This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/8F34BFAADF7E11EF9F3F8268C4F9AE02.roa
File: 8F34BFAADF7E11EF9F3F8268C4F9AE02.roa (raw, json)
Hash identifier: Ya4et5V4rWQUZcCvBhoiqFeIxvsic3VNjlrr6G/95zk=
Subject key identifier: 86:BA:BA:21:A3:08:36:5B:C4:9A:EC:29:BE:81:AB:C1:3D:C2:03:AA
Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial: 3783
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/8F34BFAADF7E11EF9F3F8268C4F9AE02.roa
Signing time: Fri 16 Jan 2026 16:13:30 +0000
ROA not before: Fri 16 Jan 2026 16:13:30 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 36352
IP address blocks: 103.120.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:26:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14211 (0x3783)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Validity
Not Before: Jan 16 16:13:30 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=696a63aa-6ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4b:ab:95:60:4d:d3:d4:db:11:2f:74:ca:c2:
a1:74:02:8c:6b:d6:24:b8:d7:cf:cf:e2:75:38:a7:
84:0c:18:2f:dd:53:f3:71:06:6c:e5:11:80:79:6d:
85:a0:94:a2:93:62:9d:61:84:84:28:7b:2f:90:c1:
41:d0:99:d0:a4:9f:f6:a8:05:b1:68:b4:7f:35:66:
f2:fd:cd:41:e4:69:aa:e7:9f:83:89:44:d0:94:81:
80:7b:b1:99:7b:6a:68:be:92:45:e9:79:c5:e7:d3:
65:40:a1:42:57:58:e5:a7:bc:a9:9b:1f:5c:55:85:
ca:45:36:3f:e2:54:ff:c5:2d:58:e4:71:d6:5e:e5:
26:c9:c4:91:6b:0f:de:5b:9d:73:5f:ea:0f:bf:41:
96:b0:ac:8d:59:01:c3:d2:bc:0a:bf:c4:a4:c3:c4:
51:c0:1e:2d:42:1c:5d:7a:7b:00:7b:e2:c1:2f:ef:
e7:d7:ca:6f:45:c8:85:ba:15:83:e5:ab:24:f2:ef:
e8:3a:46:40:87:43:0b:97:33:24:b4:6d:69:8c:99:
cb:ff:c5:c0:04:70:6b:4f:fe:70:a1:41:d3:81:b9:
9e:6d:5d:2d:c2:95:9c:66:06:8e:38:4b:1a:f4:f0:
b3:83:0b:01:0f:79:48:53:3f:23:6d:34:c1:f7:e8:
72:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BA:BA:21:A3:08:36:5B:C4:9A:EC:29:BE:81:AB:C1:3D:C2:03:AA
X509v3 Authority Key Identifier:
keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/8F34BFAADF7E11EF9F3F8268C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.120.204.0/24
Signature Algorithm: sha256WithRSAEncryption
93:81:99:5c:4e:94:32:b8:7c:06:cb:35:cc:2d:71:ec:d4:a7:
84:81:8f:d2:af:97:7e:86:02:4a:b3:c8:da:cd:41:de:2a:8a:
f2:5b:ba:fa:00:fc:be:3d:c3:48:fe:a2:ea:a4:5c:2a:d0:2f:
f4:bd:70:40:4f:6d:69:42:66:c7:af:00:1d:e1:03:2c:fd:a7:
5e:05:ac:c9:4d:3a:0f:48:da:75:41:c3:47:83:7b:c7:d5:cd:
0b:d2:36:cf:81:0d:69:52:24:70:1e:06:23:a9:08:bd:87:6c:
c7:eb:0f:3e:13:77:03:bf:0e:87:d1:6a:fb:7c:59:53:5c:c5:
a5:4c:ae:04:fd:b7:f6:a6:94:c2:98:33:0f:0c:73:62:6b:de:
80:7a:0c:15:4b:7a:aa:61:62:48:69:e4:ed:ee:66:75:25:19:
6f:bd:8a:5a:25:06:a2:28:95:ca:b8:3b:38:70:d1:76:e4:7d:
66:fc:35:f4:a6:4f:1a:2f:b5:d2:50:03:0b:6c:e4:44:38:b2:
a3:28:f6:d7:48:e5:d3:d9:be:a5:ea:87:af:47:68:0a:32:a1:
ef:35:61:cb:c7:4d:6d:a6:4b:a6:8d:0d:93:3b:60:7d:57:e6:
b8:e3:47:ce:0f:b4:50:95:17:dc:ce:1b:af:09:52:c1:99:13:
ee:cd:2b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:56:12 2026 by rpki-client