This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/919E2B20E52811ED863E8C34C4F9AE02.roa File: 919E2B20E52811ED863E8C34C4F9AE02.roa (raw, json) Hash identifier: F8ptmQqvn/MVqmxAQighlZAvP1w4DOrBw6vmbwzoHtc= Subject key identifier: 5A:97:AB:FC:7A:B9:C1:FF:7C:A2:03:A6:F5:44:0F:69:F8:04:C2:0C Certificate issuer: /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013 Certificate serial: 07AB Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/919E2B20E52811ED863E8C34C4F9AE02.roa Signing time: Sun 18 Jan 2026 14:40:19 +0000 ROA not before: Sun 18 Jan 2026 14:40:19 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 42960 IP address blocks: 43.254.164.0/22 maxlen: 24 43.255.120.0/22 maxlen: 24 43.255.156.0/23 maxlen: 24 43.255.159.0/24 maxlen: 24 103.24.216.0/22 maxlen: 24 103.30.76.0/22 maxlen: 24 103.171.34.0/23 maxlen: 24 103.231.56.0/22 maxlen: 24 103.240.196.0/22 maxlen: 24 2001:df7:3480::/48 maxlen: 48 2401:2660::/36 maxlen: 36 2401:2660:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:21:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1963 (0x7ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139322, serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013 Validity Not Before: Jan 18 14:40:19 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=696cf0d3-13ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:71:1c:06:b0:3b:f5:ed:b5:c2:47:d6:6f:5d: da:c9:fe:1b:11:2c:96:f2:be:aa:97:a5:c0:42:c7: 51:7a:12:27:77:26:ff:d9:e9:09:2b:27:4a:a8:87: 58:da:dc:aa:df:93:d8:ff:f6:28:f0:70:66:59:d4: 65:5b:d5:b3:b0:23:0d:c5:c7:87:70:6d:fd:3f:5d: d9:35:66:c2:40:c0:2b:3f:fe:f7:aa:f4:b7:85:47: 9b:7d:3e:21:6b:5a:ef:18:31:08:fa:bd:78:5f:3d: 75:d9:df:ef:b0:fd:47:90:53:6d:24:e1:a4:1b:11: 01:ef:ed:9b:a2:30:8c:3c:da:54:32:72:94:de:3c: d5:a5:ef:ff:d3:6d:dc:43:86:aa:fb:e9:98:c4:84: aa:b9:b6:d9:19:81:02:e8:c5:72:f7:5e:ef:eb:1b: bb:2b:ad:e5:96:7d:be:18:a3:2f:ea:bd:c2:fa:7f: d4:50:ed:02:50:8c:33:85:aa:20:58:b8:99:56:35: f7:6a:4f:f8:18:b8:74:41:a5:3e:be:8c:e2:7f:0e: 2e:a0:45:7d:15:9b:da:56:5a:04:64:78:01:8a:c9: 2f:1e:60:48:61:3d:b9:cb:29:54:7b:95:5d:34:1a: b2:e0:f5:a8:e3:d6:92:2a:56:b5:c5:a4:00:1f:41: 6a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:97:AB:FC:7A:B9:C1:FF:7C:A2:03:A6:F5:44:0F:69:F8:04:C2:0C X509v3 Authority Key Identifier: keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/919E2B20E52811ED863E8C34C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.254.164.0/22 43.255.120.0/22 43.255.156.0/23 43.255.159.0/24 103.24.216.0/22 103.30.76.0/22 103.171.34.0/23 103.231.56.0/22 103.240.196.0/22 IPv6: 2001:df7:3480::/48 2401:2660::/35 Signature