This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/A663285A59DE11EE85CFCB12C4F9AE02.roa
File: A663285A59DE11EE85CFCB12C4F9AE02.roa (raw, json)
Hash identifier: VQ7b14kx8FaY1BbDkhqhmQ0+ADyuJAhOUCeo43SW+58=
Subject key identifier: 7D:19:1A:39:DB:BB:6D:04:80:E8:4D:B4:59:3F:67:D7:97:77:82:59
Certificate issuer: /CN=A9197A8F/serialNumber=6D960688B6DE7141A721898E9E073E16778FEF35
Certificate serial: 01B9
Authority key identifier: 6D:96:06:88:B6:DE:71:41:A7:21:89:8E:9E:07:3E:16:77:8F:EF:35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZYGiLbecUGnIYmOngc-FneP7zU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/A663285A59DE11EE85CFCB12C4F9AE02.roa
Signing time: Thu 15 Jan 2026 03:22:11 +0000
ROA not before: Thu 15 Jan 2026 03:22:11 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 132170
IP address blocks: 103.59.218.0/23 maxlen: 23
2001:df1:bb40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.crl
rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZYGiLbecUGnIYmOngc-FneP7zU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 02:24:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 441 (0x1b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197A8F, serialNumber=6D960688B6DE7141A721898E9E073E16778FEF35
Validity
Not Before: Jan 15 03:22:11 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69685d63-1132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:98:77:3b:2c:61:03:23:08:1a:6b:c2:61:d8:
b3:24:e5:65:ed:aa:94:7f:62:46:f7:a4:e0:51:40:
9b:44:75:f0:34:39:62:c4:59:63:11:20:2e:a9:26:
4c:82:55:7c:3b:ce:9f:02:88:cb:2c:ae:3b:c9:61:
21:bb:bc:e5:ea:5f:43:de:13:7d:0d:7d:52:37:55:
eb:b2:1c:76:ca:e9:eb:71:5d:a3:8a:3e:ea:bc:ac:
a5:c9:35:02:00:47:87:c9:a9:04:a4:93:38:9b:32:
d9:16:f0:c3:b3:73:26:ff:5b:43:c9:55:43:57:d7:
e8:2f:b3:72:38:76:67:40:66:a4:31:0a:d7:ee:4e:
09:03:40:a5:66:a7:bc:13:41:87:56:a0:82:c5:7f:
da:d5:ea:ec:1f:53:8d:58:b5:e6:89:b1:37:d1:a2:
f5:ad:a5:4b:97:bc:04:23:22:7c:99:9e:49:12:7d:
85:27:6c:de:75:ab:ef:81:6e:99:2e:53:da:d4:59:
b8:60:24:b4:a0:de:6c:37:98:ae:ae:52:f0:c1:82:
7b:13:ed:f4:0a:0a:17:0f:02:d4:a7:35:8f:75:14:
6c:8f:1b:87:0b:4c:a0:ef:b6:f3:cf:e1:9c:b6:47:
78:3c:46:de:ef:bb:0f:0b:91:81:8a:5f:32:dd:74:
e7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:19:1A:39:DB:BB:6D:04:80:E8:4D:B4:59:3F:67:D7:97:77:82:59
X509v3 Authority Key Identifier:
keyid:6D:96:06:88:B6:DE:71:41:A7:21:89:8E:9E:07:3E:16:77:8F:EF:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZYGiLbecUGnIYmOngc-FneP7zU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/A663285A59DE11EE85CFCB12C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.59.218.0/23
IPv6:
2001:df1:bb40::/48
Signature Algorithm: sha256WithRSAEncryption
62:04:a1:a1:80:ca:66:08:f0:33:e0:ac:d7:81:b9:50:cf:cd:
fe:ac:9f:1f:1c:e7:c5:72:b7:d3:e6:f8:32:b6:2e:26:03:d5:
1e:ee:dc:b5:be:38:57:28:a0:7f:ac:d6:32:3d:a7:1d:56:c8:
1b:9d:8a:17:53:28:ce:11:dd:50:10:5c:8b:fa:28:ad:1f:ff:
8b:1b:72:3e:7a:00:55:d5:c5:07:f7:20:8c:ca:18:c7:f4:d3:
4c:03:b1:93:ff:bc:73:94:ad:b7:15:de:6d:64:a5:e9:84:0b:
dd:3b:6b:46:fc:73:25:26:45:65:13:03:36:53:07:b7:7f:a6:
57:ba:8c:f1:76:5c:b8:5c:9b:4d:cb:41:3b:e1:e9:c7:e1:eb:
91:0c:f9:e0:f6:0b:3f:39:fa:6f:de:fa:2d:2a:2d:bc:6c:db:
3e:82:4b:f3:58:68:8e:b4:b3:b4:c7:49:68:f1:34:36:8a:ff:
55:4e:a2:4d:29:ee:c0:8c:c1:1b:d9:3e:0b:3b:37:dc:a4:6a:
e8:b7:70:67:67:a0:0e:c1:2a:ef:83:c4:63:9f:4c:1e:b1:05:
01:c0:1f:af:f9:6b:a0:6a:31:a5:ee:e2:b1:d1:a6:a2:da:8e:
2b:57:be:78:95:b1:3f:4c:c1:cb:d0:62:dd:5d:6e:6e:7c:93:
5d:6a:5c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:11:26 2026 by rpki-client