This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/3DC8B712E14411EFBECFB90BC4F9AE02.roa File: 3DC8B712E14411EFBECFB90BC4F9AE02.roa (raw, json) Hash identifier: XLPi0zhLUNsE9iSPuHVQvow0KQLSfAVQkCcR6p16QHQ= Subject key identifier: 44:0C:00:18:2F:A4:0F:3A:BE:D1:C9:FB:E4:78:75:6E:56:69:DE:34 Certificate issuer: /CN=A91809AD/serialNumber=6D7C226A7DCB85F2F49216B7EBB00D5F03A605C3 Certificate serial: 13FC Authority key identifier: 6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/3DC8B712E14411EFBECFB90BC4F9AE02.roa Signing time: Fri 26 Dec 2025 18:49:37 +0000 ROA not before: Fri 26 Dec 2025 18:49:37 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 138039 IP address blocks: 103.120.116.0/24 maxlen: 24 103.120.117.0/24 maxlen: 24 103.120.118.0/24 maxlen: 24 103.120.119.0/24 maxlen: 24 2407:1840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.crl rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 16:41:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5116 (0x13fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91809AD, serialNumber=6D7C226A7DCB85F2F49216B7EBB00D5F03A605C3 Validity Not Before: Dec 26 18:49:37 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=694ed8c1-1315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8f:8a:42:3b:69:0e:44:a9:3c:4d:da:57:7e: 73:d4:53:94:16:3a:5f:03:2a:1d:1c:db:46:ae:07: 27:a1:54:e2:de:07:75:a1:ec:e7:51:ad:b7:17:7c: 61:b4:72:ba:d4:a8:2f:da:cf:ac:c4:d3:a0:03:0e: 3c:27:29:8e:7c:37:f7:b1:9d:17:78:b5:18:0a:43: 2d:f4:e7:29:58:8b:6d:a9:db:5f:1f:2d:c5:3c:53: 87:cf:68:c7:4c:4d:36:27:45:f3:fb:8a:d2:03:0f: b6:2c:bd:40:06:d2:df:98:63:42:80:34:6a:e2:01: 7e:75:f5:0d:d8:b3:3d:2a:7b:89:29:90:80:a4:46: df:8e:90:39:2e:9e:cc:a4:66:f3:13:39:14:5a:be: 3d:5d:2d:89:22:71:da:f4:c1:fc:43:d0:b3:e7:47: f0:07:1e:69:ce:28:b0:cc:f9:d9:00:95:0d:6b:7d: c1:c6:7e:af:39:d8:5e:1d:64:b0:24:b4:11:93:0b: c1:b9:95:95:a4:a8:14:9d:28:92:72:26:e2:cd:d3: 52:72:a7:f7:d9:56:4e:5c:d5:28:6d:28:ce:76:d8: 89:a3:95:4a:bc:7e:51:ae:18:94:e5:96:63:92:2c: 57:2a:a1:5a:65:e9:d2:cc:56:61:aa:97:57:df:c9: ae:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:0C:00:18:2F:A4:0F:3A:BE:D1:C9:FB:E4:78:75:6E:56:69:DE:34 X509v3 Authority Key Identifier: keyid:6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/3DC8B712E14411EFBECFB90BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.120.116.0/22 IPv6: 2407:1840::/32 Signature Algorithm: sha256WithRSAEncryption 93:2f:49:fa:da:f5:7d:5e:99:c4:21:e9:19:03:7d:0e:ea:a2: 