This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/5C95BDC0C12E11EEA47CBB59C4F9AE02.roa File: 5C95BDC0C12E11EEA47CBB59C4F9AE02.roa (raw, json) Hash identifier: 7rMsJcYH90atC1w6j5iHb4gURibqgcvujGATzNnYHhA= Subject key identifier: F6:BD:E1:4D:43:F5:65:12:82:6D:C5:90:9A:7C:9D:59:2B:EE:C1:2A Certificate issuer: /CN=A912438F/serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47 Certificate serial: 07EC Authority key identifier: C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/5C95BDC0C12E11EEA47CBB59C4F9AE02.roa Signing time: Thu 22 Jan 2026 21:17:42 +0000 ROA not before: Thu 22 Jan 2026 21:17:42 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 139325 IP address blocks: 103.158.158.0/23 maxlen: 23 103.158.158.0/24 maxlen: 24 103.158.159.0/24 maxlen: 24 2001:df5:5b80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 20:40:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2028 (0x7ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912438F, serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47 Validity Not Before: Jan 22 21:17:42 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=697293f6-9d2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7b:e4:4d:66:9a:54:9d:18:87:cb:84:f4:a0: 30:5b:b3:5d:fd:04:27:7f:f9:9b:1e:70:37:d2:47: a9:0b:f3:60:bb:be:d0:d0:22:99:4f:ee:d7:50:22: 4e:8d:ed:3d:50:1f:43:a6:d5:58:4f:a9:3b:23:68: 0d:0e:c6:93:61:33:3c:37:83:96:cf:46:33:1d:86: 24:61:8c:8d:99:af:bc:54:91:0b:13:12:07:75:e2: 44:8e:90:86:c6:5c:3e:a4:2d:9c:6e:d3:2f:10:90: 08:55:13:ba:2a:15:bf:99:66:1a:a2:1f:16:0a:b7: 4d:60:43:3a:ef:84:ff:66:bf:17:5f:8a:b1:59:a3: 03:b1:11:fd:06:45:ec:e5:67:52:83:c3:87:87:91: cc:28:59:bd:bf:6d:f6:b7:9b:7a:15:90:01:f6:0a: e5:b8:f4:79:dc:c0:3f:b4:b5:90:f2:ca:71:41:28: 23:80:79:22:ca:ca:87:78:0f:bb:67:28:e5:90:ee: 25:eb:c2:d1:5b:5d:19:53:bd:42:c9:3f:5a:de:29: 9b:45:89:43:10:5c:89:16:49:3d:73:29:0f:26:58: 07:89:c5:78:29:f4:69:6e:7c:26:5c:75:c7:d2:fd: 0c:66:39:c4:89:58:82:bf:ef:e5:ef:08:be:70:fc: 14:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:BD:E1:4D:43:F5:65:12:82:6D:C5:90:9A:7C:9D:59:2B:EE:C1:2A X509v3 Authority Key Identifier: keyid:C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/5C95BDC0C12E11EEA47CBB59C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.158.158.0/23 IPv6: 2001:df5:5b80::/48 Signature Algorithm: sha256WithRSAEncryption 3e:23:62:26:68:97:0a:bc:2e:85:82:7d:bb:71:d9:59:a8:26: 5d:c8:22:c8:4e:4a:3a:d0:98:6f:14:3d:fd:e1:65:04:ea:51: 2c:cb:c8:e6:9e:40:59:f1:d0:c7:3f:fd:77:27:a2:75:30:70: 55:fa:b4:70:c5:d3:8b:57:32:a8:65:37:8d:9d:9f:ca:63:7b: 03:eb:2e:86:2e:f2:f1:91:3e:3b:72:6d:28:20:cf:6a:81:f5: 1a:4c:9d:f6:dc:b0:96:a3:b7:66:6c:2a:c3:ff:91:be:cd:dd: 3f:76:23:3c:a0:5f:b2:fb:37:c9:de:99:2c:e3:9e:ef:f1:27: 7f:a8:48:6e:75:5d:21:3c:7c:42:36:57:da:aa:ed:7c:f0:b5: 64:c6:e5:77:9f:66:e0:9e:0f:76:e4:23:f6:37:80:8b:39:cb: 14:a0:6c:93:55:fd:20:52:40:fc:7e:18:d2:6d:a8:25:c2:59: 4f:15:f2:61:ec:9d:d8:30:7f:17:13:f2:30:39:95:54:89:6b: 15:ea:6c:2a:3e:40:cd:73:be:79:2a:63:c9:7b:f9:82:35:18: e7:3e:28:ac:00:0b:57:b5:b1:be:e5:ec:f0:ff:49:1b:65:b0: 68:33:c5:09:9f:19:d6:c0:42:6e:99:28:33:97:6c:5d:34:aa: 50:7e:e7:ac -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICB+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx MjQzOEYxMTAvBgNVBAUTKEM4ODhEMUVFRTA0QkVGM0U4MTVGMDlEREZBMTkxOTNE Njk5QjRGNDcwHhcNMjYwMTIyMjExNzQyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTcyOTNmNi05ZDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArHvkTWaaVJ0Yh8uE9KAwW7Nd/QQnf/mbHnA30kepC/Ngu77Q0CKZT+7XUCJO je09UB9DptVYT6k7I2gNDsaTYTM8N4OWz0YzHYYkYYyNma+8VJELExIHdeJEjpCG xlw+pC2cbtMvEJAIVRO6KhW/mWYaoh8WCrdNYEM674T/Zr8XX4qxWaMDsRH9BkXs 5WdSg8OHh5HMKFm9v232t5t6FZAB9grluPR53MA/tLWQ8spxQSgjgHkiysqHeA+7 ZyjlkO4l68LRW10ZU71CyT9a3imbRYlDEFyJFkk9cykPJlgHicV4KfRpbnwmXHXH 0v0MZjnEiViCv+/l7wi+cPwU6QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFPa94U1D 9WUSgm3FkJp8nVkr7sEqMB8GA1UdIwQYMBaAFMiI0e7gS+8+gV8J3foZGT1pm09H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDM4Ri9DNzU5MEJENjI1 QUUxMUVCOEVFQzIyMEFDNEY5QUUwMi95SWpSN3VCTDd6NkJYd25kLWhrWlBXbWJU MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lJalI3dUJMN3o2Qlh3bmQtaGtaUFdtYlQwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjQzOEYvQzc1OTBCRDYyNUFFMTFFQjhFRUMyMjBBQzRGOUFFMDIvNUM5NUJEQzBD MTJFMTFFRUE0N0NCQjU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnnp4wDwQCAAIwCQMHACABDfVbgDANBgkqhkiG9w0BAQsF AAOCAQEAPiNiJmiXCrwuhYJ9u3HZWagmXcgiyE5KOtCYbxQ9/eFlBOpRLMvI5p5A WfHQxz/9dyeidTBwVfq0cMXTi1cyqGU3jZ2fymN7A+suhi7y8ZE+O3JtKCDPaoH1 Gkyd9tywlqO3Zmwqw/+Rvs3dP3YjPKBfsvs3yd6ZLOOe7/Enf6hIbnVdITx8QjZX 2qrtfPC1ZMbld59m4J4PduQj9jeAiznLFKBsk1X9IFJA/H4Y0m2oJcJZTxXyYeyd 2DB/FxPyMDmVVIlrFepsKj5AzXO+eSpjyXv5gjUY5z4orAALV7WxvuXs8P9JG2Ww aDPFCZ8Z1sBCbpkoM5dsXTSqUH7nrA== -----END CERTIFICATE-----Generated at Sun Jan 25 18:28:49 2026 by rpki-client