This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/6677438E6B7B11EA908F7C82C4F9AE02.roa File: 6677438E6B7B11EA908F7C82C4F9AE02.roa (raw, json) Hash identifier: 5l3cymHdXiL/enDYR0nHuOvETfZ2afKhbtC+bYDeZe8= Subject key identifier: E6:C6:25:DC:50:23:38:BC:71:DF:03:90:FF:A2:67:02:FA:20:40:1C Certificate issuer: /CN=A912F40E/serialNumber=14EBEE792E40521CD51B1F03203A7F8E2ABB12D2 Certificate serial: 0AAF Authority key identifier: 14:EB:EE:79:2E:40:52:1C:D5:1B:1F:03:20:3A:7F:8E:2A:BB:12:D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/6677438E6B7B11EA908F7C82C4F9AE02.roa Signing time: Tue 06 Jan 2026 19:16:23 +0000 ROA not before: Tue 06 Jan 2026 19:16:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 134837 IP address blocks: 103.149.186.0/23 maxlen: 23 103.149.186.0/24 maxlen: 24 103.149.187.0/24 maxlen: 24 2001:df3:3780::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.crl rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 18:59:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2735 (0xaaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F40E, serialNumber=14EBEE792E40521CD51B1F03203A7F8E2ABB12D2 Validity Not Before: Jan 6 19:16:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=695d5f86-b1e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d1:96:91:15:07:fa:ba:c7:35:b3:db:03:cb: 92:20:b1:68:d0:39:a9:0d:78:7c:82:62:28:1f:e2: d6:47:0c:ac:dd:53:45:16:3e:a2:eb:18:7f:7d:5d: b4:c4:cf:fb:00:d0:ee:99:91:cb:22:07:4f:c7:c8: 58:a1:07:9d:96:90:b7:62:b9:b0:bc:73:a6:08:a1: 45:95:0d:e9:d6:15:8a:0d:bb:9d:ff:d3:f7:62:1b: f1:8c:75:5a:ed:b9:e0:f7:75:c7:1f:1c:b9:29:8c: 31:6e:e0:e8:67:17:f9:78:4b:dd:5f:c1:40:e2:4d: 88:88:cb:25:8e:09:ed:85:ff:c2:bd:3a:eb:12:c3: 7c:9d:d7:2e:37:ea:7b:ea:2f:43:1c:86:13:c6:e3: 4d:e8:c0:ec:7a:90:65:a7:9a:2f:03:5b:2a:89:cc: 92:cd:ad:9a:25:97:1a:f5:ea:8a:8a:2f:2c:43:79: 8d:20:80:98:18:4d:47:7a:38:44:0e:d5:57:31:79: ad:fc:05:0f:6c:67:45:db:af:f5:26:af:ed:cb:c5: 06:f0:93:d9:fa:7e:39:54:44:5c:b9:d9:e6:5b:97: c8:cc:e4:04:04:b1:9b:b8:41:2b:a1:6d:3c:b4:ce: a2:ca:cf:6d:77:ad:00:a4:d6:66:1f:d5:ea:97:92: 5b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:C6:25:DC:50:23:38:BC:71:DF:03:90:FF:A2:67:02:FA:20:40:1C X509v3 Authority Key Identifier: keyid:14:EB:EE:79:2E:40:52:1C:D5:1B:1F:03:20:3A:7F:8E:2A:BB:12:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/6677438E6B7B11EA908F7C82C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.149.186.0/23 IPv6: 2001:df3:3780::/48 Signature