This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/7E8114F414E611EB82C98471C4F9AE02.roa
File: 7E8114F414E611EB82C98471C4F9AE02.roa (raw, json)
Hash identifier: 5irZrEFk8FHbNW4pjJl+pAv8i1MZscE1joryry7BH0g=
Subject key identifier: C1:A4:7C:A9:CF:01:9E:78:E5:53:57:F8:9A:45:02:B6:8E:13:2B:47
Certificate issuer: /CN=A9122D89/serialNumber=3CFE6F3EB1D892715E4136E9BA856B98F67147B0
Certificate serial: 0808
Authority key identifier: 3C:FE:6F:3E:B1:D8:92:71:5E:41:36:E9:BA:85:6B:98:F6:71:47:B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/7E8114F414E611EB82C98471C4F9AE02.roa
Signing time: Mon 22 Dec 2025 21:17:02 +0000
ROA not before: Mon 22 Dec 2025 21:17:02 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 55720
IP address blocks: 45.116.172.0/24 maxlen: 24
45.116.173.0/24 maxlen: 24
45.116.174.0/24 maxlen: 24
45.116.175.0/24 maxlen: 24
103.244.0.0/24 maxlen: 24
103.244.1.0/24 maxlen: 24
103.244.2.0/24 maxlen: 24
103.244.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.crl
rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 23 Jan 2026 20:23:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2056 (0x808)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122D89, serialNumber=3CFE6F3EB1D892715E4136E9BA856B98F67147B0
Validity
Not Before: Dec 22 21:17:02 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6949b54e-5efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1c:9e:a7:b3:c5:f1:c8:1c:57:54:1a:2e:64:
3f:5b:75:10:49:a6:b5:ab:2f:37:16:55:c8:77:ea:
f1:b3:45:b2:57:ea:7b:9e:79:89:2b:04:78:7a:12:
f3:d4:27:78:59:c1:65:45:86:0d:4b:07:1c:41:f2:
02:1f:e0:bb:6c:b2:36:cf:48:97:f6:d8:87:68:15:
dc:3b:63:dc:18:de:e6:dd:99:6f:37:04:8b:f4:19:
a7:8e:2e:6b:05:34:15:be:37:3d:d0:b7:11:27:34:
90:be:9b:d8:75:66:87:e9:80:4b:c4:0a:4f:16:c9:
ec:61:97:0c:fc:e6:06:c6:2d:e4:03:b0:23:dc:7f:
00:93:4c:a2:e5:41:7e:dc:91:92:23:f5:58:ed:3d:
86:8e:e7:fd:51:07:83:9e:d4:70:bd:ad:3d:0d:cf:
a9:1f:14:19:d5:ba:b8:2b:40:a8:8c:76:9a:bd:2f:
e8:8a:83:3c:04:26:f0:ce:09:05:ae:5d:7b:d6:eb:
e4:82:50:24:9c:20:17:ad:d6:6c:3b:96:e2:a6:60:
13:b7:57:cd:8f:a3:d7:90:42:fa:2d:52:36:db:d3:
70:10:2d:b7:f1:10:32:2a:5e:1f:a7:70:49:b4:7f:
07:63:97:d3:94:17:ab:a7:5c:19:29:0a:e1:42:6e:
59:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A4:7C:A9:CF:01:9E:78:E5:53:57:F8:9A:45:02:B6:8E:13:2B:47
X509v3 Authority Key Identifier:
keyid:3C:FE:6F:3E:B1:D8:92:71:5E:41:36:E9:BA:85:6B:98:F6:71:47:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/7E8114F414E611EB82C98471C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.116.172.0/22
