This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/4EF261AE0BA211EB99DE471BC4F9AE02.roa
File: 4EF261AE0BA211EB99DE471BC4F9AE02.roa (raw, json)
Hash identifier: h56DPlC3x1UcpTNI1jOeCBAdJW3gMX70ec2v8VWxNzs=
Subject key identifier: 44:6C:85:3E:7C:D5:00:8D:43:B6:4F:D1:D3:56:DF:A6:C3:70:DB:A9
Certificate issuer: /CN=A9149680/serialNumber=B759092A6918F45EACD0DCFDF971D0D3FA5021AA
Certificate serial: 080C
Authority key identifier: B7:59:09:2A:69:18:F4:5E:AC:D0:DC:FD:F9:71:D0:D3:FA:50:21:AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/4EF261AE0BA211EB99DE471BC4F9AE02.roa
Signing time: Tue 30 Dec 2025 21:17:07 +0000
ROA not before: Tue 30 Dec 2025 21:17:07 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 141208
IP address blocks: 103.156.124.0/23 maxlen: 23
103.156.124.0/24 maxlen: 24
103.156.125.0/24 maxlen: 24
2001:df4:ed80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.crl
rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Jan 2026 20:24:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2060 (0x80c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149680, serialNumber=B759092A6918F45EACD0DCFDF971D0D3FA5021AA
Validity
Not Before: Dec 30 21:17:07 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69544153-38b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:06:93:51:4f:c9:ae:8c:d5:37:b3:a2:1c:bd:
47:67:43:22:9b:6e:3e:7d:a6:f7:4e:3e:54:fe:6f:
a3:0a:12:d0:f7:34:36:ea:3d:08:a7:77:86:2b:2e:
c7:60:35:85:1b:12:1b:46:6e:4f:9b:52:62:41:9e:
f5:08:8e:69:72:ea:14:63:5c:68:e2:e1:20:f6:9c:
e3:7a:fe:e7:aa:3d:e2:3d:66:bb:a9:24:0e:e5:f4:
8e:83:4e:99:22:b8:f5:7c:7d:00:16:49:ad:bf:4b:
2f:22:76:22:d6:94:4c:3a:d2:3f:9c:6a:3d:b8:70:
9d:d3:1f:d2:06:81:83:cd:d7:da:63:a9:0b:ce:d9:
81:fe:71:c0:83:54:e7:bc:6a:5e:d0:18:e9:e8:76:
3a:fa:18:67:3d:f9:bd:77:c0:78:58:16:a9:6a:ca:
67:b1:44:17:4b:57:80:46:7a:a5:0c:c7:db:51:3b:
18:6a:68:04:e1:cd:ac:b0:98:cf:2c:bc:f1:5b:ae:
3c:9d:b9:ca:52:21:98:02:60:1c:49:89:2b:c9:43:
e3:ab:67:46:2c:af:4c:cc:bd:93:bb:2f:47:a2:8f:
76:59:5b:0e:90:43:14:06:6c:25:ab:f6:49:90:3c:
a8:27:b7:58:52:72:e1:62:8b:25:94:b5:ae:3f:fc:
6d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:6C:85:3E:7C:D5:00:8D:43:B6:4F:D1:D3:56:DF:A6:C3:70:DB:A9
X509v3 Authority Key Identifier:
keyid:B7:59:09:2A:69:18:F4:5E:AC:D0:DC:FD:F9:71:D0:D3:FA:50:21:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/4EF261AE0BA211EB99DE471BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.156.124.0/23
IPv6:
2001:df4:ed80::/48
Signature Algorithm: sha256WithRSAEncryption
3b:57:94:4d:82:54:4c:f3:a5:fe:dd:5d:43:8d:cd:40:51:23:
1f:11:16:e1:60:cc:14:1d:d9:e5:d0:e1:5e:03:b0:1f:c1:24:
6f:04:ac:ba:32:c6:88:59:d6:06:2d:c8:99:f2:62:60:b6:78:
36:36:29:da:f9:61:b7:00:91:83:be:de:c2:85:67:60:e6:3a:
60:05:33:f2:fd:60:cc:bc:0e:82:43:da:07:d2:2c:2c:b0:91:
01:0e:ec:ef:6a:3e:ac:f2:62:34:85:1c:81:9d:bc:14:5d:24:
3e:5f:20:90:eb:15:c5:24:08:28:4b:76:3d:95:f4:19:06:d8:
01:7d:2e:61:42:cc:cf:9e:09:90:14:c1:ea:e7:00:82:74:ee:
de:85:84:96:ac:31:44:32:d6:3b:6e:9a:b8:e1:2e:25:13:b8:
aa:30:d8:23:39:c0:e5:a4:9d:02:ce:b3:e7:27:23:20:b5:78:
ea:0e:12:ac:16:f6:df:cb:86:21:01:05:2e:fe:26:49:46:da:
a9:6b:09:c8:c8:bf:6e:0e:cb:d4:28:a6:da:d5:ea:11:5d:61:
ce:e6:c4:eb:2b:cf:9c:9f:ba:ac:fe:b3:61:cc:61:73:ca:84:
18:8e:b4:48:bc:95:52:b7:45:99:8f:31:b0:83:5c:48:de:4f:
8e:6a:57:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 01:48:46 2026 by rpki-client