This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7403EBDAEC7911F09ED87EBA536F56BC.roa
File: 7403EBDAEC7911F09ED87EBA536F56BC.roa (raw, json)
Hash identifier: bgc5guwgndzHdYPqGeR5ZphFVX05I4MS8hHw2xRVIkM=
Subject key identifier: 8B:32:92:35:5D:B2:14:FD:C8:D8:58:CC:D1:6E:64:6A:C8:A5:4E:78
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: CCE9
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7403EBDAEC7911F09ED87EBA536F56BC.roa
Signing time: Thu 08 Jan 2026 10:19:12 +0000
ROA not before: Thu 08 Jan 2026 10:19:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 140641
IP address blocks: 103.69.43.0/24 maxlen: 24
103.93.94.0/24 maxlen: 24
103.95.50.0/23 maxlen: 24
103.97.104.0/24 maxlen: 24
103.97.105.0/24 maxlen: 24
103.97.106.0/24 maxlen: 24
103.97.107.0/24 maxlen: 24
103.117.212.0/24 maxlen: 24
103.119.170.0/23 maxlen: 24
103.129.97.0/24 maxlen: 24
103.131.26.0/24 maxlen: 24
103.139.7.0/24 maxlen: 24
103.140.72.0/24 maxlen: 24
103.152.79.0/24 maxlen: 24
103.171.44.0/24 maxlen: 24
103.171.45.0/24 maxlen: 24
103.218.124.0/24 maxlen: 24
103.218.125.0/24 maxlen: 24
103.218.126.0/24 maxlen: 24
103.218.127.0/24 maxlen: 24
103.240.89.0/24 maxlen: 24
103.251.150.0/24 maxlen: 24
103.253.70.0/24 maxlen: 24
163.227.186.0/24 maxlen: 24
163.227.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 11:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52457 (0xcce9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jan 8 10:19:12 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=695f84a0-408b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f4:99:f5:6f:1e:9e:83:0e:9b:ce:4f:d4:ba:
14:17:e3:ca:fb:c4:94:89:c3:ba:9d:8a:f2:c5:56:
98:ca:e4:d5:ea:cc:9a:ad:7b:c2:45:3b:34:d7:08:
11:b5:c6:6e:06:a0:5d:3e:d9:0c:44:15:ab:36:de:
68:ac:2c:61:2d:46:f9:ab:cd:2d:c7:4b:db:fd:1c:
2c:8d:1b:20:81:41:d1:f2:21:dd:90:5d:93:b7:99:
26:0c:be:d1:12:e9:f1:c6:41:81:18:6a:c3:a6:5c:
8c:40:03:1e:34:c9:5d:75:79:3e:bf:ef:99:0d:c9:
50:4e:15:26:98:95:b2:0c:29:21:fd:8d:7c:9f:70:
49:a7:d0:56:08:ed:87:08:9f:80:71:ba:0a:cf:43:
e0:1c:cf:d4:b9:d6:6e:6b:ba:55:91:63:80:6d:a3:
eb:53:fa:86:5c:f1:ef:a0:5e:46:c5:72:e6:b2:8a:
2b:94:82:61:e6:ab:82:90:21:f4:7b:78:0d:54:a1:
dc:17:38:01:ca:df:18:cb:76:0f:7e:44:b7:3d:57:
ac:11:74:0b:50:64:6c:f5:cf:d4:6a:21:83:68:ee:
f3:fc:31:a5:e8:a9:ce:64:51:3c:b8:42:eb:64:c9:
7c:91:8d:0a:f9:08:00:a4:60:b7:fd:eb:ac:d1:fd:
e5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:32:92:35:5D:B2:14:FD:C8:D8:58:CC:D1:6E:64:6A:C8:A5:4E:78
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7403EBDAEC7911F09ED87EBA536F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.69.43.0/24
