This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/6B4669CE7B7D11E99F99E776C4F9AE02.roa
File: 6B4669CE7B7D11E99F99E776C4F9AE02.roa (raw, json)
Hash identifier: t7nB9ro7h92mtkjR0HknIGgj+eQqNgaiFAEcl1VvPtA=
Subject key identifier: 93:73:67:7E:85:20:AE:16:A2:59:20:57:EF:DD:11:0E:75:6F:C2:17
Certificate issuer: /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial: 268D
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/6B4669CE7B7D11E99F99E776C4F9AE02.roa
Signing time: Wed 31 Dec 2025 18:14:38 +0000
ROA not before: Wed 31 Dec 2025 18:14:38 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 0
IP address blocks: 103.138.210.0/24 maxlen: 24
2001:df0:5580::/48 maxlen: 48
2001:df0:5580:400::/54 maxlen: 54
2001:df0:5580:c00::/54 maxlen: 54
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Jan 2026 17:16:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9869 (0x268d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B805, serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Validity
Not Before: Dec 31 18:14:38 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=6955680e-4b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f7:58:91:de:95:57:98:26:8f:a8:eb:9c:3a:
1f:a5:df:7e:fd:ed:e6:73:ca:b9:82:7f:65:44:f1:
02:d7:95:c1:83:ef:e3:9d:49:89:b9:77:38:38:5c:
29:21:c4:eb:58:6b:e3:b4:a5:20:b3:19:dc:e1:72:
26:89:a2:5e:42:49:0c:e8:fc:77:88:47:cd:97:86:
71:9a:8e:8c:d7:3e:2f:39:95:9a:02:72:cb:54:06:
7a:ae:8a:4d:18:69:23:db:8d:c3:69:9d:59:78:55:
b2:87:89:7a:cf:a3:7c:3d:90:93:a7:57:11:b0:3d:
55:0d:8c:62:a7:25:75:67:15:85:c0:0e:0f:65:81:
b7:17:cb:24:5b:2b:14:15:6e:b2:32:3c:52:a3:be:
cf:bc:db:1c:b2:75:14:6f:da:94:5d:3e:cb:9e:08:
03:4f:6e:0d:6b:f4:a7:0a:a6:ea:ad:69:77:70:b1:
fa:fc:40:25:09:0d:34:ce:86:40:42:e1:46:7b:fc:
ab:47:02:78:fb:14:17:24:9f:9b:58:0e:ae:5d:75:
73:f7:9d:d3:c7:75:94:48:44:1f:2a:83:0c:dd:31:
56:73:50:9e:95:6d:05:da:22:b9:81:39:aa:2c:17:
0d:32:41:ff:a5:bb:b9:9a:bd:45:c1:ad:e3:f0:59:
d1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:73:67:7E:85:20:AE:16:A2:59:20:57:EF:DD:11:0E:75:6F:C2:17
X509v3 Authority Key Identifier:
keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/6B4669CE7B7D11E99F99E776C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.210.0/24
IPv6:
2001:df0:5580::/48
Signature Algorithm: sha256WithRSAEncryption
12:0c:13:8a:ec:dd:84:5d:4b:73:f2:0c:b7:c7:44:12:e4:80:
40:4f:7b:9d:cc:ac:23:8e:15:58:fa:b2:04:31:ef:92:4b:d7:
a6:e2:4c:eb:68:08:10:48:78:4a:20:97:d0:00:fe:45:af:d2:
8a:d2:01:d6:cf:7b:77:67:4c:73:d1:87:75:ff:4a:40:2e:f6:
99:70:22:03:75:e0:52:ff:46:df:31:04:1a:9d:b2:0e:99:f5:
a6:a6:9a:2f:28:45:3e:32:47:2c:8f:cb:5b:76:96:be:31:15:
c9:47:8e:a3:75:4f:6c:da:24:0c:8a:66:38:24:83:b7:78:c9:
0a:aa:64:a5:e9:eb:86:1c:f7:a6:ba:84:ea:11:0f:b5:63:c5:
ce:67:36:d6:71:85:20:7f:49:69:c7:f5:91:e7:cf:15:1e:8b:
c5:7f:c3:83:8f:f7:fd:dd:b5:9a:18:21:4e:67:af:34:1f:9a:
59:f3:57:5f:76:a5:d1:5f:54:4f:41:f4:2c:e5:fc:4a:30:a9:
4c:bc:24:22:13:df:2a:e6:58:38:3b:f6:77:dd:50:9a:a7:9b:
11:6c:2a:26:62:f7:ec:0e:f6:bc:da:a9:91:bd:a0:f8:c7:f4:
80:f8:f8:86:c7:05:b4:58:a9:b9:b5:f5:68:ae:9c:e0:c9:50:
16:f8:e2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 01:03:01 2026 by rpki-client