This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/DEA0CC98F49311F0AD6894B8746F56BC.roa File: DEA0CC98F49311F0AD6894B8746F56BC.roa (raw, json) Hash identifier: P0W9GiGeI2GMOCSaIWfEWpK+Y9viJHtMjj89ckyo4dk= Subject key identifier: 24:99:0B:3D:FA:53:8B:3E:07:51:0A:B4:AB:44:14:AF:29:EF:23:04 Certificate issuer: /CN=A91756B7/serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E Certificate serial: 07D3 Authority key identifier: 83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/DEA0CC98F49311F0AD6894B8746F56BC.roa Signing time: Sun 18 Jan 2026 17:34:50 +0000 ROA not before: Sun 18 Jan 2026 17:34:50 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 142192 IP address blocks: 103.165.158.0/24 maxlen: 24 202.94.165.0/24 maxlen: 24 2407:4ac0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 21:38:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2003 (0x7d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91756B7, serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E Validity Not Before: Jan 18 17:34:50 2026 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=696d19ba-ea5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d9:00:f2:ca:72:46:ab:72:65:44:81:35:ff: 47:75:05:f6:eb:df:a3:74:57:cb:65:10:d9:6e:17: 68:f1:39:62:b9:37:05:78:e3:8c:8f:e4:f3:28:42: 74:ab:c6:8d:89:c3:57:d3:67:32:52:65:be:0d:f7: ce:07:b0:01:67:e4:23:74:a8:c3:d0:da:91:09:07: f6:20:e2:9c:3c:9f:6a:85:49:cc:58:34:b9:f3:60: e5:ed:70:92:dc:a0:9f:da:3b:ce:01:1a:a8:57:fa: 2e:84:f8:41:4a:2a:05:e2:fb:ac:27:02:b0:9b:8c: 45:55:3c:18:66:39:f6:37:14:3e:62:d6:15:39:65: a7:75:37:09:82:c5:e0:6f:1e:49:62:96:03:00:9a: 78:fc:19:b8:75:0d:8a:48:2f:bc:e8:6d:65:bd:7c: bf:61:0e:2d:56:74:e7:f6:24:01:94:90:a2:63:a7: 99:19:d7:38:a6:46:91:1e:71:27:21:e8:dd:41:17: af:9d:f5:3c:74:2d:ce:9d:e8:f6:c5:75:0c:df:1f: e5:31:e0:d5:88:83:a0:9e:70:4b:d9:1b:2c:36:19: e3:1f:6a:82:fd:9d:86:7a:cf:12:a9:7e:8c:1a:11: 38:29:9a:a9:9c:ee:b5:25:5e:63:95:f5:6f:6f:b4: f4:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:99:0B:3D:FA:53:8B:3E:07:51:0A:B4:AB:44:14:AF:29:EF:23:04 X509v3 Authority Key Identifier: keyid:83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/DEA0CC98F49311F0AD6894B8746F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.165.158.0/24 202.94.165.0/24 IPv6: 2407:4ac0::/32 Signature Algorithm: sha256WithRSAEncryption a9:09:46:54:a3:af:46:b7:85:8d:c9:95:5b:5e:38:1a:44:3e: 48:5c:4a:9f:d8:ad:52:9a:93:a9:92:81:99:34:46:ee:f6:35: ec:c2:46:b9:e5:38:8e:40:9a:7f:45:eb:06:f1:fa:a1:4c:70: fe:18:68:21:83:fb:b9:2b:1b:ae:7c:9a:81:81:2c:99:ea:f8: 05:cf:12:08:a3:66:a9:d9:7c:20:d5:84:ad:f4:22:bb:5e:f6: 74:5a:44:e1:12:45:44:fe:62:c9:12:6b:e7:02:dd:46:61:18: f2:d0:4f:b4:29:6c:49:87:58:7a:04:e7:b7:7e:4c:9c:05:91: 8f:10:cc:9b:39:ec:8e:9c:bf:bf:7f:af:66:dd:17:b2:6e:f6: 8a:f5:a8:19:eb:86:80:d9:f1:a0:e0:da:c3:34:eb:ae:83:c8: a4:2c:9f:2b:12:49:8b:80:f3:80:34:70:af:f1:60:85:91:c3: 3c:e5:83:3e:4a:51:28:1c:1b:58:6f:44:31:18:46:01:ec:f0: 94:8b:5f:58:1a:e7:79:ce:57:a3:40:1b:24:4a:76:a5:e7:87: e0:ef:b8:a6:5c:87:05:1a:9f:aa:f5:64:b1:51:80:f1:37:40: 12:90:35:b8:47:15:15:61:52:08:f5:b2:86:0f:ed:2c:f8:4f: fd:a2:67:3f -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICB9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU2QjcxMTAvBgNVBAUTKDgzRDk2RjFERUE3MkE5OUQyMzRCNDQ1NkQ2RjY2NzVE QzdFNjA2MUUwHhcNMjYwMTE4MTczNDUwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDDA02OTZkMTliYS1lYTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2NkA8spyRqtyZUSBNf9HdQX269+jdFfLZRDZbhdo8TliuTcFeOOMj+TzKEJ0 q8aNicNX02cyUmW+DffOB7ABZ+QjdKjD0NqRCQf2IOKcPJ9qhUnMWDS582Dl7XCS 3KCf2jvOARqoV/ouhPhBSioF4vusJwKwm4xFVTwYZjn2NxQ+YtYVOWWndTcJgsXg bx5JYpYDAJp4/Bm4dQ2KSC+86G1lvXy/YQ4tVnTn9iQBlJCiY6eZGdc4pkaRHnEn IejdQRevnfU8dC3Onej2xXUM3x/lMeDViIOgnnBL2RssNhnjH2qC/Z2Ges8SqX6M GhE4KZqpnO61JV5jlfVvb7T08wIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFCSZCz36 U4s+B1EKtKtEFK8p7yMEMB8GA1UdIwQYMBaAFIPZbx3qcqmdI0tEVtb2Z13H5gYe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTZCNy85NUVGN0RCQTk2 N0QxMUVCQURENTBEMkNDNEY5QUUwMi9nOWx2SGVweXFaMGpTMFJXMXZablhjZm1C aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c5bHZIZXB5cVowalMwUlcxdlpuWGNmbUJoNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzU2QjcvOTVFRjdEQkE5NjdEMTFFQkFERDUwRDJDQzRGOUFFMDIvREVBMENDOThG NDkzMTFGMEFENjg5NEI4NzQ2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBABnpZ4DBADKXqUwDQQCAAIwBwMFACQHSsAwDQYJKoZIhvcN AQELBQADggEBAKkJRlSjr0a3hY3JlVteOBpEPkhcSp/YrVKak6mSgZk0Ru72NezC RrnlOI5Amn9F6wbx+qFMcP4YaCGD+7krG658moGBLJnq+AXPEgijZqnZfCDVhK30 Irte9nRaROESRUT+YskSa+cC3UZhGPLQT7QpbEmHWHoE57d+TJwFkY8QzJs57I6c v79/r2bdF7Ju9or1qBnrhoDZ8aDg2sM0666DyKQsnysSSYuA84A0cK/xYIWRwzzl gz5KUSgcG1hvRDEYRgHs8JSLX1ga53nOV6NAGyRKdqXnh+DvuKZchwUan6r1ZLFR gPE3QBKQNbhHFRVhUgj1soYP7Sz4T/2iZz8= -----END CERTIFICATE-----Generated at Sun Jan 25 15:07:30 2026 by rpki-client