This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/7909FCC06DF211EA806B671BC4F9AE02.roa
File: 7909FCC06DF211EA806B671BC4F9AE02.roa (raw, json)
Hash identifier: 9ntH5sdhKSrMolrJIKiUJK7DgvYcz8rLe6mdglzQ0XU=
Subject key identifier: 2B:FB:70:FB:A7:8F:45:25:C5:8D:74:A3:5B:FF:C3:32:F8:07:1A:6A
Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial: 377D
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/7909FCC06DF211EA806B671BC4F9AE02.roa
Signing time: Fri 16 Jan 2026 16:13:24 +0000
ROA not before: Fri 16 Jan 2026 16:13:24 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 23951
IP address blocks: 103.101.136.0/24 maxlen: 24
103.101.137.0/24 maxlen: 24
103.101.138.0/24 maxlen: 24
103.101.139.0/24 maxlen: 24
117.20.48.0/24 maxlen: 24
117.20.49.0/24 maxlen: 24
117.20.50.0/24 maxlen: 24
117.20.51.0/24 maxlen: 24
117.20.52.0/24 maxlen: 24
117.20.53.0/24 maxlen: 24
117.20.54.0/24 maxlen: 24
117.20.55.0/24 maxlen: 24
117.20.56.0/24 maxlen: 24
117.20.57.0/24 maxlen: 24
117.20.58.0/24 maxlen: 24
117.20.59.0/24 maxlen: 24
117.20.60.0/24 maxlen: 24
117.20.61.0/24 maxlen: 24
117.20.62.0/24 maxlen: 24
117.20.63.0/24 maxlen: 24
202.152.129.0/24 maxlen: 24
202.152.130.0/24 maxlen: 24
202.152.131.0/24 maxlen: 24
202.152.132.0/24 maxlen: 24
202.152.133.0/24 maxlen: 24
202.152.134.0/24 maxlen: 24
202.152.135.0/24 maxlen: 24
202.152.136.0/24 maxlen: 24
202.152.137.0/24 maxlen: 24
202.152.138.0/24 maxlen: 24
202.152.139.0/24 maxlen: 24
202.152.140.0/24 maxlen: 24
202.152.141.0/24 maxlen: 24
202.152.142.0/24 maxlen: 24
202.152.143.0/24 maxlen: 24
202.152.144.0/24 maxlen: 24
202.152.145.0/24 maxlen: 24
202.152.146.0/24 maxlen: 24
202.152.147.0/24 maxlen: 24
202.152.148.0/24 maxlen: 24
202.152.149.0/24 maxlen: 24
202.152.150.0/24 maxlen: 24
202.152.151.0/24 maxlen: 24
202.152.152.0/24 maxlen: 24
202.152.153.0/24 maxlen: 24
202.152.154.0/24 maxlen: 24
202.152.155.0/24 maxlen: 24
202.152.156.0/24 maxlen: 24
202.152.157.0/24 maxlen: 24
202.152.158.0/24 maxlen: 24
202.152.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:26:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14205 (0x377d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Validity
Not Before: Jan 16 16:13:24 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=696a63a4-dcf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:12:21:73:86:8d:4d:d5:6f:01:87:00:47:21:
6d:df:a1:18:fa:93:76:6a:38:f0:e8:48:94:b3:4c:
5e:9e:33:ff:9e:a9:a8:31:44:a5:13:88:bd:16:1a:
d7:48:3f:75:f6:b9:90:c8:95:4d:94:55:d4:fa:ce:
01:7b:a4:06:01:6e:03:c2:d6:1e:42:4d:79:f6:dd:
b9:cf:31:a0:c3:9d:d2:c0:92:07:a0:a6:2d:66:f1:
93:c4:a6:6c:78:34:af:05:5a:27:91:6a:44:e4:f8:
ed:cf:a8:19:f3:58:27:ee:e4:fc:ed:c7:0c:d6:de:
8e:b3:b7:69:b0:3d:bd:87:99:ab:f8:34:16:9a:0e:
3c:df:7e:85:43:26:44:76:c4:7e:ad:4f:b3:c5:32:
e6:5f:8d:06:d5:53:af:90:b8:5e:9e:09:5c:7c:eb:
34:50:ee:35:e9:99:17:e9:80:84:e5:8d:fe:c6:13:
82:a4:8a:06:da:ef:0e:e1:fc:f8:0c:3e:3b:6e:08:
78:e9:7b:1b:2a:ba:90:59:65:e0:a3:6e:79:ff:44:
53:b8:bb:d2:77:7c:9b:e3:71:7e:54:6c:66:98:00:
8c:9c:a8:9a:2c:17:0f:99:1e:fd:1e:2c:cf:bb:2e:
c3:49:91:77:e1:0e:a2:1c:c1:ff:76:17:d7:ca:26:
ce:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FB:70:FB:A7:8F:45:25:C5:8D:74:A3:5B:FF:C3:32:F8:07:1A:6A
X509v3 Authority Key Identifier:
keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/7909FCC06DF211EA806B671BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.101.136.0/22
117.20.48.0/20
202.152.129.0-202.152.159.255
Signature Algorithm: sha256WithRSAEncryption
b7:8d:33:ac:03:f9:fe:f2:49:c3:0a:12:52:3a:09:0b:eb:21:
2e:17:9a:ae:76:dc:d1:b6:49:e2:74:18:16:c5:64:1d:9f:d5:
d5:8a:c3:eb:7b:6c:a4:2d:24:6e:93:58:32:9f:a6:bb:f3:75:
44:ef:49:ce:ef:aa:1d:cc:4c:48:66:db:f7:a3:46:2b:c9:02:
97:be:7c:94:1d:fb:bf:59:fb:90:ec:9a:66:00:c7:5b:68:a3:
89:8f:39:99:8f:05:57:86:e3:da:7a:cd:84:b2:d0:fd:48:6b:
4c:35:6e:b5:2b:ec:40:90:82:33:18:8f:5b:d5:e3:99:d4:74:
40:75:04:49:f8:1e:dc:6f:b5:a3:b7:ea:06:2f:8f:c6:01:4f:
73:7a:8b:31:d1:72:a8:75:0c:c0:ea:77:77:26:70:2d:f3:80:
78:e5:56:d7:2b:c7:af:4b:b4:0a:95:20:cd:2f:7d:c1:64:ec:
4e:b6:1a:6b:50:69:41:7e:35:e2:4f:b8:8d:a1:af:3e:c7:31:
60:30:74:16:d4:3b:71:15:90:f4:a2:f0:62:fb:ca:4b:a8:3f:
d5:27:13:7d:64:3b:37:bb:5f:3a:a6:b6:16:ce:24:b6:09:4b:
5f:b1:d0:69:29:69:ea:5a:27:9d:e3:e1:91:16:94:71:b9:18:
57:2a:c1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:02:15 2026 by rpki-client