This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/7D281FE0CAF911E9912CF92FC4F9AE02.roa
File: 7D281FE0CAF911E9912CF92FC4F9AE02.roa (raw, json)
Hash identifier: sDY/JrCPvc828G5hFY3JiE0T/ZXv+AKparmoGlcDV7c=
Subject key identifier: 6E:13:29:D4:D0:D9:85:DF:2C:F9:00:68:7C:23:CF:45:27:63:AD:13
Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial: 3770
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/7D281FE0CAF911E9912CF92FC4F9AE02.roa
Signing time: Fri 16 Jan 2026 16:13:11 +0000
ROA not before: Fri 16 Jan 2026 16:13:11 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 136841
IP address blocks: 103.100.27.0/24 maxlen: 24
103.100.172.0/24 maxlen: 24
103.100.173.0/24 maxlen: 24
103.100.174.0/24 maxlen: 24
103.100.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:26:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14192 (0x3770)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Validity
Not Before: Jan 16 16:13:11 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=696a6397-e8c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0e:8a:cb:bc:63:a6:65:c3:62:c4:b1:c6:79:
69:72:10:24:ec:b1:d9:c8:61:a7:46:2a:71:82:c0:
61:9f:d1:f8:3d:36:05:12:f0:93:80:80:0b:c4:80:
21:1e:13:c3:db:a3:bb:11:3a:5f:6e:4f:81:fc:68:
e5:e1:9e:72:72:ba:79:fd:27:42:1c:6e:14:d3:c1:
48:27:39:4b:74:e2:dd:11:26:0f:14:37:0e:37:69:
ba:1d:fa:92:79:8e:cf:73:6d:bf:92:60:93:1b:ab:
89:4e:c6:06:45:03:9e:47:e4:55:7a:b9:67:f0:af:
dd:19:f7:22:05:73:20:16:b1:f7:30:60:9e:eb:af:
5c:79:2c:0a:19:cd:07:51:34:5c:45:74:56:45:ba:
e8:91:ce:f3:28:2f:58:a2:ea:9f:41:4e:dd:fc:6f:
02:3c:3a:34:7c:49:cc:34:6f:5f:5f:4d:63:f5:63:
70:de:4d:f2:ac:a2:ad:25:38:d3:4b:1d:44:ec:97:
61:ad:84:5e:76:09:c8:c2:f7:72:a8:ed:16:b0:e8:
73:a6:4f:d1:7c:6a:0e:84:3c:1a:ab:f4:3c:f6:e6:
2b:49:20:bc:67:75:ed:20:2c:8a:60:13:4f:9c:df:
9e:9e:5b:ac:7a:2d:9c:cc:1a:ef:6c:2c:8d:b1:41:
bd:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:13:29:D4:D0:D9:85:DF:2C:F9:00:68:7C:23:CF:45:27:63:AD:13
X509v3 Authority Key Identifier:
keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/7D281FE0CAF911E9912CF92FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.100.27.0/24
103.100.172.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:15:0f:47:d4:d3:6d:dc:89:9e:69:37:13:16:cc:f7:39:fd:
d2:af:3c:45:32:27:a7:33:70:33:a6:8c:30:cc:25:7d:45:aa:
4e:5d:c7:69:c4:2f:77:41:34:9f:1f:dd:bb:d6:43:45:c4:2f:
60:40:ca:cb:45:ce:74:7f:37:aa:3d:1f:30:cb:f7:f2:5b:9d:
8d:54:27:28:b7:3d:4a:13:26:3d:e8:d2:72:49:3b:88:c4:49:
b8:b8:60:ab:42:85:6d:c8:30:4a:39:5d:2c:98:4a:88:72:9d:
cb:43:bb:80:d5:cc:0e:88:5d:d7:1c:a7:2e:9f:86:bf:23:cf:
b1:a1:89:a7:da:e7:04:ec:c1:f2:21:49:65:57:73:a2:db:40:
d3:44:38:26:4e:bf:fa:21:9a:33:cb:88:e0:ac:7a:c5:2e:91:
f7:02:dd:e6:70:b3:8b:b2:fc:cb:a3:11:2e:7b:dd:5a:b5:24:
8e:41:a0:9a:d0:60:d3:d3:ef:77:bc:ed:fc:38:8f:b9:b7:d9:
31:17:cf:58:17:ac:65:48:97:d7:78:11:7d:1b:57:fb:97:ad:
1b:37:4d:73:ec:30:08:67:2a:38:ea:6f:11:2e:e1:05:ae:09:
8d:7a:81:cc:b4:bd:c9:ad:3f:d7:c5:8c:c2:f6:6e:19:0e:e4:
ea:81:63:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:55:55 2026 by rpki-client