This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/324F926C3BAC11F09BF98E0EC4F9AE02.roa File: 324F926C3BAC11F09BF98E0EC4F9AE02.roa (raw, json) Hash identifier: m3Pbqfmbzl/hnDC5M2vHfiVHlGiXfS/3+4feaLZEbXM= Subject key identifier: D0:C3:27:E9:E5:5A:37:77:AC:50:D3:2A:44:7F:8D:5C:96:54:06:01 Certificate issuer: /CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379 Certificate serial: 0841 Authority key identifier: 40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/324F926C3BAC11F09BF98E0EC4F9AE02.roa Signing time: Sat 24 Jan 2026 05:49:45 +0000 ROA not before: Sat 24 Jan 2026 05:49:45 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 17762 IP address blocks: 27.107.0.0/16 maxlen: 16 27.107.0.0/20 maxlen: 24 27.107.16.0/21 maxlen: 24 27.107.24.0/21 maxlen: 24 27.107.32.0/20 maxlen: 24 27.107.48.0/20 maxlen: 24 27.107.64.0/20 maxlen: 24 27.107.80.0/20 maxlen: 24 27.107.96.0/22 maxlen: 24 27.107.100.0/22 maxlen: 24 27.107.104.0/21 maxlen: 24 27.107.144.0/20 maxlen: 24 27.107.160.0/20 maxlen: 24 27.107.176.0/20 maxlen: 24 27.107.192.0/23 maxlen: 24 27.107.194.0/23 maxlen: 24 27.107.196.0/23 maxlen: 24 27.107.198.0/23 maxlen: 24 27.107.203.0/24 maxlen: 24 27.107.204.0/24 maxlen: 24 27.107.205.0/24 maxlen: 24 27.107.206.0/24 maxlen: 24 27.107.207.0/24 maxlen: 24 27.107.208.0/20 maxlen: 24 27.107.224.0/21 maxlen: 24 27.107.232.0/21 maxlen: 24 27.107.240.0/22 maxlen: 24 27.107.244.0/22 maxlen: 24 27.107.248.0/22 maxlen: 24 27.107.252.0/22 maxlen: 24 49.200.32.0/21 maxlen: 24 49.201.24.0/21 maxlen: 24 49.249.192.0/19 maxlen: 24 103.8.36.0/22 maxlen: 24 115.160.208.0/20 maxlen: 24 182.156.6.0/23 maxlen: 24 182.156.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 21:40:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2113 (0x841) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D7A, serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379 Validity Not Before: Jan 24 05:49:45 2026 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69745d79-3880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:9f:aa:e4:ae:57:1f:90:15:8b:7e:19:88:57: 0f:31:b5:35:87:26:65:0b:0d:8c:ea:be:5b:2d:14: 80:20:35:04:12:bc:2b:ef:b9:6f:04:cb:87:c2:4a: 45:00:26:80:0f:d5:9e:f3:19:e5:5c:02:fa:b0:8f: 1e:12:c7:5d:30:d5:99:23:c8:79:15:fc:30:b6:75: 01:a3:ca:f0:cf:50:3e:9c:05:b2:b4:81:f0:d8:c0: 51:91:80:4c:d9:84:a9:a2:41:52:aa:bc:38:95:02: 27:da:ba:06:4a:03:63:29:35:1a:01:5e:40:17:e2: 10:2c:ef:fe:a3:86:8a:1e:4a:95:dc:ac:c7:14:3a: 52:da:3c:6d:13:50:5a:54:77:8a:e8:3b:f9:8a:77: 2c:b1:be:86:e8:bd:7f:23:a9:44:06:94:c9:49:24: 86:43:8e:a7:6b:39:0e:eb:5c:bb:a0:7b:3b:0c:62: 03:c5:a7:8e:45:15:2f:13:47:25:04:60:73:9f:a6: 3e:ec:ee:47:df:b4:3f:0e:54:f6:e0:a8:03:f8:de: 2f:39:14:15:ac:ef:66:62:68:b9:f7:c2:38:7c:89: ef:4d:01:3e:bf:1a:ec:c4:94:9b:31:af:38:52:2b: 04:e1:79:f0:55:7c:9a:d6:ff:7e:fa:2f:8c:52:71: 5b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C3:27:E9:E5:5A:37:77:AC:50:D3:2A:44:7F:8D:5C:96:54:06:01 