This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/EE23EF6E857B11ECA3F32D50C4F9AE02.roa File: EE23EF6E857B11ECA3F32D50C4F9AE02.roa (raw, json) Hash identifier: ASXHoYjsjfI4hw+/Bkcv/15OCUWKyB0K4lRHH5jNTVc= Subject key identifier: B3:AF:71:63:78:FD:03:4B:D6:18:0B:8D:3B:21:5F:C4:34:8E:B2:9E Certificate issuer: /CN=A9146F33/serialNumber=A5737AD97136DB53C21B6F3B1D4D771DCD57313A Certificate serial: 0455 Authority key identifier: A5:73:7A:D9:71:36:DB:53:C2:1B:6F:3B:1D:4D:77:1D:CD:57:31:3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/EE23EF6E857B11ECA3F32D50C4F9AE02.roa Signing time: Wed 07 Jan 2026 00:19:22 +0000 ROA not before: Wed 07 Jan 2026 00:19:22 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 134802 IP address blocks: 103.13.184.0/23 maxlen: 23 103.13.184.0/24 maxlen: 24 103.13.185.0/24 maxlen: 24 203.17.12.0/24 maxlen: 24 2406:2dc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.crl rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 23:25:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1109 (0x455) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146F33, serialNumber=A5737AD97136DB53C21B6F3B1D4D771DCD57313A Validity Not Before: Jan 7 00:19:22 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=695da68a-7e5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6b:3d:d8:a7:c0:e1:c3:55:fc:66:1c:3a:99: 51:68:c2:97:d9:d5:0b:a6:2d:fd:06:ef:60:d6:0e: 2e:24:c1:f1:f2:35:ab:38:0c:0c:b8:40:89:a2:14: 38:62:8b:85:8d:ce:79:ff:fe:44:08:02:2a:d3:74: 60:98:11:bb:15:c9:bd:cc:70:5c:54:3f:8d:30:a7: bc:78:c8:b1:eb:45:76:48:cd:8a:72:22:60:42:8b: 15:db:9a:4d:ba:4d:e1:9d:a3:4c:a4:79:c9:af:71: ee:bd:d4:b0:60:7f:95:ce:be:1b:b0:1d:48:70:c4: be:61:35:2b:2c:94:7a:97:ca:c6:49:26:42:1d:a7: 16:2a:13:3b:bb:39:f7:05:8e:1a:73:0f:e3:12:1a: 06:13:e7:e5:6d:49:3e:20:d9:61:27:58:da:b0:88: d8:d6:4f:f0:31:06:a8:c9:77:fe:8c:d3:ce:7b:09: 3a:5d:ec:7b:32:80:92:d6:63:f6:b2:8e:c1:b9:73: 86:8b:14:4b:dd:3e:81:ce:9b:ba:04:fc:e0:65:76: 87:95:da:87:8c:7a:fd:ab:0b:07:6d:e9:2b:b5:18: 60:cb:27:41:2b:75:60:46:0a:a2:fe:f1:e7:99:6b: 7c:8f:ec:2d:9c:d0:50:65:f9:0b:fc:4c:10:23:31: c6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:AF:71:63:78:FD:03:4B:D6:18:0B:8D:3B:21:5F:C4:34:8E:B2:9E X509v3 Authority Key Identifier: keyid:A5:73:7A:D9:71:36:DB:53:C2:1B:6F:3B:1D:4D:77:1D:CD:57:31:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/EE23EF6E857B11ECA3F32D50C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.13.184.0/23 203.17.12.0/24 IPv6: 2406:2dc0::/32 Signature Algorithm: