This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/3A153A08C31F11E9B2558032C4F9AE02.roa File: 3A153A08C31F11E9B2558032C4F9AE02.roa (raw, json) Hash identifier: /Ov/RbsXSYVGzU/352AqeWu9Aj+qXio/ywa2Vqwu/vc= Subject key identifier: ED:7C:E0:42:75:15:48:50:A4:80:78:8D:64:60:D2:04:21:30:7F:F3 Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Certificate serial: 3768 Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/3A153A08C31F11E9B2558032C4F9AE02.roa Signing time: Fri 16 Jan 2026 16:13:03 +0000 ROA not before: Fri 16 Jan 2026 16:13:03 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 133827 IP address blocks: 103.55.139.0/24 maxlen: 24 103.95.6.0/23 maxlen: 23 103.95.6.0/24 maxlen: 24 103.95.7.0/24 maxlen: 24 103.220.113.0/24 maxlen: 24 2404:a640::/32 maxlen: 32 2404:a640:113::/48 maxlen: 48 2404:a640:139::/48 maxlen: 48 2404:a640:956::/48 maxlen: 48 2404:a640:957::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 15:26:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14184 (0x3768) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Validity Not Before: Jan 16 16:13:03 2026 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=696a638f-0276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ea:f3:e7:64:6a:3c:74:03:b5:ad:cf:3b:25: 5f:6c:ca:de:fe:e6:80:82:cc:7e:90:1d:8d:b0:e4: 2e:78:f2:44:0b:77:d1:b0:06:d3:ef:b2:45:a6:d2: c9:e2:ca:b5:e9:74:20:fb:3e:94:ab:ea:4d:79:2b: a7:9c:71:9e:c7:8d:7a:f4:19:4d:9b:07:1e:de:13: b7:53:77:94:54:b1:ac:fc:1e:d4:18:05:a9:6c:d4: 96:eb:e6:64:7a:29:a2:38:e0:1c:0b:72:c5:76:73: 65:a1:f7:7b:e7:57:63:90:a4:4e:8a:51:46:37:26: d0:c5:22:e2:da:29:ec:49:4e:d0:2a:38:4a:8f:a7: a1:a8:60:4f:75:8c:3e:2d:b3:a9:b7:38:5f:09:b4: 35:8e:00:28:1c:bf:dd:ea:e8:20:2b:0b:dd:c0:06: dc:b3:d6:0f:48:fa:46:86:0a:8b:74:7e:80:3a:51: 28:d1:a0:ad:ee:0f:be:d7:1b:e2:17:24:a9:7b:32: f0:03:4d:fe:e5:70:1c:87:2f:1a:24:97:cd:55:55: d6:fc:31:82:55:79:ab:ee:f8:44:f8:ba:80:a1:49: a5:66:e4:e4:41:5f:f1:71:77:f4:f0:6d:c7:1a:ec: b2:b5:eb:84:8a:f3:db:9b:7d:ff:f4:c4:a8:3b:52: 9a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:7C:E0:42:75:15:48:50:A4:80:78:8D:64:60:D2:04:21:30:7F:F3 X509v3 Authority Key Identifier: keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/3A153A08C31F11E9B2558032C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.55.139.0/24 103.95.6.0/23 103.220.113.0/24 IPv6: 2404:a640::/32 Signature Algorithm: sha256WithRSAEncryption 15:4c:9f:47:65:53:75:90:bf:56:0e:3a:a4:d2:36:dd:ec:27: 30:46:00:cc:5a:e4:f4:5f:ce:6f:24:0a:f2:ee:1f:db:9e:0b: ce:55:55:88:f0:e8:13:91:c8:a5:72:0f:76:6e:fc:5d:2a:9f: d0:92:e0:49:36:35:57:03:b2:1a:5c:70:b7:67:ac:0a:01:80: d5:14:71:22:33:5a:49:10:57:82:12:c9:fc:02:ed:bc:13:98: 67:77:a4:a6:96:b2:75:b7:b9:df:49:e6:74:c4:04:54:d3:e0: 1e:e4:dd:76:9c:9f:d5:5c:07:e3:17:2c:89:7d:94:13:9a:ac: 69:ec:d4:bf:5f:86:5a:3f:3c:02:dc:e8:96:72:d0:94:9f:a6: 19:e4:fb:d4:80:87:54:9c:bb:5d:f7:d2:71:f4:94:e0:4c:82: 7c:0e:3c:78:94:b3:4f:52:94:76:7f:eb:6f:59:5f:08:c4:15: 1a:86:f1:b1:41:05:f1:9b:87:86:f9:6c:0c:c5:6c:56:7f:44: 6c:dc:d8:e3:f9:11:05:ab:e1:3f:3f:88:a6:2e:82:67:a5:f9: ef:ec:14:7b:b7:54:1b:5c:0a:c5:c0:8a:b1:ef:4d:e1:58:17: 47:78:97:00:06:5f:e1:18:f8:b5:48:af:c4:a4:6d:28:5c:2e: 8c:bc:74:1c -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICN2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG QUIyNEQ3RTcwHhcNMjYwMTE2MTYxMzAzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTZhNjM4Zi0wMjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz+rz52RqPHQDta3POyVfbMre/uaAgsx+kB2NsOQuePJEC3fRsAbT77JFptLJ 4sq16XQg+z6Uq+pNeSunnHGex4169BlNmwce3hO3U3eUVLGs/B7UGAWpbNSW6+Zk eimiOOAcC3LFdnNlofd751djkKROilFGNybQxSLi2insSU7QKjhKj6ehqGBPdYw+ LbOptzhfCbQ1jgAoHL/d6uggKwvdwAbcs9YPSPpGhgqLdH6AOlEo0aCt7g++1xvi FySpezLwA03+5XAchy8aJJfNVVXW/DGCVXmr7vhE+LqAoUmlZuTkQV/xcXf08G3H GuyyteuEivPbm33/9MSoO1KaeQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFO184EJ1 FUhQpIB4jWRg0gQhMH/zMB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvM0ExNTNBMDhD MzFGMTFFOUIyNTU4MDMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBABnN4sDBAFnXwYDBABn3HEwDQQCAAIwBwMFACQEpkAwDQYJ KoZIhvcNAQELBQADggEBABVMn0dlU3WQv1YOOqTSNt3sJzBGAMxa5PRfzm8kCvLu H9ueC85VVYjw6BORyKVyD3Zu/F0qn9CS4Ek2NVcDshpccLdnrAoBgNUUcSIzWkkQ V4ISyfwC7bwTmGd3pKaWsnW3ud9J5nTEBFTT4B7k3Xacn9VcB+MXLIl9lBOarGns 1L9fhlo/PALc6JZy0JSfphnk+9SAh1Scu1330nH0lOBMgnwOPHiUs09SlHZ/629Z XwjEFRqG8bFBBfGbh4b5bAzFbFZ/RGzc2OP5EQWr4T8/iKYugmel+e/sFHu3VBtc CsXAirHvTeFYF0d4lwAGX+EY+LVIr8SkbShcLoy8dBw= -----END CERTIFICATE-----Generated at Sun Jan 25 09:23:02 2026 by rpki-client