This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/799C6AD8149711EFB0CB9E0AC4F9AE02.roa File: 799C6AD8149711EFB0CB9E0AC4F9AE02.roa (raw, json) Hash identifier: cOp5sUcoYEnEztztO+T500DyxL7CYS0HiI+xdZhUUyI= Subject key identifier: E2:82:2D:EA:09:37:D6:C5:92:50:30:88:49:24:52:27:42:BD:F7:6E Certificate issuer: /CN=A9149A0D/serialNumber=5F8F0161B7ACBB255F13CF081B6653619B4E2C02 Certificate serial: 0831 Authority key identifier: 5F:8F:01:61:B7:AC:BB:25:5F:13:CF:08:1B:66:53:61:9B:4E:2C:02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/799C6AD8149711EFB0CB9E0AC4F9AE02.roa Signing time: Mon 05 Jan 2026 04:17:11 +0000 ROA not before: Mon 05 Jan 2026 04:17:11 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 138456 IP address blocks: 103.126.24.0/24 maxlen: 24 103.152.206.0/24 maxlen: 24 2001:df7:3700::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.crl rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 20:13:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2097 (0x831) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149A0D, serialNumber=5F8F0161B7ACBB255F13CF081B6653619B4E2C02 Validity Not Before: Jan 5 04:17:11 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=695b3b47-b412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fb:33:24:2e:ff:d1:7c:7b:8f:61:f4:39:cc: 6e:77:81:c9:25:40:83:24:05:c9:cb:21:42:d8:ce: 08:a1:a5:cd:d8:7e:c3:81:82:42:ee:64:95:4b:1b: ca:42:d3:48:52:ad:10:a6:c3:3a:e2:b1:49:ec:5a: ae:47:9e:02:97:17:79:35:d9:c5:6b:e1:fb:a5:36: 79:b1:02:53:75:a2:13:97:d2:ed:db:30:1b:ce:a7: 7e:ee:62:47:76:62:98:1e:a6:0f:ff:b4:7b:60:b9: e4:f0:d9:4f:91:5a:c2:e8:e0:d6:94:b6:34:58:2e: 87:9a:4e:25:cf:69:41:a8:32:45:e0:eb:41:2b:d8: fc:5f:82:25:d8:2f:df:e4:75:71:66:7c:19:4f:88: a2:2b:20:d2:b3:6b:07:f8:8c:62:d6:7a:0d:16:5f: 12:f2:d6:c8:b1:e0:49:2f:c0:73:87:4c:e9:e0:ce: aa:e9:dd:97:2d:4d:ad:3b:4f:45:6f:74:1f:94:f6: 27:8d:3d:68:79:95:48:2c:04:42:ef:f0:b0:4f:88: 7a:ea:a1:bb:28:79:d0:d2:31:6a:e8:aa:87:e9:10: 3e:cd:88:72:37:60:6e:ab:a2:4a:0b:2c:fb:82:bb: 86:36:97:fd:46:03:df:30:e2:83:b8:b7:3d:a3:0f: f5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:82:2D:EA:09:37:D6:C5:92:50:30:88:49:24:52:27:42:BD:F7:6E X509v3 Authority Key Identifier: keyid:5F:8F:01:61:B7:AC:BB:25:5F:13:CF:08:1B:66:53:61:9B:4E:2C:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/799C6AD8149711EFB0CB9E0AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.126.24.0/24 103.152.206.0/24 IPv6: 2001:df7:3700::/48 Signature Algorithm: sha256WithRSAEncryption 