This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/232F9552F80D11F0AED4E007706F56BC.roa File: 232F9552F80D11F0AED4E007706F56BC.roa (raw, json) Hash identifier: WXbOLiI5VKk9UDWYhTVNRj5zft4jtBsEcrqWEIUZgaI= Subject key identifier: D2:2F:AF:AE:4A:DD:71:A0:F0:F2:0E:89:B1:81:FA:7F:1C:40:10:98 Certificate issuer: /CN=A917B520/serialNumber=542B94D8625CF711964FD13741295D27AD7A9004 Certificate serial: 0279 Authority key identifier: 54:2B:94:D8:62:5C:F7:11:96:4F:D1:37:41:29:5D:27:AD:7A:90:04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/232F9552F80D11F0AED4E007706F56BC.roa Signing time: Fri 23 Jan 2026 03:40:44 +0000 ROA not before: Fri 23 Jan 2026 03:40:44 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 150436 IP address blocks: 101.47.0.0/18 maxlen: 24 101.47.64.0/20 maxlen: 24 101.47.80.0/20 maxlen: 23 101.47.80.0/21 maxlen: 24 101.47.88.0/22 maxlen: 24 101.47.92.0/23 maxlen: 24 101.47.95.0/24 maxlen: 24 101.47.96.0/21 maxlen: 24 101.47.128.0/18 maxlen: 24 101.47.253.0/24 maxlen: 24 150.5.128.0/17 maxlen: 24 163.7.0.0/17 maxlen: 24 163.7.160.0/19 maxlen: 24 163.7.192.0/18 maxlen: 24 202.52.224.0/21 maxlen: 24 202.52.252.0/22 maxlen: 24 203.147.192.0/19 maxlen: 24 2401:4c20::/40 maxlen: 44 2401:4c20:100::/40 maxlen: 40 2401:4c20:200::/40 maxlen: 44 2401:4c20:300::/40 maxlen: 44 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.crl rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 01:41:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 633 (0x279) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B520, serialNumber=542B94D8625CF711964FD13741295D27AD7A9004 Validity Not Before: Jan 23 03:40:44 2026 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6972edbc-c69c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:11:ea:65:9f:73:f2:99:64:d4:63:a4:13:5d: 18:c7:51:49:36:21:35:fc:15:4b:c8:0b:07:1d:9a: d9:48:84:4b:9a:66:f0:44:4b:28:13:ad:4f:3c:66: 9a:c0:72:d8:2b:d8:36:8d:88:53:a3:66:fe:fe:09: d3:a9:06:5e:d9:0f:78:24:76:54:9d:56:e9:8d:b8: ea:f5:3e:48:29:96:fd:ba:e7:e6:1a:f1:f8:0d:80: 7c:d5:30:5f:84:31:d5:a9:b9:8a:aa:13:2b:b5:bb: 01:f4:a5:0d:5d:11:e3:31:4f:6d:ab:b1:3d:bf:fa: 89:5a:ab:25:31:99:42:5c:44:5b:5e:9a:1a:33:0b: 5a:84:c4:6c:a0:53:0a:5e:7a:fd:e7:52:8b:0b:ad: 54:ff:a3:b3:4b:27:62:15:da:89:cc:5a:51:bb:34: 7e:af:4f:bb:ff:82:4c:cb:66:28:f0:82:13:24:c7: 07:16:df:91:3e:05:71:f8:d9:00:a5:76:f8:25:9c: 71:45:52:dd:8a:d6:fa:49:a9:15:1c:db:a9:62:1b: 87:ea:5c:3e:40:c6:4d:1d:82:a2:70:d7:7c:ac:8c: 76:16:5b:cf:f5:cf:23:98:6e:83:ba:37:3a:01:36: d3:47:dc:46:bb:d0:f5:71:0e:69:0a:fd:ec:8f:df: b9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:2F:AF:AE:4A:DD:71:A0:F0:F2:0E:89:B1:81:FA:7F:1C:40:10:98 X509v3 Authority Key Identifier: keyid:54:2B:94:D8:62:5C:F7:11:96:4F:D1:37:41:29:5D:27:AD:7A:90:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/232F9552F80D11F0AED4E007706F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 