This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/011F48EE2FF411E78B4D5566C4F9AE02.roa File: 011F48EE2FF411E78B4D5566C4F9AE02.roa (raw, json) Hash identifier: s9LqLTmAWTdOS5ot2DLkefavEq12HF8EsS2aGWajFJg= Subject key identifier: 79:8E:26:C9:73:DC:28:7D:D5:FF:3C:FB:46:7C:55:1C:E6:71:55:58 Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Certificate serial: 3766 Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/011F48EE2FF411E78B4D5566C4F9AE02.roa Signing time: Fri 16 Jan 2026 16:13:01 +0000 ROA not before: Fri 16 Jan 2026 16:13:01 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 133812 IP address blocks: 103.52.2.0/23 maxlen: 23 103.52.2.0/24 maxlen: 24 103.52.3.0/24 maxlen: 24 103.87.70.0/23 maxlen: 23 103.87.70.0/24 maxlen: 24 103.87.71.0/24 maxlen: 24 2001:df2:cc00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 15:26:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14182 (0x3766) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Validity Not Before: Jan 16 16:13:01 2026 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=696a638d-9e6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:71:b4:05:85:5d:ea:d1:a7:68:2b:d6:43:25: 3f:1e:eb:fd:7b:50:8e:2d:d6:c8:9d:9c:38:a8:e6: 84:5f:4a:e6:3d:87:61:d2:61:95:c5:6a:95:88:9d: f0:cf:b0:5a:79:c0:6a:84:0d:b2:d6:6d:91:a7:86: 28:37:5b:31:bb:e9:e6:7b:37:ee:87:bd:69:95:b3: 47:64:d2:fb:1f:0c:56:1a:01:7b:23:17:48:99:95: 46:eb:17:51:05:db:13:21:80:19:84:98:ce:2b:7d: 6d:7c:24:8f:8e:df:1d:aa:c4:af:24:fd:24:52:2b: 58:f5:30:55:c8:52:b2:e5:f0:50:d5:fd:dd:96:4f: 6c:e2:32:f5:d6:08:14:89:03:28:7f:6b:bd:78:e2: 8b:32:97:3e:52:1f:6b:26:1e:e7:f2:e8:05:45:19: f8:cb:a9:2d:df:e1:34:60:b2:0a:f7:ac:86:d7:cf: 5d:08:0c:f7:1a:69:15:c9:9c:d0:8b:ea:b3:bb:51: 38:32:a5:bb:cf:f5:0f:d1:23:be:7e:e9:1c:bf:bc: ff:0f:97:ab:a2:31:ad:75:e8:30:7d:9b:34:66:a8: 60:99:b5:f2:c2:1a:d8:32:9b:a3:f6:27:9d:34:e3: 94:e0:9e:70:4b:c8:da:3c:0c:76:74:f4:af:1a:b8: 33:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:8E:26:C9:73:DC:28:7D:D5:FF:3C:FB:46:7C:55:1C:E6:71:55:58 X509v3 Authority Key Identifier: keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/011F48EE2FF411E78B4D5566C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.52.2.0/23 103.87.70.0/23 IPv6: 2001:df2:cc00::/48 Signature Algorithm: sha256WithRSAEncryption 0f:41:fb:f2:f4:d8:65:59:f2:f4:63:0a:40:63:85:7f:b5:d7: 80:6d:20:9f:f6:5d:a4:40:60:da:1b:e4:e4:26:e0:8c:0a:c9: 70:cc:6d:13:52:33:86:02:60:6b:47:65:52:fe:97:ca:57:49: 65:94:e5:a1:14:44:c7:6d:b2:15:3b:ae:05:9d:e5:c0:d5:75: 70:9e:d5:cc:b1:26:8c:32:bb:64:9e:4f:cc:06:a8:8c:6e:a9: 0e:5c:62:6a:30:dd:21:8a:08:82:87:28:ab:20:68:fb:7f:dc: 62:86:d1:de:44:08:db:13:9f:02:cd:c4:6b:10:30:b9:37:24: 1c:5b:2e:33:12:b3:cd:23:71:34:13:57:67:53:e8:6e:4a:1f: f5:6d:f9:6a:d5:d3:15:a1:76:d3:a0:a5:01:3c:a6:25:f1:85: 43:ff:3a:2d:93:ea:64:3f:5a:22:c3:bc:01:e4:4f:cd:2e:f0: 24:10:a3:b4:ce:2d:3c:0f:a0:df:1c:15:da:94:56:0f:cc:5f: 2d:55:5a:9f:e5:a8:47:60:4a:39:04:ba:22:ea:ad:fb:48:d7: 6d:90:c2:80:75:02:0a:77:e2:6d:13:d2:6f:9b:be:e1:0d:b7: 4e:0b:d3:6b:ff:f7:81:8d:d0:d3:c0:a0:b4:fa:ea:15:5d:8f: 75:84:af:c4 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICN2YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG QUIyNEQ3RTcwHhcNMjYwMTE2MTYxMzAxWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTZhNjM4ZC05ZTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5HG0BYVd6tGnaCvWQyU/Huv9e1COLdbInZw4qOaEX0rmPYdh0mGVxWqViJ3w z7BaecBqhA2y1m2Rp4YoN1sxu+nmezfuh71plbNHZNL7HwxWGgF7IxdImZVG6xdR BdsTIYAZhJjOK31tfCSPjt8dqsSvJP0kUitY9TBVyFKy5fBQ1f3dlk9s4jL11ggU iQMof2u9eOKLMpc+Uh9rJh7n8ugFRRn4y6kt3+E0YLIK96yG189dCAz3GmkVyZzQ i+qzu1E4MqW7z/UP0SO+fukcv7z/D5erojGtdegwfZs0ZqhgmbXywhrYMpuj9ied NOOU4J5wS8jaPAx2dPSvGrgzNwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFHmOJslz 3Ch91f88+0Z8VRzmcVVYMB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvMDExRjQ4RUUy RkY0MTFFNzhCNEQ1NTY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBAFnNAIDBAFnV0YwDwQCAAIwCQMHACABDfLMADANBgkqhkiG 9w0BAQsFAAOCAQEAD0H78vTYZVny9GMKQGOFf7XXgG0gn/ZdpEBg2hvk5CbgjArJ cMxtE1IzhgJga0dlUv6XyldJZZTloRREx22yFTuuBZ3lwNV1cJ7VzLEmjDK7ZJ5P zAaojG6pDlxiajDdIYoIgocoqyBo+3/cYobR3kQI2xOfAs3EaxAwuTckHFsuMxKz zSNxNBNXZ1Pobkof9W35atXTFaF206ClATymJfGFQ/86LZPqZD9aIsO8AeRPzS7w JBCjtM4tPA+g3xwV2pRWD8xfLVVan+WoR2BKOQS6Iuqt+0jXbZDCgHUCCnfibRPS b5u+4Q23TgvTa//3gY3Q08CgtPrqFV2PdYSvxA== -----END CERTIFICATE-----Generated at Sun Jan 25 07:55:23 2026 by rpki-client