This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/27F7A40AE4FD11E990830B62C4F9AE02.roa File: 27F7A40AE4FD11E990830B62C4F9AE02.roa (raw, json) Hash identifier: cO01St5klq7sbHRaA2rbwRijo6MioPJoRn5Fah/HjFE= Subject key identifier: 20:45:AE:41:45:1A:D9:D2:B9:6B:49:35:B2:8B:B1:60:1A:3E:5A:6D Certificate issuer: /CN=A912DC44/serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF Certificate serial: 0DDB Authority key identifier: A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/27F7A40AE4FD11E990830B62C4F9AE02.roa Signing time: Tue 20 Jan 2026 18:15:13 +0000 ROA not before: Tue 20 Jan 2026 18:15:13 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 138482 IP address blocks: 103.126.216.0/22 maxlen: 24 103.200.36.0/22 maxlen: 22 103.200.36.0/23 maxlen: 23 103.200.36.0/24 maxlen: 24 103.200.37.0/24 maxlen: 24 103.200.38.0/23 maxlen: 23 103.200.38.0/24 maxlen: 24 103.200.39.0/24 maxlen: 24 123.253.64.0/22 maxlen: 22 123.253.64.0/24 maxlen: 24 123.253.65.0/24 maxlen: 24 123.253.66.0/23 maxlen: 23 123.253.66.0/24 maxlen: 24 123.253.67.0/24 maxlen: 24 2401:1040::/32 maxlen: 32 2401:1040::/40 maxlen: 40 2401:1040:300::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 17:38:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3547 (0xddb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DC44, serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF Validity Not Before: Jan 20 18:15:13 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=696fc631-512b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:82:9d:cd:fd:b4:fa:7e:1c:70:3a:99:b5:be: ea:09:73:6d:61:7e:cc:35:77:db:20:b0:da:c2:7c: d0:d6:76:35:0b:ba:eb:5a:dc:a0:69:b3:d4:81:44: 75:c3:0b:b2:91:40:2d:b8:34:fa:ac:5b:94:c7:fd: b4:7c:2d:74:82:8a:7f:b9:f7:3d:d0:03:03:4d:d8: 61:ce:39:25:9c:22:0a:91:eb:fb:09:fb:f0:57:09: 0b:d5:cd:cb:f7:55:87:1e:3c:ba:bf:6a:c6:96:27: b2:b8:67:b8:86:4e:a7:e1:9d:cc:37:21:44:42:16: f4:cc:ed:0a:55:3b:04:cb:76:d4:d0:75:cc:3d:e4: 24:b6:6a:ef:9a:b3:f8:df:9d:59:a8:ec:be:c6:04: 7a:c1:a1:a1:fe:7f:23:db:59:c9:77:e7:e6:14:0a: 05:84:07:b6:5e:74:7a:53:42:79:72:0a:28:66:59: d6:91:f3:55:75:61:ba:7a:51:cc:41:84:a6:51:d5: d5:23:05:bb:7a:6e:04:7a:dc:9a:14:36:58:a4:13: ef:22:36:d2:f9:db:29:22:a7:b2:17:65:bc:27:40: 91:25:ef:5a:95:97:63:7e:33:ed:dc:ab:c4:54:f1: 36:26:73:56:67:d4:07:d6:93:c5:8b:8d:2b:6a:7c: 87:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:45:AE:41:45:1A:D9:D2:B9:6B:49:35:B2:8B:B1:60:1A:3E:5A:6D X509v3 Authority Key Identifier: keyid:A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/27F7A40AE4FD11E990830B62C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.126.216.0/22 