This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/3DA866FACE8E11F0B0195B54C4F9AE02.roa File: 3DA866FACE8E11F0B0195B54C4F9AE02.roa (raw, json) Hash identifier: RgiQ8WF35R0LZX5vkH8rqo4/sWdVip9NOLXp5CugC/U= Subject key identifier: 21:C5:9B:01:14:39:08:10:47:31:29:E3:E6:C1:A4:C8:49:00:FD:CE Certificate issuer: /CN=A912F1CA/serialNumber=AF8CDCE6ED4277ECFB0FDA882AD47492DE858FB6 Certificate serial: 3E Authority key identifier: AF:8C:DC:E6:ED:42:77:EC:FB:0F:DA:88:2A:D4:74:92:DE:85:8F:B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/3DA866FACE8E11F0B0195B54C4F9AE02.roa Signing time: Fri 23 Jan 2026 07:35:31 +0000 ROA not before: Fri 23 Jan 2026 07:35:31 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 132883 IP address blocks: 103.147.12.0/24 maxlen: 24 103.147.13.0/24 maxlen: 24 2402:3320:3320::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 08:25:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F1CA, serialNumber=AF8CDCE6ED4277ECFB0FDA882AD47492DE858FB6 Validity Not Before: Jan 23 07:35:31 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=697324c3-2a4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:6a:94:0a:c0:7d:41:26:ec:7a:91:ee:0b:31: 4b:fb:2c:28:2a:7d:f5:18:3c:d4:b4:87:fc:8d:b8: 76:14:eb:ec:79:1e:58:db:04:c4:05:7e:79:8e:e8: 06:5a:11:8c:bb:6d:ea:04:90:2e:70:57:30:53:b9: 2f:67:da:72:07:4f:b6:d1:f3:b0:a7:11:27:52:16: 25:ba:36:37:66:20:a1:5b:27:d3:92:7b:3a:f6:d8: 09:b9:43:93:f3:34:c4:03:7d:47:86:51:00:a5:1f: 5b:e0:db:39:26:83:69:48:b6:e5:f6:ff:03:74:26: 40:70:1b:fb:e1:86:0e:a2:7c:cf:1a:7a:9b:e3:12: fd:f9:f0:1d:95:68:3a:55:c7:a7:b3:a6:16:f1:96: 26:eb:ed:f6:20:b9:4f:fa:f2:fb:0f:93:50:58:83: b2:1c:73:02:f1:ed:3f:1f:6f:3b:6c:11:5d:21:21: 4e:65:30:ba:9b:3f:57:87:3b:b3:f9:7a:59:16:8d: b3:4c:6e:dd:68:81:0f:b8:3e:d3:3a:c3:a9:0c:ac: 8a:12:bf:7c:67:5f:be:43:01:eb:bc:0f:45:52:72: 05:cf:f0:2d:22:50:50:97:46:6b:a3:16:bf:3d:7e: 2a:dd:07:0b:11:ee:75:81:45:bd:95:54:3c:9e:e6: cb:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C5:9B:01:14:39:08:10:47:31:29:E3:E6:C1:A4:C8:49:00:FD:CE X509v3 Authority Key Identifier: keyid:AF:8C:DC:E6:ED:42:77:EC:FB:0F:DA:88:2A:D4:74:92:DE:85:8F:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/3DA866FACE8E11F0B0195B54C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.147.12.0/23 IPv6: 2402:3320:3320::/48 Signature Algorithm: sha256WithRSAEncryption 3b:06:54:e7:d1:e2:33:79:e2:6a:95:6a:8c:2d:04:fd:62:8e: 