This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/B9629D3258D611ED86C99945C4F9AE02.roa File: B9629D3258D611ED86C99945C4F9AE02.roa (raw, json) Hash identifier: QOgKODH0BdGNU32KrNDcl5JW265mloOw6csnOyuDnjk= Subject key identifier: F5:8B:BF:BD:C2:F5:FB:2D:7E:A8:4B:50:79:2B:9B:31:DD:8A:21:3D Certificate issuer: /CN=A917DDD6/serialNumber=B0557173A008D6F78C6E5E6B40F8DC079A8DF65F Certificate serial: 1394 Authority key identifier: B0:55:71:73:A0:08:D6:F7:8C:6E:5E:6B:40:F8:DC:07:9A:8D:F6:5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/B9629D3258D611ED86C99945C4F9AE02.roa Signing time: Tue 30 Dec 2025 17:14:20 +0000 ROA not before: Tue 30 Dec 2025 17:14:20 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 136001 IP address blocks: 103.79.124.0/22 maxlen: 24 202.179.132.0/22 maxlen: 24 2401:1840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.crl rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 16:42:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5012 (0x1394) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DDD6, serialNumber=B0557173A008D6F78C6E5E6B40F8DC079A8DF65F Validity Not Before: Dec 30 17:14:20 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6954086c-119c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:35:91:a5:aa:97:57:65:87:5e:68:20:9d:42: ed:84:d0:2d:11:4a:c9:d4:4c:06:a7:aa:17:24:ac: 64:d4:3b:d4:12:fd:1d:95:30:2e:a9:76:0f:b7:00: 0a:71:7a:cd:86:20:e0:38:d4:53:23:b1:6c:a8:96: e7:82:b9:f6:83:3d:18:39:b0:c6:db:19:1a:2e:ec: 7c:d0:97:bb:06:a2:f2:27:9a:a4:5f:3b:c5:6b:76: d5:60:22:3a:19:7e:8b:92:31:d1:be:b7:66:ac:cc: 49:53:d0:a1:0c:08:7e:bc:87:19:a5:65:dd:a2:e5: a5:89:65:78:5b:f9:bf:6b:80:0c:9c:70:58:81:47: 5b:7d:1d:5c:2c:ec:4a:9c:77:c0:12:0d:39:ee:99: 0f:88:e0:fc:bb:cc:78:ac:f9:fa:bb:af:31:b1:26: 2e:04:8d:21:be:d1:17:03:49:14:f1:31:49:6b:81: 66:2d:83:f2:0a:3e:02:28:ed:5e:99:a5:82:b3:0a: 63:84:4f:2b:82:12:99:10:0a:21:f5:ed:b4:51:f0: d5:74:f4:08:61:85:13:3b:d5:07:67:e5:42:bc:4b: 7f:be:da:74:05:1b:e7:2c:d6:15:ff:6c:a3:0c:dc: cf:db:85:e6:bb:c8:c6:01:84:d2:e0:57:38:9c:07: 03:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:8B:BF:BD:C2:F5:FB:2D:7E:A8:4B:50:79:2B:9B:31:DD:8A:21:3D X509v3 Authority Key Identifier: keyid:B0:55:71:73:A0:08:D6:F7:8C:6E:5E:6B:40:F8:DC:07:9A:8D:F6:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/B9629D3258D611ED86C99945C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.79.124.0/22 202.179.132.0/22 IPv6: 2401:1840::/32 Signature Algorithm: sha256WithRSAEncryption 