/22 maxlen: 22
103.114.84.0/24 maxlen: 24
103.114.108.0/22 maxlen: 22
103.114.108.0/24 maxlen: 24
103.114.112.0/22 maxlen: 22
103.114.112.0/24 maxlen: 24
103.114.116.0/22 maxlen: 22
103.114.116.0/24 maxlen: 24
103.114.120.0/22 maxlen: 22
103.114.120.0/24 maxlen: 24
103.114.136.0/22 maxlen: 22
103.114.136.0/24 maxlen: 24
103.114.140.0/22 maxlen: 22
103.118.96.0/22 maxlen: 22
103.118.96.0/24 maxlen: 24
103.118.100.0/22 maxlen: 22
103.118.100.0/24 maxlen: 24
103.118.104.0/22 maxlen: 22
103.118.104.0/24 maxlen: 24
103.118.108.0/22 maxlen: 22
103.118.108.0/24 maxlen: 24
103.118.128.0/22 maxlen: 22
103.118.128.0/24 maxlen: 24
103.118.132.0/22 maxlen: 22
103.118.132.0/24 maxlen: 24
103.118.136.0/22 maxlen: 22
103.118.136.0/24 maxlen: 24
103.118.140.0/22 maxlen: 22
103.118.140.0/24 maxlen: 24
103.118.224.0/22 maxlen: 22
103.118.224.0/24 maxlen: 24
103.118.228.0/22 maxlen: 22
103.118.228.0/24 maxlen: 24
103.118.232.0/22 maxlen: 22
103.118.232.0/24 maxlen: 24
103.118.236.0/22 maxlen: 22
103.118.236.0/24 maxlen: 24
103.119.4.0/22 maxlen: 22
103.119.4.0/24 maxlen: 24
103.119.8.0/22 maxlen: 22
103.119.8.0/24 maxlen: 24
103.119.36.0/22 maxlen: 22
103.119.36.0/24 maxlen: 24
103.119.40.0/22 maxlen: 22
103.119.40.0/24 maxlen: 24
103.121.96.0/22 maxlen: 22
103.121.96.0/24 maxlen: 24
103.121.100.0/22 maxlen: 22
103.121.100.0/24 maxlen: 24
103.121.108.0/22 maxlen: 22
103.121.108.0/24 maxlen: 24
103.121.132.0/22 maxlen: 22
103.121.132.0/24 maxlen: 24
103.121.136.0/22 maxlen: 22
103.121.136.0/24 maxlen: 24
103.121.144.0/22 maxlen: 22
103.121.144.0/24 maxlen: 24
103.121.168.0/22 maxlen: 22
103.121.168.0/24 maxlen: 24
103.121.180.0/22 maxlen: 22
103.121.180.0/24 maxlen: 24
103.121.244.0/22 maxlen: 22
103.121.244.0/24 maxlen: 24
103.129.4.0/22 maxlen: 22
103.129.4.0/24 maxlen: 24
103.129.20.0/22 maxlen: 22
103.129.20.0/24 maxlen: 24
103.129.24.0/22 maxlen: 22
103.129.24.0/24 maxlen: 24
103.129.40.0/22 maxlen: 22
103.129.40.0/24 maxlen: 24
103.129.48.0/22 maxlen: 22
103.129.48.0/24 maxlen: 24
103.129.56.0/22 maxlen: 22
103.129.56.0/24 maxlen: 24
103.129.68.0/22 maxlen: 22
103.129.68.0/24 maxlen: 24
116.206.232.0/22 maxlen: 22
116.206.232.0/24 maxlen: 24
116.206.236.0/22 maxlen: 22
116.206.236.0/24 maxlen: 24
116.206.240.0/22 maxlen: 22
116.206.240.0/24 maxlen: 24
125.208.128.0/18 maxlen: 18
175.158.32.0/19 maxlen: 19
175.158.32.0/21 maxlen: 21
175.158.32.0/22 maxlen: 22
175.158.32.0/24 maxlen: 24
202.158.0.0/17 maxlen: 17
210.210.128.0/18 maxlen: 24
2001:d10::/48 maxlen: 48
2403:3440::/32 maxlen: 32