22:ba:f7:97:84:76:91:20:0f:a7:d7:35:c5:e4:e9:d2:92:12: de:1e:ac:03:39:6b:a9:fb:5a:c5:44:a7:c3:46:21:cf:41:c5: 91:ca:15:d9:b0:73:b9:e2:75:0a:d3:08:a7:88:ab:3b:70:c9: e1:9c:01:33:61:05:b8:cd:e2:09:ab:69:ca:3e:d2:ca:ee:1c: 1d:e1:b3:9a:30:ab:71:91:f7:5a:59:1d:8a:07:12:7c:a9:88: cd:16:38:2a:56:6c:f6:9c:63:bd:92:c9:51:07:2f:c8:fc:d7: 4c:92:4a:02:e4:7d:0c:91:9c:da:5d:70:b4:c9:4a:4a:c3:8c: 41:05:41:c6:f2:59:3c:f9:c5:23:cd:5a:a3:a9:94:23:78:16: d0:0c:1d:eb:1c:72:f8:b1:df:d5:12:7c:86:a8:49:2d:1b:6f: cd:76:2b:f2:31:bf:b5:e0:bc:6b:98:5e:8b:45:19:82:22:5e: d3:f1:dd:f6:f9:1c:59:a9:8d:b6:84:03:a1:77:8b:b9:30:62: 74:b0:27:a8:60:85:cd:6c:e7:83:c0:c5:53:d9:4a:45:f1:f9: f2:f9:8b:61:b6:c6:97:ca:20:ce:ff:9f:9a:ab:05:35:7a:68: fc:49:41:9f -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICE/wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA5QUQxMTAvBgNVBAUTKDZEN0MyMjZBN0RDQjg1RjJGNDkyMTZCN0VCQjAwRDVG MDNBNjA1QzMwHhcNMjUxMjI2MTg0OTM3WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTRlZDhjMS0xMzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArY+KQjtpDkSpPE3aV35z1FOUFjpfAyodHNtGrgcnoVTi3gd1oeznUa23F3xh tHK61Kgv2s+sxNOgAw48JymOfDf3sZ0XeLUYCkMt9OcpWIttqdtfHy3FPFOHz2jH TE02J0Xz+4rSAw+2LL1ABtLfmGNCgDRq4gF+dfUN2LM9KnuJKZCApEbfjpA5Lp7M pGbzEzkUWr49XS2JInHa9MH8Q9Cz50fwBx5pziiwzPnZAJUNa33Bxn6vOdheHWSw JLQRkwvBuZWVpKgUnSiScibizdNScqf32VZOXNUobSjOdtiJo5VKvH5RrhiU5ZZj kixXKqFaZenSzFZhqpdX38mu/QIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFEQMABgv pA86vtHJ++R4dW5Wad40MB8GA1UdIwQYMBaAFG18Imp9y4Xy9JIWt+uwDV8DpgXD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDlBRC82NTZERDI2QUE3 NjgxMUU4OTMzM0M3MjVDNEY5QUUwMi9iWHdpYW4zTGhmTDBraGEzNjdBTlh3T21C Y00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JYd2lhbjNMaGZMMGtoYTM2N0FOWHdPbUJjTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODA5QUQvNjU2REQyNkFBNzY4MTFFODkzMzNDNzI1QzRGOUFFMDIvM0RDOEI3MTJF MTQ0MTFFRkJFQ0ZCOTBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJneHQwDQQCAAIwBwMFACQHGEAwDQYJKoZIhvcNAQELBQAD ggEBAJMvSfra9X1emcQh6RkDfQ7qoiK695eEdpEgD6fXNcXk6dKSEt4erAM5a6n7 WsVEp8NGIc9BxZHKFdmwc7nidQrTCKeIqztwyeGcATNhBbjN4gmraco+0sruHB3h s5owq3GR91pZHYoHEnypiM0WOCpWbPacY72SyVEHL8j810ySSgLkfQyRnNpdcLTJ SkrDjEEFQcbyWTz5xSPNWqOplCN4FtAMHesccvix39USfIaoSS0bb812K/Ixv7Xg vGuYXotFGYIiXtPx3fb5HFmpjbaEA6F3i7kwYnSwJ6hghc1s54PAxVPZSkXx+fL5 i2G2xpfKIM7/n5qrBTV6aPxJQZ8= -----END CERTIFICATE-----Generated at Sun Jan 25 13:57:51 2026 by rpki-client