This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/4E6B4E24458E11EA84E01A0FC4F9AE02.roa File: 4E6B4E24458E11EA84E01A0FC4F9AE02.roa (raw, json) Hash identifier: tNczr9KP7/a464SGH6lxnFGhuQnddIuN2ieWCb1w2T4= Subject key identifier: 18:99:D3:4B:B5:6B:AA:EF:65:90:E4:DF:B6:8C:8C:B2:F2:8A:8F:9A Certificate issuer: /CN=A9189132/serialNumber=CED5951C0E2FC2F661FEEF1C371B67B23F1C52DF Certificate serial: 0B74 Authority key identifier: CE:D5:95:1C:0E:2F:C2:F6:61:FE:EF:1C:37:1B:67:B2:3F:1C:52:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ztWVHA4vwvZh_u8cNxtnsj8cUt8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/4E6B4E24458E11EA84E01A0FC4F9AE02.roa Signing time: Fri 02 Jan 2026 19:15:47 +0000 ROA not before: Fri 02 Jan 2026 19:15:47 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 140069 IP address blocks: 103.148.12.0/23 maxlen: 23 103.148.12.0/24 maxlen: 24 103.148.13.0/24 maxlen: 24 2001:df1:adc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.crl rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ztWVHA4vwvZh_u8cNxtnsj8cUt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 18:40:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2932 (0xb74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189132, serialNumber=CED5951C0E2FC2F661FEEF1C371B67B23F1C52DF Validity Not Before: Jan 2 19:15:47 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69581963-adb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2e:85:d3:df:69:8d:1e:ce:18:fb:75:9d:33: 3f:43:17:e7:c8:48:33:f9:a0:06:12:5b:ae:fd:e6: fa:24:a9:17:34:e8:e6:1c:e5:48:d7:56:ec:ad:03: ff:18:42:fa:ff:68:28:b1:ad:df:a7:31:5b:8c:e8: ca:92:e9:d1:3a:99:73:d3:77:7c:fa:82:44:84:fc: 9e:c4:58:2a:d1:ee:70:8f:01:47:0a:3a:9f:39:13: 50:d2:86:8b:59:9f:bc:9f:49:e5:51:df:60:f1:6d: e9:37:ab:43:f5:50:a0:56:bb:7c:71:71:09:a3:a2: 11:89:bd:9d:0f:6b:3a:a2:f1:44:7a:5a:0e:31:e0: 0b:3c:54:54:fd:85:cd:13:3e:10:b2:fe:9e:f5:5f: 23:03:c3:f2:8e:02:e5:9b:d3:e5:0a:26:02:95:8e: ef:5c:6a:7a:84:52:fb:bb:9b:fe:23:82:fa:18:51: 56:f6:f6:e2:9e:51:92:55:02:0d:bc:9e:62:d1:b4: 51:f3:33:6b:6a:ee:58:a0:ed:97:6d:be:d3:3f:7c: 9c:8d:6b:6e:f3:90:97:12:de:ec:db:96:04:2b:13: 76:5c:62:f7:f9:a3:49:fe:88:2d:59:2a:ab:38:21: bc:10:bd:17:7e:1b:38:28:47:a3:45:b8:e8:ff:c6: dd:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:99:D3:4B:B5:6B:AA:EF:65:90:E4:DF:B6:8C:8C:B2:F2:8A:8F:9A X509v3 Authority Key Identifier: keyid:CE:D5:95:1C:0E:2F:C2:F6:61:FE:EF:1C:37:1B:67:B2:3F:1C:52:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ztWVHA4vwvZh_u8cNxtnsj8cUt8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/4E6B4E24458E11EA84E01A0FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.148.12.0/23 