This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/8BF305A2F44711F0849EF3E6616F56BC.roa
File: 8BF305A2F44711F0849EF3E6616F56BC.roa (raw, json)
Hash identifier: Vf/wxKBD/jfYEmLKTs11JBTMCtKzeAxDly2IerWUU4A=
Subject key identifier: 6F:2C:30:54:A1:0C:5F:50:4A:65:F3:6A:02:EA:B9:A4:0C:0D:DB:C2
Certificate issuer: /CN=A91871C2/serialNumber=A9EABC2465116ED11D6C8CDAE2011237CF1F59DF
Certificate serial: 07E3
Authority key identifier: A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/8BF305A2F44711F0849EF3E6616F56BC.roa
Signing time: Sun 18 Jan 2026 08:27:38 +0000
ROA not before: Sun 18 Jan 2026 08:27:38 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 138474
IP address blocks: 103.126.148.0/22 maxlen: 22
103.126.148.0/23 maxlen: 23
103.126.149.0/24 maxlen: 24
103.126.150.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.crl
rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 21:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2019 (0x7e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91871C2, serialNumber=A9EABC2465116ED11D6C8CDAE2011237CF1F59DF
Validity
Not Before: Jan 18 08:27:38 2026 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=696c9979-6428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:83:69:67:d7:8f:5d:8f:9a:1a:3f:70:20:96:
54:4b:de:7f:29:89:f6:3f:7d:b9:08:6e:ea:ca:a0:
12:c5:3f:7e:c9:3d:6d:a0:e7:42:06:f2:e3:fb:3f:
a3:28:89:5b:80:e4:0b:67:a0:30:e9:ab:47:e2:dd:
c0:eb:6a:7e:bf:57:9a:7e:1d:d6:9a:b8:18:22:bb:
93:38:1b:9d:f1:8c:18:e7:e3:29:81:e8:6c:be:eb:
98:15:65:ff:cb:a8:17:d8:ac:21:7a:12:df:3b:ef:
12:37:d3:5b:d8:a8:a6:38:53:03:13:05:90:ee:e1:
d5:02:b3:ee:0b:bc:c6:4c:cb:4f:da:2d:ee:77:7f:
48:7d:bc:2d:5b:90:2f:87:d3:3e:b3:e1:92:54:07:
72:29:ca:62:4f:eb:14:ca:02:2c:cf:39:71:d1:f2:
10:b5:8f:ab:44:43:ff:8c:a3:25:e5:d1:9d:ab:a6:
74:5f:32:8f:40:f0:45:e0:a6:34:bc:97:81:c9:70:
6c:81:fb:03:fc:08:b6:fa:a0:54:38:6c:91:8c:b0:
b2:25:c8:ba:2b:02:7a:28:42:96:20:40:76:06:5f:
9e:9e:8e:f0:7c:59:ae:96:73:d4:d3:f5:14:a6:e8:
e5:cc:c6:40:ad:22:da:40:62:6a:49:fa:72:13:dc:
c1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:2C:30:54:A1:0C:5F:50:4A:65:F3:6A:02:EA:B9:A4:0C:0D:DB:C2
X509v3 Authority Key Identifier:
keyid:A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/8BF305A2F44711F0849EF3E6616F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.126.148.0/22
Signature Algorithm: sha256WithRSAEncryption
81:64:69:2c:d5:54:7e:28:92:ad:47:21:d6:cd:f4:82:7d:a2:
aa:52:bd:0d:ab:7b:01:ae:bc:33:d9:08:0c:7b:ca:9b:3b:21:
10:88:c5:2b:bf:cd:a9:bd:12:c9:71:a5:5e:66:8a:1a:62:29:
96:3c:07:32:9b:ee:f3:53:ad:5f:bb:d2:4c:7f:d6:3d:ae:01:
be:07:e6:fc:88:2d:82:a9:bd:5c:48:13:2f:f8:74:58:a9:11:
1c:31:a2:bc:e2:b4:46:40:29:c8:10:fd:7c:81:79:1c:6a:92:
24:47:cf:0f:54:2c:66:5c:c5:15:18:97:7a:96:cf:09:c8:1c:
01:2d:4c:d4:46:90:35:50:16:1a:25:ab:30:13:3e:86:ba:0a:
83:f4:b7:2b:c4:20:47:02:8d:95:54:92:be:ba:a1:67:13:10:
69:58:5e:b2:c4:88:b5:96:df:db:b2:77:f1:6b:a6:de:33:6a:
b5:21:ff:00:3d:30:1e:b1:4c:b8:9b:84:48:7e:5a:b3:5e:45:
ec:ec:5f:2b:b9:e6:3d:f2:a4:82:06:f1:53:0f:7d:7f:36:20:
90:6e:d4:6c:3b:25:a6:96:77:3b:5f:57:9b:57:07:b0:aa:b7:
7b:e8:80:5a:e3:13:91:28:da:22:37:3c:bc:32:cf:f3:f5:3b:
49:22:46:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:46:32 2026 by rpki-client