This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/4472E7B85B6011F0A2E8311CC4F9AE02.roa File: 4472E7B85B6011F0A2E8311CC4F9AE02.roa (raw, json) Hash identifier: 9o7EsH+iPgvkXQNFFp/VVrhEZvYWAqIPo/P6jCxkWl0= Subject key identifier: 56:22:54:A1:C0:4B:ED:05:02:8E:8E:B1:E3:F9:BF:3E:3E:75:63:18 Certificate issuer: /CN=A91618BC/serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77 Certificate serial: 0549 Authority key identifier: 1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/4472E7B85B6011F0A2E8311CC4F9AE02.roa Signing time: Mon 12 Jan 2026 23:19:38 +0000 ROA not before: Mon 12 Jan 2026 23:19:38 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 197537 IP address blocks: 103.168.154.0/24 maxlen: 24 103.168.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 23:09:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1353 (0x549) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91618BC, serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77 Validity Not Before: Jan 12 23:19:38 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=6965818a-299c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b4:fd:55:00:5e:00:32:fa:71:27:68:d4:1f: 71:90:5b:31:31:eb:bf:79:d5:6f:4a:d1:2e:8a:01: ed:56:26:18:4d:ff:5f:c5:55:5f:72:38:89:f5:0b: fe:21:ed:ed:da:5d:f9:27:1f:ce:38:77:d3:9a:1c: f3:3c:84:d3:f3:fb:70:3c:e6:5b:a9:9f:37:93:e5: af:2f:06:3a:8b:10:6a:72:aa:c8:cb:ff:2f:4c:4e: 52:76:ca:30:6d:11:90:ef:7a:8a:59:19:ea:1f:f4: eb:d9:64:8a:fa:69:23:57:45:d1:f7:52:cc:7e:5a: 01:0d:cb:d5:49:90:b1:df:6a:cd:97:4a:39:0f:79: 62:b2:60:32:64:9b:8b:5a:e1:35:7f:ce:bd:ac:0c: 1c:05:fc:70:03:0c:00:d8:c8:fe:88:17:0d:ca:d4: 7d:b4:c6:6d:f1:f3:72:86:60:00:2a:b8:b7:00:27: fa:24:82:76:8d:41:e4:71:e1:bf:f8:fd:ac:77:29: b9:02:f0:3c:30:e1:cf:91:fc:25:68:91:1b:fe:6a: 49:d6:3d:b9:7f:c2:15:2d:ae:2e:53:ab:a3:48:39: 0b:f8:f2:bd:e2:94:94:15:50:7f:0f:ac:6e:f1:8f: b9:1d:65:06:82:3f:80:bb:8b:9f:2a:97:72:fa:79: bb:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:22:54:A1:C0:4B:ED:05:02:8E:8E:B1:E3:F9:BF:3E:3E:75:63:18 X509v3 Authority Key Identifier: keyid:1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/4472E7B85B6011F0A2E8311CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.168.154.0/23 Signature Algorithm: sha256WithRSAEncryption 9d:0e:c8:65:a0:7a:ae:74:21:10:24:72:5c:e6:6c:34:56:ce: fc:64:32:45:5b:fa:98:e4:61:f3:73:b0:f2:fb:60:62:b3:ea: ca:77:5a:9d:44:75:5d:30:63:69:d2:19:53:29:89:1c:83:96: d9:75:20:cc:3d:a2:4a:23:a9:17:ae:f0:f5:44:89:53:93:5d: 35:52:9f:a2:a4:77:68:61:e8:fe:74:6a:bb:04:2b:15:c8:30: 9e:70:a1:e9:7b:5f:03:30:0d:9a:b2:18:31:fe:38:05:18:ca: df:9f:c5:c5:49:a2:85:4e:28:43:93:5c:3c:83:9f:eb:45:c7: 29:4c:1b:d7:cb:a9:b0:9e:a3:59:cb:6d:02:7e:d9:6c:47:42: 46:39:d3:1b:eb:27:1b:e0:18:2e:2e:a6:e2:3e:43:4c:16:4e: aa:c3:fa:b2:05:df:cb:3a:26:a0:77:a1:69:9c:0d:8b:8b:72: 02:0a:90:8c:14:4f:1c:45:4d:23:85:c9:29:b9:bb:47:b6:76: dd:f3:14:29:1e:3d:ee:50:19:04:91:89:48:ec:a5:e7:a1:af: cf:0d:0d:8b:7e:ae:39:ec:2b:ca:0b:cd:7d:ca:11:70:36:a2: 96:8b:77:c0:af:37:af:80:6e:2e:77:cd:45:40:cd:44:1c:51: 21:e4:5f:1e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NjE4QkMxMTAvBgNVBAUTKDFBRUJDRDgyRDcwMjgzNDNCNzQ1QUQ0MDY3MzlDREI5 MkQ0REZCNzcwHhcNMjYwMTEyMjMxOTM4WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTY1ODE4YS0yOTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0rT9VQBeADL6cSdo1B9xkFsxMeu/edVvStEuigHtViYYTf9fxVVfcjiJ9Qv+ Ie3t2l35Jx/OOHfTmhzzPITT8/twPOZbqZ83k+WvLwY6ixBqcqrIy/8vTE5Sdsow bRGQ73qKWRnqH/Tr2WSK+mkjV0XR91LMfloBDcvVSZCx32rNl0o5D3lismAyZJuL WuE1f869rAwcBfxwAwwA2Mj+iBcNytR9tMZt8fNyhmAAKri3ACf6JIJ2jUHkceG/ +P2sdym5AvA8MOHPkfwlaJEb/mpJ1j25f8IVLa4uU6ujSDkL+PK94pSUFVB/D6xu 8Y+5HWUGgj+Au4ufKpdy+nm7rwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFYiVKHA S+0FAo6OseP5vz4+dWMYMB8GA1UdIwQYMBaAFBrrzYLXAoNDt0WtQGc5zbktTft3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MThCQy9FRDdCNjJBQzVE ODcxMUVDOUMxRDcwMkNDNEY5QUUwMi9HdXZOZ3RjQ2cwTzNSYTFBWnpuTnVTMU4t M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d1dk5ndGNDZzBPM1JhMUFaem5OdVMxTi0zYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjE4QkMvRUQ3QjYyQUM1RDg3MTFFQzlDMUQ3MDJDQzRGOUFFMDIvNDQ3MkU3Qjg1 QjYwMTFGMEEyRTgzMTFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnqJowDQYJKoZIhvcNAQELBQADggEBAJ0OyGWgeq50IRAk clzmbDRWzvxkMkVb+pjkYfNzsPL7YGKz6sp3Wp1EdV0wY2nSGVMpiRyDltl1IMw9 okojqReu8PVEiVOTXTVSn6Kkd2hh6P50arsEKxXIMJ5woel7XwMwDZqyGDH+OAUY yt+fxcVJooVOKEOTXDyDn+tFxylMG9fLqbCeo1nLbQJ+2WxHQkY50xvrJxvgGC4u puI+Q0wWTqrD+rIF38s6JqB3oWmcDYuLcgIKkIwUTxxFTSOFySm5u0e2dt3zFCke Pe5QGQSRiUjspeehr88NDYt+rjnsK8oLzX3KEXA2opaLd8CvN6+Abi53zUVAzUQc USHkXx4= -----END CERTIFICATE-----Generated at Sun Jan 25 18:55:17 2026 by rpki-client