This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/5A87E8B01A7E11EAB32DB717C4F9AE02.roa File: 5A87E8B01A7E11EAB32DB717C4F9AE02.roa (raw, json) Hash identifier: PfqPjH5uriyvxfUXlCvg5OUBepa/tRlj9NJk3Z36Bx8= Subject key identifier: D1:01:D1:F0:E1:ED:16:2E:0F:35:B3:B6:77:5C:C8:B3:E2:B4:46:BB Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Certificate serial: 377F Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/5A87E8B01A7E11EAB32DB717C4F9AE02.roa Signing time: Fri 16 Jan 2026 16:13:26 +0000 ROA not before: Fri 16 Jan 2026 16:13:26 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 24206 IP address blocks: 110.44.168.0/22 maxlen: 22 110.44.168.0/23 maxlen: 23 110.44.168.0/24 maxlen: 24 110.44.169.0/24 maxlen: 24 110.44.170.0/23 maxlen: 23 110.44.170.0/24 maxlen: 24 110.44.171.0/24 maxlen: 24 110.44.173.0/24 maxlen: 24 110.44.174.0/24 maxlen: 24 203.84.136.0/21 maxlen: 21 203.84.136.0/22 maxlen: 22 203.84.136.0/23 maxlen: 23 203.84.136.0/24 maxlen: 24 203.84.137.0/24 maxlen: 24 203.84.138.0/23 maxlen: 23 203.84.138.0/24 maxlen: 24 203.84.139.0/24 maxlen: 24 203.84.140.0/22 maxlen: 22 203.84.140.0/23 maxlen: 23 203.84.140.0/24 maxlen: 24 203.84.141.0/24 maxlen: 24 203.84.142.0/23 maxlen: 23 203.84.142.0/24 maxlen: 24 203.84.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 15:26:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14207 (0x377f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Validity Not Before: Jan 16 16:13:26 2026 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=696a63a5-e3e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:fc:41:6c:f0:fc:31:bc:71:83:48:67:2f:31: 07:ae:49:d2:00:e4:ae:e8:37:6d:f5:1d:5a:b8:1e: 75:1d:85:ca:51:76:5c:76:e7:fd:67:fd:61:d5:32: d7:96:43:e8:dc:f5:31:04:1e:d6:59:f1:c5:89:16: f4:67:c1:79:b6:33:03:59:6c:6b:f0:ff:de:e5:33: 4d:b1:ee:a9:12:eb:0e:f8:d8:e9:98:66:c5:40:cc: aa:87:35:07:ca:3c:fa:52:ca:1c:73:43:99:9e:85: 2c:cf:f2:25:a4:9e:1d:7d:84:48:13:2b:3e:37:83: dd:b0:ae:59:46:6c:cf:77:01:1c:45:db:83:e9:c9: 09:68:ba:71:00:e5:5b:54:c2:87:a6:09:21:3b:e6: 97:0f:ad:09:06:0f:67:fa:55:91:b7:d3:aa:fb:df: 6c:a6:1b:bd:68:5d:cc:66:c8:aa:0c:4f:18:25:ee: 7e:60:2b:1f:32:39:2f:49:7c:f0:00:90:c4:5d:a2: a0:33:e3:5c:75:1f:18:92:3f:05:08:31:f2:ca:c7: 5d:1c:f5:d4:5d:df:30:00:3a:24:4e:88:9d:45:de: 82:e8:27:d1:41:c8:4d:18:64:84:63:ef:bc:f1:c4: 31:e6:d2:ae:34:ea:c3:6d:41:18:46:97:4d:71:b2: f5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:01:D1:F0:E1:ED:16:2E:0F:35:B3:B6:77:5C:C8:B3:E2:B4:46:BB