This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/1C8955ACFB3911EFA7A85D5EC4F9AE02.roa File: 1C8955ACFB3911EFA7A85D5EC4F9AE02.roa (raw, json) Hash identifier: dz7B3/XrjBDe1+l9My7KU1R+q1q+fbfuJZvwhzewWLE= Subject key identifier: 5B:FE:FD:15:08:5C:6B:81:39:0D:05:E5:40:1A:BF:62:84:9F:DE:6D Certificate issuer: /CN=A9141274/serialNumber=6958A1AB3ACF7F95EDA5AD9C9E41E449B6D117F2 Certificate serial: AB Authority key identifier: 69:58:A1:AB:3A:CF:7F:95:ED:A5:AD:9C:9E:41:E4:49:B6:D1:17:F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aVihqzrPf5Xtpa2cnkHkSbbRF_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/1C8955ACFB3911EFA7A85D5EC4F9AE02.roa Signing time: Fri 09 Jan 2026 06:24:30 +0000 ROA not before: Fri 09 Jan 2026 06:24:30 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 135357 IP address blocks: 103.20.192.0/22 maxlen: 22 103.20.192.0/24 maxlen: 24 103.20.193.0/24 maxlen: 24 103.20.194.0/24 maxlen: 24 103.20.195.0/24 maxlen: 24 103.27.176.0/22 maxlen: 22 103.27.176.0/24 maxlen: 24 103.27.177.0/24 maxlen: 24 103.27.178.0/24 maxlen: 24 103.27.179.0/24 maxlen: 24 103.30.4.0/22 maxlen: 22 103.30.4.0/24 maxlen: 24 103.30.5.0/24 maxlen: 24 103.30.6.0/24 maxlen: 24 103.30.7.0/24 maxlen: 24 103.226.152.0/22 maxlen: 22 103.226.152.0/24 maxlen: 24 103.226.153.0/24 maxlen: 24 103.226.154.0/24 maxlen: 24 103.226.155.0/24 maxlen: 24 202.8.120.0/22 maxlen: 22 202.8.120.0/24 maxlen: 24 202.8.121.0/24 maxlen: 24 202.8.122.0/24 maxlen: 24 202.8.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.crl rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aVihqzrPf5Xtpa2cnkHkSbbRF_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 05:24:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141274, serialNumber=6958A1AB3ACF7F95EDA5AD9C9E41E449B6D117F2 Validity Not Before: Jan 9 06:24:30 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69609f1e-5488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f4:83:f6:8d:52:ad:56:35:6f:0b:72:c7:e0: ab:bc:4d:34:7b:ed:32:7c:cf:03:82:25:fa:04:7c: 6b:d5:97:da:ab:cc:8f:67:b7:7c:b1:59:f6:f2:fa: 68:78:f7:5e:86:4e:f5:4b:c7:75:9b:0d:91:f7:87: 7a:f4:b7:4e:6f:ea:3f:d2:c2:d9:a7:5e:31:2a:96: 3f:12:2e:4c:cd:c4:8f:88:5c:28:88:13:08:4e:de: 8e:01:99:94:6c:ef:c4:ff:ee:c0:96:1b:45:66:40: 6d:fe:46:2c:51:4d:c6:d9:e9:b3:03:cf:56:e1:06: 9d:06:f8:2f:64:ff:1c:0d:70:5e:a8:de:03:ed:45: 8b:e3:c2:89:69:60:98:ae:be:45:9b:c1:3f:f1:30: 03:4a:2b:9b:5d:a1:31:d3:f2:3d:74:a4:f1:99:bf: a2:6b:27:66:6c:cd:7b:da:bd:4a:07:e7:4c:49:f3: 7e:4b:dd:d7:4f:82:29:b2:0c:da:98:e2:15:01:e1: 05:33:f1:44:b9:9f:14:de:6d:a2:42:62:68:50:f4: dd:ee:79:46:cb:e6:b5:6d:bf:a4:e9:3a:78:ec:82: 9a:63:84:e7:a8:73:b0:12:ec:37:f1:5b:de:62:76: 89:b3:5f:7e:76:d5:9c:06:c2:e5:15:60:40:9f:cd: 73:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:FE:FD:15:08:5C:6B:81:39:0D:05:E5:40:1A:BF:62:84:9F:DE:6D X509v3 Authority Key