This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/A7B53200784E11E9AE591940C4F9AE02.roa File: A7B53200784E11E9AE591940C4F9AE02.roa (raw, json) Hash identifier: vx2DuRXGYonG91Vb/DRBP8LPvQ/De/QZYh5zUDy0VHw= Subject key identifier: F7:03:C7:F1:41:3B:41:F0:4E:34:4C:AE:7E:7C:CD:BE:19:BE:D6:6D Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Certificate serial: 3785 Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/A7B53200784E11E9AE591940C4F9AE02.roa Signing time: Fri 16 Jan 2026 16:13:32 +0000 ROA not before: Fri 16 Jan 2026 16:13:32 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 38158 IP address blocks: 121.100.0.0/21 maxlen: 21 121.100.0.0/24 maxlen: 24 2402:9800::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 15:26:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14213 (0x3785) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Validity Not Before: Jan 16 16:13:32 2026 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=696a63ac-b19c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:77:df:cc:6d:7f:d9:1d:1d:3d:8d:f4:b0:d1: bf:0d:c3:5b:26:4c:04:1b:6f:b8:f2:52:4d:25:eb: 5f:23:f1:3f:07:2d:4b:5e:a8:c2:6b:5f:83:09:22: 6e:5f:b3:91:2b:f0:85:b6:a4:4d:de:f6:25:f7:24: 82:ad:74:5c:c3:b5:27:07:4b:86:dd:17:6a:86:5b: 79:1f:9d:0c:24:3d:51:8e:ab:16:dc:f0:4d:21:c6: de:53:db:51:fc:43:fb:05:ef:a4:ab:96:ae:9a:73: 69:8b:31:b4:1b:30:b8:f3:2f:a3:51:f7:73:35:42: f5:d9:5d:9f:5f:88:2b:91:93:49:07:13:eb:8f:09: ba:05:76:06:1a:e9:c2:21:57:c7:54:55:6f:fa:91: 0a:1d:bf:89:a1:27:35:1c:0f:ae:25:19:3e:77:13: 17:55:14:8b:13:c4:cd:33:02:0c:d3:bd:8d:f1:21: d2:38:6c:dd:67:9a:25:68:5e:43:8a:48:18:32:c1: 9c:1c:b6:ff:35:0a:d2:74:01:23:f1:49:44:28:7f: 2d:0a:2f:41:cf:94:58:80:d8:fb:5d:27:33:a8:71: 45:89:e0:d9:8c:07:31:80:1a:64:f6:02:54:3b:60: a7:a9:c4:36:21:7d:4e:de:3a:ae:a0:fb:b8:54:46: d5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:03:C7:F1:41:3B:41:F0:4E:34:4C:AE:7E:7C:CD:BE:19:BE:D6:6D X509v3 Authority Key Identifier: keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/A7B53200784E11E9AE591940C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 121.100.0.0/21 IPv6: 2402:9800::/32 Signature Algorithm: sha256WithRSAEncryption 37:e2:92:a2:e9:4b:72:21:84:f5:ae:c3:83:3c:81:c8:8f:25: cb:67:aa:77:52:da:a9:e8:05:c5:d0:74:ae:8d:33:b0:1a:86: f3:cd:3c:62:69:12:bf:ad:26:77:cd:a0:10:a7:d7:9e:f2:f2: a9:76:81:4f:06:8e:33:4c:1a:c7:2b:d9:1f:81:90:ad:03:3a: 76:65:52:be:ee:99:d1:02:f0:2e:2f:8c:f9:33:50:ac:80:ea: cf:ee:e9:44:82:81:88:73:1a:88:11:e1:66:f4:3b:59:d8:e6: 2d:81:71:b4:55:70:00:3d:7a:ba:fb:23:dc:d7:11:e3:d8:40: 3d:c5:50:c2:dd:46:e6:b3:dd:8e:44:70:e4:a9:16:8a:42:15: b5:e4:61:de:9c:59:eb:aa:24:4c:77:e3:8e:78:10:46:98:9b: 87:16:1c:71:50:72:30:51:54:08:51:ac:48:fc:0f:32:9d:e0: da:19:b8:85:6b:79:bb:37:fc:b5:c2:4e:26:fa:2c:86:2d:12: 61:f7:b4:4c:eb:57:8d:85:f9:90:8b:14:37:c4:e3:a9:36:f2: 40:ea:9f:4e:f7:c9:68:4d:00:6d:1e:b9:60:e1:71:a8:d6:71: d5:41:7d:a8:c5:f3:f9:d0:2c:a2:cd:d5:b2:38:1f:91:47:b6: 58:c1:87:f1 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICN4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG QUIyNEQ3RTcwHhcNMjYwMTE2MTYxMzMyWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTZhNjNhYy1iMTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApnffzG1/2R0dPY30sNG/DcNbJkwEG2+48lJNJetfI/E/By1LXqjCa1+DCSJu X7ORK/CFtqRN3vYl9ySCrXRcw7UnB0uG3Rdqhlt5H50MJD1RjqsW3PBNIcbeU9tR /EP7Be+kq5aumnNpizG0GzC48y+jUfdzNUL12V2fX4grkZNJBxPrjwm6BXYGGunC IVfHVFVv+pEKHb+JoSc1HA+uJRk+dxMXVRSLE8TNMwIM072N8SHSOGzdZ5olaF5D ikgYMsGcHLb/NQrSdAEj8UlEKH8tCi9Bz5RYgNj7XSczqHFFieDZjAcxgBpk9gJU O2CnqcQ2IX1O3jquoPu4VEbVEwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFPcDx/FB O0HwTjRMrn58zb4ZvtZtMB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvQTdCNTMyMDA3 ODRFMTFFOUFFNTkxOTQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAN5ZAAwDQQCAAIwBwMFACQCmAAwDQYJKoZIhvcNAQELBQAD ggEBADfikqLpS3IhhPWuw4M8gciPJctnqndS2qnoBcXQdK6NM7AahvPNPGJpEr+t JnfNoBCn157y8ql2gU8GjjNMGscr2R+BkK0DOnZlUr7umdEC8C4vjPkzUKyA6s/u 6USCgYhzGogR4Wb0O1nY5i2BcbRVcAA9err7I9zXEePYQD3FUMLdRuaz3Y5EcOSp FopCFbXkYd6cWeuqJEx34454EEaYm4cWHHFQcjBRVAhRrEj8DzKd4NoZuIVrebs3 /LXCTib6LIYtEmH3tEzrV42F+ZCLFDfE46k28kDqn073yWhNAG0euWDhcajWcdVB fajF8/nQLKLN1bI4H5FHtljBh/E= -----END CERTIFICATE-----Generated at Sun Jan 25 07:58:13 2026 by rpki-client