This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/70A511E6ECD111F09C92E5176E6F56BC.roa File: 70A511E6ECD111F09C92E5176E6F56BC.roa (raw, json) Hash identifier: Ei/jic+uJg48bih6Cb4L5ydoqly3aSC1e1aPFjiYHuE= Subject key identifier: 45:BB:6F:20:6E:AC:05:A5:C0:0F:1A:05:B1:76:74:3F:CA:40:C3:5C Certificate issuer: /CN=A911D3F3/serialNumber=317C307FFC6ECB6CF656F26B8282FFB9E62F9365 Certificate serial: 068A Authority key identifier: 31:7C:30:7F:FC:6E:CB:6C:F6:56:F2:6B:82:82:FF:B9:E6:2F:93:65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/70A511E6ECD111F09C92E5176E6F56BC.roa Signing time: Thu 08 Jan 2026 21:15:23 +0000 ROA not before: Thu 08 Jan 2026 21:15:23 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 63956 IP address blocks: 45.112.244.0/22 maxlen: 24 103.20.17.0/24 maxlen: 24 103.21.108.0/24 maxlen: 24 103.52.116.0/22 maxlen: 24 103.97.52.0/22 maxlen: 22 103.97.52.0/24 maxlen: 24 103.97.53.0/24 maxlen: 24 103.97.54.0/24 maxlen: 24 103.97.55.0/24 maxlen: 24 103.225.96.0/24 maxlen: 24 202.46.160.0/20 maxlen: 24 202.58.32.0/19 maxlen: 24 202.59.32.0/19 maxlen: 24 203.12.129.0/24 maxlen: 24 203.18.194.0/24 maxlen: 24 203.209.192.0/19 maxlen: 24 203.210.102.0/24 maxlen: 24 2402:1b80::/32 maxlen: 36 2402:1b80::/40 maxlen: 40 2402:1b80:10::/48 maxlen: 48 2402:1b80:11::/48 maxlen: 48 2402:1b80:14::/48 maxlen: 48 2402:1b80:103::/48 maxlen: 48 2402:1b80:104::/48 maxlen: 48 2402:1b80:106::/48 maxlen: 48 2402:1b80:203::/48 maxlen: 48 2402:1b80:204::/48 maxlen: 48 2402:1b80:206::/48 maxlen: 48 2402:1b80:300::/40 maxlen: 40 2402:1b80:304::/48 maxlen: 48 2402:1b80:306::/48 maxlen: 48 2402:1b80:403::/48 maxlen: 48 2402:1b80:600::/40 maxlen: 40 2402:1b80:3000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:03:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1674 (0x68a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D3F3, serialNumber=317C307FFC6ECB6CF656F26B8282FFB9E62F9365 Validity Not Before: Jan 8 21:15:23 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69601e6b-7397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:51:bc:83:65:77:cc:0f:52:9a:d8:99:6c:11: cd:8a:54:41:e4:35:30:d6:ae:0e:60:4b:bf:14:5f: 9d:d8:2e:48:0b:f3:57:79:86:34:37:2a:18:8a:7f: 6c:22:d3:3f:b1:00:fd:21:11:69:37:48:37:32:70: 31:33:cc:23:b2:3e:7e:e8:51:df:c4:bc:00:7f:f7: ad:65:9d:56:10:a2:68:0c:66:a0:48:65:34:f9:de: ac:1e:de:38:91:5e:4a:22:e6:47:84:b2:60:31:ab: fb:c6:f3:46:5e:f1:a5:e4:f5:70:11:c0:3e:49:f6: 4c:20:1e:b0:62:ab:72:bf:5f:30:b4:52:ac:20:ef: 57:10:aa:cf:c4:a1:a4:bf:54:d8:f5:e6:d7:a6:32: ce:53:e5:49:8d:9b:2e:99:0f:da:3d:c3:b0:d0:d0: ae:31:86:18:4b:82:5b:ac:a4:6e:ef:a7:8c:d6:6b: 17:61:90:f9:ec:82:ac:be:17:6b:6b:ee:45:ce:8b: 0e:d1:2f:6f:a2:87:3c:4a:58:68:48:f7:12:21:cd: d0:49:f2:d8:c2:5c:cb:69:be:2d:4c:7e:14:b4:8f: 5f:88:f5:73:d5:89:5c:a3:07:5a:87:6a:85:65:44: b1:ec:5b:3a:14:88:17:7f:eb:1c:b6:f5:07:ca:0b: d0:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:BB:6F:20:6E:AC:05:A5:C0:0F:1A:05:B1:76:74:3F:CA:40:C3:5C X509v3 Authority Key Identifier: