This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/F86B8216BFED11EABE972E5AC4F9AE02.roa
File: F86B8216BFED11EABE972E5AC4F9AE02.roa (raw, json)
Hash identifier: q9eGiiMMyPmfGmlzRMxllclvMU+KgTG+JmpKggoaZsY=
Subject key identifier: 21:49:FF:C2:DF:65:F1:06:74:85:14:A2:06:D3:A4:55:75:1D:B4:6B
Certificate issuer: /CN=A913FA1D/serialNumber=7C53BF6AF493D24C3B7C6BA216B382B0C7F7FC24
Certificate serial: 0910
Authority key identifier: 7C:53:BF:6A:F4:93:D2:4C:3B:7C:6B:A2:16:B3:82:B0:C7:F7:FC:24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/F86B8216BFED11EABE972E5AC4F9AE02.roa
Signing time: Mon 02 Feb 2026 20:17:20 +0000
ROA not before: Mon 02 Feb 2026 20:17:20 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 132827
IP address blocks: 103.28.168.0/24 maxlen: 24
103.28.169.0/24 maxlen: 24
103.28.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.crl
rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Feb 2026 20:17:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2320 (0x910)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913FA1D, serialNumber=7C53BF6AF493D24C3B7C6BA216B382B0C7F7FC24
Validity
Not Before: Feb 2 20:17:20 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69810650-f030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:88:44:dc:44:f4:a7:30:7a:8e:36:e9:f4:43:
30:3d:66:89:54:4c:b7:75:5c:94:b1:34:3e:1c:82:
9d:30:e6:f0:80:f6:54:29:6e:1e:7c:14:72:6a:da:
66:b8:f6:3f:42:68:47:79:77:86:af:f5:5c:e0:28:
de:c5:12:03:d1:c2:6d:2c:09:a2:62:ce:e4:09:7f:
c0:b4:cf:75:30:fa:8e:b4:46:59:16:56:b7:ca:3c:
2a:6b:e3:ed:ba:89:44:57:05:21:1d:38:2a:14:a0:
29:5c:30:11:bc:02:19:2b:89:af:62:91:ac:c8:e5:
26:6c:4a:56:1a:2f:50:08:79:ac:40:a3:57:17:23:
e5:85:de:a1:25:a9:02:82:94:e9:78:d4:45:8e:01:
cb:a2:79:ef:1a:83:ae:2c:87:71:b2:a4:e4:ee:44:
2e:65:43:a2:fe:c9:29:d7:18:1f:be:ef:50:16:5e:
3a:7c:d8:b1:d7:12:3c:f4:fb:28:22:b0:5b:1b:a6:
51:11:c8:75:93:eb:91:1c:79:fb:13:d5:53:57:bd:
0d:14:8e:48:e2:88:95:90:be:55:44:b4:b1:26:70:
11:42:df:68:7d:38:2e:23:12:5e:22:bf:d7:38:72:
f4:bf:0e:12:80:0d:5b:49:1b:60:98:fb:43:e1:2e:
92:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:49:FF:C2:DF:65:F1:06:74:85:14:A2:06:D3:A4:55:75:1D:B4:6B
X509v3 Authority Key Identifier:
keyid:7C:53:BF:6A:F4:93:D2:4C:3B:7C:6B:A2:16:B3:82:B0:C7:F7:FC:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/F86B8216BFED11EABE972E5AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.28.168.0-103.28.170.255
Signature Algorithm: sha256WithRSAEncryption
63:5e:71:15:21:57:3e:ab:07:fd:e8:ee:31:d6:35:20:d3:58:
92:99:28:2a:03:0e:35:eb:09:c1:58:a4:a7:89:4b:0f:5a:4f:
de:da:fb:60:63:3f:6c:3e:0f:3a:24:df:62:bf:64:b0:17:08:
b7:da:28:01:b7:3a:ce:03:e3:0f:38:17:97:25:16:de:de:eb:
2b:2d:6c:af:e0:73:7b:e4:07:1d:f6:fc:93:a5:b3:35:80:51:
1e:10:a3:a3:ca:0e:33:57:c5:16:ca:b8:24:8a:3f:e1:07:36:
42:94:8c:7f:c2:b3:1d:7a:76:78:6e:a6:7b:8e:83:39:bd:02:
ba:1f:40:2f:8d:e5:d7:82:f3:5e:32:dc:6c:3c:ce:6c:47:d2:
bf:df:30:9a:e2:58:89:5b:c6:90:58:26:72:df:f0:a1:93:46:
f8:80:ba:78:b8:cb:49:43:1b:5f:ee:9c:d6:62:9a:3f:f8:c6:
66:d8:5d:ea:e4:5f:24:b5:dd:0d:3c:15:c5:06:9b:29:aa:7d:
18:a3:17:c1:f2:bd:d7:f3:4c:f1:e7:90:37:ff:bb:46:15:70:
9a:c7:bc:9f:49:d9:7a:d0:0f:d1:00:dd:c5:39:1a:02:59:fc:
6a:7b:ea:46:5f:74:06:35:94:67:fd:9c:63:da:64:a0:a0:94:
ad:bc:a4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 00:34:26 2026 by rpki-client