This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/26C5F4148FC111EF84928A68C4F9AE02.roa
File: 26C5F4148FC111EF84928A68C4F9AE02.roa (raw, json)
Hash identifier: oAqC82kEWq2BnUC7wyI1OnAbQ4JABjG40uWiB/vTfHk=
Subject key identifier: F2:B1:F4:FD:69:E9:C9:14:8D:0E:1D:55:88:58:45:8B:1E:B2:7B:80
Certificate issuer: /CN=A9116B5E/serialNumber=FA356029FC772A5B43269C316AD685C4BB5A656D
Certificate serial: 0687
Authority key identifier: FA:35:60:29:FC:77:2A:5B:43:26:9C:31:6A:D6:85:C4:BB:5A:65:6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/26C5F4148FC111EF84928A68C4F9AE02.roa
Signing time: Fri 12 Dec 2025 21:58:36 +0000
ROA not before: Fri 12 Dec 2025 21:58:36 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 141434
IP address blocks: 103.159.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.crl
rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 21:46:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1671 (0x687)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116B5E, serialNumber=FA356029FC772A5B43269C316AD685C4BB5A656D
Validity
Not Before: Dec 12 21:58:36 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=693c900c-b922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4c:e3:ce:5f:97:7d:92:6f:19:53:dc:af:2a:
eb:33:0a:06:be:ad:52:6c:4f:ee:ef:be:00:23:37:
81:a8:61:9c:25:33:6c:76:39:d7:32:47:56:3d:43:
88:b8:30:cc:48:1f:62:2a:fa:9b:60:0b:21:f0:9f:
66:1e:33:74:32:9a:fc:0d:f0:45:ac:b2:32:88:c0:
64:c5:c6:9d:fa:97:42:b5:01:d1:5e:3b:73:74:8f:
e5:4a:e3:b2:5a:d5:59:8e:1b:ab:f7:f9:a9:9a:1d:
f7:5d:a7:7c:33:5b:eb:d1:a4:ff:da:0c:61:b1:97:
20:9f:b3:bb:92:96:eb:e6:8d:6e:ff:07:94:c2:74:
3e:e6:ac:00:ac:ae:ce:a6:d3:73:31:40:8e:c3:f0:
ca:fd:24:8b:a4:4e:cc:6b:27:89:9f:f3:46:39:47:
12:0b:b0:32:a8:d6:08:ea:ea:94:df:a5:a0:d7:41:
8f:97:fd:d8:58:ae:86:ec:99:40:2a:05:b5:78:cf:
d8:67:7e:80:81:51:7a:12:17:4c:49:df:8b:cd:d7:
bf:8d:a2:7e:19:d5:b7:dc:23:c2:fe:0b:24:f7:6b:
b0:66:58:56:f7:8d:25:85:24:78:a9:31:d9:c3:30:
f4:d6:e9:ad:a9:88:60:20:bc:19:2a:9e:b3:64:fa:
5d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B1:F4:FD:69:E9:C9:14:8D:0E:1D:55:88:58:45:8B:1E:B2:7B:80
X509v3 Authority Key Identifier:
keyid:FA:35:60:29:FC:77:2A:5B:43:26:9C:31:6A:D6:85:C4:BB:5A:65:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/26C5F4148FC111EF84928A68C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.159.4.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:de:2d:ea:30:d5:9e:a3:a2:70:31:51:43:90:59:ae:1d:8f:
83:75:b0:a3:d1:83:38:fb:5e:70:e3:52:84:12:ce:c2:d7:3f:
a1:0c:67:ad:3b:3b:3c:ab:b8:dc:f7:96:48:4e:c0:12:df:27:
ae:20:d8:46:71:5f:16:1b:b9:09:2d:db:fc:e5:9c:c7:89:43:
01:78:76:f7:e1:81:28:30:ee:14:f3:63:78:56:16:bd:4a:8a:
72:2d:a1:63:94:ed:fa:12:69:6f:91:4b:9b:a5:e3:21:b8:2b:
2a:f2:30:e1:44:d5:08:a0:6a:8b:f3:dc:0e:21:6f:2e:d0:a6:
96:32:80:e6:f9:22:c3:dd:0c:01:3d:79:b4:aa:c8:4e:6c:7a:
ba:12:5a:7a:84:de:b4:86:3b:db:db:87:8f:53:3b:13:01:22:
00:f8:bf:3c:94:48:16:3c:47:f8:71:46:eb:87:32:2e:44:9e:
ec:51:9a:12:a6:85:fa:bd:be:3d:bc:60:bf:db:01:3c:07:e9:
8e:72:97:f3:8a:95:3f:45:3a:c1:6c:4d:00:d1:c8:76:96:42:
22:77:24:23:60:b0:6b:47:da:44:09:b6:2b:8e:b1:1b:b0:18:
39:f0:d0:39:85:dd:4b:8c:87:64:7d:71:07:c7:d3:2b:eb:0f:
e9:9e:25:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 22:33:14 2025 by rpki-client