101.47.0.0-101.47.103.255 101.47.128.0/18 101.47.253.0/24 150.5.128.0/17 163.7.0.0/17 163.7.160.0-163.7.255.255 202.52.224.0/21 202.52.252.0/22 203.147.192.0/19 IPv6: 2401:4c20::/38 Signature Algorithm: sha256WithRSAEncryption 74:0d:c5:56:e5:97:4a:46:01:db:85:a4:43:23:b2:fa:58:56: ff:64:e1:76:86:18:6d:5e:e0:0b:92:06:53:f1:2b:ab:9e:97: 69:54:da:cd:60:52:84:1f:2b:34:c9:ec:3f:ee:55:6a:db:63: d8:2b:be:23:b9:b9:02:7b:59:ec:12:06:06:b9:46:e2:69:c1: 4d:63:39:cf:cf:91:78:d3:5b:ad:02:a0:ca:76:7e:10:d4:02: c4:90:60:0e:d4:25:93:e8:08:ce:82:31:15:9d:b7:c1:3e:42: 3e:f3:ce:31:34:84:fe:c6:75:cb:56:de:e2:03:79:df:b3:b0: 05:b3:2f:ae:af:18:75:77:85:4d:6b:c5:59:1e:76:10:b3:25: 7a:99:bf:f8:4b:d9:a1:6e:04:d4:ce:f3:bb:2c:8d:7d:ef:e1: b7:db:fa:6e:b5:7e:14:1c:27:9e:80:4d:bd:0d:8f:24:c9:91: 3a:fb:9c:08:4e:5d:be:e5:e8:74:18:8c:ed:10:23:72:6e:ce: a9:7c:7e:22:7e:96:ca:cf:6f:1b:de:ea:10:47:b8:f3:06:e7: 63:ac:36:fc:da:94:ec:43:51:d3:f9:f4:97:72:d2:ad:dc:54: a7:24:10:d2:2b:6f:9c:3a:29:87:ff:2a:24:63:a6:59:1e:c1: ac:2b:b7:9d -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgICAnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MjAxMTAvBgNVBAUTKDU0MkI5NEQ4NjI1Q0Y3MTE5NjRGRDEzNzQxMjk1RDI3 QUQ3QTkwMDQwHhcNMjYwMTIzMDM0MDQ0WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDDA02OTcyZWRiYy1jNjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2RHqZZ9z8plk1GOkE10Yx1FJNiE1/BVLyAsHHZrZSIRLmmbwREsoE61PPGaa wHLYK9g2jYhTo2b+/gnTqQZe2Q94JHZUnVbpjbjq9T5IKZb9uufmGvH4DYB81TBf hDHVqbmKqhMrtbsB9KUNXRHjMU9tq7E9v/qJWqslMZlCXERbXpoaMwtahMRsoFMK Xnr951KLC61U/6OzSydiFdqJzFpRuzR+r0+7/4JMy2Yo8IITJMcHFt+RPgVx+NkA pXb4JZxxRVLditb6SakVHNupYhuH6lw+QMZNHYKicNd8rIx2FlvP9c8jmG6Dujc6 ATbTR9xGu9D1cQ5pCv3sj9+52QIDAQABo4IC4zCCAt8wHQYDVR0OBBYEFNIvr65K 3XGg8PIOibGB+n8cQBCYMB8GA1UdIwQYMBaAFFQrlNhiXPcRlk/RN0EpXSetepAE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUyMC8xNjFENEMwQUU0 Q0ExMUVEQTQxNEUyNTlDNEY5QUUwMi9WQ3VVMkdKYzl4R1dUOUUzUVNsZEo2MTZr QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZDdVUyR0pjOXhHV1Q5RTNRU2xkSjYxNmtBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0I1MjAvMTYxRDRDMEFFNENBMTFFREE0MTRFMjU5QzRGOUFFMDIvMjMyRjk1NTJG ODBEMTFGMEFFRDRFMDA3NzA2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwbQYIKwYBBQUHAQcBAf8E XjBcMEoEAgABMEQwCwMDAGUvAwQDZS9gAwQGZS+AAwQAZS/9AwQHlgWAAwQHowcA MAsDBAWjB6ADAwOjAAMEA8o04AMEAso0/AMEBcuTwDAOBAIAAjAIAwYCJAFMIAAw DQYJKoZIhvcNAQELBQADggEBAHQNxVbll0pGAduFpEMjsvpYVv9k4XaGGG1e4AuS BlPxK6uel2lU2s1gUoQfKzTJ7D/uVWrbY9grviO5uQJ7WewSBga5RuJpwU1jOc/P kXjTW60CoMp2fhDUAsSQYA7UJZPoCM6CMRWdt8E+Qj7zzjE0hP7GdctW3uIDed+z sAWzL66vGHV3hU1rxVkedhCzJXqZv/hL2aFuBNTO87ssjX3v4bfb+m61fhQcJ56A Tb0NjyTJkTr7nAhOXb7l6HQYjO0QI3Juzql8fiJ+lsrPbxve6hBHuPMG52OsNvza lOxDUdP59Jdy0q3cVKckENIrb5w6KYf/KiRjplkewawrt50= -----END CERTIFICATE-----Generated at Sun Jan 25 17:41:45 2026 by rpki-client