IPv6: 2001:df1:adc0::/48 Signature Algorithm: sha256WithRSAEncryption 58:8f:65:d2:b1:9a:44:54:70:1a:f5:47:d5:23:0d:c7:1d:09: 55:fa:55:cb:87:8c:45:f7:08:ad:2f:27:38:fd:60:b6:1f:4a: 95:6a:25:85:26:58:b8:d9:26:b9:c8:a3:29:66:ea:94:47:3a: e3:38:a9:77:ed:7e:17:3b:7c:4b:4c:22:81:78:a7:91:e9:38: fd:72:91:79:a1:57:de:74:58:6e:0b:44:14:34:ab:f0:72:1d: 00:83:e3:06:36:b3:b2:c5:61:cc:81:57:fb:40:92:09:ea:63: cd:de:83:87:0d:be:4f:31:1b:58:74:08:9e:fe:3f:2a:a1:64: 65:e1:75:46:62:b6:f9:4b:62:0b:1d:a6:40:16:72:c0:52:2e: ff:7c:72:0d:5d:4d:ac:b2:1c:63:d3:be:43:81:41:21:44:4e: b1:f3:59:ff:c2:a7:a0:dc:78:33:1a:9a:b2:3b:7f:94:0c:a3: bd:80:3c:c2:65:1f:3c:9b:b4:b6:cf:90:86:9c:67:06:17:ec: 5b:19:4b:22:b6:81:bb:be:1d:e4:45:58:9e:04:bb:b1:dd:cc: 38:f5:9f:a2:56:fa:46:d5:12:fb:2b:ca:ab:28:bf:cc:d8:13: 39:d1:3d:49:d8:7a:f9:6a:5f:72:0e:2f:2b:0b:f9:37:e5:73: c7:51:29:54 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICC3QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx ODkxMzIxMTAvBgNVBAUTKENFRDU5NTFDMEUyRkMyRjY2MUZFRUYxQzM3MUI2N0Iy M0YxQzUyREYwHhcNMjYwMTAyMTkxNTQ3WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU4MTk2My1hZGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmy6F099pjR7OGPt1nTM/QxfnyEgz+aAGEluu/eb6JKkXNOjmHOVI11bsrQP/ GEL6/2gosa3fpzFbjOjKkunROplz03d8+oJEhPyexFgq0e5wjwFHCjqfORNQ0oaL WZ+8n0nlUd9g8W3pN6tD9VCgVrt8cXEJo6IRib2dD2s6ovFEeloOMeALPFRU/YXN Ez4Qsv6e9V8jA8PyjgLlm9PlCiYClY7vXGp6hFL7u5v+I4L6GFFW9vbinlGSVQIN vJ5i0bRR8zNrau5YoO2Xbb7TP3ycjWtu85CXEt7s25YEKxN2XGL3+aNJ/ogtWSqr OCG8EL0Xfhs4KEejRbjo/8bd5wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFBiZ00u1 a6rvZZDk37aMjLLyio+aMB8GA1UdIwQYMBaAFM7VlRwOL8L2Yf7vHDcbZ7I/HFLf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTEzMi9EMjY0QTJBNDQ1 OEMxMUVBOEU2RjZEMENDNEY5QUUwMi96dFdWSEE0dnd2WmhfdThjTnh0bnNqOGNV dDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p0V1ZIQTR2d3ZaaF91OGNOeHRuc2o4Y1V0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODkxMzIvRDI2NEEyQTQ0NThDMTFFQThFNkY2RDBDQzRGOUFFMDIvNEU2QjRFMjQ0 NThFMTFFQTg0RTAxQTBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnlAwwDwQCAAIwCQMHACABDfGtwDANBgkqhkiG9w0BAQsF AAOCAQEAWI9l0rGaRFRwGvVH1SMNxx0JVfpVy4eMRfcIrS8nOP1gth9KlWolhSZY uNkmucijKWbqlEc64zipd+1+Fzt8S0wigXinkek4/XKReaFX3nRYbgtEFDSr8HId AIPjBjazssVhzIFX+0CSCepjzd6Dhw2+TzEbWHQInv4/KqFkZeF1RmK2+UtiCx2m QBZywFIu/3xyDV1NrLIcY9O+Q4FBIUROsfNZ/8KnoNx4Mxqasjt/lAyjvYA8wmUf PJu0ts+QhpxnBhfsWxlLIraBu74d5EVYngS7sd3MOPWfolb6RtUS+yvKqyi/zNgT OdE9Sdh6+Wpfcg4vKwv5N+Vzx1EpVA== -----END CERTIFICATE-----Generated at Sun Jan 25 08:21:28 2026 by rpki-client