This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/CBF9AD5449E811E6BAF4525DC4F9AE02.roa File: CBF9AD5449E811E6BAF4525DC4F9AE02.roa (raw, json) Hash identifier: q9f3k0/9mzu8O0vPfqHE4bUZ+gNN9LNqZG8y9E2uN+g= Subject key identifier: 1B:49:2F:11:F3:7E:E9:96:C2:D7:76:37:B0:5A:4D:04:4D:20:90:74 Certificate issuer: /CN=A9127342/serialNumber=C49663D96BC932D743840BC67FD87BF8E015467C Certificate serial: 2384 Authority key identifier: C4:96:63:D9:6B:C9:32:D7:43:84:0B:C6:7F:D8:7B:F8:E0:15:46:7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/CBF9AD5449E811E6BAF4525DC4F9AE02.roa Signing time: Fri 02 Jan 2026 16:14:36 +0000 ROA not before: Fri 02 Jan 2026 16:14:36 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 134839 IP address blocks: 103.222.238.0/24 maxlen: 24 103.245.176.0/24 maxlen: 24 103.247.180.0/24 maxlen: 24 2001:df7:a401::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 15:39:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9092 (0x2384) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127342, serialNumber=C49663D96BC932D743840BC67FD87BF8E015467C Validity Not Before: Jan 2 16:14:36 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6957eeeb-878f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:08:c4:42:c8:85:a1:db:fd:4d:b1:5b:9f:aa: 9c:6e:01:13:99:74:3a:8c:b0:00:68:71:be:ab:fc: 39:32:87:de:e0:2a:03:4b:cc:6d:6b:6d:e9:1b:30: 98:75:67:b9:62:a5:c8:f2:7c:51:e3:5c:60:09:05: d1:bb:9b:8b:28:2e:bd:90:d7:01:3e:ad:1b:b1:42: bd:c9:bd:9f:7c:7e:f2:26:1f:fa:b8:1b:5c:ee:df: 9a:dd:a8:76:b7:53:31:e2:ce:67:b5:40:df:9c:30: 24:0f:e6:3a:dd:0b:c1:5c:b7:31:99:0e:92:08:84: 1c:8a:ef:a9:3d:d9:a9:00:61:9d:2b:1d:c2:d5:54: 5c:23:f2:9a:ea:88:55:b7:ae:f5:07:08:7a:6c:f2: 2f:70:70:33:b0:0a:0f:0f:64:c4:5e:e8:e5:9e:a6: af:56:44:f0:aa:01:82:25:45:91:d3:d9:05:89:0d: 0a:34:2a:c3:f6:5d:c4:5a:9c:0b:16:a6:0b:3c:1f: 4f:86:73:53:39:4f:2f:d7:cc:04:6d:ce:4b:74:8d: 36:8d:41:96:61:d2:19:be:de:4d:6e:12:c4:e5:3f: 13:bc:7b:4f:1a:00:7b:0a:1b:6f:f7:00:4f:ad:9d: 7d:2b:40:c9:41:a7:32:2d:dc:48:e1:75:68:cf:95: 12:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:49:2F:11:F3:7E:E9:96:C2:D7:76:37:B0:5A:4D:04:4D:20:90:74 X509v3 Authority Key Identifier: keyid:C4:96:63:D9:6B:C9:32:D7:43:84:0B:C6:7F:D8:7B:F8:E0:15:46:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/CBF9AD5449E811E6BAF4525DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.222.238.0/24 103.245.176.0/24 103.247.180.0/24 IPv6: 2001:df7:a401::/48 Signature Algorithm: sha256WithRSAEncryption 