X509v3 Authority Key Identifier: keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/5A87E8B01A7E11EAB32DB717C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.44.168.0/22 110.44.173.0-110.44.174.255 203.84.136.0/21 Signature Algorithm: sha256WithRSAEncryption 06:41:cf:0e:1b:a6:6e:78:d6:31:cc:f0:b1:ff:af:74:1d:43: 4a:9f:8f:5c:e5:79:63:9a:d4:bd:d0:19:7b:1c:22:51:68:d7: 55:60:b1:84:d4:db:c6:65:35:59:a7:ed:af:cb:22:ba:42:3b: bc:7a:a3:66:84:00:11:4c:b0:21:92:46:2b:bf:10:ca:8a:7f: d2:53:5b:bd:c1:e5:a9:e7:73:56:46:63:82:ba:28:4f:85:95: 2a:c1:04:93:ed:02:0f:89:6b:cd:e8:14:19:c4:24:11:e8:27: 4f:7b:c5:6f:54:16:7d:2d:28:cb:21:04:6a:02:1c:79:0c:af: 66:ed:56:40:1a:10:5a:4b:0c:44:07:a9:f2:a2:4e:bd:c2:96: ce:2a:d2:6f:b6:80:09:13:32:34:0a:8d:b8:06:ce:38:fa:82: 4f:59:1a:8d:0e:10:c4:07:86:51:23:4e:62:4a:04:f1:ae:cd: 38:cd:fd:0a:dd:cd:50:14:7c:32:59:88:e2:d2:f7:09:e5:62: 42:5b:3d:79:ca:ba:e7:a2:98:99:44:20:db:f4:f8:ef:d8:cb: 90:d6:a0:77:23:fa:ea:17:ee:f5:f3:54:f1:0f:1c:3c:be:cd: d5:d5:ea:c5:47:0d:d4:c6:66:81:5f:6d:55:48:fe:3e:e1:c3: 4f:60:41:40 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICN38wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG QUIyNEQ3RTcwHhcNMjYwMTE2MTYxMzI2WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTZhNjNhNS1lM2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9PxBbPD8Mbxxg0hnLzEHrknSAOSu6Ddt9R1auB51HYXKUXZcduf9Z/1h1TLX lkPo3PUxBB7WWfHFiRb0Z8F5tjMDWWxr8P/e5TNNse6pEusO+NjpmGbFQMyqhzUH yjz6Usocc0OZnoUsz/IlpJ4dfYRIEys+N4PdsK5ZRmzPdwEcRduD6ckJaLpxAOVb VMKHpgkhO+aXD60JBg9n+lWRt9Oq+99sphu9aF3MZsiqDE8YJe5+YCsfMjkvSXzw AJDEXaKgM+NcdR8Ykj8FCDHyysddHPXUXd8wADokToidRd6C6CfRQchNGGSEY++8 8cQx5tKuNOrDbUEYRpdNcbL1AQIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFNEB0fDh 7RYuDzWztndcyLPitEa7MB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvNUE4N0U4QjAx QTdFMTFFQUIzMkRCNzE3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMwYIKwYBBQUHAQcBAf8E JDAiMCAEAgABMBoDBAJuLKgwDAMEAG4srQMEAG4srgMEA8tUiDANBgkqhkiG9w0B AQsFAAOCAQEABkHPDhumbnjWMczwsf+vdB1DSp+PXOV5Y5rUvdAZexwiUWjXVWCx hNTbxmU1Waftr8siukI7vHqjZoQAEUywIZJGK78Qyop/0lNbvcHlqedzVkZjgroo T4WVKsEEk+0CD4lrzegUGcQkEegnT3vFb1QWfS0oyyEEagIceQyvZu1WQBoQWksM RAep8qJOvcKWzirSb7aACRMyNAqNuAbOOPqCT1kajQ4QxAeGUSNOYkoE8a7NOM39 Ct3NUBR8MlmI4tL3CeViQls9ecq656KYmUQg2/T479jLkNagdyP66hfu9fNU8Q8c PL7N1dXqxUcN1MZmgV9tVUj+PuHDT2BBQA== -----END CERTIFICATE-----Generated at Sun Jan 25 07:55:25 2026 by rpki-client