This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9159BAE/F2EE257C000211F1853A7DAD3C6F56BC/550BEEB0000311F1893529AE3C6F56BC.roa
File: 550BEEB0000311F1893529AE3C6F56BC.roa (raw, json)
Hash identifier: O47BmzmOYg9hWK6vJACwGRWUpsxNTAbT7o8oWRhr0Yg=
Subject key identifier: 4C:62:B5:EC:D4:A8:A3:D8:EF:C7:80:4A:CA:CE:37:0E:32:27:7E:28
Certificate issuer: /CN=A9159BAE/serialNumber=549049D5761EC61D304B389F586BB3F5EE8AA3C3
Certificate serial: 02
Authority key identifier: 54:90:49:D5:76:1E:C6:1D:30:4B:38:9F:58:6B:B3:F5:EE:8A:A3:C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJBJ1XYexh0wSzifWGuz9e6Ko8M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159BAE/F2EE257C000211F1853A7DAD3C6F56BC/550BEEB0000311F1893529AE3C6F56BC.roa
Signing time: Mon 02 Feb 2026 06:49:34 +0000
ROA not before: Mon 02 Feb 2026 06:49:34 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 4686
IP address blocks: 103.20.72.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9159BAE/F2EE257C000211F1853A7DAD3C6F56BC/VJBJ1XYexh0wSzifWGuz9e6Ko8M.crl
rsync://rpki.apnic.net/member_repository/A9159BAE/F2EE257C000211F1853A7DAD3C6F56BC/VJBJ1XYexh0wSzifWGuz9e6Ko8M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJBJ1XYexh0wSzifWGuz9e6Ko8M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Feb 2026 08:15:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159BAE, serialNumber=549049D5761EC61D304B389F586BB3F5EE8AA3C3
Validity
Not Before: Feb 2 06:49:34 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=698048fe-ec58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:03:50:ff:23:9b:ff:12:c7:cc:9a:6f:6e:b7:
53:b9:65:06:50:ec:27:83:f9:29:33:41:3e:77:b3:
e6:4f:ab:9f:9c:47:6e:f8:86:a9:6a:bf:1c:b5:59:
7d:c7:1e:af:03:9d:53:8c:a5:93:07:53:13:a8:65:
3b:2e:23:3e:1c:9d:1f:07:bf:77:62:2a:c7:fa:df:
82:28:e2:d2:15:72:a5:aa:9e:b1:1e:ff:a4:39:d4:
38:3c:42:74:01:5b:3c:e5:08:f8:0d:39:88:b3:06:
84:ff:30:07:70:a1:1d:51:1e:ca:e9:96:bf:83:7a:
e5:9f:56:06:fa:8e:8f:a7:a3:82:ee:77:8e:63:23:
74:5a:72:89:ab:02:7e:1a:a6:fe:c5:3d:38:a9:e0:
8c:f6:06:9f:db:07:7b:f8:4c:84:4e:f3:6b:1b:5b:
1c:a3:c6:e9:05:1c:41:ba:ef:34:5d:ab:d4:8d:c3:
3f:04:1b:da:c4:61:c4:c9:36:fc:a8:80:15:5e:4e:
97:e0:a3:60:03:5b:30:1d:94:a7:04:9f:55:93:d3:
36:33:65:1f:38:42:fb:15:ae:82:12:dc:17:c2:53:
d0:02:ed:4f:38:e1:c9:83:49:e3:8e:44:4a:0f:4f:
bf:67:b8:28:d7:a5:c0:7e:87:d1:fb:4c:fb:a3:0a:
08:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:62:B5:EC:D4:A8:A3:D8:EF:C7:80:4A:CA:CE:37:0E:32:27:7E:28
X509v3 Authority Key Identifier:
keyid:54:90:49:D5:76:1E:C6:1D:30:4B:38:9F:58:6B:B3:F5:EE:8A:A3:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159BAE/F2EE257C000211F1853A7DAD3C6F56BC/VJBJ1XYexh0wSzifWGuz9e6Ko8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJBJ1XYexh0wSzifWGuz9e6Ko8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159BAE/F2EE257C000211F1853A7DAD3C6F56BC/550BEEB0000311F1893529AE3C6F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.20.72.0/22
Signature Algorithm: sha256WithRSAEncryption
10:6f:3a:4c:db:d9:90:d1:76:39:ed:8e:58:8d:46:47:b4:85:
aa:e9:a6:a2:63:2d:84:d4:b6:fb:8d:a8:75:bc:30:29:04:46:
04:f6:9e:be:1a:5b:88:58:08:e8:98:ea:f0:15:04:c0:66:e7:
a3:ff:52:a2:8b:24:09:9f:f2:14:73:f7:28:29:d9:4c:3b:52:
b0:fd:71:36:45:62:76:6d:08:2f:bd:ff:db:b4:8c:89:0b:0a:
22:7c:76:e1:6a:a1:1f:0c:bd:02:cb:61:01:6c:64:18:b7:2d:
f0:e7:1b:0d:ff:22:e9:28:d6:de:33:5e:9b:0e:20:44:22:65:
7e:19:9b:57:f5:14:fe:89:9b:32:77:61:e2:6a:97:71:65:74:
fa:1d:67:6c:1d:1b:8f:eb:92:57:21:6a:54:61:b9:4e:a6:81:
69:99:08:2f:bd:c7:b0:7b:68:61:86:43:28:7c:b6:e0:c6:bb:
da:ed:7b:2b:86:00:c6:f3:85:51:7b:f9:76:48:2c:cc:c7:13:
aa:f2:8b:65:4c:c8:71:c2:a2:eb:a1:38:a8:60:62:b3:68:77:
92:9d:44:60:5b:b3:38:11:34:0e:c5:6a:ea:fa:25:44:4c:0e:
2f:61:1d:a6:7a:fd:ba:04:37:5a:75:5a:c0:0a:21:b0:cb:db:
5d:8f:8a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 21:17:38 2026 by rpki-client