This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/B883270E356B11E7A51C314CC4F9AE02.roa
File: B883270E356B11E7A51C314CC4F9AE02.roa (raw, json)
Hash identifier: DIrnPld2pmCO8F0lSwk+fjrch45J04Fbx0KSu5+1g1s=
Subject key identifier: DF:61:B6:F6:9F:9D:E8:EF:14:80:6E:F5:94:4F:EF:28:B6:4E:31:3F
Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial: 3789
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/B883270E356B11E7A51C314CC4F9AE02.roa
Signing time: Fri 16 Jan 2026 16:13:35 +0000
ROA not before: Fri 16 Jan 2026 16:13:35 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 38778
IP address blocks: 45.64.4.0/22 maxlen: 22
45.64.4.0/23 maxlen: 23
45.64.4.0/24 maxlen: 24
45.64.5.0/24 maxlen: 24
45.64.6.0/23 maxlen: 23
45.64.6.0/24 maxlen: 24
45.64.7.0/24 maxlen: 24
103.228.236.0/22 maxlen: 22
103.228.236.0/23 maxlen: 23
103.228.236.0/24 maxlen: 24
103.228.237.0/24 maxlen: 24
103.228.238.0/23 maxlen: 23
103.228.238.0/24 maxlen: 24
103.228.239.0/24 maxlen: 24
115.69.216.0/21 maxlen: 21
115.69.216.0/22 maxlen: 22
115.69.216.0/23 maxlen: 23
115.69.216.0/24 maxlen: 24
115.69.217.0/24 maxlen: 24
115.69.218.0/23 maxlen: 23
115.69.218.0/24 maxlen: 24
115.69.219.0/24 maxlen: 24
115.69.220.0/22 maxlen: 22
115.69.220.0/23 maxlen: 23
115.69.220.0/24 maxlen: 24
115.69.221.0/24 maxlen: 24
115.69.222.0/23 maxlen: 23
115.69.222.0/24 maxlen: 24
115.69.223.0/24 maxlen: 24
2407:f900::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:26:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14217 (0x3789)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Validity
Not Before: Jan 16 16:13:35 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=696a63af-3bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b7:33:d3:d1:c3:df:18:c9:b5:3f:b7:9b:ad:
2c:3c:4b:b7:2c:dd:33:3a:bc:90:41:38:23:7f:83:
e2:37:22:78:81:01:4c:13:e2:3d:e5:94:60:9a:d4:
cb:07:b9:73:c5:cb:55:0a:91:78:ce:1f:3d:9d:68:
0f:c8:05:e2:49:db:ee:ea:61:ea:ae:d9:4b:72:61:
e8:bd:9e:b3:e2:d4:b5:26:4f:ac:e4:45:1a:84:91:
eb:4a:9c:ff:67:2c:20:77:4d:69:90:76:d0:5e:a3:
63:e5:37:1e:a5:eb:0e:d2:7d:42:40:34:39:ad:f6:
f8:f2:21:d2:4b:26:3b:b0:b1:52:9f:3a:00:58:c3:
ba:4c:c8:43:07:e4:86:69:c7:e5:1d:c9:e7:48:28:
f9:b0:9e:a6:29:b2:14:dc:27:56:65:8a:7e:3d:34:
24:61:95:b8:36:62:ab:1a:17:31:ff:08:2b:95:f5:
eb:da:09:89:42:06:1a:18:6e:b1:75:e6:04:0f:a3:
11:62:e1:78:1f:6a:b4:d5:7f:39:eb:d1:b4:ad:dc:
6f:88:1e:69:e9:0f:5a:6b:4f:dc:64:80:f4:c4:bc:
4d:b8:9b:37:a5:f7:b1:25:de:d0:a0:fe:0a:cd:fc:
87:ca:d3:ba:a1:8f:f9:72:1c:9d:fe:04:f0:15:df:
79:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:61:B6:F6:9F:9D:E8:EF:14:80:6E:F5:94:4F:EF:28:B6:4E:31:3F
X509v3 Authority Key Identifier:
keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/B883270E356B11E7A51C314CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.64.4.0/22
103.228.236.0/22
115.69.216.0/21
IPv6:
2407:f900::/32
Signature Algorithm: sha256WithRSAEncryption
63:a5:7f:65:44:c9:7b:ce:08:1c:1a:6a:13:e8:ed:f1:7f:3e:
32:e7:7a:b6:9f:ea:a0:6e:20:4f:a7:10:41:8c:ef:58:82:20:
10:ce:66:8a:a7:2e:07:0e:49:7a:0e:19:b5:e5:8f:11:d8:09:
15:46:bb:11:ea:b3:54:84:a7:af:c1:50:29:e3:2f:44:b6:eb:
63:85:81:f0:71:4a:bb:2f:5d:fe:2b:b9:39:bf:06:1a:b6:a3:
8b:7d:1f:65:f8:16:dc:4f:2c:7d:9b:12:e0:eb:1e:82:8f:70:
9a:ee:da:cb:67:ce:77:64:55:c3:ce:60:bb:d4:9f:c5:ed:8c:
00:a6:38:48:a7:46:19:11:50:79:bf:cd:97:03:53:42:bd:76:
21:20:1b:36:da:ac:23:b8:20:a8:75:43:c7:2e:af:02:ae:1b:
89:47:c9:23:56:e8:76:11:b9:40:b9:9e:0f:2e:5b:51:f9:53:
fe:45:68:89:bc:81:72:16:05:26:84:8d:d7:22:16:cb:07:8d:
bb:ff:f7:21:bb:a6:a4:68:aa:a1:8c:83:4e:4c:ab:d1:fc:53:
fd:3d:34:13:2a:96:9a:3b:ee:00:73:2f:78:4c:27:70:91:93:
07:9f:45:34:8a:88:c0:ab:c8:32:c4:5f:ec:33:80:32:a5:a3:
5a:f0:ae:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:58:05 2026 by rpki-client