Algorithm: sha256WithRSAEncryption 5e:ad:c2:97:9f:04:25:73:60:97:dd:7e:50:19:31:b9:97:b7: dc:f7:31:9c:7c:83:d8:c0:e3:86:93:06:2b:62:c6:58:f7:96: a8:b7:ab:f2:e2:c4:db:76:d6:9b:9c:86:ed:8e:b4:60:ad:cf: b8:a2:88:85:23:45:7f:5f:46:30:34:10:0f:5f:c1:21:03:b9: 41:a3:6f:36:08:43:a4:0e:c2:06:01:a8:32:50:cc:bb:48:75: 8d:44:38:8b:ea:02:32:89:12:cd:d2:62:c7:e2:43:56:24:f9: 03:27:e9:87:26:e6:2c:05:a8:1a:63:e4:6b:77:c3:6c:6c:6c: 02:55:d9:bf:fe:09:5c:87:e2:e3:e2:b3:b5:ab:98:c4:23:48: f1:c7:d5:a9:82:e4:bc:b3:38:9d:3b:fb:82:ea:03:db:08:d6: 7b:a9:aa:7e:89:bc:93:43:d8:5c:25:b2:3d:bb:a4:8c:ab:37: e4:23:9c:f2:bd:7a:9a:62:c5:94:db:80:7e:ad:0d:09:17:62: 31:d5:fc:9e:56:40:41:79:e6:c2:04:a9:6e:b2:65:4b:14:1e: 4d:8b:85:3a:c0:d6:39:88:f8:3f:3f:75:22:39:bf:74:61:10: bb:ff:75:39:00:b9:7f:b2:e8:3d:9e:57:50:67:2e:b6:7f:ff: 35:b0:6e:60 -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgICB6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkzMjIxMTAvBgNVBAUTKEVEQzU0N0JEMEU2QzBDMDcwNkExODU4MzM4MzVGNjVF QTNDNzEwMTMwHhcNMjYwMTE4MTQ0MDE5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTZjZjBkMy0xM2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtHEcBrA79e21wkfWb13ayf4bESyW8r6ql6XAQsdRehIndyb/2ekJKydKqIdY 2tyq35PY//Yo8HBmWdRlW9WzsCMNxceHcG39P13ZNWbCQMArP/73qvS3hUebfT4h a1rvGDEI+r14Xz112d/vsP1HkFNtJOGkGxEB7+2bojCMPNpUMnKU3jzVpe//023c Q4aq++mYxISqubbZGYEC6MVy917v6xu7K63lln2+GKMv6r3C+n/UUO0CUIwzhaog WLiZVjX3ak/4GLh0QaU+vozifw4uoEV9FZvaVloEZHgBiskvHmBIYT25yylUe5Vd NBqy4PWo49aSKla1xaQAH0FqZwIDAQABo4IC3jCCAtowHQYDVR0OBBYEFFqXq/x6 ucH/fKIDpvVED2n4BMIMMB8GA1UdIwQYMBaAFO3FR70ObAwHBqGFgzg19l6jxxAT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTMyMi8yQ0IxRUVCQUY2 NTMxMUVCQTFCNEE2MUFDNEY5QUUwMi83Y1ZIdlE1c0RBY0dvWVdET0RYMlhxUEhF Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdjVkh2UTVzREFjR29ZV0RPRFgyWHFQSEVCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzkzMjIvMkNCMUVFQkFGNjUzMTFFQkExQjRBNjFBQzRGOUFFMDIvOTE5RTJCMjBF NTI4MTFFRDg2M0U4QzM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwaAYIKwYBBQUHAQcBAf8E WTBXMDwEAgABMDYDBAIr/qQDBAIr/3gDBAEr/5wDBAAr/58DBAJnGNgDBAJnHkwD BAFnqyIDBAJn5zgDBAJn8MQwFwQCAAIwEQMHACABDfc0gAMGBSQBJmAAMA0GCSqG SIb3DQEBCwUAA4IBAQBercKXnwQlc2CX3X5QGTG5l7fc9zGcfIPYwOOGkwYrYsZY 95aot6vy4sTbdtabnIbtjrRgrc+4ooiFI0V/X0YwNBAPX8EhA7lBo282CEOkDsIG AagyUMy7SHWNRDiL6gIyiRLN0mLH4kNWJPkDJ+mHJuYsBagaY+Rrd8NsbGwCVdm/ /glch+Lj4rO1q5jEI0jxx9WpguS8szidO/uC6gPbCNZ7qap+ibyTQ9hcJbI9u6SM qzfkI5zyvXqaYsWU24B+rQ0JF2Ix1fyeVkBBeebCBKlusmVLFB5Ni4U6wNY5iPg/ P3UiOb90YRC7/3U5ALl/sug9nldQZy62f/81sG5g -----END CERTIFICATE-----Generated at Sun Jan 25 15:34:05 2026 by rpki-client