This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/1966C856FB9E11ED8309FC1DC4F9AE02.roa File: 1966C856FB9E11ED8309FC1DC4F9AE02.roa (raw, json) Hash identifier: +QRSAMg8DIUI5aQ7DyAStghs3PnHAxHMHNPnVjOVkqM= Subject key identifier: 54:76:07:F2:D7:72:59:02:CB:50:57:3B:5B:0A:F7:73:16:C4:42:E2 Certificate issuer: /CN=A917B540/serialNumber=702FA1AE9682B2B22ECDD9A53012F0E6F1BA1B9C Certificate serial: 01FE Authority key identifier: 70:2F:A1:AE:96:82:B2:B2:2E:CD:D9:A5:30:12:F0:E6:F1:BA:1B:9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/1966C856FB9E11ED8309FC1DC4F9AE02.roa Signing time: Wed 21 Jan 2026 05:48:25 +0000 ROA not before: Wed 21 Jan 2026 05:48:25 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 56309 IP address blocks: 43.229.76.0/22 maxlen: 24 103.22.180.0/22 maxlen: 24 2403:2300::/32 maxlen: 36 2403:2300:2::/48 maxlen: 48 2403:2300:3::/48 maxlen: 48 2403:2300:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 01:48:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 510 (0x1fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B540, serialNumber=702FA1AE9682B2B22ECDD9A53012F0E6F1BA1B9C Validity Not Before: Jan 21 05:48:25 2026 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=697068a9-e823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:16:6c:ec:4f:82:12:85:41:f7:7d:66:36:c6: 08:80:55:46:c6:75:b4:18:9c:01:ea:07:01:c4:df: fe:e3:22:21:b2:2b:19:70:52:f3:e2:71:e3:ba:8c: 22:b6:42:da:e4:5a:83:d8:15:97:d2:d2:ac:d7:5e: 2d:94:9b:a7:5e:45:ee:c3:fc:f6:5d:72:31:08:c1: 9a:82:c0:e5:2d:fd:4a:97:31:f9:dd:e9:50:08:87: d7:a3:00:cb:0f:08:9c:08:c1:81:ac:59:da:27:64: 03:20:99:80:2e:bd:84:ef:31:5e:6d:ff:2e:6c:a0: e1:f8:c7:10:5e:33:d3:cc:19:78:51:e3:4b:39:af: 8c:93:b9:f1:c3:3a:9c:bb:94:7c:a2:b5:bd:b3:70: c0:84:ff:6b:4f:69:3e:8e:7f:1a:00:fc:60:24:ed: 52:d6:34:00:c0:de:6c:bf:02:90:09:a9:13:62:a0: 64:f4:5e:b7:60:69:6f:ae:86:04:fd:9d:04:cd:9f: cc:d6:f7:1a:9d:62:a0:8f:21:f5:17:e2:44:59:6f: ec:d6:99:d9:39:7c:d7:77:2c:22:1a:9e:40:36:79: 26:39:26:af:9e:ea:cc:fe:52:33:42:2e:d3:47:72: fd:24:93:68:67:f4:3e:9b:33:d9:98:24:cc:b6:89: a0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:76:07:F2:D7:72:59:02:CB:50:57:3B:5B:0A:F7:73:16:C4:42:E2 X509v3 Authority Key Identifier: keyid:70:2F:A1:AE:96:82:B2:B2:2E:CD:D9:A5:30:12:F0:E6:F1:BA:1B:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/1966C856FB9E11ED8309FC1DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.229.76.0/22 103.22.180.0/22 IPv6: 2403:2300::/32 Signature Algorithm: sha256WithRSAEncryption 