This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/16E91232932D11EABE8CE524C4F9AE02.roa
File: 16E91232932D11EABE8CE524C4F9AE02.roa (raw, json)
Hash identifier: UBYiOL3S3J2wImaa5FZYPTo7lTIcFacdj1EfjnAFsJE=
Subject key identifier: B4:79:E3:C5:4F:39:BE:F4:EE:0D:A3:D2:EB:6F:7B:A7:B8:12:6A:DB
Certificate issuer: /CN=A911C14C/serialNumber=CA69E4F8279BF833190CB7225CE9FDDB66D3F951
Certificate serial: 09E6
Authority key identifier: CA:69:E4:F8:27:9B:F8:33:19:0C:B7:22:5C:E9:FD:DB:66:D3:F9:51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/16E91232932D11EABE8CE524C4F9AE02.roa
Signing time: Thu 08 Jan 2026 20:16:26 +0000
ROA not before: Thu 08 Jan 2026 20:16:26 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 138419
IP address blocks: 103.125.32.0/24 maxlen: 24
103.125.33.0/24 maxlen: 24
103.125.34.0/24 maxlen: 24
103.125.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.crl
rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Jan 2026 19:21:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2534 (0x9e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C14C, serialNumber=CA69E4F8279BF833190CB7225CE9FDDB66D3F951
Validity
Not Before: Jan 8 20:16:26 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6960109a-217f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:da:e1:e9:1b:9b:b0:0f:18:d2:d9:37:d6:e6:
b0:c7:ee:88:57:bb:0a:1d:93:c3:55:f0:61:52:61:
3e:0b:72:ba:c1:00:96:4d:a7:12:d7:12:16:4d:11:
88:be:0b:ab:a3:bc:50:3a:4e:6f:f7:2a:5e:80:b5:
39:45:72:ad:50:a8:ef:e1:f7:cb:54:6d:bd:d8:c0:
de:c5:02:ce:d0:9b:30:f9:4b:15:51:49:cf:4b:ce:
7b:b1:73:e8:6a:2f:2c:b1:07:65:53:1a:f2:43:02:
ed:cc:78:6e:e2:37:a7:b8:6b:38:9d:21:5d:0f:f8:
a5:1e:ea:3e:90:eb:f4:6d:62:7a:b8:eb:72:86:cf:
80:c7:5d:54:05:06:d9:be:01:ab:89:e2:bd:de:67:
d6:3f:ff:20:e7:d8:e0:57:ac:fe:10:10:26:62:a1:
ab:fb:53:a4:7f:46:6a:21:7f:37:43:c2:0e:e0:b8:
d5:4d:9f:fa:79:11:8c:31:19:ca:e1:7f:43:03:4d:
98:89:d6:1e:34:02:07:7b:95:5b:8a:89:44:7b:71:
6c:cc:a0:69:f3:88:57:19:45:fc:22:ef:a4:3f:e9:
29:81:33:70:fb:92:d7:08:62:52:c2:3d:21:2d:a1:
52:72:b9:7e:7a:59:43:59:db:6f:8f:c1:f0:89:13:
a2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:79:E3:C5:4F:39:BE:F4:EE:0D:A3:D2:EB:6F:7B:A7:B8:12:6A:DB
X509v3 Authority Key Identifier:
keyid:CA:69:E4:F8:27:9B:F8:33:19:0C:B7:22:5C:E9:FD:DB:66:D3:F9:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/16E91232932D11EABE8CE524C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.125.32.0/22
Signature Algorithm: sha256WithRSAEncryption
98:6d:ba:e6:f1:c6:f7:63:c8:27:57:9a:07:2e:39:0a:aa:e8:
ec:04:06:0d:2a:e5:f6:aa:77:6b:3c:56:15:e4:60:f2:21:b4:
b9:ea:6b:c5:16:9d:92:fb:20:0d:7c:14:bc:62:0a:a0:a1:27:
2b:8e:c1:a3:15:6a:cd:45:5a:9b:ce:c7:03:96:d0:df:d2:71:
bc:f2:42:5c:f4:2f:b9:b6:aa:dd:6a:27:d4:73:e0:f3:5c:45:
36:02:97:b5:d5:42:94:2e:6b:78:b3:94:e3:08:68:98:34:a0:
61:77:80:c1:5c:a5:4e:b5:31:74:b2:fe:d5:e4:e4:e5:d0:f4:
90:1c:fc:4a:6d:ce:56:06:af:3f:e7:99:5f:4e:c0:ac:ce:71:
3a:f5:61:f1:01:1d:61:92:77:27:04:36:9a:62:aa:e8:9e:f0:
39:39:dc:b9:d6:32:40:ac:b8:f0:2f:53:66:a8:8b:50:21:4f:
81:8c:e6:bd:98:0f:ed:02:ab:13:a6:31:e3:86:42:5a:f7:53:
b0:85:36:aa:8e:4f:a7:1e:04:87:c4:09:64:f5:00:3e:7d:59:
4b:c7:4f:69:d2:ee:ed:09:11:f2:c4:d5:c0:f5:42:26:4d:07:
ed:d3:59:7d:3d:f4:b9:3e:28:7d:12:33:52:d7:b8:24:4a:60:
5c:2a:b2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 18:08:19 2026 by rpki-client