103.244.0.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:30:b5:0a:92:6a:9c:19:dd:8a:48:f6:08:63:a0:bd:5a:cc:
db:aa:78:08:ad:3a:13:e9:e6:77:16:45:dc:5f:96:15:69:12:
16:d6:65:26:31:54:d7:6d:15:11:f8:a9:68:83:e5:eb:05:9d:
46:ae:1e:95:3a:75:39:34:94:e5:7a:99:f9:fc:78:2b:8f:14:
72:37:39:02:97:96:96:35:92:ec:f3:04:dd:fb:17:fd:d1:78:
fe:54:2e:89:8a:34:56:a6:83:c0:87:4d:f1:96:03:3b:09:ae:
cf:28:ec:d7:61:04:1b:71:ef:b8:17:09:9d:47:15:f1:d4:84:
2e:a3:0f:be:10:f1:81:bd:90:eb:3f:4e:e6:b8:9a:ae:48:dc:
9c:17:f6:c8:cd:12:40:bb:b2:62:b5:fa:4e:2d:21:8f:24:d2:
0e:f7:39:11:0c:31:c9:e3:d0:81:17:ab:6e:c6:12:ff:07:a5:
0d:cd:8e:ac:83:aa:01:f2:8e:2e:47:14:96:c4:15:ac:6a:58:
9d:4a:47:77:22:88:d5:82:d1:75:39:1a:e1:ac:e4:17:5a:8e:
5f:58:03:01:cc:64:d0:f6:33:cf:7a:b3:ad:c0:92:f7:9d:f9:
84:aa:b1:7d:44:3c:e6:4a:8d:0f:51:91:85:dc:32:06:f2:1b:
bb:70:b7:2f
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICCAgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
MjJEODkxMTAvBgNVBAUTKDNDRkU2RjNFQjFEODkyNzE1RTQxMzZFOUJBODU2Qjk4
RjY3MTQ3QjAwHhcNMjUxMjIyMjExNzAyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTQ5YjU0ZS01ZWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtRyep7PF8cgcV1QaLmQ/W3UQSaa1qy83FlXId+rxs0WyV+p7nnmJKwR4ehLz
1Cd4WcFlRYYNSwccQfICH+C7bLI2z0iX9tiHaBXcO2PcGN7m3ZlvNwSL9Bmnji5r
BTQVvjc90LcRJzSQvpvYdWaH6YBLxApPFsnsYZcM/OYGxi3kA7Aj3H8Ak0yi5UF+
3JGSI/VY7T2Gjuf9UQeDntRwva09Dc+pHxQZ1bq4K0CojHaavS/oioM8BCbwzgkF
rl171uvkglAknCAXrdZsO5bipmATt1fNj6PXkEL6LVI229NwEC238RAyKl4fp3BJ
tH8HY5fTlBerp1wZKQrhQm5Z/QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFMGkfKnP
AZ545VNX+JpFAraOEytHMB8GA1UdIwQYMBaAFDz+bz6x2JJxXkE26bqFa5j2cUew
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkQ4OS9DNkE0QTVFMjA4
NDQxMUVCOUM3MzY1MTRDNEY5QUUwMi9QUDV2UHJIWWtuRmVRVGJwdW9Wcm1QWnhS
N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BQNXZQckhZa25GZVFUYnB1b1ZybVBaeFI3QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjJEODkvQzZBNEE1RTIwODQ0MTFFQjlDNzM2NTE0QzRGOUFFMDIvN0U4MTE0RjQx
NEU2MTFFQjgyQzk4NDcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAItdKwDBAJn9AAwDQYJKoZIhvcNAQELBQADggEBAH8wtQqS
apwZ3YpI9ghjoL1azNuqeAitOhPp5ncWRdxflhVpEhbWZSYxVNdtFRH4qWiD5esF
nUauHpU6dTk0lOV6mfn8eCuPFHI3OQKXlpY1kuzzBN37F/3ReP5ULomKNFamg8CH
TfGWAzsJrs8o7NdhBBtx77gXCZ1HFfHUhC6jD74Q8YG9kOs/Tua4mq5I3JwX9sjN
EkC7smK1+k4tIY8k0g73OREMMcnj0IEXq27GEv8HpQ3NjqyDqgHyji5HFJbEFaxq
WJ1KR3ciiNWC0XU5GuGs5Bdajl9YAwHMZND2M896s63Akved+YSqsX1EPOZKjQ9R
kYXcMgbyG7twty8=
-----END CERTIFICATE-----
Generated at Sun Jan 18 04:13:01 2026 by rpki-client