sha256WithRSAEncryption 70:b8:b2:04:0d:13:bf:e0:68:b5:f3:7b:7f:4f:75:b9:52:18: 32:e0:52:12:df:ac:95:d8:19:d9:be:51:c5:77:b5:6e:d0:5c: 0a:1d:44:f4:a6:a7:d8:c4:91:9e:25:87:d6:42:04:a7:cc:e1: 67:59:b5:9c:92:3f:9f:7d:34:41:d8:16:7e:aa:68:da:97:e4: fd:86:9c:70:f6:e0:20:7d:b7:ab:47:e7:75:c1:5c:3f:a7:b6: 92:3b:1a:42:ff:38:57:6f:36:ee:9a:13:0b:3a:f3:f6:0d:cf: 48:25:f1:27:ef:64:03:66:f8:61:91:31:2d:6c:16:e6:cb:e8: 9f:41:5d:58:6e:3e:2a:87:11:a3:7e:83:b7:ea:e3:a2:53:5b: 3d:5b:3a:5a:9c:47:92:48:f4:df:83:41:5f:5d:04:be:35:4c: 8b:c0:1c:e6:92:65:37:8f:00:dc:6c:d6:c0:65:e2:ca:50:86: 37:cc:75:1b:21:db:17:3c:5d:92:8c:a0:83:91:51:18:68:aa: dd:1c:76:7d:c9:a3:73:43:0d:1f:e8:3a:b8:cb:31:e4:01:8e: ae:5e:42:56:b0:8c:83:e8:b6:8b:f1:43:b3:9b:5c:36:e3:da: 1d:6c:0e:7c:45:26:7b:4c:3e:3c:60:ea:6b:0f:6d:cc:51:6d: 85:78:9a:19 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICBFUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NDZGMzMxMTAvBgNVBAUTKEE1NzM3QUQ5NzEzNkRCNTNDMjFCNkYzQjFENEQ3NzFE Q0Q1NzMxM0EwHhcNMjYwMTA3MDAxOTIyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTVkYTY4YS03ZTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq2s92KfA4cNV/GYcOplRaMKX2dULpi39Bu9g1g4uJMHx8jWrOAwMuECJohQ4 YouFjc55//5ECAIq03RgmBG7Fcm9zHBcVD+NMKe8eMix60V2SM2KciJgQosV25pN uk3hnaNMpHnJr3HuvdSwYH+Vzr4bsB1IcMS+YTUrLJR6l8rGSSZCHacWKhM7uzn3 BY4acw/jEhoGE+flbUk+INlhJ1jasIjY1k/wMQaoyXf+jNPOewk6Xex7MoCS1mP2 so7BuXOGixRL3T6Bzpu6BPzgZXaHldqHjHr9qwsHbekrtRhgyydBK3VgRgqi/vHn mWt8j+wtnNBQZfkL/EwQIzHGCwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFLOvcWN4 /QNL1hgLjTshX8Q0jrKeMB8GA1UdIwQYMBaAFKVzetlxNttTwhtvOx1Ndx3NVzE6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkYzMy9CMTY1QkI4QTg1 MTExMUVDQjlEMzM1N0NDNEY5QUUwMi9wWE42MlhFMjIxUENHMjg3SFUxM0hjMVhN VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BYTjYyWEUyMjFQQ0cyODdIVTEzSGMxWE1Uby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDZGMzMvQjE2NUJCOEE4NTExMTFFQ0I5RDMzNTdDQzRGOUFFMDIvRUUyM0VGNkU4 NTdCMTFFQ0EzRjMyRDUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAFnDbgDBADLEQwwDQQCAAIwBwMFACQGLcAwDQYJKoZIhvcN AQELBQADggEBAHC4sgQNE7/gaLXze39PdblSGDLgUhLfrJXYGdm+UcV3tW7QXAod RPSmp9jEkZ4lh9ZCBKfM4WdZtZySP599NEHYFn6qaNqX5P2GnHD24CB9t6tH53XB XD+ntpI7GkL/OFdvNu6aEws68/YNz0gl8SfvZANm+GGRMS1sFubL6J9BXVhuPiqH EaN+g7fq46JTWz1bOlqcR5JI9N+DQV9dBL41TIvAHOaSZTePANxs1sBl4spQhjfM dRsh2xc8XZKMoIORURhoqt0cdn3Jo3NDDR/oOrjLMeQBjq5eQlawjIPotovxQ7Ob XDbj2h1sDnxFJntMPjxg6msPbcxRbYV4mhk= -----END CERTIFICATE-----Generated at Sun Jan 25 23:11:30 2026 by rpki-client