This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/58A4A3E2B73A11ED8A2A8964C4F9AE02.roa File: 58A4A3E2B73A11ED8A2A8964C4F9AE02.roa (raw, json) Hash identifier: RWcw9Dk5G8dhAhvfUz03Mdp7q5/b7uZOj3t94xNxGjc= Subject key identifier: D1:F3:AD:CE:BD:26:21:58:80:01:E4:BF:56:93:1A:BE:96:F6:D7:7C Certificate issuer: /CN=A915D6C2/serialNumber=42B749E1ECDBE030747F8CB5747F2D73A5E42454 Certificate serial: 04CF Authority key identifier: 42:B7:49:E1:EC:DB:E0:30:74:7F:8C:B5:74:7F:2D:73:A5:E4:24:54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/58A4A3E2B73A11ED8A2A8964C4F9AE02.roa Signing time: Wed 24 Dec 2025 23:20:26 +0000 ROA not before: Wed 24 Dec 2025 23:20:26 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 63969 IP address blocks: 103.177.124.0/23 maxlen: 24 2001:df0:2240::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 23:03:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1231 (0x4cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D6C2, serialNumber=42B749E1ECDBE030747F8CB5747F2D73A5E42454 Validity Not Before: Dec 24 23:20:26 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=694c753a-ccb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:51:c9:39:9c:93:6c:43:55:c7:1e:94:38:f9: 07:42:0d:f2:93:76:cd:ca:b4:e9:0b:72:13:5c:0f: eb:c9:5b:a9:6e:7d:15:38:5d:2e:14:b1:a1:7c:95: 05:58:41:7a:6e:eb:53:0d:73:2b:4d:10:9b:0c:74: 3d:6d:e9:7b:8a:a4:79:16:0e:bb:14:83:cd:7f:68: 80:85:b2:be:5a:40:e0:c7:13:a5:fa:c0:5b:d7:12: 18:eb:95:65:ec:c8:bf:62:5d:ee:f8:06:d6:cc:fe: c2:dc:76:b0:52:3a:c2:f3:9d:8f:83:87:99:3f:c4: cf:0e:85:de:38:78:a1:6d:0b:63:11:db:e9:13:32: 72:cc:b7:d7:cb:ab:33:cb:24:e1:25:4c:0d:17:b0: ce:ea:0a:4b:79:34:fd:dd:0f:a7:ce:28:01:a2:73: 1f:f8:d6:7f:d9:34:2b:b9:73:5f:b0:3d:8e:46:e2: 43:71:84:89:77:3b:b8:3d:66:21:27:e9:0a:63:9d: fd:5d:4e:19:ae:df:cd:fb:e3:b4:8b:fa:2f:8d:db: 23:00:42:92:3b:5f:b0:4a:04:fd:a4:55:39:43:c2: f3:7e:4a:c8:5e:2b:dd:08:24:48:de:74:1a:0e:3e: 9d:55:4c:30:c7:12:89:fb:06:37:77:c6:66:49:42: b1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F3:AD:CE:BD:26:21:58:80:01:E4:BF:56:93:1A:BE:96:F6:D7:7C X509v3 Authority Key Identifier: keyid:42:B7:49:E1:EC:DB:E0:30:74:7F:8C:B5:74:7F:2D:73:A5:E4:24:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/58A4A3E2B73A11ED8A2A8964C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.177.124.0/23 IPv6: 2001:df0:2240::/48 Signature Algorithm: sha256WithRSAEncryption 