This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E2B2/2B46EA580DE311EF803F6F0EC4F9AE02/D6AEA2D20DE311EFA1E24F25C4F9AE02.roa File: D6AEA2D20DE311EFA1E24F25C4F9AE02.roa (raw, json) Hash identifier: aSQw9o1eWVTlEFXFGnjq3T0SWlRHKG0UuxSoQqBfD/0= Subject key identifier: 21:4E:33:51:A2:5B:90:7B:F3:D3:67:53:07:CC:A2:E8:38:48:C2:8A Certificate issuer: /CN=A914E2B2/serialNumber=B70DEA6C77B9E8ECCE5839132819EF91373FC527 Certificate serial: 013C Authority key identifier: B7:0D:EA:6C:77:B9:E8:EC:CE:58:39:13:28:19:EF:91:37:3F:C5:27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tw3qbHe56OzOWDkTKBnvkTc_xSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E2B2/2B46EA580DE311EF803F6F0EC4F9AE02/D6AEA2D20DE311EFA1E24F25C4F9AE02.roa Signing time: Fri 09 Jan 2026 04:23:14 +0000 ROA not before: Fri 09 Jan 2026 04:23:13 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 131268 IP address blocks: 103.35.92.0/24 maxlen: 24 103.35.93.0/24 maxlen: 24 103.35.94.0/24 maxlen: 24 103.35.95.0/24 maxlen: 24 202.4.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E2B2/2B46EA580DE311EF803F6F0EC4F9AE02/tw3qbHe56OzOWDkTKBnvkTc_xSc.crl rsync://rpki.apnic.net/member_repository/A914E2B2/2B46EA580DE311EF803F6F0EC4F9AE02/tw3qbHe56OzOWDkTKBnvkTc_xSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tw3qbHe56OzOWDkTKBnvkTc_xSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 03:33:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 316 (0x13c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E2B2, serialNumber=B70DEA6C77B9E8ECCE5839132819EF91373FC527 Validity Not Before: Jan 9 04:23:13 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=696082b1-3e73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4d:5c:c7:8e:92:93:06:c3:82:f5:02:34:29: ea:9e:ea:ec:88:9c:e9:ea:6c:f5:67:c2:7b:6f:7e: 71:1c:2b:d4:76:68:ef:4d:ea:af:0c:65:92:35:99: 08:b7:79:6d:a6:e0:84:f0:39:15:ac:17:8f:85:e5: cb:3b:c2:85:25:c5:68:be:35:65:dc:8f:89:9c:66: a4:75:59:6b:e3:fb:d3:7e:76:6a:03:30:2f:42:04: 52:19:37:3b:27:e0:d9:e0:45:32:b4:ec:2d:00:7b: 78:a0:af:c8:1d:63:0a:e3:1f:2c:d6:ef:70:ba:90: 8a:c1:d9:d1:37:ed:6b:64:b2:17:7c:db:19:c9:d9: ec:a5:59:0e:a8:1f:e0:db:13:6c:29:27:3c:c8:90: a2:4d:3c:b7:43:3a:9d:e2:b2:90:a4:e3:2d:35:c4: 8c:b8:8d:a7:5f:ae:de:20:58:1d:7b:ad:28:78:37: 89:28:a9:0b:7f:b8:84:d7:b1:e5:b6:36:1c:d0:c0: a0:c3:98:6c:df:29:9d:8b:1d:14:bc:ba:72:25:c0: 02:76:73:89:ad:66:84:38:30:be:11:b3:6d:6f:4f: 8f:0e:ee:e1:13:ef:76:75:5a:c5:42:da:96:4c:08: 28:8e:74:ed:f7:cc:e2:b5:29:af:55:2f:22:96:fd: 8f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:4E:33:51:A2:5B:90:7B:F3:D3:67:53:07:CC:A2:E8:38:48:C2:8A X509v3 Authority Key Identifier: keyid:B7:0D:EA:6C:77:B9:E8:EC:CE:58:39:13:28:19:EF:91:37:3F:C5:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E2B2/2B46EA580DE311EF803F6F0EC4F9AE02/tw3qbHe56OzOWDkTKBnvkTc_xSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tw3qbHe56OzOWDkTKBnvkTc_xSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E2B2/2B46EA580DE311EF803F6F0EC4F9AE02/D6AEA2D20DE311EFA1E24F25C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.35.92.0/22 202.4.188.0/24 Signature Algorithm: sha256WithRSAEncryption 57:fa:45:3a:63:d7:77:0a:70:ef:f3:a2:df:ea:cb:53:c3:90: 8f:1e:1f:7d:ab:f1:a9:20:d1:31:8e:48:d2:d0:3c:bf:62:e1: 08:43:8d:f1:08:fa:24:9a:b8:88:37:c8:7a:48:cb:a8:6f:87: c0:9b:72:b8:58:e1:f4:d6:d3:d6:35:58:08:dc:26:ae:aa:46: fa:e2:2b:b8:bc:aa:bf:78:48:97:53:c0:dd:ab:25:5a:67:e3: ac:ef:eb:9d:34:07:ce:29:5f:58:31:f9:08:36:fa:4e:a7:ab: ec:95:bc:33:77:db:10:72:2c:8b:42:5c:37:0a:e9:14:86:4d: 7f:df:61:12:71:53:45:ad:41:5d:4c:b5:9f:ea:b4:65:78:f0: 4d:f5:10:39:7d:8e:6c:6a:91:38:5f:68:42:ab:7e:1a:dd:d5: dc:25:53:19:fb:4f:5a:91:1b:e6:a4:35:2a:4b:d5:80:dd:d1: bd:fc:9c:f4:0e:de:01:48:15:21:25:85:26:71:94:a7:bf:19: ac:90:2a:47:b6:61:af:a8:00:db:70:5b:a5:73:7f:f1:1d:c7: 74:23:25:57:83:03:24:6d:8e:2d:45:bb:37:a1:ba:50:1c:f4: 49:21:0f:28:eb:24:f9:41:26:97:fd:52:0b:70:3f:6c:b4:88: e4:ca:eb:78 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICATwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NEUyQjIxMTAvBgNVBAUTKEI3MERFQTZDNzdCOUU4RUNDRTU4MzkxMzI4MTlFRjkx MzczRkM1MjcwHhcNMjYwMTA5MDQyMzEzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTYwODJiMS0zZTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnE1cx46SkwbDgvUCNCnqnursiJzp6mz1Z8J7b35xHCvUdmjvTeqvDGWSNZkI t3ltpuCE8DkVrBePheXLO8KFJcVovjVl3I+JnGakdVlr4/vTfnZqAzAvQgRSGTc7 J+DZ4EUytOwtAHt4oK/IHWMK4x8s1u9wupCKwdnRN+1rZLIXfNsZydnspVkOqB/g 2xNsKSc8yJCiTTy3Qzqd4rKQpOMtNcSMuI2nX67eIFgde60oeDeJKKkLf7iE17Hl tjYc0MCgw5hs3ymdix0UvLpyJcACdnOJrWaEODC+EbNtb0+PDu7hE+92dVrFQtqW TAgojnTt98zitSmvVS8ilv2PJwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFCFOM1Gi W5B789NnUwfMoug4SMKKMB8GA1UdIwQYMBaAFLcN6mx3uejszlg5EygZ75E3P8Un MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTJCMi8yQjQ2RUE1ODBE RTMxMUVGODAzRjZGMEVDNEY5QUUwMi90dzNxYkhlNTZPek9XRGtUS0JudmtUY194 U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3R3M3FiSGU1Nk96T1dEa1RLQm52a1RjX3hTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEUyQjIvMkI0NkVBNTgwREUzMTFFRjgwM0Y2RjBFQzRGOUFFMDIvRDZBRUEyRDIw REUzMTFFRkExRTI0RjI1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnI1wDBADKBLwwDQYJKoZIhvcNAQELBQADggEBAFf6RTpj 13cKcO/zot/qy1PDkI8eH32r8akg0TGOSNLQPL9i4QhDjfEI+iSauIg3yHpIy6hv h8CbcrhY4fTW09Y1WAjcJq6qRvriK7i8qr94SJdTwN2rJVpn46zv6500B84pX1gx +Qg2+k6nq+yVvDN32xByLItCXDcK6RSGTX/fYRJxU0WtQV1MtZ/qtGV48E31EDl9 jmxqkThfaEKrfhrd1dwlUxn7T1qRG+akNSpL1YDd0b38nPQO3gFIFSElhSZxlKe/ GayQKke2Ya+oANtwW6Vzf/Edx3QjJVeDAyRtji1FuzehulAc9EkhDyjrJPlBJpf9 UgtwP2y0iOTK63g= -----END CERTIFICATE-----Generated at Sun Jan 25 04:37:17 2026 by rpki-client