14:e1:f1:54:b6:9b:2e:86:b6:7d:e3:a2:71:c6:97:b0:a1:f4: 70:e4:fd:11:61:84:1f:9b:b5:78:32:9d:1a:f9:b3:1b:4b:6a: ae:30:73:8a:87:77:64:24:cb:d7:ae:a9:19:77:00:85:22:5c: 99:0f:4b:84:3b:9d:c8:7d:23:57:a7:8d:d1:13:fe:b3:92:97: 98:5b:17:43:fb:b6:71:9b:c3:80:7c:0c:34:1a:1e:22:f6:02: f1:ea:5b:04:26:2f:2b:1b:cd:c9:34:b5:dd:cb:6c:5a:06:47: fd:46:bc:c3:c5:69:a2:35:16:12:ff:de:67:99:2d:23:7b:b9: 2d:07:33:a4:38:fc:d8:7b:a6:96:54:79:f0:dc:43:62:9a:84: 06:d1:e6:ce:36:07:ac:e8:e0:e8:37:c9:fc:fa:e5:30:35:92: eb:4a:fc:ad:38:d6:60:18:98:e1:15:7d:2c:80:da:55:f1:6d: 80:1b:9c:ca:d5:04:a5:f7:62:e9:59:7b:63:34:7c:15:87:e0: a4:a9:0e:6f:18:9d:59:05:8f:68:09:f2:5b:06:23:c9:59:fb: 9a:52:85:43:ef:a9:59:d6:12:7f:73:5b:22:3e:2d:04:a1:82: a7:00:a5:2c:e6:96:ca:19:d8:b7:87:0c:9a:c5:bb:a8:06:34: a4:09:ee:f5 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICAf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1NDAxMTAvBgNVBAUTKDcwMkZBMUFFOTY4MkIyQjIyRUNERDlBNTMwMTJGMEU2 RjFCQTFCOUMwHhcNMjYwMTIxMDU0ODI1WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDDA02OTcwNjhhOS1lODIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRZs7E+CEoVB931mNsYIgFVGxnW0GJwB6gcBxN/+4yIhsisZcFLz4nHjuowi tkLa5FqD2BWX0tKs114tlJunXkXuw/z2XXIxCMGagsDlLf1KlzH53elQCIfXowDL DwicCMGBrFnaJ2QDIJmALr2E7zFebf8ubKDh+McQXjPTzBl4UeNLOa+Mk7nxwzqc u5R8orW9s3DAhP9rT2k+jn8aAPxgJO1S1jQAwN5svwKQCakTYqBk9F63YGlvroYE /Z0EzZ/M1vcanWKgjyH1F+JEWW/s1pnZOXzXdywiGp5ANnkmOSavnurM/lIzQi7T R3L9JJNoZ/Q+mzPZmCTMtomgqQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFFR2B/LX clkCy1BXO1sK93MWxELiMB8GA1UdIwQYMBaAFHAvoa6WgrKyLs3ZpTAS8Obxuhuc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjU0MC9EOTdBOTVCQ0Y4 ODAxMUVEQjlBQkZDNTZDNEY5QUUwMi9jQy1ocnBhQ3NySXV6ZG1sTUJMdzV2RzZH NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NDLWhycGFDc3JJdXpkbWxNQkx3NXZHNkc1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0I1NDAvRDk3QTk1QkNGODgwMTFFREI5QUJGQzU2QzRGOUFFMDIvMTk2NkM4NTZG QjlFMTFFRDgzMDlGQzFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAIr5UwDBAJnFrQwDQQCAAIwBwMFACQDIwAwDQYJKoZIhvcN AQELBQADggEBABTh8VS2my6Gtn3jonHGl7Ch9HDk/RFhhB+btXgynRr5sxtLaq4w c4qHd2Qky9euqRl3AIUiXJkPS4Q7nch9I1enjdET/rOSl5hbF0P7tnGbw4B8DDQa HiL2AvHqWwQmLysbzck0td3LbFoGR/1GvMPFaaI1FhL/3meZLSN7uS0HM6Q4/Nh7 ppZUefDcQ2KahAbR5s42B6zo4Og3yfz65TA1kutK/K041mAYmOEVfSyA2lXxbYAb nMrVBKX3YulZe2M0fBWH4KSpDm8YnVkFj2gJ8lsGI8lZ+5pShUPvqVnWEn9zWyI+ LQShgqcApSzmlsoZ2LeHDJrFu6gGNKQJ7vU= -----END CERTIFICATE-----Generated at Mon Jan 26 00:43:27 2026 by rpki-client