This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D5400FDCE58011F0967E339C436F56BC.roa
File: D5400FDCE58011F0967E339C436F56BC.roa (raw, json)
Hash identifier: ZpksJmvOw329pt70CHG6iA9RGuTwf6FXxio1lxJtxKk=
Subject key identifier: 0A:E2:B0:1B:99:C6:4F:57:BD:54:7D:5F:20:57:08:3D:01:3F:B0:36
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: CE3B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D5400FDCE58011F0967E339C436F56BC.roa
Signing time: Wed 21 Jan 2026 08:42:38 +0000
ROA not before: Wed 21 Jan 2026 08:42:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 132627
IP address blocks: 103.153.12.0/24 maxlen: 24
103.158.239.0/24 maxlen: 24
103.165.102.0/23 maxlen: 24
103.190.9.0/24 maxlen: 24
2001:df6:6580::/48 maxlen: 48
2402:41e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:14:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52795 (0xce3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jan 21 08:42:38 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6970917e-5c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:bc:cd:b6:69:bf:1e:f3:ba:ae:44:2d:0a:4c:
90:0c:c0:df:82:ea:aa:b9:ed:af:84:69:28:b3:15:
74:5d:71:dc:e4:7b:57:02:97:5b:ab:ca:5a:3e:55:
cf:ed:70:b8:09:d6:20:eb:e1:84:27:8f:bf:2b:29:
20:cf:a2:34:93:4a:c4:0f:80:cc:fe:63:2e:68:fc:
49:bd:7e:33:26:fc:90:fc:fc:1f:98:2e:02:dc:00:
b3:e5:8e:40:9d:d2:4f:27:2c:2b:d5:0b:eb:45:6e:
c8:9a:0e:71:cd:33:0a:e2:cc:7d:d9:ae:65:f2:43:
74:0b:79:35:8d:39:3a:1c:f5:b2:4e:9f:4f:1e:61:
2e:31:6b:dc:08:11:cc:dc:78:f8:39:f5:8e:ec:5f:
70:d1:7e:ed:67:6d:25:7e:6f:0d:94:82:9c:2d:3f:
be:6f:28:ea:83:19:e6:2f:8d:98:bd:2b:da:57:51:
04:52:6c:b1:31:f4:6f:69:0b:bc:0e:2f:3b:5f:0a:
b2:09:50:44:91:67:a2:b7:7a:cb:0f:8f:c2:6f:a2:
54:d7:b3:be:dc:71:2c:d1:c8:3a:7c:8c:fc:5f:03:
e6:76:7e:68:6e:6a:13:ed:59:cc:42:39:d5:e4:55:
bc:b6:d7:4e:f2:ef:b3:12:40:55:30:cd:44:83:52:
f6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E2:B0:1B:99:C6:4F:57:BD:54:7D:5F:20:57:08:3D:01:3F:B0:36
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D5400FDCE58011F0967E339C436F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.153.12.0/24
103.158.239.0/24
103.165.102.0/23
103.190.9.0/24
IPv6:
2001:df6:6580::/48
2402:41e0::/32
Signature Algorithm: sha256WithRSAEncryption
a3:63:30:a7:40:9f:84:e4:5e:6e:d7:85:3d:25:3c:3c:9d:2a:
69:42:0d:ea:ea:6c:f7:3b:d0:6e:89:6b:e8:42:07:d0:d8:4f:
ae:f4:46:3c:ed:24:d8:58:a7:a4:21:5a:19:32:8e:45:d8:5d:
08:e9:e3:81:44:b9:66:6d:25:f7:f9:e4:0d:e8:12:97:08:a7:
e8:ef:ee:00:29:fb:8f:80:88:93:ef:c4:fd:67:05:52:08:59:
07:b7:57:96:fe:c6:9f:3d:a0:26:f1:28:94:d6:81:ed:05:30:
a3:a2:c4:31:ce:cf:39:33:c2:49:7f:62:ae:f3:7d:da:3b:b0:
74:39:26:33:82:95:fb:b6:ad:88:7e:27:b8:11:cf:06:fb:91:
c6:86:16:83:cf:13:9d:d2:23:bd:5b:c3:f2:5a:31:7c:43:23:
4c:ec:00:c9:ee:0c:6a:ee:06:34:2b:da:1e:22:51:1d:5d:a2:
2d:e1:f7:04:c5:ca:ca:47:e7:3c:94:41:fd:b7:e6:3e:e5:08:
53:38:61:ca:ad:08:68:7f:10:0f:fb:fa:e0:c8:01:b4:dc:ea:
3c:b9:10:c4:db:0a:e5:12:73:a1:78:96:0c:c5:10:9d:e3:3b:
9c:94:05:43:72:fb:0a:d8:f7:c7:51:3d:40:2f:2a:d9:8e:d6:
ac:33:10:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:24:03 2026 by rpki-client