This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/2DE4C8AA9B6111EF99A97B52C4F9AE02.roa File: 2DE4C8AA9B6111EF99A97B52C4F9AE02.roa (raw, json) Hash identifier: JEuUinXV9XhYYDb4cnU6uEq9yVuCYIhVEynkbtZEe1c= Subject key identifier: ED:A8:6D:85:5D:79:EE:05:C9:4D:11:4F:83:0E:1D:A7:6C:22:36:CF Certificate issuer: /CN=A918A96A/serialNumber=F02245353FC1F194A9022A4AC01977DE5FDE36F9 Certificate serial: 03E1 Authority key identifier: F0:22:45:35:3F:C1:F1:94:A9:02:2A:4A:C0:19:77:DE:5F:DE:36:F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CJFNT_B8ZSpAipKwBl33l_eNvk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/2DE4C8AA9B6111EF99A97B52C4F9AE02.roa Signing time: Thu 01 Jan 2026 00:20:49 +0000 ROA not before: Thu 01 Jan 2026 00:20:49 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 136520 IP address blocks: 103.91.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.crl rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CJFNT_B8ZSpAipKwBl33l_eNvk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 23:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 993 (0x3e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A96A, serialNumber=F02245353FC1F194A9022A4AC01977DE5FDE36F9 Validity Not Before: Jan 1 00:20:49 2026 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=6955bde0-09b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:7f:64:c9:c0:d3:f7:1d:70:6c:45:78:61:83: e2:14:c1:dd:05:a3:f4:17:cc:8c:17:86:69:d9:32: e6:a1:3f:48:85:e4:d0:26:94:e2:27:39:d4:d8:b4: a4:e4:6c:6a:a7:0a:81:c9:65:7c:17:72:ed:33:67: b7:e4:fe:43:2f:9c:f3:96:46:52:93:88:0e:1f:da: 88:e7:aa:8d:51:08:84:1c:36:7b:c0:57:26:04:67: e9:a0:de:5f:ef:73:8b:e3:d6:d0:8b:20:32:d5:d2: 66:0f:9c:9c:3d:eb:1c:eb:95:54:8f:c1:1f:1f:d5: 85:e4:9b:94:2f:6b:dc:6b:21:89:de:31:6d:aa:25: 51:71:cf:70:87:cf:5e:30:9a:3d:c6:3b:83:eb:64: 15:f2:46:f0:1b:eb:57:4f:a3:4d:fb:10:34:02:80: e2:68:c0:4f:0e:bc:aa:2e:28:2e:f1:b4:d5:2b:e2: 02:95:f4:93:08:bd:14:8a:13:15:7e:c7:d7:f4:de: 51:b3:31:30:90:65:f3:5a:08:02:dc:04:b0:a9:bb: f7:17:f3:10:96:17:c8:ad:3d:7d:29:dd:57:db:3e: 09:9c:b0:64:46:4f:af:ec:0b:87:96:c5:c9:5d:e5: 7b:54:05:6c:67:c2:ac:f9:6a:06:43:be:2a:71:30: 7e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:A8:6D:85:5D:79:EE:05:C9:4D:11:4F:83:0E:1D:A7:6C:22:36:CF X509v3 Authority Key Identifier: keyid:F0:22:45:35:3F:C1:F1:94:A9:02:2A:4A:C0:19:77:DE:5F:DE:36:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CJFNT_B8ZSpAipKwBl33l_eNvk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/2DE4C8AA9B6111EF99A97B52C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.91.194.0/24 