This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/E8B2BE5ADBCE11EFA9FC2C0EC4F9AE02.roa File: E8B2BE5ADBCE11EFA9FC2C0EC4F9AE02.roa (raw, json) Hash identifier: dM5/AFaQpUXJQOWyb82qNyEz12TKb/CugkVKzBW9rPQ= Subject key identifier: A9:F9:DF:20:31:77:B5:E7:71:58:A1:14:E0:3E:06:F9:80:CB:50:C8 Certificate issuer: /CN=A9173C63/serialNumber=908A180F94949607ADC0113149BE882AEAA8E88F Certificate serial: 0213 Authority key identifier: 90:8A:18:0F:94:94:96:07:AD:C0:11:31:49:BE:88:2A:EA:A8:E8:8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIoYD5SUlgetwBExSb6IKuqo6I8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/E8B2BE5ADBCE11EFA9FC2C0EC4F9AE02.roa Signing time: Thu 01 Jan 2026 08:58:30 +0000 ROA not before: Thu 01 Jan 2026 08:58:30 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 151080 IP address blocks: 103.131.100.0/23 maxlen: 24 2001:df2:4340::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.crl rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIoYD5SUlgetwBExSb6IKuqo6I8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 01:38:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 531 (0x213) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173C63, serialNumber=908A180F94949607ADC0113149BE882AEAA8E88F Validity Not Before: Jan 1 08:58:30 2026 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69563736-0ff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:29:45:57:6f:51:9e:01:f7:62:a2:cb:da:3e: 78:d2:50:e7:a1:33:44:c5:41:53:f3:70:c6:38:0a: 5e:54:c5:bb:3b:6b:67:92:cf:2a:01:7a:b9:dd:28: b1:dd:73:19:15:c0:0d:80:55:ba:59:76:a1:d6:17: da:a6:bc:04:51:bf:66:32:3b:eb:66:f8:e1:b3:b6: be:0a:a9:00:72:e3:c2:7e:7d:73:e4:c1:28:8c:d5: 7f:f8:1a:62:86:40:52:82:0a:ba:2c:0a:8f:e6:e3: 26:eb:82:5e:15:5c:88:52:a2:39:33:57:09:7a:1c: 19:dd:55:bc:82:32:41:1a:ed:1a:9e:cd:68:eb:6b: bc:3d:fb:d0:95:bc:44:2e:d5:e6:ec:ef:ae:6c:e6: 82:86:4f:67:38:02:2f:36:88:3c:cf:d2:2e:64:17: 3a:a3:d6:6c:e1:c1:b7:50:ba:f4:84:46:59:8c:31: 26:27:40:e6:1c:c0:26:80:17:a5:18:23:30:db:b1: 2b:74:c3:d7:ad:d6:9d:fc:08:17:97:69:32:7d:ab: fd:dc:be:c3:b8:d9:09:1e:8e:c9:2c:9e:02:ae:b2: 65:61:cf:77:34:f6:cb:ce:39:a2:f2:af:1a:4f:83: 29:3f:e8:09:6d:0c:e7:02:26:b9:2e:1a:b1:b6:26: a5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F9:DF:20:31:77:B5:E7:71:58:A1:14:E0:3E:06:F9:80:CB:50:C8 X509v3 Authority Key Identifier: keyid:90:8A:18:0F:94:94:96:07:AD:C0:11:31:49:BE:88:2A:EA:A8:E8:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIoYD5SUlgetwBExSb6IKuqo6I8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/E8B2BE5ADBCE11EFA9FC2C0EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.131.100.0/23 