24:53:55:29:be:c9:f2:9c:0e:d1:70:89:06:8f:fe:eb:bc:af: c2:b8:9c:6f:14:69:60:49:20:33:99:fc:05:fe:19:fd:9b:d6: 22:f2:32:47:4f:6e:2c:fc:16:a6:e6:85:77:e4:9a:81:c1:cd: 3c:80:2e:34:8e:32:f1:df:26:89:60:8a:c8:73:e2:76:73:dd: a9:15:f9:de:ae:38:65:5f:01:49:db:67:ec:8f:0e:d9:0f:58: 49:c1:42:58:4b:dd:5a:98:06:4d:30:71:c6:0f:7c:43:de:4f: c3:5d:e1:f3:ba:2d:85:da:f0:53:e8:1e:1a:e9:77:1a:e0:0b: bf:95:94:0e:3b:8b:70:d4:28:70:2c:8f:19:53:b8:f4:d9:66: da:54:70:cf:28:ee:48:91:2d:52:d4:f3:61:cc:65:f8:4f:2a: a8:da:d6:0e:5b:e7:74:1e:2e:41:69:1f:f7:19:54:11:f8:7e: f6:9f:36:52:6a:21:0d:81:05:f4:b6:fe:89:0e:7e:ca:59:c0: 13:25:30:49:cb:ef:d1:48:fb:3d:4d:e2:81:2e:c9:38:e6:3d: 07:dd:45:cb:28:de:a7:48:6e:31:2d:d4:06:77:26:3a:c4:43: 98:c1:21:a3:fc:83:75:ff:26:15:89:a4:9b:0b:61:e5:bd:21: 25:30:a8:2d -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NUQ2QzIxMTAvBgNVBAUTKDQyQjc0OUUxRUNEQkUwMzA3NDdGOENCNTc0N0YyRDcz QTVFNDI0NTQwHhcNMjUxMjI0MjMyMDI2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTRjNzUzYS1jY2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAklHJOZyTbENVxx6UOPkHQg3yk3bNyrTpC3ITXA/ryVupbn0VOF0uFLGhfJUF WEF6butTDXMrTRCbDHQ9bel7iqR5Fg67FIPNf2iAhbK+WkDgxxOl+sBb1xIY65Vl 7Mi/Yl3u+AbWzP7C3HawUjrC852Pg4eZP8TPDoXeOHihbQtjEdvpEzJyzLfXy6sz yyThJUwNF7DO6gpLeTT93Q+nzigBonMf+NZ/2TQruXNfsD2ORuJDcYSJdzu4PWYh J+kKY539XU4Zrt/N++O0i/ovjdsjAEKSO1+wSgT9pFU5Q8LzfkrIXivdCCRI3nQa Dj6dVUwwxxKJ+wY3d8ZmSUKx9wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFNHzrc69 JiFYgAHkv1aTGr6W9td8MB8GA1UdIwQYMBaAFEK3SeHs2+AwdH+MtXR/LXOl5CRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDZDMi9GOUM0NkZBQzUz QTIxMUVDOUQ1RTYxNURDNEY5QUUwMi9RcmRKNGV6YjREQjBmNHkxZEg4dGM2WGtK RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FyZEo0ZXpiNERCMGY0eTFkSDh0YzZYa0pGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUQ2QzIvRjlDNDZGQUM1M0EyMTFFQzlENUU2MTVEQzRGOUFFMDIvNThBNEEzRTJC NzNBMTFFRDhBMkE4OTY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnsXwwDwQCAAIwCQMHACABDfAiQDANBgkqhkiG9w0BAQsF AAOCAQEAJFNVKb7J8pwO0XCJBo/+67yvwricbxRpYEkgM5n8Bf4Z/ZvWIvIyR09u LPwWpuaFd+SagcHNPIAuNI4y8d8miWCKyHPidnPdqRX53q44ZV8BSdtn7I8O2Q9Y ScFCWEvdWpgGTTBxxg98Q95Pw13h87othdrwU+geGul3GuALv5WUDjuLcNQocCyP GVO49Nlm2lRwzyjuSJEtUtTzYcxl+E8qqNrWDlvndB4uQWkf9xlUEfh+9p82Umoh DYEF9Lb+iQ5+ylnAEyUwScvv0Uj7PU3igS7JOOY9B91Fyyjep0huMS3UBncmOsRD mMEho/yDdf8mFYmkmwth5b0hJTCoLQ== -----END CERTIFICATE-----Generated at Sun Jan 25 09:24:59 2026 by rpki-client