This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/AF4851DEE36C11EF876EED6BC4F9AE02.roa
File: AF4851DEE36C11EF876EED6BC4F9AE02.roa (raw, json)
Hash identifier: JHVcyAD6FeGWWswr7qWRZgejDl1FiSS1m5AOQqivSWk=
Subject key identifier: 2A:7E:4A:ED:C4:B2:0E:49:C7:C1:3E:0D:37:D1:9C:A0:76:59:25:85
Certificate issuer: /CN=A918664E/serialNumber=4C05BA8935E8DF3CC23250B567F2056B850715B9
Certificate serial: 0256
Authority key identifier: 4C:05:BA:89:35:E8:DF:3C:C2:32:50:B5:67:F2:05:6B:85:07:15:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/AF4851DEE36C11EF876EED6BC4F9AE02.roa
Signing time: Sat 17 Jan 2026 02:21:34 +0000
ROA not before: Sat 17 Jan 2026 02:21:34 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 150108
IP address blocks: 103.122.222.0/24 maxlen: 24
2400:f160::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.crl
rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:35:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 598 (0x256)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918664E, serialNumber=4C05BA8935E8DF3CC23250B567F2056B850715B9
Validity
Not Before: Jan 17 02:21:34 2026 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=696af22e-c318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ee:51:bb:8d:1c:0a:a4:ca:2e:f6:22:22:2f:
62:0a:01:5c:4f:82:8f:aa:8c:67:8d:db:ee:e5:8d:
ed:ec:74:3b:66:50:61:53:19:48:34:2e:bb:21:b6:
cf:d3:06:f0:41:ad:5d:45:fc:5d:bf:23:38:de:3e:
06:fc:39:e3:b1:11:dd:98:09:da:f0:de:46:f7:c2:
be:ef:65:33:54:08:57:95:37:dd:32:36:bc:8a:c1:
e0:42:8d:c4:f1:67:b2:e8:1f:f9:a9:78:e5:ef:86:
97:a3:be:09:b4:8f:aa:61:4c:3b:e1:d1:3f:28:a7:
1e:29:93:bc:d1:a8:ec:ee:85:64:77:14:79:3e:cc:
ac:3d:f1:6f:8d:2c:25:22:c5:ba:0a:86:75:91:c8:
ab:4d:93:4f:fa:db:91:d1:f0:99:3a:08:b2:fe:25:
8d:b6:bd:2c:d4:9c:c9:b1:d2:5e:27:52:28:3f:e2:
53:e4:67:b7:6a:e6:34:8a:a4:c5:f7:bd:5f:4b:0f:
89:16:68:ea:70:df:da:82:24:dc:29:45:be:a0:ad:
bc:ce:a9:54:e9:99:f0:19:d9:14:8c:bf:c6:6a:d7:
0b:0e:07:d6:34:19:66:1d:af:66:84:b4:4f:13:7f:
67:a7:84:68:6c:bb:d2:c8:8c:c8:94:9c:a1:f7:63:
ef:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:7E:4A:ED:C4:B2:0E:49:C7:C1:3E:0D:37:D1:9C:A0:76:59:25:85
X509v3 Authority Key Identifier:
keyid:4C:05:BA:89:35:E8:DF:3C:C2:32:50:B5:67:F2:05:6B:85:07:15:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/AF4851DEE36C11EF876EED6BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.222.0/24
IPv6:
2400:f160::/32
Signature Algorithm: sha256WithRSAEncryption
b6:72:12:57:c0:67:e2:27:6b:6a:8e:07:5a:07:45:9d:f1:e1:
b4:82:65:41:53:44:1b:de:bc:19:3e:df:0f:67:44:a8:d2:d8:
f8:9d:56:33:e6:fd:94:1d:b0:af:4f:3e:82:07:82:f4:da:e0:
01:4a:f1:0e:03:53:00:ec:06:2f:7b:cc:ec:25:44:ed:01:9c:
34:9a:5c:3a:61:85:49:50:76:e2:28:b7:ec:5c:27:1c:3f:2b:
d1:68:87:ca:9a:9a:f5:87:e3:c7:1b:3d:2d:8c:f9:cd:5f:96:
13:3d:25:db:ba:6f:30:8d:3b:4d:23:80:a0:13:df:be:5c:a5:
fe:d6:39:bb:ed:6d:bf:56:47:4f:d3:bf:c4:13:22:17:7e:9c:
c0:f0:cf:3c:ea:36:85:6b:3a:7e:d8:12:1d:43:f0:f8:c5:01:
ee:43:01:ff:00:aa:f3:9c:33:9f:cb:9f:3a:fe:92:b7:d0:94:
67:20:9b:7e:03:32:80:4f:03:3f:74:09:c7:1d:27:bd:71:9f:
0c:3d:a3:27:45:b5:35:83:fa:a7:3a:d4:9e:27:13:d6:2e:ff:
30:15:a4:01:79:6f:00:98:ce:54:40:d0:8e:99:01:2d:c4:ac:
2f:ae:da:90:db:ef:ae:43:d1:6c:76:f7:f8:d4:af:ef:75:4f:
e3:8b:72:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:22:22 2026 by rpki-client