This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/CDA6F2D0111611EFAD808A81C4F9AE02.roa File: CDA6F2D0111611EFAD808A81C4F9AE02.roa (raw, json) Hash identifier: 1x9ZSEO8uOz9PHuh4DhXivDk8BIjn4EvWUek4K4qZg4= Subject key identifier: 2E:92:2C:67:E9:83:C9:F4:D8:B9:06:EC:6A:6C:DD:62:4C:D9:4A:A2 Certificate issuer: /CN=A917CE22/serialNumber=62C4182C003EFCFA38DDAF4EF904FB04FE5B564A Certificate serial: 082A Authority key identifier: 62:C4:18:2C:00:3E:FC:FA:38:DD:AF:4E:F9:04:FB:04:FE:5B:56:4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsQYLAA-_Po43a9O-QT7BP5bVko.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/CDA6F2D0111611EFAD808A81C4F9AE02.roa Signing time: Sat 24 Jan 2026 21:17:30 +0000 ROA not before: Sat 24 Jan 2026 21:17:30 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 136251 IP address blocks: 103.204.180.0/24 maxlen: 24 103.204.181.0/24 maxlen: 24 103.204.182.0/24 maxlen: 24 103.204.183.0/24 maxlen: 24 202.181.0.0/24 maxlen: 24 202.181.1.0/24 maxlen: 24 202.181.2.0/24 maxlen: 24 202.181.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.crl rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsQYLAA-_Po43a9O-QT7BP5bVko.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 21:17:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2090 (0x82a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CE22, serialNumber=62C4182C003EFCFA38DDAF4EF904FB04FE5B564A Validity Not Before: Jan 24 21:17:30 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=697536ea-5338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:be:5c:2e:03:7a:a2:ac:1d:52:76:ad:18:e6: 38:19:b5:7f:60:46:d5:bc:67:fb:15:f1:8b:3b:0c: 46:02:2c:f3:e8:b8:e2:45:d5:15:22:55:df:cd:95: ab:9f:21:bf:5b:ea:8d:b5:f5:05:3b:cc:8d:04:09: 99:74:c3:5d:62:4d:4e:35:f2:c8:24:dc:78:60:46: 7c:94:7d:f0:17:bc:9a:02:3c:66:f0:7b:e6:5d:0e: b3:f6:01:f9:a6:dd:6e:0d:55:60:aa:7f:8c:3f:8b: 65:87:2e:cf:24:2f:95:5b:6a:2b:32:cf:bf:c2:bc: dc:9f:4e:e9:bf:ed:4e:b3:d5:d9:02:e4:5f:5c:ea: b4:9a:69:5d:c5:6f:a0:87:0b:f8:77:e1:a7:4a:6e: a2:2e:35:53:6d:f0:5c:74:25:a5:cc:aa:71:e3:9a: 2a:a1:94:7b:17:3a:63:29:c9:2f:4a:81:d0:50:04: 60:5a:c0:3f:73:50:6b:82:e2:bd:5e:ca:83:51:e0: f5:1a:ba:62:80:ab:e9:ef:35:62:e6:e9:d3:59:91: 50:ea:9a:4b:f7:63:66:09:3f:8f:e2:99:c1:84:cb: 03:09:c8:e9:69:c0:fc:f3:d6:0a:76:3b:7f:c9:62: a0:25:ea:ec:2c:cb:96:8e:ba:b9:bf:3f:1b:da:9d: 9d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:92:2C:67:E9:83:C9:F4:D8:B9:06:EC:6A:6C:DD:62:4C:D9:4A:A2 X509v3 Authority Key Identifier: keyid:62:C4:18:2C:00:3E:FC:FA:38:DD:AF:4E:F9:04:FB:04:FE:5B:56:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsQYLAA-_Po43a9O-QT7BP5bVko.