This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/2508F7B8001611F18F2C9137416F56BC.roa
File: 2508F7B8001611F18F2C9137416F56BC.roa (raw, json)
Hash identifier: p8jxq1DWplFuw2ZW+5AZmiaZhG3I+xieOdOBdHu5Kpg=
Subject key identifier: 44:CE:09:8F:D9:80:17:D3:D4:7C:A6:2C:5B:56:0A:8B:BB:DF:83:F2
Certificate issuer: /CN=A91CDC08/serialNumber=6E14324C7FEB9BC8992D4A1C3E459E86A3F18EE1
Certificate serial: 02
Authority key identifier: 6E:14:32:4C:7F:EB:9B:C8:99:2D:4A:1C:3E:45:9E:86:A3:F1:8E:E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhQyTH_rm8iZLUocPkWehqPxjuE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/2508F7B8001611F18F2C9137416F56BC.roa
Signing time: Mon 02 Feb 2026 09:04:14 +0000
ROA not before: Mon 02 Feb 2026 09:04:13 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 4686
IP address blocks: 103.253.216.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.crl
rsync://rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhQyTH_rm8iZLUocPkWehqPxjuE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Feb 2026 08:16:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CDC08, serialNumber=6E14324C7FEB9BC8992D4A1C3E459E86A3F18EE1
Validity
Not Before: Feb 2 09:04:13 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6980688d-78ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:6f:a6:0a:1c:e2:b8:67:a7:61:c6:61:94:73:
1d:08:84:96:ce:89:6f:16:1b:9d:da:8c:5a:b3:b9:
4a:27:2b:b8:a3:69:b5:f7:a8:4d:48:95:d8:f4:f8:
2b:67:07:24:fc:37:01:d0:24:40:bc:3e:40:9e:5e:
bd:2f:16:3c:e1:0b:3a:53:3c:a7:b6:72:51:b7:e1:
b7:dd:71:d3:e3:f7:36:41:f1:17:28:14:53:59:ad:
24:39:f8:77:82:a1:f0:9b:84:d2:f8:c2:2b:e4:6d:
07:01:2a:15:26:29:0a:d9:c0:6c:b9:2d:c2:46:8b:
00:d8:28:38:33:b8:d8:f7:5d:f1:fc:49:e7:bc:79:
13:1b:4b:a0:98:c5:10:d4:9a:ed:dc:05:d1:3e:a3:
89:80:26:2f:d7:85:94:46:ec:56:d0:0b:57:80:01:
ba:01:63:d0:27:d1:81:42:21:49:85:3e:1a:21:c5:
05:37:0c:11:e5:48:9d:0f:c9:f0:8e:36:10:ab:a3:
b0:1e:aa:f3:95:e3:6c:1a:ce:5f:bd:29:7e:d0:f7:
f4:af:d3:f3:47:58:5c:c9:39:f3:d1:61:4c:a3:a6:
16:78:44:c2:4c:71:63:e4:59:f7:ea:77:89:b3:54:
40:bc:30:10:6c:66:7f:77:50:8d:e2:39:e1:12:23:
f7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:CE:09:8F:D9:80:17:D3:D4:7C:A6:2C:5B:56:0A:8B:BB:DF:83:F2
X509v3 Authority Key Identifier:
keyid:6E:14:32:4C:7F:EB:9B:C8:99:2D:4A:1C:3E:45:9E:86:A3:F1:8E:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhQyTH_rm8iZLUocPkWehqPxjuE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/2508F7B8001611F18F2C9137416F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.253.216.0/22
