This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/279EE41683E111ECBB82F47DC4F9AE02.roa File: 279EE41683E111ECBB82F47DC4F9AE02.roa (raw, json) Hash identifier: WnTSbTiz+vmv7qMM30vGDNj9dz/JiCnV2vAJFEIuSsQ= Subject key identifier: 29:0E:8C:CB:71:A0:2D:04:BD:F5:83:9B:DC:E3:B2:46:E2:DC:33:50 Certificate issuer: /CN=A914B30A/serialNumber=137F69888BEE9CC83BAB41FAF2C942D10AF2CB65 Certificate serial: 04E6 Authority key identifier: 13:7F:69:88:8B:EE:9C:C8:3B:AB:41:FA:F2:C9:42:D1:0A:F2:CB:65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E39piIvunMg7q0H68slC0Qryy2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/279EE41683E111ECBB82F47DC4F9AE02.roa Signing time: Tue 30 Dec 2025 23:19:16 +0000 ROA not before: Tue 30 Dec 2025 23:19:16 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 133326 IP address blocks: 103.176.120.0/24 maxlen: 24 2001:df0:dc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/E39piIvunMg7q0H68slC0Qryy2U.crl rsync://rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/E39piIvunMg7q0H68slC0Qryy2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E39piIvunMg7q0H68slC0Qryy2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:57:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1254 (0x4e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B30A, serialNumber=137F69888BEE9CC83BAB41FAF2C942D10AF2CB65 Validity Not Before: Dec 30 23:19:16 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69545df4-5db7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7d:84:5f:6d:db:73:cd:50:e1:24:7d:1d:b9: 61:1b:81:47:0f:84:12:28:a9:13:d7:e8:f7:20:67: dd:5b:91:dc:b2:52:c0:5d:ce:2d:ae:24:14:de:83: f1:35:92:5c:b8:a9:27:b9:17:83:a6:d0:b3:70:ca: e8:d0:c3:4b:53:e0:e1:93:e5:94:2d:eb:0d:63:63: 72:20:af:ce:8a:42:42:8a:52:4b:22:96:72:17:ec: 06:30:5e:05:a5:81:90:3f:5c:42:75:ad:70:36:1c: cf:22:2f:ac:27:cd:9a:00:9d:0e:d7:56:07:e5:16: 60:b7:28:26:5c:a1:da:58:8f:e9:e8:37:5e:76:81: 75:19:a7:55:15:56:1d:ff:d3:d9:51:06:11:ec:56: 76:cc:05:e0:f2:53:4e:a3:69:00:06:8a:eb:e8:bd: 3a:1c:c1:e7:96:2a:71:52:65:ba:ec:31:50:23:4c: 60:31:b5:b8:34:ed:56:41:3a:69:95:f0:06:34:22: 26:4d:c3:86:d1:c2:c7:40:f9:d8:b8:e0:01:e2:96: db:63:4a:01:92:9e:f1:60:45:30:06:63:f4:c3:90: c1:d9:ae:d2:56:ce:98:3a:35:f7:0b:ef:0a:d1:70: 3a:3b:6d:36:ea:90:73:83:f7:57:2b:26:50:a7:87: 82:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:0E:8C:CB:71:A0:2D:04:BD:F5:83:9B:DC:E3:B2:46:E2:DC:33:50 X509v3 Authority Key Identifier: keyid:13:7F:69:88:8B:EE:9C:C8:3B:AB:41:FA:F2:C9:42:D1:0A:F2:CB:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/E39piIvunMg7q0H68slC0Qryy2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E39piIvunMg7q0H68slC0Qryy2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/279EE41683E111ECBB82F47DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.176.120.0/24 