This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/2F24736869C111EF92B54060C4F9AE02.roa
File: 2F24736869C111EF92B54060C4F9AE02.roa (raw, json)
Hash identifier: Miqja/vpKVAaF/vnRgSmVQ18Av7Df4WDRSV+aGQxo+c=
Subject key identifier: 2F:84:16:0B:65:77:10:E1:0F:32:0A:EC:26:24:55:71:3B:CB:B7:84
Certificate issuer: /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Certificate serial: 0477
Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/2F24736869C111EF92B54060C4F9AE02.roa
Signing time: Sun 21 Dec 2025 00:21:09 +0000
ROA not before: Sun 21 Dec 2025 00:21:09 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 209988
IP address blocks: 103.49.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl
rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 23:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1143 (0x477)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916557B, serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Validity
Not Before: Dec 21 00:21:09 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69473d75-074b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a2:8a:43:05:51:5d:e4:1f:67:0f:ac:c9:be:
25:02:66:e4:24:82:aa:38:f3:72:1e:c7:f6:94:07:
71:8b:8c:a5:9e:9b:9a:4c:c8:12:04:a4:9f:88:0c:
5d:92:b2:f8:9f:88:ee:3f:a5:8c:86:bd:38:ef:5f:
be:94:de:a4:5d:db:03:38:d5:22:93:74:7f:72:e2:
3e:cd:ab:7c:09:13:01:22:a4:e1:19:cb:b2:cf:2a:
b6:b3:7d:d9:ec:b4:8b:6f:c7:fc:c5:a8:90:42:82:
e0:16:7b:0c:f8:e9:ff:5d:13:37:aa:89:e6:7a:6c:
43:76:bd:c9:4a:21:5e:b8:7e:90:41:1e:74:0a:c1:
a4:e3:68:76:eb:c1:ad:de:f2:fb:91:99:0a:1e:9f:
7f:b9:d5:a0:12:17:74:5d:67:62:8c:9d:21:e7:5a:
ee:40:ec:59:54:d0:0f:83:9f:d8:6f:3e:ff:f8:9c:
e2:55:75:74:61:27:5f:9b:d6:03:3c:ff:25:1e:26:
c2:a2:a1:48:58:27:38:4b:f8:3b:e7:96:47:a8:65:
d6:8c:88:b7:40:b5:2e:8e:c0:8f:e9:fc:6b:51:22:
14:40:97:7e:ad:b8:38:74:58:5c:80:e1:87:06:07:
ef:88:95:7b:88:74:85:20:eb:f1:90:1b:4a:ea:0f:
1f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:84:16:0B:65:77:10:E1:0F:32:0A:EC:26:24:55:71:3B:CB:B7:84
X509v3 Authority Key Identifier:
keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/2F24736869C111EF92B54060C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.49.61.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:a2:a3:2d:48:de:23:c8:ae:35:be:10:3c:b1:8a:6f:02:a3:
d1:12:70:2c:eb:1d:5d:28:5e:18:40:1a:9a:c9:5e:f5:91:a8:
bd:ef:0a:d8:a6:29:da:ab:fb:a7:ba:08:9b:1f:78:53:3d:82:
a3:2f:13:17:c3:59:ea:ed:29:d6:4a:ef:ee:b3:25:24:f3:bf:
c2:93:40:96:6c:0c:25:bc:15:3e:4c:85:97:5a:cd:9b:c4:43:
b5:ff:d7:6d:18:49:99:e1:55:d7:19:04:e2:34:49:79:09:53:
9b:33:ad:39:53:c2:6a:50:f6:9b:3a:94:e4:f2:45:08:4e:59:
4e:5f:f0:79:41:6b:0d:c5:25:63:83:1a:2f:9f:3f:c2:f1:a0:
dc:8f:0c:c4:31:f9:65:80:ab:40:ed:d9:52:a5:9d:f1:8f:00:
f1:5b:da:e2:8b:cd:6d:fc:eb:21:ac:ab:0e:e2:66:33:f1:3c:
0d:1f:56:d4:41:56:5f:af:f4:fb:bf:db:90:10:05:b5:e1:ae:
6c:e4:72:61:2f:50:a0:58:21:26:3c:77:cf:40:7a:27:8b:89:
24:3b:dd:41:76:ef:a8:60:9f:b9:dc:7d:58:05:93:80:38:51:
29:61:62:ac:9f:20:4c:d3:a4:dd:b9:fd:fe:23:60:db:25:ef:
b3:66:27:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 12:29:39 2026 by rpki-client