Algorithm: sha256WithRSAEncryption 40:9d:ae:b7:fa:4e:65:a8:9e:35:6f:f2:09:15:58:0d:de:16: cd:da:4b:bc:76:31:0f:9e:80:ee:e6:6f:dd:d6:16:98:1f:3d: 9f:34:9a:d6:e9:9f:13:57:34:78:f7:dd:01:79:f7:1d:2d:91: 9d:5e:91:7e:df:2b:12:10:57:f9:04:02:95:59:32:c4:50:5f: d3:dc:72:7c:32:a4:d2:c7:ca:10:04:86:62:f7:d6:1a:5f:00: 80:9d:45:c8:80:72:f1:62:fc:d5:87:51:53:3f:0d:34:ac:55: 78:71:e3:11:03:f9:a8:0c:fc:a8:a1:f0:83:2e:25:f8:12:b8: f5:7d:bb:cf:a4:52:b5:f2:8d:c2:4e:c1:80:d0:2c:fb:65:1b: f6:26:83:42:90:b0:9d:31:c4:5a:9c:c1:01:6e:29:1e:4e:1e: c8:1b:0c:4d:0d:f1:8d:fb:95:8e:2f:59:de:54:73:b2:4f:16: 00:4c:2c:3a:5e:a0:6e:50:1b:c9:2f:f7:08:89:c7:2c:3b:f2: 26:1e:58:27:83:1d:8e:ed:27:27:d1:1c:10:ca:11:d4:4d:7f: 12:9d:ca:1c:e8:0d:07:df:00:69:ac:91:26:d9:25:0f:fd:f3: 59:33:48:10:2d:56:29:14:82:1a:f1:c0:cc:e6:f5:f4:51:bb: 14:21:0c:fd -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx MkY0MEUxMTAvBgNVBAUTKDE0RUJFRTc5MkU0MDUyMUNENTFCMUYwMzIwM0E3RjhF MkFCQjEyRDIwHhcNMjYwMTA2MTkxNjIyWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTVkNWY4Ni1iMWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvtGWkRUH+rrHNbPbA8uSILFo0DmpDXh8gmIoH+LWRwys3VNFFj6i6xh/fV20 xM/7ANDumZHLIgdPx8hYoQedlpC3YrmwvHOmCKFFlQ3p1hWKDbud/9P3YhvxjHVa 7bng93XHHxy5KYwxbuDoZxf5eEvdX8FA4k2IiMsljgnthf/CvTrrEsN8ndcuN+p7 6i9DHIYTxuNN6MDsepBlp5ovA1sqicySza2aJZca9eqKii8sQ3mNIICYGE1HejhE DtVXMXmt/AUPbGdF26/1Jq/ty8UG8JPZ+n45VERcudnmW5fIzOQEBLGbuEEroW08 tM6iys9td60ApNZmH9Xql5JbXwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFObGJdxQ Izi8cd8DkP+iZwL6IEAcMB8GA1UdIwQYMBaAFBTr7nkuQFIc1RsfAyA6f44quxLS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjQwRS8zMDNCM0Q3ODZC NzgxMUVBQTcxM0Q3NzhDNEY5QUUwMi9GT3Z1ZVM1QVVoelZHeDhESURwX2ppcTdF dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZPdnVlUzVBVWh6Vkd4OERJRHBfamlxN0V0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkY0MEUvMzAzQjNENzg2Qjc4MTFFQUE3MTNENzc4QzRGOUFFMDIvNjY3NzQzOEU2 QjdCMTFFQTkwOEY3QzgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnlbowDwQCAAIwCQMHACABDfM3gDANBgkqhkiG9w0BAQsF AAOCAQEAQJ2ut/pOZaieNW/yCRVYDd4WzdpLvHYxD56A7uZv3dYWmB89nzSa1umf E1c0ePfdAXn3HS2RnV6Rft8rEhBX+QQClVkyxFBf09xyfDKk0sfKEASGYvfWGl8A gJ1FyIBy8WL81YdRUz8NNKxVeHHjEQP5qAz8qKHwgy4l+BK49X27z6RStfKNwk7B gNAs+2Ub9iaDQpCwnTHEWpzBAW4pHk4eyBsMTQ3xjfuVji9Z3lRzsk8WAEwsOl6g blAbyS/3CInHLDvyJh5YJ4Mdju0nJ9EcEMoR1E1/Ep3KHOgNB98AaayRJtklD/3z WTNIEC1WKRSCGvHAzOb19FG7FCEM/Q== -----END CERTIFICATE-----Generated at Sun Jan 25 08:19:15 2026 by rpki-client