This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/41622F82F82E11F0BC7D9928396F56BC.roa
File: 41622F82F82E11F0BC7D9928396F56BC.roa (raw, json)
Hash identifier: X88zm3asPfv4qeUoWPBNozIkJ7sSZW/2rdqWg7wPPtE=
Subject key identifier: 66:D6:B3:C0:DA:F8:3A:F7:21:29:E0:9D:91:B7:BB:24:0A:D0:81:8A
Certificate issuer: /CN=A9196DE5/serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6
Certificate serial: 0A13
Authority key identifier: D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/41622F82F82E11F0BC7D9928396F56BC.roa
Signing time: Fri 23 Jan 2026 07:36:40 +0000
ROA not before: Fri 23 Jan 2026 07:36:40 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 9304
IP address blocks: 103.207.164.0/24 maxlen: 24
103.207.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl
rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:21:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2579 (0xa13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196DE5, serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6
Validity
Not Before: Jan 23 07:36:40 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69732508-a5f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:31:e7:be:0a:a1:a7:b7:dc:42:48:52:cc:21:
15:50:8c:87:8f:e6:12:c1:7e:f8:38:5a:47:4e:ea:
45:52:d7:00:1b:3a:49:d4:46:23:8d:f8:34:b9:be:
7e:f5:79:03:ad:60:1a:a7:ea:aa:13:77:81:8a:3e:
d7:20:da:5e:bf:98:41:5a:8f:ab:d2:51:8b:dd:05:
4d:ef:d7:bf:10:f7:65:6d:29:12:af:6f:2d:17:19:
57:02:9e:00:6f:34:ed:19:84:ea:43:32:8e:a4:a7:
fe:6c:d5:6d:8f:c8:00:e9:8c:b5:d5:b5:8d:03:7a:
6d:3d:d6:f8:61:de:d3:99:ed:53:4f:39:e6:aa:0a:
ee:f2:ea:8b:86:83:33:ad:34:73:d8:a3:0d:cb:18:
b2:b3:6e:8f:cd:b9:16:11:3a:53:56:14:8c:7e:b1:
52:57:ce:3b:a3:cb:75:a5:1c:86:66:c7:b3:3b:a9:
75:2f:c2:e1:f8:5a:2b:fe:14:26:45:2b:a8:56:d7:
8e:65:ef:d2:1b:68:cc:ca:9d:3e:d4:87:a0:2c:37:
36:bb:04:ad:af:3c:7c:48:07:8e:aa:4a:b9:d4:02:
69:7e:f1:0b:70:05:b7:dc:b1:88:c2:3a:c6:a7:48:
a4:81:84:40:cd:3b:37:e0:47:d0:ad:5b:1d:d1:3f:
4a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D6:B3:C0:DA:F8:3A:F7:21:29:E0:9D:91:B7:BB:24:0A:D0:81:8A
X509v3 Authority Key Identifier:
keyid:D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/41622F82F82E11F0BC7D9928396F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.207.164.0/24
103.207.167.0/24
Signature Algorithm: sha256WithRSAEncryption
06:a0:b0:94:78:97:dd:38:e0:41:74:07:ea:05:6a:49:38:88:
82:be:c7:8d:99:19:f6:2c:16:d1:6c:0d:a5:ee:fe:c3:4e:39:
6a:49:de:77:a2:26:65:e3:67:81:eb:31:a9:d6:3e:0e:c6:a0:
3a:34:1b:19:8f:48:3f:a5:ad:24:45:49:b0:45:2a:51:83:8b:
55:55:9d:1b:fc:c0:b3:f3:d2:9a:08:fe:72:b9:96:dd:26:bd:
9e:9d:e1:a9:e6:a0:f1:f8:d3:85:c2:ad:28:33:87:c9:c0:9e:
7e:e2:83:3f:e8:85:45:d6:52:7e:71:1c:77:29:56:84:e4:46:
34:ce:ca:ba:0f:8c:16:8a:00:80:46:94:53:b3:79:a2:eb:20:
38:05:51:7f:15:14:62:b9:54:c6:8f:33:b6:5d:f3:28:c7:64:
81:9c:52:44:a3:b8:03:b6:2f:f5:fe:59:ec:c2:8c:cf:7a:5c:
69:8b:62:8f:00:4b:39:8b:88:52:f2:56:c0:76:ec:eb:d2:3c:
7c:16:a8:4d:d3:af:82:ce:18:9f:10:68:4f:5e:c4:d1:a3:06:
f8:22:77:39:f5:72:80:f9:2c:77:12:e3:ff:68:08:df:f3:1b:
dc:c0:c8:97:9d:64:ca:fe:f0:1d:4d:cc:10:c9:80:76:0b:ab:
02:ac:05:ba
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICChMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTZERTUxMTAvBgNVBAUTKEQ4MzkyQjBEOTE1QjlBQzFGNEQyM0JGOTg0MTk3MTQw
NkZCNjFBQzYwHhcNMjYwMTIzMDczNjQwWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTczMjUwOC1hNWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlTHnvgqhp7fcQkhSzCEVUIyHj+YSwX74OFpHTupFUtcAGzpJ1EYjjfg0ub5+
9XkDrWAap+qqE3eBij7XINpev5hBWo+r0lGL3QVN79e/EPdlbSkSr28tFxlXAp4A
bzTtGYTqQzKOpKf+bNVtj8gA6Yy11bWNA3ptPdb4Yd7Tme1TTznmqgru8uqLhoMz
rTRz2KMNyxiys26PzbkWETpTVhSMfrFSV847o8t1pRyGZsezO6l1L8Lh+For/hQm
RSuoVteOZe/SG2jMyp0+1IegLDc2uwStrzx8SAeOqkq51AJpfvELcAW33LGIwjrG
p0ikgYRAzTs34EfQrVsd0T9KwwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFGbWs8Da
+Dr3ISngnZG3uyQK0IGKMB8GA1UdIwQYMBaAFNg5Kw2RW5rB9NI7+YQZcUBvthrG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkRFNS83MkM1QTlDQzk0
MzAxMUVBQkQ3NUY5ODNDNEY5QUUwMi8yRGtyRFpGYm1zSDAwanY1aEJseFFHLTJH
c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJEa3JEWkZibXNIMDBqdjVoQmx4UUctMkdzWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTZERTUvNzJDNUE5Q0M5NDMwMTFFQUJENzVGOTgzQzRGOUFFMDIvNDE2MjJGODJG
ODJFMTFGMEJDN0Q5OTI4Mzk2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnz6QDBABnz6cwDQYJKoZIhvcNAQELBQADggEBAAagsJR4
l9044EF0B+oFakk4iIK+x42ZGfYsFtFsDaXu/sNOOWpJ3neiJmXjZ4HrManWPg7G
oDo0GxmPSD+lrSRFSbBFKlGDi1VVnRv8wLPz0poI/nK5lt0mvZ6d4anmoPH404XC
rSgzh8nAnn7igz/ohUXWUn5xHHcpVoTkRjTOyroPjBaKAIBGlFOzeaLrIDgFUX8V
FGK5VMaPM7Zd8yjHZIGcUkSjuAO2L/X+WezCjM96XGmLYo8ASzmLiFLyVsB27OvS
PHwWqE3Tr4LOGJ8QaE9exNGjBvgidzn1coD5LHcS4/9oCN/zG9zAyJedZMr+8B1N
zBDJgHYLqwKsBbo=
-----END CERTIFICATE-----
Generated at Sun Jan 25 05:57:51 2026 by rpki-client