IPv6: 2001:df0:dc0::/48 Signature Algorithm: sha256WithRSAEncryption 2a:87:93:d8:c0:26:75:36:3b:7a:01:cb:99:3a:71:61:99:4a: c1:2a:74:68:ae:06:cd:0a:ed:48:2e:81:84:49:09:1c:4d:ee: 09:91:7a:da:28:a3:d0:6f:4c:2f:f0:e8:5d:69:d0:f5:a0:71: 93:4e:e4:82:8c:31:76:70:aa:e0:67:27:a8:dc:6d:ea:39:03: 54:88:db:42:82:f5:3d:7d:46:be:9b:ac:70:ea:36:a5:91:77: ee:a7:2b:18:54:fe:85:ad:d2:52:af:7b:11:8c:91:2a:df:b9: 00:e9:07:da:4a:2a:ec:16:b8:a6:8c:c1:d1:22:68:0d:17:77: 29:b1:42:38:ce:97:8f:04:dd:95:1b:2f:94:df:e5:61:fc:38: 84:11:b8:7f:71:cb:d6:0c:ca:56:9b:0d:f0:b6:66:b2:ef:22: 99:1e:5a:a1:16:6d:9b:07:b5:35:5b:ab:10:33:81:4c:f7:7e: e7:f6:af:65:0d:6b:59:88:be:45:de:bb:2d:83:de:78:54:3c: 47:22:95:8a:d0:cf:ae:02:e8:4a:76:71:26:04:47:87:81:6d: 69:c4:fc:b9:db:58:26:70:19:09:6a:cd:2c:a0:13:23:11:83: 9a:01:fc:a1:99:24:e3:d7:b4:7a:f7:ca:5c:37:9b:14:e3:23: 13:0e:00:1a -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NEIzMEExMTAvBgNVBAUTKDEzN0Y2OTg4OEJFRTlDQzgzQkFCNDFGQUYyQzk0MkQx MEFGMkNCNjUwHhcNMjUxMjMwMjMxOTE2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU0NWRmNC01ZGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtH2EX23bc81Q4SR9HblhG4FHD4QSKKkT1+j3IGfdW5HcslLAXc4triQU3oPx NZJcuKknuReDptCzcMro0MNLU+Dhk+WULesNY2NyIK/OikJCilJLIpZyF+wGMF4F pYGQP1xCda1wNhzPIi+sJ82aAJ0O11YH5RZgtygmXKHaWI/p6DdedoF1GadVFVYd /9PZUQYR7FZ2zAXg8lNOo2kABorr6L06HMHnlipxUmW67DFQI0xgMbW4NO1WQTpp lfAGNCImTcOG0cLHQPnYuOAB4pbbY0oBkp7xYEUwBmP0w5DB2a7SVs6YOjX3C+8K 0XA6O2026pBzg/dXKyZQp4eCEQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFCkOjMtx oC0EvfWDm9zjskbi3DNQMB8GA1UdIwQYMBaAFBN/aYiL7pzIO6tB+vLJQtEK8stl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjMwQS85MUFFNjlBQTQ2 N0MxMUVDQkQ2NjEyNkJDNEY5QUUwMi9FMzlwaUl2dW5NZzdxMEg2OHNsQzBRcnl5 MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UzOXBpSXZ1bk1nN3EwSDY4c2xDMFFyeXkyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEIzMEEvOTFBRTY5QUE0NjdDMTFFQ0JENjYxMjZCQzRGOUFFMDIvMjc5RUU0MTY4 M0UxMTFFQ0JCODJGNDdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnsHgwDwQCAAIwCQMHACABDfANwDANBgkqhkiG9w0BAQsF AAOCAQEAKoeT2MAmdTY7egHLmTpxYZlKwSp0aK4GzQrtSC6BhEkJHE3uCZF62iij 0G9ML/DoXWnQ9aBxk07kgowxdnCq4GcnqNxt6jkDVIjbQoL1PX1GvpuscOo2pZF3 7qcrGFT+ha3SUq97EYyRKt+5AOkH2koq7Ba4pozB0SJoDRd3KbFCOM6XjwTdlRsv lN/lYfw4hBG4f3HL1gzKVpsN8LZmsu8imR5aoRZtmwe1NVurEDOBTPd+5/avZQ1r WYi+Rd67LYPeeFQ8RyKVitDPrgLoSnZxJgRHh4FtacT8udtYJnAZCWrNLKATIxGD mgH8oZkk49e0evfKXDebFOMjEw4AGg== -----END CERTIFICATE-----Generated at Sun Jan 25 07:57:38 2026 by rpki-client