22:aa:da:c5:d1:3c:25:44:70:34:0e:0c:dd:4c:83:8f:b9:b1: 1d:43:83:38:c5:82:7e:ad:60:8a:5d:fe:5c:e9:ee:1c:8d:22: 9e:46:01:08:a7:61:e6:87:56:8b:dc:f9:4a:ba:82:0b:91:9c: d9:49:77:c4:5f:a8:9d:1b:8c:71:42:e2:c9:66:4b:06:51:41: cb:b0:a0:25:a6:f8:88:d4:89:e5:b0:7a:ca:52:31:58:ea:1c: 3b:aa:22:1b:b0:0f:03:04:b0:0b:65:20:b3:f0:e8:8f:76:d6: b0:11:dd:af:e6:e6:71:a9:6f:36:e6:6e:1f:3b:d6:27:88:4b: 32:a9:03:09:e1:e2:55:e4:d8:31:63:7b:7a:5d:e5:74:2f:c4: d5:0d:41:69:b9:80:55:3f:e8:a6:a0:8c:55:d6:9f:7b:ad:83: 78:59:da:46:f8:2b:0c:da:93:83:a8:9b:b2:f6:f4:7d:a6:62: 2b:db:02:11:53:1a:b7:f5:62:00:fb:60:c1:15:bb:67:8c:35: 9e:45:26:ff:f9:ad:4d:16:9d:fa:7a:9d:61:25:60:e9:8e:34: c6:fe:03:9e:98:4f:a7:8a:01:18:6a:04:b3:d3:39:71:d4:3d: d8:92:16:75:8a:50:4b:b0:c6:f3:94:0c:12:23:8b:d8:24:6d: 1e:f6:5a:3e -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICE5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx N0RERDYxMTAvBgNVBAUTKEIwNTU3MTczQTAwOEQ2Rjc4QzZFNUU2QjQwRjhEQzA3 OUE4REY2NUYwHhcNMjUxMjMwMTcxNDIwWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU0MDg2Yy0xMTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApjWRpaqXV2WHXmggnULthNAtEUrJ1EwGp6oXJKxk1DvUEv0dlTAuqXYPtwAK cXrNhiDgONRTI7FsqJbngrn2gz0YObDG2xkaLux80Je7BqLyJ5qkXzvFa3bVYCI6 GX6LkjHRvrdmrMxJU9ChDAh+vIcZpWXdouWliWV4W/m/a4AMnHBYgUdbfR1cLOxK nHfAEg057pkPiOD8u8x4rPn6u68xsSYuBI0hvtEXA0kU8TFJa4FmLYPyCj4CKO1e maWCswpjhE8rghKZEAoh9e20UfDVdPQIYYUTO9UHZ+VCvEt/vtp0BRvnLNYV/2yj DNzP24Xmu8jGAYTS4Fc4nAcDKwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFPWLv73C 9fstfqhLUHkrmzHdiiE9MB8GA1UdIwQYMBaAFLBVcXOgCNb3jG5ea0D43AeajfZf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RERENi9FNTM0N0IxQ0FE MjAxMUU4QkE5RDk1MUFDNEY5QUUwMi9zRlZ4YzZBSTF2ZU1ibDVyUVBqY0I1cU45 bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NGVnhjNkFJMXZlTWJsNXJRUGpjQjVxTjlsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0RERDYvRTUzNDdCMUNBRDIwMTFFOEJBOUQ5NTFBQzRGOUFFMDIvQjk2MjlEMzI1 OEQ2MTFFRDg2Qzk5OTQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJnT3wDBALKs4QwDQQCAAIwBwMFACQBGEAwDQYJKoZIhvcN AQELBQADggEBACKq2sXRPCVEcDQODN1Mg4+5sR1DgzjFgn6tYIpd/lzp7hyNIp5G AQinYeaHVovc+Uq6gguRnNlJd8RfqJ0bjHFC4slmSwZRQcuwoCWm+IjUieWwespS MVjqHDuqIhuwDwMEsAtlILPw6I921rAR3a/m5nGpbzbmbh871ieISzKpAwnh4lXk 2DFje3pd5XQvxNUNQWm5gFU/6KagjFXWn3utg3hZ2kb4Kwzak4Oom7L29H2mYivb AhFTGrf1YgD7YMEVu2eMNZ5FJv/5rU0Wnfp6nWElYOmONMb+A56YT6eKARhqBLPT OXHUPdiSFnWKUEuwxvOUDBIji9gkbR72Wj4= -----END CERTIFICATE-----Generated at Sun Jan 25 06:08:26 2026 by rpki-client