This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/42C28C36A80711F0A622350DC4F9AE02.roa File: 42C28C36A80711F0A622350DC4F9AE02.roa (raw, json) Hash identifier: S45/xPYRoVgrsdI2jRLO88Aryn+KvDaMoixBFgOO2jc= Subject key identifier: D2:39:E3:78:28:45:5A:33:51:34:B5:C3:4B:AE:00:93:9D:EF:A0:2D Certificate issuer: /CN=A9121071/serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D Certificate serial: 026A Authority key identifier: 94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/42C28C36A80711F0A622350DC4F9AE02.roa Signing time: Tue 20 Jan 2026 20:57:29 +0000 ROA not before: Tue 20 Jan 2026 20:57:28 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 150697 IP address blocks: 103.59.216.0/24 maxlen: 24 103.59.217.0/24 maxlen: 24 2001:df1:bac0::/48 maxlen: 48 2402:48a0::/33 maxlen: 33 2402:48a0:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 01:10:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 618 (0x26a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121071, serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D Validity Not Before: Jan 20 20:57:28 2026 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=696fec38-bdef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a3:4f:fd:fe:07:bf:10:18:60:79:fa:16:f4: 21:94:ef:3e:9b:9e:3c:25:45:b7:37:b4:77:51:d8: c8:85:fc:3b:df:cb:90:68:de:73:cd:47:a7:34:37: 9d:db:c7:0b:87:ab:58:d0:85:ab:ac:e0:c5:ac:34: d9:94:e0:5c:fe:7a:df:47:d7:13:43:cd:1c:7a:8c: 65:1d:50:6e:d5:b0:73:2a:57:44:77:5d:1e:8e:0b: e7:22:ed:ff:e4:2d:71:ab:30:43:6b:af:f8:9a:d7: 33:42:33:3b:4c:13:56:95:55:a4:64:0a:5d:55:64: c4:c5:77:13:e6:cb:b4:e5:3b:48:32:11:02:ad:9e: c8:0b:3e:79:7b:70:f3:de:8c:3b:ea:37:57:58:45: 99:2e:60:77:ca:a6:9f:d6:e5:da:e2:0d:45:65:f7: 6c:b5:fb:4f:e4:f0:c0:d2:52:b3:4d:24:4c:f0:ca: 95:43:df:83:8a:61:37:12:40:55:1d:fa:b0:8c:ef: 51:86:49:82:70:42:df:77:dd:16:47:18:0d:18:32: 6e:64:98:03:54:90:4d:09:8d:11:59:2c:36:72:50: bc:e7:f8:a7:57:18:f5:e0:77:a1:a5:b0:43:db:ae: bf:8b:61:8d:6e:b2:b7:83:5c:73:a8:2f:13:b3:bd: 43:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:39:E3:78:28:45:5A:33:51:34:B5:C3:4B:AE:00:93:9D:EF:A0:2D X509v3 Authority Key Identifier: keyid:94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/42C28C36A80711F0A622350DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.59.216.0/23 IPv6: 2001:df1:bac0::/48 2402:48a0::/32 Signature Algorithm: sha256WithRSAEncryption 2e:51:90:60:71:66:fd:41:5d:8f:08:30:a6:7b:2e:3c:24:da: f3:82:51:b0:4d:08:02:d9:10:9b:1b:3a:61:9e:43:4b:04:5b: 59:88:8d:fe:ac:db:8d:2d:01:21:ec:f1:b7:cd:c5:e0:fe:e1: b2:35:92:3b:cb:f6:96:96:32:67:69:5d:9c:b8:b3:34:27:27: 90:0e:c2:21:a1:08:b6:14:eb:1d:d3:06:98:61:d4:39:50:c8: 80:89:fe:58:aa:a2:fc:fe:aa:48:78:37:33:4d:81:9c:8a:10: 63:82:83:6c:81:b5:32:8e:e4:64:d8:4d:af:69:b0:2c:54:98: 2e:8b:2d:52:5b:5c:a6:73:b8:8b:72:cf:5b:90:c9:3a:b6:95: 7d:f8:f8:fe:b0:fd:a3:f0:fe:b8:9f:54:dd:b4:ce:57:17:40: ea:d6:f4:f8:9c:d1:ce:1d:51:93:17:80:6d:9e:4d:f2:d1:7f: b0:0f:cc:9d:98:e6:54:94:c1:8e:81:b9:91:92:4a:ed:87:2d: b4:a4:14:49:06:83:60:78:c4:58:ed:6d:19:b4:f5:15:3e:71: e8:81:a9:e5:7e:b5:71:56:89:41:42:5b:a8:78:28:bc:05:f9: 76:03:fe:48:4f:26:c2:fb:6b:4e:d5:da:4b:8f:36:99:e6:78: 24:85:c6:42 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICAmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx MjEwNzExMTAvBgNVBAUTKDk0QzJGNDZBMzJEMTA3NzVFMTY0OUJBMjUwRjY5N0ZG NDdBQzA2M0QwHhcNMjYwMTIwMjA1NzI4WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTZmZWMzOC1iZGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2KNP/f4HvxAYYHn6FvQhlO8+m548JUW3N7R3UdjIhfw738uQaN5zzUenNDed 28cLh6tY0IWrrODFrDTZlOBc/nrfR9cTQ80ceoxlHVBu1bBzKldEd10ejgvnIu3/ 5C1xqzBDa6/4mtczQjM7TBNWlVWkZApdVWTExXcT5su05TtIMhECrZ7ICz55e3Dz 3ow76jdXWEWZLmB3yqaf1uXa4g1FZfdstftP5PDA0lKzTSRM8MqVQ9+DimE3EkBV HfqwjO9RhkmCcELfd90WRxgNGDJuZJgDVJBNCY0RWSw2clC85/inVxj14HehpbBD 266/i2GNbrK3g1xzqC8Ts71DdwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFNI543go RVozUTS1w0uuAJOd76AtMB8GA1UdIwQYMBaAFJTC9Goy0Qd14WSbolD2l/9HrAY9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTA3MS8yRjBGN0E0ODg2 QjYxMUVEQUEzQjJCMzNDNEY5QUUwMi9sTUwwYWpMUkIzWGhaSnVpVVBhWF8wZXNC ajAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xNTDBhakxSQjNYaFpKdWlVUGFYXzBlc0JqMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjEwNzEvMkYwRjdBNDg4NkI2MTFFREFBM0IyQjMzQzRGOUFFMDIvNDJDMjhDMzZB ODA3MTFGMEE2MjIzNTBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMAwEAgABMAYDBAFnO9gwFgQCAAIwEAMHACABDfG6wAMFACQCSKAwDQYJKoZI hvcNAQELBQADggEBAC5RkGBxZv1BXY8IMKZ7Ljwk2vOCUbBNCALZEJsbOmGeQ0sE W1mIjf6s240tASHs8bfNxeD+4bI1kjvL9paWMmdpXZy4szQnJ5AOwiGhCLYU6x3T Bphh1DlQyICJ/liqovz+qkh4NzNNgZyKEGOCg2yBtTKO5GTYTa9psCxUmC6LLVJb XKZzuItyz1uQyTq2lX34+P6w/aPw/rifVN20zlcXQOrW9Pic0c4dUZMXgG2eTfLR f7APzJ2Y5lSUwY6BuZGSSu2HLbSkFEkGg2B4xFjtbRm09RU+ceiBqeV+tXFWiUFC W6h4KLwF+XYD/khPJsL7a07V2kuPNpnmeCSFxkI= -----END CERTIFICATE-----Generated at Sun Jan 25 18:28:34 2026 by rpki-client