Signature Algorithm: sha256WithRSAEncryption 18:30:ab:a3:10:be:21:4e:b4:7b:b9:73:61:2a:11:01:ca:ce: c6:1c:04:e0:ce:a0:7d:37:00:ff:bd:6e:74:eb:67:71:a5:a6: 3b:db:83:e8:5e:9f:fc:bc:cc:90:70:1b:98:68:a9:40:09:10: de:55:62:e4:f1:0c:e3:20:98:00:d5:61:1a:8e:8f:f8:d8:94: 71:f5:09:0a:21:fd:4d:5b:39:be:32:35:ac:a8:c0:0f:a6:a5: 5c:fd:18:5c:31:70:79:ac:e0:53:39:c2:da:84:25:5c:b2:d2: 96:1d:be:a9:09:fc:da:7a:ef:0c:20:72:c0:39:60:8a:ab:ca: 1c:ec:9c:69:5b:52:20:4f:82:fe:d2:20:2d:5b:4f:57:77:a4: 10:b4:3a:b1:63:cb:96:a4:67:d7:4f:25:02:b6:39:d4:d1:2e: a3:65:84:14:e9:ad:9c:79:9e:e4:ec:c1:07:e4:35:19:87:93: ee:67:d7:82:f8:ee:2c:fb:a5:02:89:d7:57:74:d5:74:eb:65: f3:99:17:ad:bb:5a:bc:06:13:9f:16:c7:c0:85:d2:0f:d3:10: 2e:cd:8d:c4:a5:97:f5:d8:4d:f0:91:fa:b2:0b:8d:c5:41:ec: ea:15:76:98:19:4e:b7:a4:4f:19:71:0b:59:9b:3f:91:1a:7c: 95:ea:51:e8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx OEE5NkExMTAvBgNVBAUTKEYwMjI0NTM1M0ZDMUYxOTRBOTAyMkE0QUMwMTk3N0RF NUZERTM2RjkwHhcNMjYwMTAxMDAyMDQ5WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU1YmRlMC0wOWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA139kycDT9x1wbEV4YYPiFMHdBaP0F8yMF4Zp2TLmoT9IheTQJpTiJznU2LSk 5GxqpwqByWV8F3LtM2e35P5DL5zzlkZSk4gOH9qI56qNUQiEHDZ7wFcmBGfpoN5f 73OL49bQiyAy1dJmD5ycPesc65VUj8EfH9WF5JuUL2vcayGJ3jFtqiVRcc9wh89e MJo9xjuD62QV8kbwG+tXT6NN+xA0AoDiaMBPDryqLigu8bTVK+IClfSTCL0UihMV fsfX9N5RszEwkGXzWggC3ASwqbv3F/MQlhfIrT19Kd1X2z4JnLBkRk+v7AuHlsXJ XeV7VAVsZ8Ks+WoGQ74qcTB+BQIDAQABo4IClTCCApEwHQYDVR0OBBYEFO2obYVd ee4FyU0RT4MOHadsIjbPMB8GA1UdIwQYMBaAFPAiRTU/wfGUqQIqSsAZd95f3jb5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTk2QS8yODc4NUY2MEJG QkYxMUVDQUVENDhDNzFDNEY5QUUwMi84Q0pGTlRfQjhaU3BBaXBLd0JsMzNsX2VO dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhDSkZOVF9COFpTcEFpcEt3QmwzM2xfZU52ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEE5NkEvMjg3ODVGNjBCRkJGMTFFQ0FFRDQ4QzcxQzRGOUFFMDIvMkRFNEM4QUE5 QjYxMTFFRjk5QTk3QjUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnW8IwDQYJKoZIhvcNAQELBQADggEBABgwq6MQviFOtHu5 c2EqEQHKzsYcBODOoH03AP+9bnTrZ3Glpjvbg+hen/y8zJBwG5hoqUAJEN5VYuTx DOMgmADVYRqOj/jYlHH1CQoh/U1bOb4yNayowA+mpVz9GFwxcHms4FM5wtqEJVyy 0pYdvqkJ/Np67wwgcsA5YIqryhzsnGlbUiBPgv7SIC1bT1d3pBC0OrFjy5akZ9dP JQK2OdTRLqNlhBTprZx5nuTswQfkNRmHk+5n14L47iz7pQKJ11d01XTrZfOZF627 WrwGE58Wx8CF0g/TEC7NjcSll/XYTfCR+rILjcVB7OoVdpgZTrekTxlxC1mbP5Ea fJXqUeg= -----END CERTIFICATE-----Generated at Sun Jan 25 10:43:14 2026 by rpki-client