This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/DB4932CEC2B611EB9BF18A81C4F9AE02.roa
File: DB4932CEC2B611EB9BF18A81C4F9AE02.roa (raw, json)
Hash identifier: OGDR7WY+8jRV/CmpiqK1tUUAkb5JwuvFd2VhraMYCs0=
Subject key identifier: 90:21:9E:F6:56:3E:82:2B:2F:03:78:FE:E0:E9:EC:D4:BB:B0:A3:E6
Certificate issuer: /CN=A9133E16/serialNumber=31C4F9064F89E56B194EB88492E9021C152DEB3E
Certificate serial: 097F
Authority key identifier: 31:C4:F9:06:4F:89:E5:6B:19:4E:B8:84:92:E9:02:1C:15:2D:EB:3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/DB4932CEC2B611EB9BF18A81C4F9AE02.roa
Signing time: Wed 28 Jan 2026 20:17:03 +0000
ROA not before: Wed 28 Jan 2026 20:17:03 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 19905
IP address blocks: 42.200.3.0/24 maxlen: 24
42.200.23.0/24 maxlen: 24
42.200.54.0/24 maxlen: 24
202.82.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.crl
rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Feb 2026 19:47:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2431 (0x97f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133E16, serialNumber=31C4F9064F89E56B194EB88492E9021C152DEB3E
Validity
Not Before: Jan 28 20:17:03 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=697a6ebe-a2db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:40:fd:46:d9:0f:a8:7d:5d:e3:62:be:62:d5:
24:e2:f2:8d:f2:b1:bb:10:55:03:bd:9e:f0:f7:d6:
78:53:81:fe:5e:4e:15:93:db:cf:15:ef:4f:c4:ac:
49:87:2c:dc:15:ea:f1:39:60:a6:19:05:a2:d2:63:
23:64:76:0e:99:01:78:ec:5d:e5:4b:fd:02:a7:fc:
45:e1:63:a8:07:a2:87:6f:be:c2:ad:79:15:cc:06:
06:5f:5c:5d:1a:e4:63:4c:d1:34:b9:6b:aa:1a:b8:
86:a5:5a:6d:25:7b:b2:c1:75:24:f7:bb:e6:9d:9f:
08:37:d2:b0:90:54:0d:9c:36:bc:88:2a:dc:c1:e7:
b8:3d:b0:1f:56:bf:ac:70:9d:ce:51:5d:70:46:bf:
d0:a6:c7:31:5d:3b:5b:05:1b:1c:d3:ac:69:d7:8e:
92:78:86:e7:7f:dd:c7:be:fb:b7:6c:81:8d:37:fa:
26:85:8a:58:b1:62:74:e3:9a:e4:21:be:4d:a1:1b:
5b:cf:d3:f3:cb:0c:42:4f:54:80:4a:0d:ef:7e:b3:
b8:6d:fb:f0:08:2e:ba:35:4b:c2:13:7e:38:10:85:
c7:e4:bd:f3:4d:b8:e0:61:9d:b9:08:2f:c1:c0:a9:
48:4d:a4:13:43:bb:70:1d:7c:eb:b0:56:6d:4a:9a:
7d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:21:9E:F6:56:3E:82:2B:2F:03:78:FE:E0:E9:EC:D4:BB:B0:A3:E6
X509v3 Authority Key Identifier:
keyid:31:C4:F9:06:4F:89:E5:6B:19:4E:B8:84:92:E9:02:1C:15:2D:EB:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/DB4932CEC2B611EB9BF18A81C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
42.200.3.0/24
42.200.23.0/24
42.200.54.0/24
202.82.250.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:b2:e7:6b:f3:e1:3b:74:c9:68:c2:63:a0:84:8f:02:8f:cc:
5f:7b:f1:30:60:44:6e:59:73:e1:95:dd:d3:70:64:cd:e2:9e:
f6:09:35:72:00:e2:f0:9e:d6:af:1d:42:9b:c6:68:3d:46:e2:
16:81:d4:13:47:53:3f:5b:86:b1:f6:77:52:ce:70:f8:6e:b4:
f0:18:6d:ad:a3:fc:aa:b4:ee:86:2a:65:7c:d6:ff:82:b9:c0:
5e:21:a4:d7:fd:8e:dc:78:be:e2:5d:c4:6b:79:0a:63:56:3b:
f9:57:25:22:f4:25:94:72:78:f1:e4:55:aa:aa:1d:0d:f3:5f:
11:85:18:e7:ac:26:28:8d:d5:1f:f8:97:5c:7e:a7:10:cc:29:
a7:95:98:a5:b4:05:81:f7:e4:cc:74:12:f8:f1:95:8f:fb:a9:
b3:a6:62:9a:28:bf:bb:d6:2a:9f:32:78:c4:10:df:c5:62:a2:
a4:40:e2:65:0e:cd:c2:0e:9e:a8:1c:2c:b5:29:4d:66:86:2e:
26:09:d0:8c:25:27:54:d9:77:3c:2c:c6:af:6f:41:9b:34:c8:
f9:62:f3:1b:9e:49:78:99:23:a0:5c:92:0b:6e:f5:8b:f4:10:
e1:03:8e:c0:98:a1:49:20:78:b7:65:d5:65:ac:91:da:d4:f9:
bc:69:7a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 05:50:36 2026 by rpki-client