This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4E5891383B3311ED9A04CD22C4F9AE02.roa
File: 4E5891383B3311ED9A04CD22C4F9AE02.roa (raw, json)
Hash identifier: mCDri6/cO+J/zJtrziIGzt5I+yOXcF92THX4Fy8ku3k=
Subject key identifier: FC:5A:27:BB:BA:C6:72:83:25:F9:43:0C:27:D4:33:25:41:AF:E5:CA
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: CE1B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4E5891383B3311ED9A04CD22C4F9AE02.roa
Signing time: Tue 20 Jan 2026 06:32:52 +0000
ROA not before: Tue 20 Jan 2026 06:32:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 150045
IP address blocks: 103.158.212.0/24 maxlen: 24
103.158.213.0/24 maxlen: 24
103.191.112.0/24 maxlen: 24
103.191.113.0/24 maxlen: 24
2001:df0:ff40::/48 maxlen: 48
2001:df1:9240::/48 maxlen: 48
2001:df6:92c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:14:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52763 (0xce1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jan 20 06:32:52 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=696f2194-b600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ad:a1:24:e6:b6:e2:28:93:e3:66:88:57:52:
a8:d8:73:fa:9e:63:a8:ef:dc:1e:c5:b1:fa:b8:0f:
fb:6b:b8:01:45:99:c2:e6:f9:ad:a9:1b:76:61:a8:
45:db:a2:73:38:96:e0:7f:5c:f5:71:75:87:17:88:
69:53:5a:15:d5:e8:55:56:74:df:4b:3b:63:cf:3a:
71:08:e4:58:b3:13:74:e5:47:d9:8d:23:2d:5d:9f:
ae:3f:f5:00:a5:08:d2:34:f9:2c:01:ae:18:b8:62:
67:ae:e8:5d:40:fc:e3:86:c7:11:26:43:3a:b9:3e:
7b:ab:c8:34:75:fb:77:e2:3e:c3:c8:5f:55:83:85:
d8:34:91:9d:93:9e:84:f9:27:ac:90:11:a5:bf:57:
8d:0a:ef:e0:db:63:85:6d:60:88:ce:04:3e:b5:1f:
7f:40:85:7b:3e:85:77:dd:2a:98:a5:12:32:7a:67:
40:4c:10:f4:ea:8c:39:73:43:aa:93:54:d4:48:af:
d7:25:a8:98:3a:a0:e7:ae:78:f0:01:a7:77:90:e2:
1b:10:38:d0:76:39:54:b9:41:b8:96:5e:c6:20:0c:
0c:78:a9:e9:55:45:81:84:94:64:83:dd:3b:2f:1d:
14:65:8e:92:e4:c1:5c:a8:00:c4:40:ef:c4:85:65:
ac:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5A:27:BB:BA:C6:72:83:25:F9:43:0C:27:D4:33:25:41:AF:E5:CA
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4E5891383B3311ED9A04CD22C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.158.212.0/23
103.191.112.0/23
IPv6:
2001:df0:ff40::/48
2001:df1:9240::/48
2001:df6:92c0::/48
Signature Algorithm: sha256WithRSAEncryption
ba:7d:fa:0b:90:5b:c2:8c:1f:7a:1c:cf:fb:b4:7d:92:2b:bf:
eb:2c:f0:5b:a0:b3:8c:ee:16:f0:37:8a:3f:2c:2a:72:36:79:
35:99:c5:81:54:19:57:03:20:6e:d3:1a:68:e4:09:84:ae:c3:
85:2e:1b:07:b4:56:b2:64:c2:b3:ac:25:f9:af:53:bd:58:45:
cc:51:da:75:c3:7c:e8:bd:2f:09:bc:93:9a:95:cc:eb:53:fd:
a4:98:74:50:e1:7a:bf:7d:0d:6e:89:a5:60:1e:c7:5e:ef:1d:
f1:f8:a0:bd:3e:27:4e:12:8c:81:83:3d:12:ea:a6:59:d5:14:
2c:cc:42:77:27:ae:36:68:9c:a7:4c:49:71:4b:9a:2b:12:78:
10:0b:f8:02:d0:df:1b:53:a3:46:c3:83:b5:2b:fa:4a:14:4f:
39:7d:d2:fb:5c:b5:b1:30:7d:cf:43:f9:5f:2b:fe:e8:3e:2b:
b8:f8:97:66:40:6c:63:05:01:af:0e:66:22:2b:72:77:1f:98:
65:f6:0f:3c:93:43:96:2c:70:d5:b0:a0:2d:0f:32:f8:79:71:
3a:ca:d2:be:90:27:03:32:3f:bb:69:7d:b2:36:d2:aa:73:06:
3c:d0:e5:e2:07:a4:36:fd:30:0b:ac:ce:c0:18:b7:6c:4d:b1:
79:c0:cc:58
-----BEGIN CERTIFICATE-----
MIIFmzCCBIOgAwIBAgIDAM4bMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMMCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDEyMDA2MzI1MloXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAwwNNjk2ZjIxOTQtYjYwMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANutoSTmtuIok+NmiFdSqNhz+p5jqO/cHsWx+rgP+2u4AUWZwub5rakbdmGo
RduicziW4H9c9XF1hxeIaVNaFdXoVVZ030s7Y886cQjkWLMTdOVH2Y0jLV2frj/1
AKUI0jT5LAGuGLhiZ67oXUD844bHESZDOrk+e6vINHX7d+I+w8hfVYOF2DSRnZOe
hPknrJARpb9XjQrv4NtjhW1giM4EPrUff0CFez6Fd90qmKUSMnpnQEwQ9OqMOXND
qpNU1Eiv1yWomDqg56548AGnd5DiGxA40HY5VLlBuJZexiAMDHip6VVFgYSUZIPd
Oy8dFGWOkuTBXKgAxEDvxIVlrB0CAwEAAaOCAr4wggK6MB0GA1UdDgQWBBT8Wie7
usZygyX5Qwwn1DMlQa/lyjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzRFNTg5MTM4
M0IzMzExRUQ5QTA0Q0QyMkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMEgGCCsGAQUFBwEHAQH/
BDkwNzASBAIAATAMAwQBZ57UAwQBZ79wMCEEAgACMBsDBwAgAQ3w/0ADBwAgAQ3x
kkADBwAgAQ32ksAwDQYJKoZIhvcNAQELBQADggEBALp9+guQW8KMH3ocz/u0fZIr
v+ss8Fugs4zuFvA3ij8sKnI2eTWZxYFUGVcDIG7TGmjkCYSuw4UuGwe0VrJkwrOs
JfmvU71YRcxR2nXDfOi9Lwm8k5qVzOtT/aSYdFDher99DW6JpWAex17vHfH4oL0+
J04SjIGDPRLqplnVFCzMQncnrjZonKdMSXFLmisSeBAL+ALQ3xtTo0bDg7Ur+koU
Tzl90vtctbEwfc9D+V8r/ug+K7j4l2ZAbGMFAa8OZiIrcncfmGX2DzyTQ5YscNWw
oC0PMvh5cTrK0r6QJwMyP7tpfbI20qpzBjzQ5eIHpDb9MAuszsAYt2xNsXnAzFg=
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:36:06 2026 by rpki-client