32:5c:a4:18:22:c9:9a:68:8b:00:02:68:cc:d1:48:4e:20:f9: 97:8b:65:ab:00:10:91:74:c1:fd:c1:7e:6c:7c:78:a0:8e:bc: 1a:10:53:09:2a:67:17:df:08:47:97:5b:84:50:a9:0f:91:7f: 43:77:97:5d:ea:b1:f4:89:ad:d7:58:65:04:b4:ab:88:e4:53: c5:f0:09:f2:17:4d:d6:7f:f8:1b:7a:8d:67:2b:90:a3:95:e5: db:ce:2b:1c:32:48:0f:7a:2d:0c:67:fd:d5:c4:5d:92:28:2e: ac:7f:da:c7:1e:a1:02:de:25:43:0c:71:a9:90:6c:a4:45:3f: 0e:11:70:c6:43:64:d8:81:7f:d3:15:e5:be:b4:52:8f:23:1e: 58:fe:66:23:6d:f6:39:80:3f:8d:ae:a0:11:e6:72:8e:9c:a7: 59:2d:de:3f:7d:7b:39:9f:ce:e6:d8:8e:0b:fe:4b:87:bd:ef: fb:42:74:76:57:7c:6c:6d:62:49:32:dc:03:eb:3e:51:d1:37: d0:05:06:e9:e6:6b:a0:2d:b5:a6:1b:0b:d9:6d:88:e3:b0:fc: 91:10:f6:84:dd:11:e4:69:ed:ef:48:e4:5a:0f:01:b9:0b:6b: 29:01:bc:4a:6e:50:54:78:87:70:9e:6a:ea:cc:5f:86:3d:dd: 18:91:64:e0 -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICI4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx MjczNDIxMTAvBgNVBAUTKEM0OTY2M0Q5NkJDOTMyRDc0Mzg0MEJDNjdGRDg3QkY4 RTAxNTQ2N0MwHhcNMjYwMTAyMTYxNDM2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU3ZWVlYi04NzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnAjEQsiFodv9TbFbn6qcbgETmXQ6jLAAaHG+q/w5Mofe4CoDS8xta23pGzCY dWe5YqXI8nxR41xgCQXRu5uLKC69kNcBPq0bsUK9yb2ffH7yJh/6uBtc7t+a3ah2 t1Mx4s5ntUDfnDAkD+Y63QvBXLcxmQ6SCIQciu+pPdmpAGGdKx3C1VRcI/Ka6ohV t671Bwh6bPIvcHAzsAoPD2TEXujlnqavVkTwqgGCJUWR09kFiQ0KNCrD9l3EWpwL FqYLPB9PhnNTOU8v18wEbc5LdI02jUGWYdIZvt5NbhLE5T8TvHtPGgB7Chtv9wBP rZ19K0DJQacyLdxI4XVoz5USfwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFBtJLxHz fumWwtd2N7BaTQRNIJB0MB8GA1UdIwQYMBaAFMSWY9lryTLXQ4QLxn/Ye/jgFUZ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzM0Mi82RERCQzdGQzkz MjcxMUU1QTgxRjMwM0VDNEY5QUUwMi94SlpqMld2Sk10ZERoQXZHZjloNy1PQVZS bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hKWmoyV3ZKTXRkRGhBdkdmOWg3LU9BVlJudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjczNDIvNkREQkM3RkM5MzI3MTFFNUE4MUYzMDNFQzRGOUFFMDIvQ0JGOUFENTQ0 OUU4MTFFNkJBRjQ1MjVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E LTArMBgEAgABMBIDBABn3u4DBABn9bADBABn97QwDwQCAAIwCQMHACABDfekATAN BgkqhkiG9w0BAQsFAAOCAQEAMlykGCLJmmiLAAJozNFITiD5l4tlqwAQkXTB/cF+ bHx4oI68GhBTCSpnF98IR5dbhFCpD5F/Q3eXXeqx9Imt11hlBLSriORTxfAJ8hdN 1n/4G3qNZyuQo5Xl284rHDJID3otDGf91cRdkigurH/axx6hAt4lQwxxqZBspEU/ DhFwxkNk2IF/0xXlvrRSjyMeWP5mI232OYA/ja6gEeZyjpynWS3eP317OZ/O5tiO C/5Lh73v+0J0dld8bG1iSTLcA+s+UdE30AUG6eZroC21phsL2W2I47D8kRD2hN0R 5Gnt70jkWg8BuQtrKQG8Sm5QVHiHcJ5q6sxfhj3dGJFk4A== -----END CERTIFICATE-----Generated at Sun Jan 25 13:57:20 2026 by rpki-client