This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/AA54657A880E11ED9BE52B17C4F9AE02.roa
File: AA54657A880E11ED9BE52B17C4F9AE02.roa (raw, json)
Hash identifier: BhVGdoTEOymIA8YwYSYXIusFUR9i4u6WTAaCMTaRZV8=
Subject key identifier: E8:FC:84:87:3C:DB:BF:1B:BB:B8:87:E2:0D:81:46:B7:92:26:28:0E
Certificate issuer: /CN=A919BEDB/serialNumber=1EDE5C6E008028BCD2AE33651381BDE1FD07C5D4
Certificate serial: 1BD2
Authority key identifier: 1E:DE:5C:6E:00:80:28:BC:D2:AE:33:65:13:81:BD:E1:FD:07:C5:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/AA54657A880E11ED9BE52B17C4F9AE02.roa
Signing time: Thu 08 Jan 2026 16:13:36 +0000
ROA not before: Thu 08 Jan 2026 16:13:36 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 47582
IP address blocks: 103.82.128.0/22 maxlen: 24
125.62.64.0/22 maxlen: 24
2400:83c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.crl
rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:03:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7122 (0x1bd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919BEDB, serialNumber=1EDE5C6E008028BCD2AE33651381BDE1FD07C5D4
Validity
Not Before: Jan 8 16:13:36 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=695fd7b0-ef9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:30:fd:be:cb:64:a3:4e:4f:1a:a7:f8:9e:1c:
3e:c5:56:5c:7b:cf:f3:db:c0:9b:8a:6a:c2:82:73:
ed:c5:64:ea:aa:8e:8f:57:f1:88:bf:74:49:6d:69:
27:0b:b6:5f:c5:ac:0a:a3:9d:1c:8d:d8:93:f3:7d:
8d:e2:0e:c8:69:33:6a:30:17:90:23:f5:52:55:f2:
d7:a7:7f:ad:09:2a:ba:66:9c:da:8f:04:f9:8a:8d:
45:7e:c6:07:a3:03:2b:dd:4c:9e:dd:3f:36:b2:c0:
48:06:1d:ef:aa:7e:16:5f:85:5d:35:46:2d:d8:1a:
30:fa:fa:fd:1e:37:eb:98:3e:69:a7:32:77:e0:51:
9d:f2:c8:a2:a8:18:83:01:c8:25:03:d2:da:53:5f:
62:4a:39:e5:56:3a:26:67:db:ec:16:4d:87:6d:88:
3e:9d:c6:71:4d:63:b0:fd:bd:b3:4a:e8:6b:64:66:
a8:8c:3f:80:70:7a:f2:70:85:29:7f:0e:9f:96:82:
9d:b7:fb:6d:d3:81:9d:06:29:13:d2:49:d2:fb:7d:
de:72:bb:87:0f:df:5f:28:2e:d4:2d:34:f8:69:66:
6b:f2:9f:f8:1e:1c:a6:15:00:8a:ac:45:dc:ca:57:
c8:16:b3:a0:ad:4f:17:80:16:6e:41:00:ca:fc:63:
9f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:FC:84:87:3C:DB:BF:1B:BB:B8:87:E2:0D:81:46:B7:92:26:28:0E
X509v3 Authority Key Identifier:
keyid:1E:DE:5C:6E:00:80:28:BC:D2:AE:33:65:13:81:BD:E1:FD:07:C5:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/AA54657A880E11ED9BE52B17C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.82.128.0/22
125.62.64.0/22
IPv6:
2400:83c0::/32
Signature Algorithm: sha256WithRSAEncryption
a6:3b:00:86:55:06:85:89:05:3e:11:35:eb:51:f9:bf:87:e2:
0f:97:ae:fc:8e:75:f6:84:d3:a4:cf:e9:1a:f7:7b:2c:3c:28:
a0:d4:9b:87:ca:d9:68:cc:78:d8:7e:a0:b6:96:a9:aa:59:9e:
56:08:fc:e0:c9:fd:97:79:f3:19:12:3e:54:66:fa:74:01:d6:
a2:6e:31:f9:97:bd:6a:ee:d7:e1:9b:01:6f:1b:6f:f6:8a:6c:
49:3b:76:96:26:bc:88:a6:42:b1:d1:79:14:0e:71:f0:9a:08:
dd:c0:3a:8a:9f:e2:76:f4:75:e6:9e:3c:5c:44:93:50:0c:75:
b7:c5:cd:c8:12:22:14:07:fb:8f:37:e8:b2:07:2c:4b:1c:86:
71:35:0e:78:76:1f:7d:32:3d:85:c9:75:70:82:72:7c:58:75:
9b:3b:1d:ab:a5:17:84:0d:a7:21:16:c7:0b:ed:14:06:09:da:
69:52:a9:c8:51:d5:e0:4c:aa:01:8f:9f:c6:e0:aa:b8:4a:6d:
99:9b:ef:97:65:f2:6d:e0:dd:31:5c:6d:1a:5f:ce:f9:2d:20:
cf:15:25:cd:ac:5d:3f:af:dd:95:6f:9f:64:2f:be:2c:46:42:
b0:4d:98:c1:0a:11:f9:04:46:88:7d:e2:a7:79:f0:50:38:b0:
96:e3:02:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:00:52 2026 by rpki-client