7a:07:5d:46:42:2c:24:ec:0e:4b:e0:30:b9:27:94:5a:71:a5: 12:7c:2b:43:b6:d9:be:cc:f5:44:7d:7c:c5:c7:ad:70:53:2c: 82:00:d2:1f:da:f3:82:ee:16:6d:ea:8c:d6:a0:8f:8a:54:a7: 49:b4:96:34:97:06:d6:6e:2e:02:06:2b:57:e6:25:64:1a:a4: 13:c5:ab:7e:68:64:ec:7c:5b:d9:90:1b:3a:80:51:cc:66:a2: ff:1a:f4:c1:18:4f:c7:dc:3f:03:1f:ef:cc:89:c9:18:ad:8a: 5d:4b:56:53:09:73:e7:55:af:9e:87:b3:62:c4:37:ec:be:ce: a3:e0:53:63:b8:ed:9d:b1:c2:ee:4e:d6:aa:09:bf:3d:53:5e: ff:7a:43:bc:93:6e:3b:da:96:0e:e0:33:99:96:2a:64:99:5a: 36:05:55:8e:d3:1b:d7:89:db:bc:39:bd:bf:26:aa:bf:9b:51: 45:93:a3:89:f2:71:64:70:d0:24:b4:03:51:5b:2b:a7:f7:f2: 8e:2b:07:9c:e8:77:73:eb:5d:43:5f:a7:eb:48:5a:80:76:a9: 2d:3b:b7:50:db:12:f6:25:9a:1e:59:a8:83:4b:bd:07:98:7c: e1:71:d9:8f -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RjFDQTExMC8GA1UEBRMoQUY4Q0RDRTZFRDQyNzdFQ0ZCMEZEQTg4MkFENDc0OTJE RTg1OEZCNjAeFw0yNjAxMjMwNzM1MzFaFw0yNjEwMzEwMDAwMDBaMBgxFjAUBgNV BAMMDTY5NzMyNGMzLTJhNGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDqapQKwH1BJux6ke4LMUv7LCgqffUYPNS0h/yNuHYU6+x5HljbBMQFfnmO6AZa EYy7beoEkC5wVzBTuS9n2nIHT7bR87CnESdSFiW6NjdmIKFbJ9OSezr22Am5Q5Pz NMQDfUeGUQClH1vg2zkmg2lItuX2/wN0JkBwG/vhhg6ifM8aepvjEv358B2VaDpV x6ezphbxlibr7fYguU/68vsPk1BYg7IccwLx7T8fbztsEV0hIU5lMLqbP1eHO7P5 elkWjbNMbt1ogQ+4PtM6w6kMrIoSv3xnX75DAeu8D0VScgXP8C0iUFCXRmujFr89 firdBwsR7nWBRb2VVDye5sulAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUIcWbARQ5 CBBHMSnj5sGkyEkA/c4wHwYDVR0jBBgwFoAUr4zc5u1Cd+z7D9qIKtR0kt6Fj7Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGMUNBLzJERjVCQjgwQUIz MDExRjA4RkMwQzk0OEM0RjlBRTAyL3I0emM1dTFDZC16N0Q5cUlLdFIwa3Q2Rmo3 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcjR6YzV1MUNkLXo3RDlxSUt0UjBrdDZGajdZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjFDQS8yREY1QkI4MEFCMzAxMUYwOEZDMEM5NDhDNEY5QUUwMi8zREE4NjZGQUNF OEUxMUYwQjAxOTVCNTRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAWeTDDAPBAIAAjAJAwcAJAIzIDMgMA0GCSqGSIb3DQEBCwUA A4IBAQA7BlTn0eIzeeJqlWqMLQT9Yo56B11GQiwk7A5L4DC5J5RacaUSfCtDttm+ zPVEfXzFx61wUyyCANIf2vOC7hZt6ozWoI+KVKdJtJY0lwbWbi4CBitX5iVkGqQT xat+aGTsfFvZkBs6gFHMZqL/GvTBGE/H3D8DH+/MickYrYpdS1ZTCXPnVa+eh7Ni xDfsvs6j4FNjuO2dscLuTtaqCb89U17/ekO8k2472pYO4DOZlipkmVo2BVWO0xvX idu8Ob2/Jqq/m1FFk6OJ8nFkcNAktANRWyun9/KOKwec6Hdz611DX6frSFqAdqkt O7dQ2xL2JZoeWaiDS70HmHzhcdmP -----END CERTIFICATE-----Generated at Sun Jan 25 06:04:34 2026 by rpki-client