This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/CCB2690EED0B11F0949792B43C6F56BC.roa File: CCB2690EED0B11F0949792B43C6F56BC.roa (raw, json) Hash identifier: u0IKyG29wdIElmLguidRPEHj7q7sF0V/ZJvG49IlmSU= Subject key identifier: 90:21:BD:94:45:5F:3D:C5:25:4D:F0:AC:3F:C4:BD:26:96:41:5E:22 Certificate issuer: /CN=A9157A68/serialNumber=65B7AD9675B3809ECE04AF301C2EB7037FF02BBB Certificate serial: 088D Authority key identifier: 65:B7:AD:96:75:B3:80:9E:CE:04:AF:30:1C:2E:B7:03:7F:F0:2B:BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/CCB2690EED0B11F0949792B43C6F56BC.roa Signing time: Fri 09 Jan 2026 03:32:18 +0000 ROA not before: Fri 09 Jan 2026 03:32:18 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 137386 IP address blocks: 103.218.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 19:57:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2189 (0x88d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157A68, serialNumber=65B7AD9675B3809ECE04AF301C2EB7037FF02BBB Validity Not Before: Jan 9 03:32:18 2026 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=696076c2-61a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2b:18:1b:18:75:61:61:3c:70:df:a6:1a:bc: b9:c0:31:05:62:0f:22:14:83:fe:a3:78:12:08:d0: df:7a:2d:ae:f6:2e:94:7b:11:50:50:e0:e0:26:eb: 01:d0:8b:10:5c:76:f3:86:58:fb:ab:80:ba:0d:74: 91:be:85:3e:8d:44:55:c3:62:ee:5b:b7:13:dc:75: 1f:0d:54:5d:c8:b5:70:1c:6a:ed:ac:fb:c0:59:ba: 38:95:12:f0:cc:bf:ba:21:d9:06:3c:ab:bd:77:bf: e2:fa:0c:12:7d:c7:f5:1e:a7:48:4a:24:6b:4e:c5: 43:1e:1b:1b:5d:a0:ba:b3:08:04:e4:73:a1:72:5c: 3a:ca:21:76:00:a9:db:a6:62:7c:67:57:44:e0:5c: 73:1f:82:d3:6a:01:e4:b0:78:f0:fd:0d:3d:52:e8: 66:97:60:7d:35:ef:bf:a0:75:53:0c:c6:f3:ad:9a: 3d:d8:16:f0:7b:65:7f:f4:64:3f:25:11:4b:97:94: 3e:fb:f6:c1:a5:f8:54:87:60:01:57:bb:f1:0b:45: d4:f9:23:7b:c4:f4:c5:45:22:02:ac:45:48:92:ce: 24:f6:86:17:9d:49:a0:ae:c9:d6:02:82:b6:17:16: 5d:ea:70:08:d8:18:cf:f3:bc:37:be:68:d2:23:fc: 04:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:21:BD:94:45:5F:3D:C5:25:4D:F0:AC:3F:C4:BD:26:96:41:5E:22 X509v3 Authority Key Identifier: keyid:65:B7:AD:96:75:B3:80:9E:CE:04:AF:30:1C:2E:B7:03:7F:F0:2B:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/CCB2690EED0B11F0949792B43C6F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.218.4.