8e:79:a2:de:76:1a:56:be:07:ab:6e:ba:5a:ad:a0:79:ee:7f: a3:dc:08:e6:ed:65:ed:2c:eb:ed:cf:ec:e7:9f:8b:89:6a:16: 7c:26:b8:b2:89:d7:00:3a:17:0c:43:d3:a6:1a:60:82:8b:1a: 56:f5:a9:ba:9a:78:dc:9e:29:b1:1c:0f:32:85:49:ca:79:72: 61:cb:97:9e:e6:22:93:09:a5:be:5e:7f:5a:59:8f:b2:0e:8d: e6:cf:b6:c3:ef:4f:57:50:bc:5c:ae:81:ea:2b:a8:28:e4:fe: 9d:11:c6:a6:43:78:65:7e:42:a7:f5:d7:9a:ce:07:32:e1:6a: 6a:40:96:40:83:a4:ea:59:cc:53:e9:7b:ce:a2:39:3a:74:c3: 38:01:45:67:25:7c:00:ef:d4:9f:ee:f0:51:12:e7:51:ea:4d: 2f:3b:02:bd:8b:58:ce:08:2c:7b:6a:ff:03:4e:13:78:aa:db: 63:50:0b:e5:10:3a:63:8b:4b:36:a3:f9:74:ec:ef:0b:9e:f8: 4a:70:36:94:cc:0c:d4:f9:a0:8f:b0:b9:26:d6:57:44:f6:3a: c1:e9:e2:17:7f:c0:17:1d:cb:cc:36:1b:12:1c:43:96:e5:17: a2:a1:dd:0d:e5:78:78:c3:72:be:7a:5c:8e:f6:e2:1b:84:81: c0:b1:e4:ef -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICCDEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NDlBMEQxMTAvBgNVBAUTKDVGOEYwMTYxQjdBQ0JCMjU1RjEzQ0YwODFCNjY1MzYx OUI0RTJDMDIwHhcNMjYwMTA1MDQxNzExWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTViM2I0Ny1iNDEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuPszJC7/0Xx7j2H0Ocxud4HJJUCDJAXJyyFC2M4IoaXN2H7DgYJC7mSVSxvK QtNIUq0QpsM64rFJ7FquR54Clxd5NdnFa+H7pTZ5sQJTdaITl9Lt2zAbzqd+7mJH dmKYHqYP/7R7YLnk8NlPkVrC6ODWlLY0WC6Hmk4lz2lBqDJF4OtBK9j8X4Il2C/f 5HVxZnwZT4iiKyDSs2sH+Ixi1noNFl8S8tbIseBJL8Bzh0zp4M6q6d2XLU2tO09F b3QflPYnjT1oeZVILARC7/CwT4h66qG7KHnQ0jFq6KqH6RA+zYhyN2Buq6JKCyz7 gruGNpf9RgPfMOKDuLc9ow/13wIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFOKCLeoJ N9bFklAwiEkkUidCvfduMB8GA1UdIwQYMBaAFF+PAWG3rLslXxPPCBtmU2GbTiwC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUEwRC8wRkI3OTE2NEZC MTUxMUVBQjAxMUVDNkVDNEY5QUUwMi9YNDhCWWJlc3V5VmZFODhJRzJaVFladE9M QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g0OEJZYmVzdXlWZkU4OElHMlpUWVp0T0xBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlBMEQvMEZCNzkxNjRGQjE1MTFFQUIwMTFFQzZFQzRGOUFFMDIvNzk5QzZBRDgx NDk3MTFFRkIwQ0I5RTBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABnfhgDBABnmM4wDwQCAAIwCQMHACABDfc3ADANBgkqhkiG 9w0BAQsFAAOCAQEAjnmi3nYaVr4Hq266Wq2gee5/o9wI5u1l7Szr7c/s55+LiWoW fCa4sonXADoXDEPTphpggosaVvWpupp43J4psRwPMoVJynlyYcuXnuYikwmlvl5/ WlmPsg6N5s+2w+9PV1C8XK6B6iuoKOT+nRHGpkN4ZX5Cp/XXms4HMuFqakCWQIOk 6lnMU+l7zqI5OnTDOAFFZyV8AO/Un+7wURLnUepNLzsCvYtYzggse2r/A04TeKrb Y1AL5RA6Y4tLNqP5dOzvC574SnA2lMwM1Pmgj7C5JtZXRPY6weniF3/AFx3LzDYb EhxDluUXoqHdDeV4eMNyvnpcjvbiG4SBwLHk7w== -----END CERTIFICATE-----Generated at Sun Jan 25 10:46:14 2026 by rpki-client