This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E3F6B89CC8F711EF941DF45EC4F9AE02.roa
File: E3F6B89CC8F711EF941DF45EC4F9AE02.roa (raw, json)
Hash identifier: yRMXsHuNbFANk0UN68+zmKEP9goOv+3VanpKBpJXLN4=
Subject key identifier: 83:35:98:7D:F1:03:A7:BE:61:FA:0D:F3:26:B1:94:3B:01:2C:20:6B
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: CD0D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E3F6B89CC8F711EF941DF45EC4F9AE02.roa
Signing time: Fri 09 Jan 2026 07:27:22 +0000
ROA not before: Fri 09 Jan 2026 07:27:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133298
IP address blocks: 103.157.128.0/23 maxlen: 24
2402:45e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 11:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52493 (0xcd0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jan 9 07:27:22 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6960adda-5afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:71:ee:02:07:80:08:51:97:d3:11:6f:21:80:
c6:2c:da:e7:90:f4:a2:01:59:68:10:31:f8:8a:79:
ed:04:9b:dc:7e:8d:c0:ca:7a:95:02:d8:10:a0:e0:
b1:76:b0:c9:65:8c:04:55:c9:5e:b6:5d:86:f8:0d:
91:f3:9b:38:6a:f6:d0:13:ba:99:0e:cf:5a:e4:8c:
f2:6f:86:e0:81:97:93:82:65:f2:45:e4:c6:0b:b3:
95:5c:2f:c5:ff:b4:3d:ac:e9:57:5d:12:ef:9a:21:
c7:fe:67:4d:76:63:8a:68:af:6b:96:03:24:d1:4e:
45:24:00:45:59:b8:0f:2a:17:29:62:45:72:b6:cf:
b3:06:fa:41:27:33:94:b4:71:ec:2a:42:be:28:d4:
cf:e6:0f:42:9b:bc:39:de:2d:22:85:38:54:e5:51:
ca:77:15:6a:28:25:e5:f0:88:89:08:01:cb:b5:97:
c1:e8:a9:d4:88:8e:2d:ec:8d:30:72:92:ba:92:65:
25:25:a6:79:f0:a3:90:0b:63:92:a5:4a:90:82:96:
58:d4:0e:01:68:3d:c3:ec:84:b0:e4:79:90:46:45:
29:f9:82:34:51:1d:9c:12:be:0b:7b:70:34:b9:09:
c4:0f:8c:01:cb:af:1f:4f:30:1e:c2:cc:83:8d:76:
8b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:35:98:7D:F1:03:A7:BE:61:FA:0D:F3:26:B1:94:3B:01:2C:20:6B
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E3F6B89CC8F711EF941DF45EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.157.128.0/23
IPv6:
2402:45e0::/32
Signature Algorithm: sha256WithRSAEncryption
88:e1:b9:d0:61:3c:58:50:91:a6:70:28:05:82:8f:07:7f:bb:
23:4a:51:bd:c7:36:c5:ae:bc:a3:97:f1:bf:71:55:33:cc:52:
99:04:7e:51:1e:3c:da:b6:18:d9:91:73:75:12:3e:dd:b1:f5:
61:03:89:13:d7:43:b0:9e:c8:63:fd:3b:84:9a:13:22:31:0c:
dc:fc:d9:a6:17:2d:bf:ce:2b:ca:69:e5:58:98:60:15:58:b6:
a7:bc:4f:59:f6:22:b2:00:b7:f0:2f:af:9f:6f:9f:49:3c:65:
56:4e:4f:96:00:12:77:f4:86:20:c1:5e:bf:42:5c:c6:3e:39:
d5:f5:e8:4a:76:b0:6e:b2:6e:43:df:e9:6d:0d:00:9e:06:10:
60:0b:86:a8:cf:e5:31:9c:ce:e9:e1:4e:b4:89:57:8d:d1:d2:
69:54:f7:c1:05:ab:71:e1:06:9b:3f:9b:70:08:1c:ae:2c:60:
7f:ea:56:ad:23:70:a1:06:5f:8c:7a:e9:0c:6f:83:9b:71:4c:
dc:ba:b7:c6:ce:96:75:5d:d9:9e:64:43:75:2b:ed:25:ac:78:
b3:d4:5e:7b:d3:73:d1:fa:6e:f4:55:e6:c7:7a:f7:9e:a4:ef:
b7:b2:b2:63:7d:cb:f5:77:73:41:62:ed:a7:d2:7c:4d:dd:79:
9e:2b:2c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 21:44:24 2026 by rpki-client