This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/59ADC606EBDA11F0868F86546C6F56BC.roa
File: 59ADC606EBDA11F0868F86546C6F56BC.roa (raw, json)
Hash identifier: ONcczDIIfK3yhm1H64UIKDcxoQLX5CkoZ0+RbpZl65o=
Subject key identifier: 1B:1D:A2:70:90:85:AB:D6:22:A3:FF:70:FA:D7:7E:D3:9E:DD:D4:ED
Certificate issuer: /CN=A917E951/serialNumber=1A0F786F11B8E17D45DE1EDCE61E1600DD4930A4
Certificate serial: 0204
Authority key identifier: 1A:0F:78:6F:11:B8:E1:7D:45:DE:1E:DC:E6:1E:16:00:DD:49:30:A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/59ADC606EBDA11F0868F86546C6F56BC.roa
Signing time: Wed 07 Jan 2026 15:05:49 +0000
ROA not before: Wed 07 Jan 2026 15:05:49 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 151183
IP address blocks: 103.131.103.0/24 maxlen: 24
2001:df2:43c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl
rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Jan 2026 01:40:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 516 (0x204)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E951, serialNumber=1A0F786F11B8E17D45DE1EDCE61E1600DD4930A4
Validity
Not Before: Jan 7 15:05:49 2026 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=695e764d-18da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e1:0f:f3:9b:b3:6f:8c:39:45:a0:e5:42:9b:
bd:cb:6b:4e:39:61:7a:95:7a:40:e3:1d:a1:2c:d4:
dd:73:7a:6f:ee:19:02:17:53:1e:82:f6:bb:76:f6:
fa:68:7d:5a:16:14:db:44:40:8f:9c:7a:e1:ec:b7:
54:5c:df:b9:cb:f0:36:3a:eb:b3:48:62:8f:1d:b2:
bf:72:26:2e:73:9a:92:78:70:f8:16:93:df:64:0a:
17:34:61:91:76:0b:8d:98:54:4a:55:fb:e8:5a:ca:
8e:50:37:58:4d:46:3e:9c:69:11:77:d8:f3:07:a7:
de:7b:aa:98:97:8d:de:eb:5c:bd:5f:4f:38:09:29:
b4:f5:f4:9c:7a:c1:ac:8f:d3:78:54:33:4d:25:90:
00:22:4d:d4:bf:2e:73:e3:61:f8:ac:9c:5f:ad:28:
d5:8d:30:66:8b:3e:58:49:46:e1:ba:13:62:3d:61:
d4:4b:85:09:0c:82:a7:57:78:1f:3e:39:96:27:86:
c3:59:be:6a:eb:1d:02:88:b3:f4:bc:64:f4:63:54:
46:8e:b1:19:12:21:56:41:b6:62:6a:ea:f5:ab:83:
46:43:7a:ec:8f:c5:92:ec:7e:e2:bf:85:84:55:1f:
da:7a:b0:27:f0:aa:ed:4a:92:73:68:0d:2f:90:b8:
45:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:1D:A2:70:90:85:AB:D6:22:A3:FF:70:FA:D7:7E:D3:9E:DD:D4:ED
X509v3 Authority Key Identifier:
keyid:1A:0F:78:6F:11:B8:E1:7D:45:DE:1E:DC:E6:1E:16:00:DD:49:30:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/59ADC606EBDA11F0868F86546C6F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.131.103.0/24
IPv6:
2001:df2:43c0::/48
Signature Algorithm: sha256WithRSAEncryption
72:b9:da:98:7e:d1:14:33:1a:41:3a:d0:1a:cf:c8:05:9c:1e:
f2:09:f1:2d:66:f5:27:a8:ac:f8:7a:82:96:08:05:9b:25:d6:
67:12:fc:6b:0b:4f:89:e8:88:10:c4:81:3e:42:81:4f:ba:1e:
22:3b:71:d1:14:69:7f:6d:19:67:77:ba:06:1b:cc:c8:2f:7e:
a5:15:77:03:91:a6:c4:c7:65:1c:fc:a7:e7:f8:cc:d1:a2:74:
ae:1d:cf:4b:2e:b6:10:da:64:04:ad:d4:14:2d:8f:40:1b:58:
21:59:e5:58:ac:a5:11:b9:a0:48:c5:8b:89:b0:dc:dc:49:89:
fb:6d:b4:e2:26:c1:dc:be:d7:fc:db:6f:e8:ca:9a:2d:88:89:
be:e1:6b:56:d1:e7:37:3b:5f:bd:7e:74:f8:3b:31:89:dd:a3:
76:ac:38:3f:ca:9a:be:35:6d:3e:33:ab:3d:5f:0e:15:5e:61:
f9:75:27:d1:f4:18:c2:af:6e:75:96:59:5d:c7:a5:f7:53:d8:
71:6a:40:91:7f:39:68:dd:6f:95:3f:5a:66:ef:49:45:b6:47:
3d:70:99:ee:e8:d8:2d:bd:e1:fd:5a:74:53:fc:87:8b:d3:3b:
c0:85:7e:16:05:96:68:cf:e5:c4:90:61:1a:62:24:1e:4a:d0:
b4:f1:7d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 17:31:43 2026 by rpki-client