IPv6: 2001:df2:4340::/48 Signature Algorithm: sha256WithRSAEncryption 2b:e1:a4:b2:62:90:3f:f8:b0:3d:4f:a2:91:a6:b5:bd:71:36: d4:b5:b4:cf:80:29:d6:c4:4c:14:28:3c:bc:1c:f0:e5:16:ee: d5:e3:e7:5f:a8:4c:bb:12:95:0d:31:fc:82:f2:d1:6f:83:04: b9:85:af:cd:0f:00:15:47:dc:9a:ee:0a:8d:81:34:b0:b2:88: ef:65:a7:23:2f:0f:0a:0c:97:96:ef:4a:24:db:78:d7:d6:62: 98:eb:f4:f2:dc:98:58:5a:da:c7:61:37:a3:89:a1:0d:fe:c5: e1:40:20:b3:10:7a:3a:30:b9:82:17:c5:e7:d8:80:5c:37:11: e7:7a:3c:47:0d:6a:52:6e:66:2e:3d:3c:46:33:94:a3:ee:70: 30:11:ac:ca:4f:9c:29:b5:1d:89:05:e8:b2:22:f4:cd:07:9c: e8:2e:c9:4c:18:d0:86:19:5d:b8:e1:20:49:1d:a6:69:cc:b9: 15:84:d4:10:3e:5a:1b:dc:7a:74:57:ff:32:dc:e5:a9:e2:1f: 33:da:d4:cb:93:23:ce:57:dc:cf:1a:3f:07:5a:2b:0e:79:62: 6c:3f:ae:7e:dc:02:5a:9d:76:7f:d4:31:b4:2a:bd:27:96:a0: 64:1c:56:d1:6b:b4:72:b4:98:99:65:66:02:a6:82:fe:72:e7: 4a:db:90:e1 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNDNjMxMTAvBgNVBAUTKDkwOEExODBGOTQ5NDk2MDdBREMwMTEzMTQ5QkU4ODJB RUFBOEU4OEYwHhcNMjYwMTAxMDg1ODMwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU2MzczNi0wZmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyClFV29RngH3YqLL2j540lDnoTNExUFT83DGOApeVMW7O2tnks8qAXq53Six 3XMZFcANgFW6WXah1hfaprwEUb9mMjvrZvjhs7a+CqkAcuPCfn1z5MEojNV/+Bpi hkBSggq6LAqP5uMm64JeFVyIUqI5M1cJehwZ3VW8gjJBGu0ans1o62u8PfvQlbxE LtXm7O+ubOaChk9nOAIvNog8z9IuZBc6o9Zs4cG3ULr0hEZZjDEmJ0DmHMAmgBel GCMw27ErdMPXrdad/AgXl2kyfav93L7DuNkJHo7JLJ4CrrJlYc93NPbLzjmi8q8a T4MpP+gJbQznAia5LhqxtialRQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFKn53yAx d7XncVihFOA+BvmAy1DIMB8GA1UdIwQYMBaAFJCKGA+UlJYHrcARMUm+iCrqqOiP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0M2My80RDExMzE5Q0Q4 NUMxMUVEODE4MUEyMkZDNEY5QUUwMi9rSW9ZRDVTVWxnZXR3QkV4U2I2SUt1cW82 STguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tJb1lENVNVbGdldHdCRXhTYjZJS3VxbzZJOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzNDNjMvNEQxMTMxOUNEODVDMTFFRDgxODFBMjJGQzRGOUFFMDIvRThCMkJFNUFE QkNFMTFFRkE5RkMyQzBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFng2QwDwQCAAIwCQMHACABDfJDQDANBgkqhkiG9w0BAQsF AAOCAQEAK+GksmKQP/iwPU+ikaa1vXE21LW0z4Ap1sRMFCg8vBzw5Rbu1ePnX6hM uxKVDTH8gvLRb4MEuYWvzQ8AFUfcmu4KjYE0sLKI72WnIy8PCgyXlu9KJNt419Zi mOv08tyYWFrax2E3o4mhDf7F4UAgsxB6OjC5ghfF59iAXDcR53o8Rw1qUm5mLj08 RjOUo+5wMBGsyk+cKbUdiQXosiL0zQec6C7JTBjQhhlduOEgSR2macy5FYTUED5a G9x6dFf/MtzlqeIfM9rUy5Mjzlfczxo/B1orDnlibD+uftwCWp12f9QxtCq9J5ag ZBxW0Wu0crSYmWVmAqaC/nLnStuQ4Q== -----END CERTIFICATE-----Generated at Sun Jan 25 09:22:49 2026 by rpki-client