X509v3 Authority Key Identifier: keyid:40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/324F926C3BAC11F09BF98E0EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.107.0.0/16 49.200.32.0/21 49.201.24.0/21 49.249.192.0/19 103.8.36.0/22 115.160.208.0/20 182.156.6.0/23 182.156.20.0/23 Signature Algorithm: sha256WithRSAEncryption 71:ee:31:cb:c2:54:e0:74:6e:f5:fe:60:c1:b4:15:df:74:c0: 69:2b:47:a2:34:5c:1c:83:aa:8f:38:9b:d8:ff:62:93:83:26: 59:c8:19:10:3a:ad:73:92:d6:14:b8:05:64:5f:e9:ac:a4:8c: 6d:74:f8:3e:55:1b:97:4f:f3:f2:37:bd:32:91:00:7e:bf:b4: d8:56:c4:8f:eb:13:74:ac:1d:da:b6:c9:7c:4a:1e:d2:74:43: 51:f8:e9:04:0c:64:bd:03:d3:a3:56:fc:7a:2e:ed:bd:ed:a2: 03:d5:01:2c:eb:00:15:a5:68:bb:88:c7:11:d0:6c:cf:6d:db: 20:3e:3d:b3:0c:0a:b7:a8:43:61:2d:c0:17:da:c8:b2:41:3d: f5:49:a1:7a:98:e3:20:d4:8d:5a:a9:8b:7d:6c:7b:1a:97:81: 26:ef:56:ff:da:69:c6:85:c5:a9:52:38:2f:de:7c:ef:d4:30: da:90:5b:4e:c4:60:ce:1e:27:e9:17:32:a6:e0:ac:a7:7b:3b: 49:9c:9b:cf:72:20:8d:7e:62:42:a4:3b:e9:3a:cf:88:5c:a7: 8e:81:ca:8a:95:e4:bb:0f:f5:a5:40:8a:8e:5b:a6:36:04:16: 11:1d:20:d6:e6:e7:df:ee:a7:ae:31:43:07:73:e6:a6:c6:7d: 8e:ab:8f:f6 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgICCEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEN0ExMTAvBgNVBAUTKDQwMUI0Mjk5MDZDOTBFQTAzRUNGQzYxQjE1QkE0RUYx MjM5MDMzNzkwHhcNMjYwMTI0MDU0OTQ1WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDDA02OTc0NWQ3OS0zODgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9J+q5K5XH5AVi34ZiFcPMbU1hyZlCw2M6r5bLRSAIDUEErwr77lvBMuHwkpF ACaAD9We8xnlXAL6sI8eEsddMNWZI8h5FfwwtnUBo8rwz1A+nAWytIHw2MBRkYBM 2YSpokFSqrw4lQIn2roGSgNjKTUaAV5AF+IQLO/+o4aKHkqV3KzHFDpS2jxtE1Ba VHeK6Dv5incssb6G6L1/I6lEBpTJSSSGQ46nazkO61y7oHs7DGIDxaeORRUvE0cl BGBzn6Y+7O5H37Q/DlT24KgD+N4vORQVrO9mYmi598I4fInvTQE+vxrsxJSbMa84 UisE4XnwVXya1v9++i+MUnFbaQIDAQABo4ICvjCCArowHQYDVR0OBBYEFNDDJ+nl Wjd3rFDTKkR/jVyWVAYBMB8GA1UdIwQYMBaAFEAbQpkGyQ6gPs/GGxW6TvEjkDN5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q3QS81RERDQ0NDNjk5 MTUxMUVCOTY3MjcyNDNDNEY5QUUwMi9RQnRDbVFiSkRxQS16OFliRmJwTzhTT1FN M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FCdENtUWJKRHFBLXo4WWJGYnBPOFNPUU0zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdEN0EvNUREQ0NDQzY5OTE1MTFFQjk2NzI3MjQzQzRGOUFFMDIvMzI0RjkyNkMz QkFDMTFGMDlCRjk4RTBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSAYIKwYBBQUHAQcBAf8E OTA3MDUEAgABMC8DAwAbawMEAzHIIAMEAzHJGAMEBTH5wAMEAmcIJAMEBHOg0AME AbacBgMEAbacFDANBgkqhkiG9w0BAQsFAAOCAQEAce4xy8JU4HRu9f5gwbQV33TA aStHojRcHIOqjzib2P9ik4MmWcgZEDqtc5LWFLgFZF/prKSMbXT4PlUbl0/z8je9 MpEAfr+02FbEj+sTdKwd2rbJfEoe0nRDUfjpBAxkvQPTo1b8ei7tve2iA9UBLOsA FaVou4jHEdBsz23bID49swwKt6hDYS3AF9rIskE99UmhepjjINSNWqmLfWx7GpeB Ju9W/9ppxoXFqVI4L95879Qw2pBbTsRgzh4n6RcypuCsp3s7SZybz3IgjX5iQqQ7 6TrPiFynjoHKipXkuw/1pUCKjlumNgQWER0g1ubn3+6nrjFDB3PmpsZ9jquP9g== -----END CERTIFICATE-----Generated at Sun Jan 25 07:50:39 2026 by rpki-client