This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/DA0A5C9280BE11EB88ED2418C4F9AE02.roa
File: DA0A5C9280BE11EB88ED2418C4F9AE02.roa (raw, json)
Hash identifier: jBSnSKDyQCtVWfsyGtcjnh9YtjAt7C7TNdPa3/Rw/xo=
Subject key identifier: F9:91:A0:0F:DD:FB:35:49:B4:48:07:0F:6C:66:C3:07:FD:2A:E0:DE
Certificate issuer: /CN=A9128918/serialNumber=2503775FAC3A6F47234CB832A637FC1082A47C44
Certificate serial: 0D5A
Authority key identifier: 25:03:77:5F:AC:3A:6F:47:23:4C:B8:32:A6:37:FC:10:82:A4:7C:44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQN3X6w6b0cjTLgypjf8EIKkfEQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/DA0A5C9280BE11EB88ED2418C4F9AE02.roa
Signing time: Tue 10 Feb 2026 12:31:36 +0000
ROA not before: Tue 10 Feb 2026 12:31:36 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 134599
IP address blocks: 103.121.36.0/24 maxlen: 24
103.121.37.0/24 maxlen: 24
103.121.38.0/24 maxlen: 24
103.121.39.0/24 maxlen: 24
2404:5fc0::/36 maxlen: 36
2404:5fc0:1000::/36 maxlen: 36
2404:5fc0:2000::/36 maxlen: 36
2404:5fc0:3000::/36 maxlen: 36
2404:5fc0:4000::/36 maxlen: 36
2404:5fc0:5000::/36 maxlen: 36
2404:5fc0:6000::/36 maxlen: 36
2404:5fc0:7000::/36 maxlen: 36
2404:5fc0:8000::/36 maxlen: 36
2404:5fc0:9000::/36 maxlen: 36
2404:5fc0:a000::/36 maxlen: 36
2404:5fc0:b000::/36 maxlen: 36
2404:5fc0:c000::/36 maxlen: 36
2404:5fc0:d000::/36 maxlen: 36
2404:5fc0:e000::/36 maxlen: 36
2404:5fc0:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.crl
rsync://rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQN3X6w6b0cjTLgypjf8EIKkfEQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 17 Feb 2026 17:50:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3418 (0xd5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9128918, serialNumber=2503775FAC3A6F47234CB832A637FC1082A47C44
Validity
Not Before: Feb 10 12:31:36 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=698b2528-ed15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:aa:03:4b:b1:f9:26:1b:08:48:1c:bb:80:ff:
d6:a8:52:52:e6:1e:31:1b:dc:6c:cd:91:dd:44:13:
7e:80:b7:0f:ce:a4:f3:95:cf:0f:f8:ff:5b:dc:a2:
c7:0a:3c:bc:d4:a5:cd:be:10:9f:52:ce:ad:0f:49:
0d:d9:09:e1:1a:87:7e:be:9b:16:b7:53:4f:cd:eb:
83:99:ad:94:12:6c:e7:0d:87:00:1f:d8:50:62:b5:
e6:89:de:51:e3:eb:61:b3:8b:6a:3f:9e:f7:31:1b:
da:40:4e:3a:b1:4f:cc:61:7a:bd:56:10:5c:9c:1d:
60:9d:68:30:68:ac:f9:64:e2:70:e8:42:f4:ca:72:
2d:55:dd:5d:e3:6e:23:70:0c:7b:1c:6b:16:c2:8a:
07:41:b0:9a:3d:81:5c:d5:87:e7:98:e1:88:0b:ce:
fb:39:4e:e0:4e:d9:36:d6:2d:b0:c0:ee:d3:70:2d:
21:16:98:78:3d:f5:82:89:dd:62:fb:4d:be:ac:bb:
0d:71:5e:25:c0:d6:99:b3:d7:30:68:18:ac:6b:b5:
df:6c:23:06:d7:d3:b3:dc:53:82:e9:d2:b4:85:31:
35:17:aa:93:bb:07:18:46:de:a8:97:97:57:33:f4:
c6:a6:c4:1f:fb:ad:e4:0c:fb:ab:21:d4:a1:38:17:
19:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:91:A0:0F:DD:FB:35:49:B4:48:07:0F:6C:66:C3:07:FD:2A:E0:DE
X509v3 Authority Key Identifier:
keyid:25:03:77:5F:AC:3A:6F:47:23:4C:B8:32:A6:37:FC:10:82:A4:7C:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQN3X6w6b0cjTLgypjf8EIKkfEQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/DA0A5C9280BE11EB88ED2418C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.121.36.0/22
IPv6:
2404:5fc0::/32
Signature Algorithm: sha256WithRSAEncryption
92:85:ca:5f:a7:54:91:de:95:eb:8d:9e:c0:2b:07:36:e2:6e:
fc:0d:31:33:9f:75:cd:32:50:87:2b:f8:c4:08:50:6f:d0:31:
16:3e:e0:34:12:d2:da:d6:ec:ba:b2:a5:20:ae:41:c9:0e:8c:
88:e8:00:14:9f:c2:16:ec:46:6d:70:16:b9:ce:b6:cf:d9:5b:
2f:f6:b2:f3:3d:bb:e2:23:ac:79:44:a9:d3:17:f8:84:41:3a:
1e:04:e2:6d:61:a2:b6:05:fb:d7:94:e0:b1:c7:10:be:86:2c:
61:dd:94:7d:2f:c4:a4:b0:8d:4e:c6:40:85:d2:21:dc:d8:ad:
17:e2:aa:4b:b5:65:26:a0:9e:7e:54:97:dc:d4:16:6f:99:c1:
f6:72:c3:76:52:ab:6d:97:ed:9e:ef:5b:ea:d7:0c:b5:2b:d2:
d0:b5:65:01:b7:44:e7:7a:5d:35:36:c6:35:7f:c2:ee:a4:2b:
85:01:1e:1a:46:a5:1c:c3:6a:8e:00:18:e2:5f:24:19:fc:4d:
30:84:10:93:02:49:cc:8e:4e:9b:53:24:ab:1c:ec:6e:dc:a0:
9e:6c:c7:a4:82:a1:8b:da:95:65:cc:e6:33:65:69:c9:45:4d:
29:4f:a1:a0:d4:fe:25:fb:f2:7b:dc:9d:80:4f:3c:ba:06:9d:
7d:87:36:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 11 05:27:16 2026 by rpki-client