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:e4:d4:ef:79:e9:51:bf:c7:83:67:db:7a:5e:98:5e:dc:ba: ee:30:f4:95:3e:1b:6c:70:7e:cb:d3:8f:1f:da:fa:9c:80:d7: e8:0c:0c:da:fa:5c:21:8a:6f:17:b4:d3:fe:3e:22:61:d9:ec: da:0c:dd:2d:af:40:f0:01:26:22:69:9d:42:20:72:23:06:76: 6f:12:07:fe:c9:c2:2f:f1:5b:1d:d3:00:17:a8:18:a7:82:7c: 07:70:84:03:aa:6a:cb:c8:49:10:51:2e:3e:f7:44:87:ab:97: 40:c9:a2:58:09:9c:1c:0e:3d:87:a9:7b:ed:d5:bf:f6:04:82: 97:43:60:c8:9a:0e:9b:f0:05:42:f9:76:9c:af:71:5d:19:7d: c7:52:1e:01:e4:08:c6:40:68:da:03:47:45:bc:11:a4:f8:d3: b9:75:f5:c8:48:6c:21:01:be:68:f8:91:dd:d5:eb:b6:bc:06: b9:38:8b:ca:5d:b8:5d:4d:0b:b8:56:ee:a9:2d:7c:09:32:c6: bd:8c:a8:66:fc:a3:46:69:ba:68:31:c2:93:72:ab:43:ce:99: 33:f6:0c:fa:60:91:2b:a3:33:8a:f4:62:24:b0:65:65:90:06: 55:c7:c4:27:c1:0f:92:96:63:7f:46:83:d6:d4:58:9a:81:08: b0:1d:3a:a7 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdBNjgxMTAvBgNVBAUTKDY1QjdBRDk2NzVCMzgwOUVDRTA0QUYzMDFDMkVCNzAz N0ZGMDJCQkIwHhcNMjYwMTA5MDMzMjE4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTYwNzZjMi02MWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArisYGxh1YWE8cN+mGry5wDEFYg8iFIP+o3gSCNDfei2u9i6UexFQUODgJusB 0IsQXHbzhlj7q4C6DXSRvoU+jURVw2LuW7cT3HUfDVRdyLVwHGrtrPvAWbo4lRLw zL+6IdkGPKu9d7/i+gwSfcf1HqdISiRrTsVDHhsbXaC6swgE5HOhclw6yiF2AKnb pmJ8Z1dE4FxzH4LTagHksHjw/Q09Uuhml2B9Ne+/oHVTDMbzrZo92Bbwe2V/9GQ/ JRFLl5Q++/bBpfhUh2ABV7vxC0XU+SN7xPTFRSICrEVIks4k9oYXnUmgrsnWAoK2 FxZd6nAI2BjP87w3vmjSI/wE1QIDAQABo4IClTCCApEwHQYDVR0OBBYEFJAhvZRF Xz3FJU3wrD/EvSaWQV4iMB8GA1UdIwQYMBaAFGW3rZZ1s4CezgSvMBwutwN/8Cu7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0E2OC80QjM2QjlCOERC REExMUVBOUE4RDI4NDBDNEY5QUUwMi9aYmV0bG5XemdKN09CSzh3SEM2M0EzX3dL N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1piZXRsbld6Z0o3T0JLOHdIQzYzQTNfd0s3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdBNjgvNEIzNkI5QjhEQkRBMTFFQTlBOEQyODQwQzRGOUFFMDIvQ0NCMjY5MEVF RDBCMTFGMDk0OTc5MkI0M0M2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABn2gQwDQYJKoZIhvcNAQELBQADggEBAG/k1O956VG/x4Nn 23pemF7cuu4w9JU+G2xwfsvTjx/a+pyA1+gMDNr6XCGKbxe00/4+ImHZ7NoM3S2v QPABJiJpnUIgciMGdm8SB/7Jwi/xWx3TABeoGKeCfAdwhAOqasvISRBRLj73RIer l0DJolgJnBwOPYepe+3Vv/YEgpdDYMiaDpvwBUL5dpyvcV0ZfcdSHgHkCMZAaNoD R0W8EaT407l19chIbCEBvmj4kd3V67a8Brk4i8pduF1NC7hW7qktfAkyxr2MqGb8 o0ZpumgxwpNyq0POmTP2DPpgkSujM4r0YiSwZWWQBlXHxCfBD5KWY39Gg9bUWJqB CLAdOqc= -----END CERTIFICATE-----Generated at Sun Jan 25 09:18:39 2026 by rpki-client