keyid:31:7C:30:7F:FC:6E:CB:6C:F6:56:F2:6B:82:82:FF:B9:E6:2F:93:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/70A511E6ECD111F09C92E5176E6F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.112.244.0/22 103.20.17.0/24 103.21.108.0/24 103.52.116.0/22 103.97.52.0/22 103.225.96.0/24 202.46.160.0/20 202.58.32.0/19 202.59.32.0/19 203.12.129.0/24 203.18.194.0/24 203.209.192.0/19 203.210.102.0/24 IPv6: 2402:1b80::/32 Signature Algorithm: sha256WithRSAEncryption cc:9d:b4:f7:f2:a4:a9:e2:e6:e6:12:ed:e3:6a:c7:1c:25:a3: a2:54:c9:79:31:6c:2b:9a:c9:92:e7:21:b5:ce:6d:a8:02:12: 9b:6b:35:26:c8:99:55:48:b3:88:dc:f6:f1:da:2e:ce:d9:d5: 44:48:74:42:3d:5d:c4:a8:75:62:73:1d:e2:8b:c4:d4:1a:4d: bb:0b:33:ee:0d:94:15:c2:38:ba:44:11:80:d4:31:ea:91:ea: c7:de:6e:45:21:46:ed:e9:c1:10:6f:27:b6:c0:25:5a:78:32: 44:8d:94:02:4d:5f:96:0f:33:f6:47:81:27:45:8d:7f:b0:5d: 80:7c:b4:ef:fe:4d:52:90:5b:de:39:27:05:e3:1c:45:b9:99: f6:30:0b:61:e8:35:32:a2:95:b9:f1:d4:b9:0e:e5:b7:5c:00: 51:4f:43:5b:ec:8f:8e:69:44:f8:52:a8:bd:b3:8c:1b:88:43: d7:0b:96:6d:e8:a9:d2:8a:e3:7e:e9:b4:bf:de:81:0f:f7:4f: 85:a1:76:77:71:1d:cc:25:e3:d9:cf:e6:48:b0:50:71:57:97: 6b:4f:c8:c8:69:fd:10:f2:f4:d5:ef:15:75:ba:d0:33:af:d9: fb:d8:96:60:51:8c:2f:2a:fb:09:63:31:17:c2:33:14:ce:c6: c7:ab:98:2a -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgICBoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQzRjMxMTAvBgNVBAUTKDMxN0MzMDdGRkM2RUNCNkNGNjU2RjI2QjgyODJGRkI5 RTYyRjkzNjUwHhcNMjYwMTA4MjExNTIzWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDDA02OTYwMWU2Yi03Mzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiFG8g2V3zA9SmtiZbBHNilRB5DUw1q4OYEu/FF+d2C5IC/NXeYY0NyoYin9s ItM/sQD9IRFpN0g3MnAxM8wjsj5+6FHfxLwAf/etZZ1WEKJoDGagSGU0+d6sHt44 kV5KIuZHhLJgMav7xvNGXvGl5PVwEcA+SfZMIB6wYqtyv18wtFKsIO9XEKrPxKGk v1TY9ebXpjLOU+VJjZsumQ/aPcOw0NCuMYYYS4JbrKRu76eM1msXYZD57IKsvhdr a+5FzosO0S9vooc8SlhoSPcSIc3QSfLYwlzLab4tTH4UtI9fiPVz1Ylcowdah2qF ZUSx7Fs6FIgXf+sctvUHygvQawIDAQABo4IC7DCCAugwHQYDVR0OBBYEFEW7byBu rAWlwA8aBbF2dD/KQMNcMB8GA1UdIwQYMBaAFDF8MH/8bsts9lbya4KC/7nmL5Nl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDNGMy9CMjU0NDgxQUNB MzQxMUVCOEM5MEQ5NDFDNEY5QUUwMi9NWHd3Zl94dXkyejJWdkpyZ29MX3VlWXZr MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01Yd3dmX3h1eTJ6MlZ2SnJnb0xfdWVZdmsyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUQzRjMvQjI1NDQ4MUFDQTM0MTFFQjhDOTBEOTQxQzRGOUFFMDIvNzBBNTExRTZF Q0QxMTFGMDlDOTJFNTE3NkU2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwdgYIKwYBBQUHAQcBAf8E ZzBlMFQEAgABME4DBAItcPQDBABnFBEDBABnFWwDBAJnNHQDBAJnYTQDBABn4WAD BATKLqADBAXKOiADBAXKOyADBADLDIEDBADLEsIDBAXL0cADBADL0mYwDQQCAAIw BwMFACQCG4AwDQYJKoZIhvcNAQELBQADggEBAMydtPfypKni5uYS7eNqxxwlo6JU yXkxbCuayZLnIbXObagCEptrNSbImVVIs4jc9vHaLs7Z1URIdEI9XcSodWJzHeKL xNQaTbsLM+4NlBXCOLpEEYDUMeqR6sfebkUhRu3pwRBvJ7bAJVp4MkSNlAJNX5YP M/ZHgSdFjX+wXYB8tO/+TVKQW945JwXjHEW5mfYwC2HoNTKilbnx1LkO5bdcAFFP Q1vsj45pRPhSqL2zjBuIQ9cLlm3oqdKK437ptL/egQ/3T4WhdndxHcwl49nP5kiw UHFXl2tPyMhp/RDy9NXvFXW60DOv2fvYlmBRjC8q+wljMRfCMxTOxsermCo= -----END CERTIFICATE-----Generated at Sun Jan 25 15:29:01 2026 by rpki-client