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/CDA6F2D0111611EFAD808A81C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.204.180.0/22 202.181.0.0/22 Signature Algorithm: sha256WithRSAEncryption 5d:34:46:b9:cd:b5:7c:28:f2:7a:e2:67:63:c8:f4:4f:44:8b: 3f:ca:f1:8b:1b:f3:af:6e:93:eb:e1:24:1e:cf:ff:73:06:73: 94:75:a6:90:f4:b7:cc:25:3c:58:04:9c:7b:b6:ae:78:25:96: 77:fc:24:ed:86:95:ba:26:95:0f:75:a9:30:74:61:5f:35:ea: d8:0c:f6:b2:3a:5f:11:9a:11:1d:f3:9a:d9:31:ec:2f:2f:9f: 0b:69:c9:cc:d8:43:90:e5:f9:73:dd:1c:e8:6f:9c:5c:3c:69: 1c:b4:9b:73:94:ca:99:8c:8c:da:bb:a0:2f:d8:6c:fd:f9:bb: 97:a4:b2:e2:7c:7a:29:8b:00:85:97:0b:0e:d4:22:06:df:70: d7:41:19:83:3c:dc:34:8c:87:68:b9:12:d7:64:65:44:9c:ea: 79:e5:84:ee:fc:90:4e:aa:85:24:b4:95:3e:72:b7:f5:b2:7c: 47:f0:f8:1f:4c:9a:07:b4:cd:a4:88:98:98:a4:46:c3:f1:56: 49:84:a2:10:41:77:ce:70:9c:6e:41:5c:ce:b5:49:56:3d:36: 59:c1:14:7f:7a:e7:27:ce:57:14:e3:32:05:87:f5:cf:27:e2: 25:d3:85:1d:50:eb:54:9c:ad:bb:8a:59:73:19:06:22:12:0d: d2:87:ad:26 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICCCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx N0NFMjIxMTAvBgNVBAUTKDYyQzQxODJDMDAzRUZDRkEzOEREQUY0RUY5MDRGQjA0 RkU1QjU2NEEwHhcNMjYwMTI0MjExNzMwWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTc1MzZlYS01MzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAh75cLgN6oqwdUnatGOY4GbV/YEbVvGf7FfGLOwxGAizz6LjiRdUVIlXfzZWr nyG/W+qNtfUFO8yNBAmZdMNdYk1ONfLIJNx4YEZ8lH3wF7yaAjxm8HvmXQ6z9gH5 pt1uDVVgqn+MP4tlhy7PJC+VW2orMs+/wrzcn07pv+1Os9XZAuRfXOq0mmldxW+g hwv4d+GnSm6iLjVTbfBcdCWlzKpx45oqoZR7FzpjKckvSoHQUARgWsA/c1BrguK9 XsqDUeD1GrpigKvp7zVi5unTWZFQ6ppL92NmCT+P4pnBhMsDCcjpacD889YKdjt/ yWKgJersLMuWjrq5vz8b2p2dzQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFC6SLGfp g8n02LkG7Gps3WJM2UqiMB8GA1UdIwQYMBaAFGLEGCwAPvz6ON2vTvkE+wT+W1ZK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0UyMi8xMkZBODExQTE3 N0IxMUVCODQ2MzRDMzZDNEY5QUUwMi9Zc1FZTEFBLV9QbzQzYTlPLVFUN0JQNWJW a28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lzUVlMQUEtX1BvNDNhOU8tUVQ3QlA1YlZrby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0NFMjIvMTJGQTgxMUExNzdCMTFFQjg0NjM0QzM2QzRGOUFFMDIvQ0RBNkYyRDAx MTE2MTFFRkFEODA4QTgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnzLQDBALKtQAwDQYJKoZIhvcNAQELBQADggEBAF00RrnN tXwo8nriZ2PI9E9Eiz/K8Ysb869uk+vhJB7P/3MGc5R1ppD0t8wlPFgEnHu2rngl lnf8JO2GlbomlQ91qTB0YV816tgM9rI6XxGaER3zmtkx7C8vnwtpyczYQ5Dl+XPd HOhvnFw8aRy0m3OUypmMjNq7oC/YbP35u5eksuJ8eimLAIWXCw7UIgbfcNdBGYM8 3DSMh2i5EtdkZUSc6nnlhO78kE6qhSS0lT5yt/WyfEfw+B9Mmge0zaSImJikRsPx VkmEohBBd85wnG5BXM61SVY9NlnBFH965yfOVxTjMgWH9c8n4iXThR1Q61ScrbuK WXMZBiISDdKHrSY= -----END CERTIFICATE-----Generated at Sun Jan 25 17:04:16 2026 by rpki-client