This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/7883418E943A11EBB6706530C4F9AE02.roa File: 7883418E943A11EBB6706530C4F9AE02.roa (raw, json) Hash identifier: 3PWLAjjquPEfth1t4lnnO5BhhDmCREh5EWELlkQT0go= Subject key identifier: 69:87:B8:8D:14:9D:ED:6D:22:26:B1:9E:FA:F1:DF:01:CE:73:D3:52 Certificate issuer: /CN=A91602ED/serialNumber=287529DC20CA0ECE95A7A556E10BCDFD7237D8D8 Certificate serial: 06F0 Authority key identifier: 28:75:29:DC:20:CA:0E:CE:95:A7:A5:56:E1:0B:CD:FD:72:37:D8:D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/7883418E943A11EBB6706530C4F9AE02.roa Signing time: Tue 20 Jan 2026 22:18:27 +0000 ROA not before: Tue 20 Jan 2026 22:18:27 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 141427 IP address blocks: 103.158.248.0/23 maxlen: 23 103.158.248.0/24 maxlen: 24 103.158.249.0/24 maxlen: 24 2001:df5:6d80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.crl rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 21:18:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1776 (0x6f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91602ED, serialNumber=287529DC20CA0ECE95A7A556E10BCDFD7237D8D8 Validity Not Before: Jan 20 22:18:27 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=696fff32-24f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:3a:40:63:21:e6:ee:f7:df:0c:32:0b:4c:d6: dd:0a:c9:59:a9:b3:c7:f4:4e:0c:62:a6:b1:01:d1: a5:61:a4:71:be:96:26:3a:21:70:86:f1:68:ca:b2: 9c:7a:e9:ae:c8:6d:56:49:0b:c7:ad:d6:84:c0:15: 23:03:ad:4e:9b:d8:83:b3:f9:c9:2a:ea:18:03:d3: d6:8b:a5:9d:21:7e:87:3a:9a:ac:5c:4e:27:ce:c6: 16:08:3d:c1:74:bf:39:9c:cf:8b:b4:6c:c0:bb:77: d3:a9:44:85:53:73:90:cf:2e:8b:e8:a7:52:1a:6f: 95:61:4b:fe:c3:7a:fb:fc:a1:c8:ad:ad:cb:d9:a4: 07:17:15:b8:b2:d2:b3:36:08:69:c7:15:ec:b0:e8: 08:0e:8a:5d:4b:01:95:1d:ef:6b:f3:10:6a:94:03: d4:63:74:90:05:49:8c:c0:31:25:0f:10:ff:92:b7: 6c:12:75:45:47:33:bc:06:23:94:32:dc:1d:ad:15: 2b:2a:a4:ac:e8:bf:80:0a:8f:f0:9f:25:e9:ea:d9: 84:87:31:fc:d0:ee:0c:aa:d1:b5:9c:5d:c7:ab:fa: 8e:3d:66:a7:04:bf:ff:c5:b7:6b:18:c6:83:2b:10: 99:07:80:a7:c6:2d:25:9a:64:60:47:cf:fd:fc:97: e0:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:87:B8:8D:14:9D:ED:6D:22:26:B1:9E:FA:F1:DF:01:CE:73:D3:52 X509v3 Authority Key Identifier: keyid:28:75:29:DC:20:CA:0E:CE:95:A7:A5:56:E1:0B:CD:FD:72:37:D8:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/7883418E943A11EBB6706530C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.158.248.0/23 IPv6: 2001:df5:6d80::/48 Signature Algorithm: sha256WithRSAEncryption 4a:7d:eb:22:01:08:02:f9:af:6d:99:e1:94:a1:d1:59:8b:fe: ab:63:bb:67:fc:82:ee:fc:db:27:15:c3:82:32:3d:1f:c4:d3: e0:cb:14:9f:6b:87:2c:f3:5c:03:2c:9f:eb:fa:1e:83:7b:3b: 2d:83:de:5b:66:c4:ff:48:97:02:28:2c:09:bb:5a:a5:cc:79: 2f:9a:57:d2:fa:1c:62:22:d8:08:ed:fc:11:09:03:a9:c2:3b: 6a:43:62:31:5e:22:76:5b:ad:18:18:08:06:99:bb:f0:43:39: 2a:0d:0e:b4:40:8c:7c:05:5c:b6:41:55:0f:d0:a1:4e:0c:bd: f6:c7:4c:32:fc:be:63:a8:77:b3:2b:8b:21:a0:1a:9e:63:9b: a6:f0:46:1e:0c:d6:76:6d:8a:8d:7d:a6:f2:1a:46:18:69:2a: 6e:0b:d8:71:04:3e:1a:e6:85:f2:cf:9b:a6:cb:5f:8c:30:a9: f4:ca:ad:c6:05:58:5b:ca:15:76:4c:12:93:c6:74:ef:03:3d: d4:4f:45:31:8b:cf:55:79:0a:4d:82:c5:9c:63:f3:f2:2e:c7: 8e:15:f4:d8:55:d0:94:ea:d1:2b:19:a9:5f:4d:90:e8:32:33: fb:49:9c:45:ba:7c:d9:24:30:32:6b:46:e8:1a:79:bd:59:72: e8:7e:72:3f -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBvAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NjAyRUQxMTAvBgNVBAUTKDI4NzUyOURDMjBDQTBFQ0U5NUE3QTU1NkUxMEJDREZE NzIzN0Q4RDgwHhcNMjYwMTIwMjIxODI3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTZmZmYzMi0yNGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhDpAYyHm7vffDDILTNbdCslZqbPH9E4MYqaxAdGlYaRxvpYmOiFwhvFoyrKc eumuyG1WSQvHrdaEwBUjA61Om9iDs/nJKuoYA9PWi6WdIX6HOpqsXE4nzsYWCD3B dL85nM+LtGzAu3fTqUSFU3OQzy6L6KdSGm+VYUv+w3r7/KHIra3L2aQHFxW4stKz NghpxxXssOgIDopdSwGVHe9r8xBqlAPUY3SQBUmMwDElDxD/krdsEnVFRzO8BiOU MtwdrRUrKqSs6L+ACo/wnyXp6tmEhzH80O4MqtG1nF3Hq/qOPWanBL//xbdrGMaD KxCZB4Cnxi0lmmRgR8/9/JfgawIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFGmHuI0U ne1tIiaxnvrx3wHOc9NSMB8GA1UdIwQYMBaAFCh1Kdwgyg7OlaelVuELzf1yN9jY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDJFRC8xNjdCQzYzQzdD MUIxMUVCOUYzRjNDNjVDNEY5QUUwMi9LSFVwM0NES0RzNlZwNlZXNFF2Tl9YSTMy TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tIVXAzQ0RLRHM2VnA2Vlc0UXZOX1hJMzJOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjAyRUQvMTY3QkM2M0M3QzFCMTFFQjlGM0YzQzY1QzRGOUFFMDIvNzg4MzQxOEU5 NDNBMTFFQkI2NzA2NTMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnnvgwDwQCAAIwCQMHACABDfVtgDANBgkqhkiG9w0BAQsF AAOCAQEASn3rIgEIAvmvbZnhlKHRWYv+q2O7Z/yC7vzbJxXDgjI9H8TT4MsUn2uH LPNcAyyf6/oeg3s7LYPeW2bE/0iXAigsCbtapcx5L5pX0vocYiLYCO38EQkDqcI7 akNiMV4idlutGBgIBpm78EM5Kg0OtECMfAVctkFVD9ChTgy99sdMMvy+Y6h3syuL IaAanmObpvBGHgzWdm2KjX2m8hpGGGkqbgvYcQQ+GuaF8s+bpstfjDCp9MqtxgVY W8oVdkwSk8Z07wM91E9FMYvPVXkKTYLFnGPz8i7HjhX02FXQlOrRKxmpX02Q6DIz +0mcRbp82SQwMmtG6Bp5vVly6H5yPw== -----END CERTIFICATE-----Generated at Sun Jan 25 17:05:53 2026 by rpki-client