This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/9680FCD2A87011EFB3944C13C4F9AE02.roa
File: 9680FCD2A87011EFB3944C13C4F9AE02.roa (raw, json)
Hash identifier: w+b4Zgmg30gS69MI8U4GqE5qtsO8Z+Rqu1UuRVApfYQ=
Subject key identifier: 38:0E:08:F8:01:1A:6A:41:D9:F8:51:1C:41:E9:6D:A9:3C:23:39:5B
Certificate issuer: /CN=A918D6BF/serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23
Certificate serial: 194D
Authority key identifier: 4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/9680FCD2A87011EFB3944C13C4F9AE02.roa
Signing time: Wed 24 Dec 2025 17:14:15 +0000
ROA not before: Wed 24 Dec 2025 17:14:15 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 152472
IP address blocks: 103.243.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl
rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6477 (0x194d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D6BF, serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23
Validity
Not Before: Dec 24 17:14:15 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=694c1f67-717f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:64:15:3c:ca:c1:c4:0b:ff:8d:69:a4:59:73:
80:a6:c3:52:c5:3d:99:08:7c:48:e2:3b:52:5b:63:
c4:6d:8e:d4:3c:58:ab:b0:08:98:87:f3:9d:e8:fa:
28:48:b8:b2:c5:83:4f:48:5b:c8:e7:88:79:b5:1c:
3d:70:40:2b:d5:a5:b2:1b:3b:3c:76:9e:9f:65:24:
8e:08:0a:d4:8d:69:79:94:6d:55:59:9d:a6:cf:68:
12:54:cc:15:94:d6:58:42:20:74:af:ab:c1:7b:71:
66:20:ac:23:de:5c:6c:bf:a8:57:f1:ff:8b:a3:31:
d4:63:71:5c:ae:e8:27:76:9d:30:76:8b:f3:ed:bb:
97:49:d4:9a:9a:f0:4e:a5:74:7b:0d:c7:54:14:37:
9f:e3:b6:43:00:58:a8:48:5d:98:ec:3c:05:0b:cf:
cb:fc:36:eb:66:50:56:1a:df:56:52:e5:ae:2b:f2:
1c:a7:ff:a0:0d:aa:ab:63:77:09:a6:e1:24:0d:e5:
2d:1b:b4:57:7f:6e:22:48:0f:6f:2d:4c:14:2d:a6:
17:46:2a:a5:07:c9:53:f6:34:47:82:4c:48:39:82:
3b:64:95:b2:e1:4b:c6:c8:86:0a:17:14:17:4f:95:
3c:b4:e5:95:83:28:a1:bc:be:36:45:2e:cc:90:7f:
e3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:0E:08:F8:01:1A:6A:41:D9:F8:51:1C:41:E9:6D:A9:3C:23:39:5B
X509v3 Authority Key Identifier:
keyid:4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/9680FCD2A87011EFB3944C13C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.243.239.0/24
Signature Algorithm: sha256WithRSAEncryption
03:8d:97:03:5b:80:10:18:03:80:ec:fb:34:b2:e6:24:5b:af:
a5:40:a7:80:a8:bf:47:48:af:5d:4a:5d:d6:0a:db:30:bf:78:
93:bc:fb:ee:cc:e9:8b:76:6f:84:84:ef:09:13:52:d8:5a:51:
51:f3:ea:40:cf:91:c4:fc:e7:57:52:fd:a4:64:f1:ce:c1:c5:
a2:29:08:44:f1:71:6a:e7:2b:e9:04:45:dc:32:51:92:7b:7f:
61:60:7c:a2:d4:43:44:80:9d:24:04:b0:3b:cc:13:03:9e:42:
d8:9e:d5:fc:0b:cf:1f:a2:38:d6:bb:cc:d0:ed:a4:bf:a2:07:
72:58:50:88:0c:54:c8:53:43:7e:6c:b0:ac:bc:c8:3b:76:23:
f7:67:94:71:93:bb:24:35:e2:18:6c:18:cd:75:f4:84:1f:b0:
f0:8e:45:dd:14:19:1e:10:ef:e0:fa:fe:6b:2b:60:bb:9b:fe:
74:04:8d:d5:78:48:ca:5f:71:c2:d7:1f:0a:c8:11:9c:0a:51:
a4:cb:8a:9f:e3:fe:97:6c:ae:fb:d8:fc:0c:a2:b7:f7:ea:13:
35:1b:da:63:58:28:ca:78:c7:22:24:cf:c7:22:07:78:50:d9:
5a:49:d6:f8:53:1d:88:bc:41:9b:5d:89:cc:4f:43:c9:b3:8b:
50:d1:0f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:34:10 2026 by rpki-client