This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/A311BCDEE07D11F0A337A81D3B6F56BC.roa
File: A311BCDEE07D11F0A337A81D3B6F56BC.roa (raw, json)
Hash identifier: AR6fq3UErOd6SfuBfQPjnVySko2PA1Bjfsuybn8iuxE=
Subject key identifier: 4E:A9:16:20:C4:B5:08:58:9F:4A:8A:1C:FB:68:D3:50:4A:D4:98:93
Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial: 3771
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/A311BCDEE07D11F0A337A81D3B6F56BC.roa
Signing time: Fri 16 Jan 2026 16:13:12 +0000
ROA not before: Fri 16 Jan 2026 16:13:12 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 137289
IP address blocks: 103.146.244.0/24 maxlen: 24
103.146.245.0/24 maxlen: 24
103.146.246.0/24 maxlen: 24
103.146.247.0/24 maxlen: 24
103.147.2.0/24 maxlen: 24
103.147.3.0/24 maxlen: 24
103.147.4.0/24 maxlen: 24
103.147.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:26:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14193 (0x3771)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Validity
Not Before: Jan 16 16:13:12 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=696a6397-ca44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d4:35:cb:89:36:df:fe:48:e3:3b:33:2d:34:
81:8c:5c:90:a4:11:51:8d:e3:1a:b3:6c:32:7a:29:
da:f8:c7:91:33:ae:33:e2:96:a4:e2:e3:db:13:ce:
41:cc:f1:8b:d2:49:0c:d5:b4:5e:2c:a9:45:e9:f4:
41:49:6f:c9:de:d4:a6:93:1f:6a:4c:61:39:a5:0b:
11:de:3f:30:5e:92:d5:6a:4f:0b:8f:9f:ee:00:ea:
f6:18:59:e7:b7:37:10:5b:aa:6a:7b:c8:39:64:1f:
2d:1f:f7:3c:db:2a:b3:96:d8:56:40:f0:f0:1e:ed:
42:72:e8:36:c1:3f:e2:c9:7d:ea:63:82:bc:94:23:
e4:94:3d:e0:15:be:47:db:a2:98:2a:36:04:22:26:
6d:4d:16:ca:3d:c9:84:0f:69:71:53:d1:37:94:d3:
8a:c6:e1:22:0b:0c:5a:52:a4:bb:11:4a:5d:c2:b8:
d8:9c:a2:31:33:0e:62:0c:7b:42:49:a6:ec:fb:23:
60:b8:e1:0a:11:19:12:da:f2:46:f1:39:de:3f:e2:
1d:45:89:ec:ef:df:fa:b0:e4:d4:1c:46:eb:5e:34:
fd:c1:f9:02:02:43:08:bf:cd:cb:30:f4:ef:4e:a9:
a9:43:36:61:0b:c1:6c:7a:56:72:cd:d9:cc:3f:47:
e5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A9:16:20:C4:B5:08:58:9F:4A:8A:1C:FB:68:D3:50:4A:D4:98:93
X509v3 Authority Key Identifier:
keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/A311BCDEE07D11F0A337A81D3B6F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.146.244.0/22
103.147.2.0-103.147.5.255
Signature Algorithm: sha256WithRSAEncryption
37:19:5e:fc:f5:47:7c:91:22:d3:75:92:aa:57:70:9a:aa:4c:
8d:85:5b:84:a1:41:8c:1d:7d:7a:14:6d:72:3d:72:c6:fc:24:
2c:6e:5a:85:d8:f7:89:ba:b6:e2:6f:25:f8:9a:fc:d8:98:e6:
b6:24:bb:0f:69:29:22:cc:e7:e2:62:3f:13:d0:ba:0d:a4:1f:
d7:a8:b2:4e:6e:8e:c2:ce:fb:a3:ba:bd:12:fb:0d:7c:37:47:
81:c8:55:17:41:d5:cf:79:24:e6:f3:5d:1f:a0:3d:38:82:ce:
af:0f:b0:23:f4:be:88:3c:8a:42:d0:c9:35:12:61:f7:7d:84:
c9:ba:8d:9c:1e:ba:27:d5:03:19:a2:8a:16:87:d1:85:39:e0:
c7:30:40:a8:21:fb:4a:dc:fc:e2:7a:7e:46:1f:b4:29:c0:3f:
39:cf:05:84:f6:89:de:57:5f:24:6b:f8:b9:59:55:02:ee:ec:
9f:b2:92:dc:41:f0:82:b0:92:fe:16:54:e5:d0:2a:1d:d1:57:
e0:63:04:9f:78:38:0f:0b:fa:2c:7a:e5:24:11:bb:6e:56:be:
ca:39:fb:98:91:2a:e0:55:44:7d:7e:c8:e7:c5:33:ba:c5:2e:
1e:20:22:d4:74:ca:7c:0a:3e:5f:fa:36:d5:66:89:42:66:b7:
da:00:3a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:18:42 2026 by rpki-client