103.200.36.0/22 123.253.64.0/22 IPv6: 2401:1040::/32 Signature Algorithm: sha256WithRSAEncryption 43:7d:e0:51:9d:bd:b1:23:41:0e:af:fe:92:74:5a:0e:ef:9a: 0f:2a:c1:91:61:37:87:39:5c:cf:97:36:e6:49:dd:11:d4:5c: 44:08:2b:53:f2:01:73:69:a4:a0:a6:7c:3d:d6:8f:13:c3:d8: 44:52:93:ba:53:fa:4d:d4:98:69:f3:20:91:aa:b3:e4:e1:f4: 08:bb:1f:d4:d0:90:33:09:cd:35:4e:72:e5:25:48:05:c8:b3: 40:8e:d8:b8:59:70:71:9f:a9:bb:61:0d:86:28:7c:9b:f2:5f: 20:a5:95:d5:e3:90:b4:fe:58:57:7d:dd:61:03:4a:ff:89:d0: 66:46:1f:37:20:ac:63:5c:db:03:4b:66:c9:d8:85:45:d0:bb: 9e:f0:55:2f:77:86:eb:4d:c2:99:cc:96:e1:fc:41:f1:16:51: a4:8b:b6:ed:3f:4e:b7:6b:c1:7a:aa:61:5c:3f:a1:b1:58:6b: d6:c3:16:87:44:6f:5e:bb:08:d9:25:ad:d6:76:0a:58:68:e5: 30:11:26:2a:9d:3f:c9:71:61:53:52:bc:32:d7:16:e1:c3:7d: f1:b2:fc:f9:8f:06:9b:dc:63:dd:f9:1a:5c:03:7a:b8:de:02: 6f:4a:a8:58:f0:ed:3b:13:cc:de:83:03:6d:e6:bb:78:68:d5: 61:91:90:3f -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICDdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx MkRDNDQxMTAvBgNVBAUTKEE2NDIxRkUxM0Q4QzkzQTdCRERGRjhCNTM3MTlCNTgw ODc0OEQwREYwHhcNMjYwMTIwMTgxNTEzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTZmYzYzMS01MTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAooKdzf20+n4ccDqZtb7qCXNtYX7MNXfbILDawnzQ1nY1C7rrWtygabPUgUR1 wwuykUAtuDT6rFuUx/20fC10gop/ufc90AMDTdhhzjklnCIKkev7CfvwVwkL1c3L 91WHHjy6v2rGlieyuGe4hk6n4Z3MNyFEQhb0zO0KVTsEy3bU0HXMPeQktmrvmrP4 351ZqOy+xgR6waGh/n8j21nJd+fmFAoFhAe2XnR6U0J5cgooZlnWkfNVdWG6elHM QYSmUdXVIwW7em4EetyaFDZYpBPvIjbS+dspIqeyF2W8J0CRJe9alZdjfjPt3KvE VPE2JnNWZ9QH1pPFi40ranyHgQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFCBFrkFF GtnSuWtJNbKLsWAaPlptMB8GA1UdIwQYMBaAFKZCH+E9jJOnvd/4tTcZtYCHSNDf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREM0NC8yOUI2QkVEQUU0 RkMxMUU5QjEzQjQ4NjBDNEY5QUUwMi9wa0lmNFQyTWs2ZTkzX2kxTnhtMWdJZEkw TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BrSWY0VDJNazZlOTNfaTFOeG0xZ0lkSTBOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkRDNDQvMjlCNkJFREFFNEZDMTFFOUIxM0I0ODYwQzRGOUFFMDIvMjdGN0E0MEFF NEZEMTFFOTkwODMwQjYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAJnftgDBAJnyCQDBAJ7/UAwDQQCAAIwBwMFACQBEEAwDQYJ KoZIhvcNAQELBQADggEBAEN94FGdvbEjQQ6v/pJ0Wg7vmg8qwZFhN4c5XM+XNuZJ 3RHUXEQIK1PyAXNppKCmfD3WjxPD2ERSk7pT+k3UmGnzIJGqs+Th9Ai7H9TQkDMJ zTVOcuUlSAXIs0CO2LhZcHGfqbthDYYofJvyXyClldXjkLT+WFd93WEDSv+J0GZG HzcgrGNc2wNLZsnYhUXQu57wVS93hutNwpnMluH8QfEWUaSLtu0/TrdrwXqqYVw/ obFYa9bDFodEb167CNklrdZ2Clho5TARJiqdP8lxYVNSvDLXFuHDffGy/PmPBpvc Y935GlwDerjeAm9KqFjw7TsTzN6DA23mu3ho1WGRkD8= -----END CERTIFICATE-----Generated at Sun Jan 25 18:42:00 2026 by rpki-client