103.93.94.0/24
103.95.50.0/23
103.97.104.0/22
103.117.212.0/24
103.119.170.0/23
103.129.97.0/24
103.131.26.0/24
103.139.7.0/24
103.140.72.0/24
103.152.79.0/24
103.171.44.0/23
103.218.124.0/22
103.240.89.0/24
103.251.150.0/24
103.253.70.0/24
163.227.186.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:c1:ec:c6:65:55:9c:db:a7:46:b3:a1:98:1c:35:ef:0e:3a:
0e:02:ef:2e:d0:b8:76:fd:0f:a5:ec:1c:fc:3d:0b:2f:e2:d1:
38:cd:09:0d:ac:8e:4d:78:5c:4b:f2:b4:01:fc:48:92:f9:5d:
2b:5e:cf:0c:19:9e:fa:ed:b6:5f:f1:17:b6:0c:5d:c5:1b:6c:
f0:0f:c0:47:03:91:c2:54:eb:26:a4:41:f2:00:d8:38:61:fe:
34:2c:ef:da:26:35:8b:f4:a0:bd:ef:8d:67:9c:12:fa:82:c8:
14:f4:75:7b:86:2f:51:2c:fd:5a:b2:93:9a:f9:05:72:b7:44:
bb:1d:40:4a:b0:90:8c:82:8c:a0:bf:57:48:b9:c0:49:84:89:
6f:22:8d:9a:6b:7f:3c:78:62:f2:13:ae:66:df:99:f6:d3:fe:
c7:64:ce:73:3b:90:1a:83:e1:a9:77:b2:03:82:ed:87:59:8b:
ab:d1:04:ad:eb:9b:0f:31:d9:9e:95:6a:dd:e6:2c:55:87:9e:
33:b9:d8:93:73:ef:9e:e4:6d:ea:93:28:ed:2e:21:8b:5a:9a:
59:50:e0:31:1a:51:8d:0a:21:54:49:0d:0a:ef:b9:be:f9:2a:
b5:9e:9b:3b:c5:09:ac:c9:46:84:bd:a5:15:78:a7:2d:6d:dd:
7a:b3:81:45
-----BEGIN CERTIFICATE-----
MIIF0jCCBLqgAwIBAgIDAMzpMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMMCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDEwODEwMTkxMloXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAwwNNjk1Zjg0YTAtNDA4YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAML0mfVvHp6DDpvOT9S6FBfjyvvElInDup2K8sVWmMrk1erMmq17wkU7NNcI
EbXGbgagXT7ZDEQVqzbeaKwsYS1G+avNLcdL2/0cLI0bIIFB0fIh3ZBdk7eZJgy+
0RLp8cZBgRhqw6ZcjEADHjTJXXV5Pr/vmQ3JUE4VJpiVsgwpIf2NfJ9wSafQVgjt
hwifgHG6Cs9D4BzP1LnWbmu6VZFjgG2j61P6hlzx76BeRsVy5rKKK5SCYeargpAh
9Ht4DVSh3Bc4AcrfGMt2D35Etz1XrBF0C1BkbPXP1Gohg2ju8/wxpeipzmRRPLhC
62TJfJGNCvkIAKRgt/3rrNH95VkCAwEAAaOCAvUwggLxMB0GA1UdDgQWBBSLMpI1
XbIU/cjYWMzRbmRqyKVOeDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzc0MDNFQkRB
RUM3OTExRjA5RUQ4N0VCQTUzNkY1NkJDLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMH8GCCsGAQUFBwEHAQH/
BHAwbjBsBAIAATBmAwQAZ0UrAwQAZ11eAwQBZ18yAwQCZ2FoAwQAZ3XUAwQBZ3eq
AwQAZ4FhAwQAZ4MaAwQAZ4sHAwQAZ4xIAwQAZ5hPAwQBZ6ssAwQCZ9p8AwQAZ/BZ
AwQAZ/uWAwQAZ/1GAwQBo+O6MA0GCSqGSIb3DQEBCwUAA4IBAQC6wezGZVWc26dG
s6GYHDXvDjoOAu8u0Lh2/Q+l7Bz8PQsv4tE4zQkNrI5NeFxL8rQB/EiS+V0rXs8M
GZ767bZf8Re2DF3FG2zwD8BHA5HCVOsmpEHyANg4Yf40LO/aJjWL9KC9741nnBL6
gsgU9HV7hi9RLP1aspOa+QVyt0S7HUBKsJCMgoygv1dIucBJhIlvIo2aa388eGLy
E65m35n20/7HZM5zO5Aag+Gpd7IDgu2HWYur0QSt65sPMdmelWrd5ixVh54zudiT
c++e5G3qkyjtLiGLWppZUOAxGlGNCiFUSQ0K77m++Sq1nps7xQmsyUaEvaUVeKct
bd16s4FF
-----END CERTIFICATE-----
Generated at Mon Jan 19 21:40:05 2026 by rpki-client