This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/FC11F400240611EFA8F45A54C4F9AE02.roa
File: FC11F400240611EFA8F45A54C4F9AE02.roa (raw, json)
Hash identifier: hgdL5UTkf8oZABpJrnOGmK5k+01vc9XVo1jTsrlgdWk=
Subject key identifier: 7A:D2:83:E6:8B:9F:0C:D9:65:14:6C:F7:05:E3:BE:C2:C3:76:05:4D
Certificate issuer: /CN=A918BD1A/serialNumber=20746DA96C6C9348E94BBB74DCCB5901C6ECB7B3
Certificate serial: 0412
Authority key identifier: 20:74:6D:A9:6C:6C:93:48:E9:4B:BB:74:DC:CB:59:01:C6:EC:B7:B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHRtqWxsk0jpS7t03MtZAcbst7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/FC11F400240611EFA8F45A54C4F9AE02.roa
Signing time: Sat 13 Dec 2025 09:43:23 +0000
ROA not before: Sat 13 Dec 2025 09:43:23 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 150735
IP address blocks: 103.122.122.0/24 maxlen: 24
103.182.219.0/24 maxlen: 24
2001:df0:80c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.crl
rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHRtqWxsk0jpS7t03MtZAcbst7M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 23:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1042 (0x412)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918BD1A, serialNumber=20746DA96C6C9348E94BBB74DCCB5901C6ECB7B3
Validity
Not Before: Dec 13 09:43:23 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=693d353a-8dd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:c6:db:f1:97:4b:83:bb:bb:fb:7b:4c:3c:32:
73:02:7f:f5:a1:06:2e:29:ea:8d:fd:2c:54:69:49:
e9:63:3a:9e:46:e2:51:94:8e:5c:42:2b:eb:2d:85:
7c:2c:72:40:0b:8b:aa:34:d2:c5:e5:e9:9d:8a:05:
a7:29:49:b8:07:83:c8:77:a8:12:66:44:11:a5:56:
e1:9a:1b:bc:88:12:b5:4c:4c:7a:6d:fd:67:4b:1f:
67:30:72:a2:5d:59:23:d5:4f:c6:81:7f:11:17:e3:
c8:61:43:2c:ab:80:23:a3:05:ff:0f:09:0c:a6:bd:
17:34:a7:43:02:0d:b5:25:83:61:8f:ef:e5:64:df:
b0:8e:56:dd:f2:32:70:a5:34:8c:62:16:d8:0e:08:
e5:cb:81:63:3a:b3:a5:4f:7b:3e:56:51:e5:21:a4:
eb:df:68:01:89:d1:ec:af:eb:e6:48:5a:29:d8:6f:
4d:2b:5e:88:3a:2b:16:7d:e4:92:e3:66:21:b2:8c:
48:8e:b4:78:e3:8d:4c:67:fe:d8:6c:85:60:3a:8e:
44:bb:f6:35:26:4b:19:2e:e8:80:be:d4:1a:61:8b:
3f:e4:6f:8d:27:36:f7:0e:b0:ab:66:6f:0b:4c:94:
46:0e:7d:57:9e:c5:21:1a:82:7e:fc:4a:f8:77:87:
85:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D2:83:E6:8B:9F:0C:D9:65:14:6C:F7:05:E3:BE:C2:C3:76:05:4D
X509v3 Authority Key Identifier:
keyid:20:74:6D:A9:6C:6C:93:48:E9:4B:BB:74:DC:CB:59:01:C6:EC:B7:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHRtqWxsk0jpS7t03MtZAcbst7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/FC11F400240611EFA8F45A54C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.122.0/24
103.182.219.0/24
IPv6:
2001:df0:80c0::/48
Signature Algorithm: sha256WithRSAEncryption
7a:ba:2c:45:7e:8d:72:0f:45:e5:b8:f0:d6:27:d8:40:d0:08:
81:23:9e:7c:bc:0e:bc:29:cd:ac:b1:2a:48:07:42:23:e4:56:
f2:b6:a7:fb:c4:5d:f6:e1:31:96:fd:ba:5a:1b:cd:4a:b0:78:
75:73:f6:53:dd:4b:1a:b5:96:77:15:36:d8:3d:98:10:af:80:
64:bd:2b:4d:ee:38:49:0d:8a:fd:cf:80:a6:eb:f6:be:c0:e7:
f4:0e:ad:a3:a3:80:0c:b0:f7:d3:9b:2f:70:2a:a5:1e:6d:57:
dc:14:f5:c7:ff:ab:60:1b:9f:7b:37:c2:0b:63:f5:d5:8d:8f:
72:ba:99:c1:c0:4c:87:71:4e:ba:8c:4c:d3:d4:b8:23:2b:2a:
b6:f9:4c:f3:0b:3f:c9:13:cf:39:b4:1a:07:04:55:a9:0f:88:
d3:ba:ce:30:ae:4c:ad:17:24:48:fd:e8:d5:1b:63:4b:5a:ae:
a8:4e:3b:0e:4f:2d:e1:f7:df:b7:5e:2f:0f:6b:b6:bf:f6:e1:
59:f6:87:96:ff:95:0b:7d:56:95:50:01:fe:ba:43:fd:d0:12:
b2:15:77:0e:1f:c1:18:d5:ff:2c:bc:f4:35:2c:fc:f0:00:3b:
3a:34:79:3f:08:8d:46:1b:c1:b7:53:1b:7a:f4:6c:4e:fe:ae:
3a:bb:e3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 14:14:51 2025 by rpki-client