This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/D2861480EF7111F083B369325B6F56BC.roa
File: D2861480EF7111F083B369325B6F56BC.roa (raw, json)
Hash identifier: B0Lue4k5q/P8x3NWtKnj+hjinQYT4sflDVirfe7rdZs=
Subject key identifier: 30:A4:D3:B1:8D:60:61:B8:8B:18:95:4A:5B:CA:DC:F9:C8:38:88:2D
Certificate issuer: /CN=A912DFFA/serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1
Certificate serial: 0334
Authority key identifier: F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/D2861480EF7111F083B369325B6F56BC.roa
Signing time: Mon 12 Jan 2026 04:47:39 +0000
ROA not before: Mon 12 Jan 2026 04:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152179
IP address blocks: 103.227.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl
rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 00:12:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 820 (0x334)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DFFA, serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1
Validity
Not Before: Jan 12 04:47:39 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69647ceb-ee20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:97:f9:1c:4c:b9:49:13:4c:98:a1:2a:ae:cf:
97:14:ce:91:32:7c:5d:fd:53:bb:45:96:d7:24:79:
35:92:c6:2f:4c:49:8e:a2:24:94:6e:17:26:14:9a:
89:bb:8c:4e:ef:05:3d:6b:ef:fb:8e:7e:eb:2b:93:
a8:31:34:72:ad:ab:4d:6e:f7:f5:1b:b2:cb:73:66:
6d:35:67:67:eb:55:85:5d:b6:6e:34:f8:47:5b:29:
6b:0f:5d:87:41:1c:06:6d:df:86:74:31:73:d3:68:
ca:7f:72:52:91:45:7d:c7:27:f2:74:6b:84:ef:e7:
98:d3:d3:b5:a4:12:fc:43:f2:1e:f9:3a:71:bb:e5:
a3:89:c2:f7:fc:d1:56:c6:50:d1:74:f1:66:90:af:
3b:51:5b:bb:4a:f4:94:91:e1:65:b7:14:d9:fb:e3:
ed:2d:1e:68:9c:74:0c:6b:f1:eb:da:cf:0f:32:78:
47:ae:a1:1d:23:00:d4:08:38:cf:11:64:bc:7c:67:
75:6f:03:5f:50:83:14:ec:f3:9b:f5:b8:3d:c2:05:
0a:9a:11:d0:fa:29:71:92:cc:27:9a:ec:d3:1f:07:
e7:7c:ad:12:5d:ff:e5:57:15:87:80:73:dd:1b:2a:
3a:ca:90:3d:81:13:21:55:55:91:99:d0:b5:1d:b9:
70:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A4:D3:B1:8D:60:61:B8:8B:18:95:4A:5B:CA:DC:F9:C8:38:88:2D
X509v3 Authority Key Identifier:
keyid:F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/D2861480EF7111F083B369325B6F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.227.210.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:69:2e:32:80:a8:f1:a8:6d:03:39:6e:31:3e:b1:01:e3:37:
25:23:6d:ad:4b:f1:f7:c4:18:70:82:f7:0e:7d:50:bd:bb:0c:
13:8d:41:cb:a5:5d:34:93:55:a8:a4:8b:f5:19:39:9b:6b:00:
bf:2f:54:32:48:be:97:06:70:81:79:e1:65:1f:06:7b:6b:4e:
4e:98:bb:42:67:14:36:67:f0:65:de:66:9d:50:78:80:8d:66:
7a:bd:cf:44:9d:18:9e:5e:19:72:ea:d5:f7:b2:f6:bb:f0:c5:
a7:37:07:fc:03:e6:a2:42:a9:64:61:d8:c8:43:d2:3d:f4:9a:
db:65:b8:6f:6f:5e:16:ec:a8:5d:34:9f:fe:ec:e2:b5:e4:41:
eb:4a:ec:a9:6c:24:33:43:ff:75:07:51:68:c2:c5:9f:10:de:
18:ea:35:b9:95:71:e4:53:c9:ec:84:cb:bd:26:32:27:4d:5f:
f9:40:d0:cb:be:d4:ad:8a:2f:a1:8e:33:fe:21:3b:14:c1:4b:
b6:3c:83:b6:0f:c6:0b:0b:06:99:98:f3:3b:3a:08:17:c2:70:
13:bb:69:40:d0:38:7c:6e:da:bb:d9:30:4d:1b:16:b5:15:dc:
3a:67:05:7f:81:d7:cf:5e:07:81:a7:02:58:e8:ac:8a:92:bb:
62:04:21:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 11:17:15 2026 by rpki-client