Identifier: keyid:69:58:A1:AB:3A:CF:7F:95:ED:A5:AD:9C:9E:41:E4:49:B6:D1:17:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aVihqzrPf5Xtpa2cnkHkSbbRF_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/1C8955ACFB3911EFA7A85D5EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.20.192.0/22 103.27.176.0/22 103.30.4.0/22 103.226.152.0/22 202.8.120.0/22 Signature Algorithm: sha256WithRSAEncryption 64:90:7d:e2:19:5e:bd:b6:2e:b5:bc:8b:61:fe:6b:ce:8e:c8: 1f:63:d3:fb:71:00:6d:5e:13:8b:da:52:0b:97:8d:09:a6:e7: 06:f1:f9:bd:06:39:ad:16:26:f7:43:6f:59:df:be:94:45:31: cc:69:3c:d4:96:00:63:e0:24:93:a0:dc:c7:fb:c1:9a:38:06: 6b:29:07:a0:1d:f6:9a:c5:2d:eb:32:39:92:ce:12:56:d4:d9: 9e:60:0a:13:56:b4:da:80:bb:3d:d7:26:b1:6f:5a:c7:62:de: 68:5a:fe:72:7a:69:27:93:4b:46:76:5c:72:66:d2:7f:5e:15: 8c:1b:27:57:4e:01:4e:a6:77:28:d1:b5:b2:b2:74:5c:a5:b4: 11:0f:fc:5a:9b:6c:fe:3b:3a:25:04:56:e9:21:63:a9:61:b5: 06:ca:dc:47:34:79:52:c9:c7:a3:66:64:67:7c:eb:16:b5:c6: 99:a9:53:b1:6e:ea:ad:de:e1:7e:ba:82:56:7f:d0:e1:48:8a: e0:7e:aa:d0:50:44:5e:c4:77:2b:9c:db:90:71:00:f6:5b:85: db:cd:b7:3b:68:ff:b9:af:38:cd:e0:df:93:30:89:b2:e2:14: 1c:a2:c5:9a:12:b2:26:0b:24:5e:88:e8:11:b7:81:c1:d1:46: d5:37:e3:ea -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NDEyNzQxMTAvBgNVBAUTKDY5NThBMUFCM0FDRjdGOTVFREE1QUQ5QzlFNDFFNDQ5 QjZEMTE3RjIwHhcNMjYwMTA5MDYyNDMwWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTYwOWYxZS01NDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsvSD9o1SrVY1bwtyx+CrvE00e+0yfM8DgiX6BHxr1Zfaq8yPZ7d8sVn28vpo ePdehk71S8d1mw2R94d69LdOb+o/0sLZp14xKpY/Ei5MzcSPiFwoiBMITt6OAZmU bO/E/+7AlhtFZkBt/kYsUU3G2emzA89W4QadBvgvZP8cDXBeqN4D7UWL48KJaWCY rr5Fm8E/8TADSiubXaEx0/I9dKTxmb+iaydmbM172r1KB+dMSfN+S93XT4Ipsgza mOIVAeEFM/FEuZ8U3m2iQmJoUPTd7nlGy+a1bb+k6Tp47IKaY4TnqHOwEuw38Vve YnaJs19+dtWcBsLlFWBAn81zAwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFFv+/RUI XGuBOQ0F5UAav2KEn95tMB8GA1UdIwQYMBaAFGlYoas6z3+V7aWtnJ5B5Em20Rfy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTI3NC9EOTlGM0FGQUZC MjMxMUVGOUYxNUM3NEFDNEY5QUUwMi9hVmlocXpyUGY1WHRwYTJjbmtIa1NiYlJG X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FWaWhxenJQZjVYdHBhMmNua0hrU2JiUkZfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDEyNzQvRDk5RjNBRkFGQjIzMTFFRjlGMTVDNzRBQzRGOUFFMDIvMUM4OTU1QUNG QjM5MTFFRkE3QTg1RDVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMCQEAgABMB4DBAJnFMADBAJnG7ADBAJnHgQDBAJn4pgDBALKCHgwDQYJKoZI hvcNAQELBQADggEBAGSQfeIZXr22LrW8i2H+a86OyB9j0/txAG1eE4vaUguXjQmm 5wbx+b0GOa0WJvdDb1nfvpRFMcxpPNSWAGPgJJOg3Mf7wZo4BmspB6Ad9prFLesy OZLOElbU2Z5gChNWtNqAuz3XJrFvWsdi3mha/nJ6aSeTS0Z2XHJm0n9eFYwbJ1dO AU6mdyjRtbKydFyltBEP/FqbbP47OiUEVukhY6lhtQbK3Ec0eVLJx6NmZGd86xa1 xpmpU7Fu6q3e4X66glZ/0OFIiuB+qtBQRF7Edyuc25BxAPZbhdvNtzto/7mvOM3g 35MwibLiFByixZoSsiYLJF6I6BG3gcHRRtU34+o= -----END CERTIFICATE-----Generated at Sun Jan 25 15:34:50 2026 by rpki-client