2403:3440::/48 maxlen: 48
2403:34c0::/32 maxlen: 32
2403:34c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:26:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14224 (0x3790)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Validity
Not Before: Jan 16 16:13:42 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=696a63b6-94ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:01:2a:c0:8e:66:97:bd:0f:ce:e6:c3:55:0b:
91:c0:46:84:d8:e2:8e:48:56:c3:17:ce:47:5b:a1:
25:33:23:d6:f4:5b:de:d7:3f:ec:31:0f:ff:a0:88:
db:63:f2:8f:59:dc:bf:25:7a:ae:a7:a5:49:1c:2e:
af:ef:8a:77:31:1d:73:ee:91:5e:e6:e7:ab:8a:ba:
00:4d:9e:83:81:b9:3d:43:e5:90:01:67:56:c2:ab:
f8:78:10:52:ee:1a:56:ba:99:6a:e5:bb:19:a6:a7:
72:42:d6:df:21:b6:1a:10:6b:ec:97:0b:de:be:a4:
90:a6:cb:1a:7f:61:66:0f:b3:c4:e4:18:a7:61:1b:
73:a5:0e:63:4f:5d:b1:c8:78:95:7e:cf:aa:6a:13:
81:e5:63:d5:b3:d2:c6:52:2b:42:93:59:6e:bd:02:
82:79:47:8c:0e:51:64:91:14:00:4c:98:71:67:75:
8f:3a:26:1a:6f:e8:35:b0:f6:ec:aa:45:23:da:7a:
2c:fe:0f:44:a9:2a:37:ac:87:b1:24:45:8e:be:4a:
10:39:f6:e3:17:2d:9f:f1:18:24:fd:28:83:0f:6c:
da:bd:46:c2:ed:c9:26:0a:c0:a4:f2:89:8c:04:06:
a5:6d:2e:0e:eb:8d:66:b0:eb:7b:9d:a7:00:0c:ee:
7b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:43:8B:DD:94:05:9F:61:FC:7F:89:6E:5A:AB:01:DF:21:FA:32:BC
X509v3 Authority Key Identifier:
keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/4848A8C83A0411F086BFFE49C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.126.80.0/22
101.50.16.0/20
101.128.64.0/18
103.61.248.0/22
103.86.148.0-103.86.163.255
103.87.76.0-103.87.87.255
103.87.152.0/22
103.109.152.0-103.109.171.255
103.109.188.0-103.109.203.255
103.111.184.0/21
103.111.200.0-103.111.215.255
103.113.48.0/21
103.113.72.0/21
103.113.116.0-103.113.123.255
103.113.128.0/21
103.114.80.0/21
103.114.108.0-103.114.123.255
103.114.136.0/21
103.118.96.0/20
103.118.128.0/20
103.118.224.0/20
103.119.4.0-103.119.11.255
103.119.36.0-103.119.43.255
103.121.96.0/21
103.121.108.0/22
103.121.132.0-103.121.139.255
103.121.144.0/22
103.121.168.0/22
103.121.180.0/22
103.121.244.0/22
103.129.4.0/22
103.129.20.0-103.129.27.255
103.129.40.0/22
103.129.48.0/22
103.129.56.0/22
103.129.68.0/22
116.206.232.0-116.206.243.255
125.208.128.0/18
175.158.32.0/19
202.158.0.0/17
210.210.128.0/18
IPv6:
2001:d10::/48
2403:3440::/32
2403:34c0::/32
Signature Algorithm: sha256WithRSAEncryption
29:34:be:c0:f6:dd:b8:9a:ea:81:90:d0:63:f1:f3:d7:d8:e4:
32:e2:5e:94:49:1e:c8:a6:62:a5:7c:b6:03:a4:c4:db:7d:50:
b9:ef:f8:19:d3:b7:38:88:4c:dd:5c:e8:8d:50:c7:1f:21:67:
6e:c8:bb:ec:89:61:d1:18:ce:58:42:d8:ae:d7:18:e5:89:21:
a0:de:9d:7e:80:93:5c:46:b3:dc:9a:57:eb:ff:a8:0f:24:03:
f0:53:47:99:fe:52:e7:87:2e:2f:fa:84:d2:cd:13:a0:f9:57:
93:ee:32:bb:e9:65:b9:50:90:d2:b5:f0:f8:50:fa:e9:b4:81:
02:33:f7:ee:a2:e0:9e:a7:c6:02:8d:62:89:ab:11:30:95:98:
32:4c:cd:30:fb:47:50:bf:6f:fb:fb:26:76:a9:77:91:44:5b:
44:3a:4a:85:17:4f:f2:5b:1a:98:36:77:2f:81:05:5b:95:98:
e5:e7:7a:f4:f8:45:1d:24:77:fc:11:42:64:02:09:69:c9:2c:
3e:ad:6c:f5:e8:0c:61:69:66:ec:3e:c6:67:8b:23:ed:f4:34:
bf:d0:b8:2d:df:f5:ec:3d:4e:fa:fb:19:c4:fa:0e:f6:2c:67:
77:6a:ef:00:0c:30:0d:7b:5a:67:c1:3c:af:ad:8d:4b:f8:ad:
17:20:48:dd
-----BEGIN CERTIFICATE-----
MIIG6jCCBdKgAwIBAgICN5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG
QUIyNEQ3RTcwHhcNMjYwMTE2MTYxMzQyWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTZhNjNiNi05NGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2gEqwI5ml70PzubDVQuRwEaE2OKOSFbDF85HW6ElMyPW9Fve1z/sMQ//oIjb
Y/KPWdy/JXqup6VJHC6v74p3MR1z7pFe5ueriroATZ6Dgbk9Q+WQAWdWwqv4eBBS
7hpWuplq5bsZpqdyQtbfIbYaEGvslwvevqSQpssaf2FmD7PE5BinYRtzpQ5jT12x
yHiVfs+qahOB5WPVs9LGUitCk1luvQKCeUeMDlFkkRQATJhxZ3WPOiYab+g1sPbs
qkUj2nos/g9EqSo3rIexJEWOvkoQOfbjFy2f8Rgk/SiDD2zavUbC7ckmCsCk8omM
BAalbS4O641msOt7nacADO576wIDAQABo4IEDjCCBAowHQYDVR0OBBYEFBlDi92U
BZ9h/H+JblqrAd8h+jK8MB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz
MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx
LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvNDg0OEE4Qzgz
QTA0MTFGMDg2QkZGRTQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwggGWBggrBgEFBQcBBwEB
/wSCAYUwggGBMIIBXgQCAAEwggFWAwQCLX5QAwQEZTIQAwQGZYBAAwQCZz34MAwD
BAJnVpQDBAJnVqAwDAMEAmdXTAMEA2dXUAMEAmdXmDAMAwQDZ22YAwQCZ22oMAwD
BAJnbbwDBAJnbcgDBANnb7gwDAMEA2dvyAMEA2dv0AMEA2dxMAMEA2dxSDAMAwQC
Z3F0AwQCZ3F4AwQDZ3GAAwQDZ3JQMAwDBAJncmwDBAJncngDBANncogDBARndmAD
BARndoADBARnduAwDAMEAmd3BAMEAmd3CDAMAwQCZ3ckAwQCZ3coAwQDZ3lgAwQC
Z3lsMAwDBAJneYQDBAJneYgDBAJneZADBAJneagDBAJnebQDBAJnefQDBAJngQQw
DAMEAmeBFAMEAmeBGAMEAmeBKAMEAmeBMAMEAmeBOAMEAmeBRDAMAwQDdM7oAwQC
dM7wAwQGfdCAAwQFr54gAwQHyp4AAwQG0tKAMB0EAgACMBcDBwAgAQ0QAAADBQAk
AzRAAwUAJAM0wDANBgkqhkiG9w0BAQsFAAOCAQEAKTS+wPbduJrqgZDQY/Hz19jk
MuJelEkeyKZipXy2A6TE231Que/4GdO3OIhM3VzojVDHHyFnbsi77Ilh0RjOWELY
rtcY5YkhoN6dfoCTXEaz3JpX6/+oDyQD8FNHmf5S54cuL/qE0s0ToPlXk+4yu+ll
uVCQ0rXw+FD66bSBAjP37qLgnqfGAo1iiasRMJWYMkzNMPtHUL9v+/smdql3kURb
RDpKhRdP8lsamDZ3L4EFW5WY5ed69PhFHSR3/BFCZAIJacksPq1s9egMYWlm7D7G
Z4sj7fQ0v9C4Ld/17D1O+vsZxPoO9ixnd2rvAAwwDXtaZ8E8r62NS/itFyBI3Q==
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:59:14 2026 by rpki-client