Signature Algorithm: sha256WithRSAEncryption
87:ec:6f:b7:30:53:6b:ab:e1:51:9f:be:71:fa:c9:c3:07:f4:
fd:59:59:05:7f:f0:0a:d7:c0:4a:02:a7:2d:78:1c:ff:8e:6b:
ca:ce:48:84:a5:22:47:d6:da:24:a4:62:c6:8e:80:a4:81:e6:
ee:c7:02:6c:61:7f:d1:71:5a:46:41:40:bc:16:d2:5c:88:3f:
f3:99:4a:f8:ec:fc:de:80:d0:fa:ab:d8:64:8d:1a:f7:0b:e7:
84:9e:89:fc:36:4f:27:69:2a:ca:fc:56:19:05:d7:6f:0b:7f:
98:88:9d:74:46:ed:a6:80:19:43:6d:b3:3e:e1:8b:e0:a6:eb:
20:85:49:a5:10:29:5a:7a:2e:06:77:00:c8:7c:a1:b0:10:ae:
00:d4:12:93:a8:98:97:f6:a0:4f:93:94:6b:2f:13:19:5e:7a:
d9:39:6f:01:eb:1e:a1:31:cc:ff:50:9a:13:25:66:8b:b5:73:
80:0a:c5:5b:64:7b:db:d3:12:4a:3d:a7:e4:a2:51:2d:46:38:
f6:e1:f4:4a:3a:45:50:e0:5b:f4:b1:18:8a:94:cd:a6:6a:2d:
06:10:99:55:eb:7e:09:f5:e1:bc:5d:65:32:89:01:35:58:01:
75:ad:ec:e6:0d:67:3d:d2:38:d3:8a:74:b4:b8:6f:bb:05:c7:
c0:2e:e1:2d
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFD
REMwODExMC8GA1UEBRMoNkUxNDMyNEM3RkVCOUJDODk5MkQ0QTFDM0U0NTlFODZB
M0YxOEVFMTAeFw0yNjAyMDIwOTA0MTNaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV
BAMMDTY5ODA2ODhkLTc4ZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDwb6YKHOK4Z6dhxmGUcx0IhJbOiW8WG53ajFqzuUonK7ijabX3qE1Ildj0+Ctn
ByT8NwHQJEC8PkCeXr0vFjzhCzpTPKe2clG34bfdcdPj9zZB8RcoFFNZrSQ5+HeC
ofCbhNL4wivkbQcBKhUmKQrZwGy5LcJGiwDYKDgzuNj3XfH8See8eRMbS6CYxRDU
mu3cBdE+o4mAJi/XhZRG7FbQC1eAAboBY9An0YFCIUmFPhohxQU3DBHlSJ0PyfCO
NhCro7AeqvOV42wazl+9KX7Q9/Sv0/NHWFzJOfPRYUyjphZ4RMJMcWPkWffqd4mz
VEC8MBBsZn93UI3iOeESI/c/AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQURM4Jj9mA
F9PUfKYsW1YKi7vfg/IwHwYDVR0jBBgwFoAUbhQyTH/rm8iZLUocPkWehqPxjuEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEQzA4L0YzRTY1N0ZDMDAx
NTExRjE5NUQ1OEFENDQwNkY1NkJDL2JoUXlUSF9ybThpWkxVb2NQa1dlaHFQeGp1
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvYmhReVRIX3JtOGlaTFVvY1BrV2VocVB4anVFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
REMwOC9GM0U2NTdGQzAwMTUxMUYxOTVENThBRDQ0MDZGNTZCQy8yNTA4RjdCODAw
MTYxMUYxOEYyQzkxMzc0MTZGNTZCQy5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAmf92DANBgkqhkiG9w0BAQsFAAOCAQEAh+xvtzBTa6vhUZ++
cfrJwwf0/VlZBX/wCtfASgKnLXgc/45rys5IhKUiR9baJKRixo6ApIHm7scCbGF/
0XFaRkFAvBbSXIg/85lK+Oz83oDQ+qvYZI0a9wvnhJ6J/DZPJ2kqyvxWGQXXbwt/
mIiddEbtpoAZQ22zPuGL4KbrIIVJpRApWnouBncAyHyhsBCuANQSk6iYl/agT5OU
ay8TGV562TlvAeseoTHM/1CaEyVmi7VzgArFW2R729MSSj2n5KJRLUY49uH0SjpF
UOBb9LEYipTNpmotBhCZVet+CfXhvF1lMokBNVgBda3s5g1nPdI404p0tLhvuwXH
wC7hLQ==
-----END CERTIFICATE-----
Generated at Tue Feb 10 21:17:48 2026 by rpki-client