This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/4AD53F9AEA0B11F09069D0EA6F6F56BC.roa File: 4AD53F9AEA0B11F09069D0EA6F6F56BC.roa (raw, json) Hash identifier: IprNwQgGLTzR8Hsfp9Ppf43Z2bhrGY5lALXQ1xkVDV0= Subject key identifier: AB:A8:F8:2F:6F:D2:67:F4:A8:7A:8F:6A:07:E0:5A:27:6A:07:96:60 Certificate issuer: /CN=A918FC40/serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571 Certificate serial: 0BC2 Authority key identifier: 16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/4AD53F9AEA0B11F09069D0EA6F6F56BC.roa Signing time: Wed 21 Jan 2026 08:40:56 +0000 ROA not before: Wed 21 Jan 2026 08:40:56 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 202736 IP address blocks: 103.23.72.0/24 maxlen: 24 103.23.73.0/24 maxlen: 24 103.23.74.0/24 maxlen: 24 103.23.75.0/24 maxlen: 24 103.246.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 18:35:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3010 (0xbc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FC40, serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571 Validity Not Before: Jan 21 08:40:56 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69709118-645c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:67:25:38:f4:09:3b:31:02:55:65:11:f5:c9: 61:ab:be:ba:2e:43:f6:a6:fe:32:18:13:f6:de:2a: 09:fe:80:ad:5a:06:08:3a:d7:cf:6f:e4:0b:8f:f5: 2e:ab:93:08:85:59:e1:e9:68:e0:d6:40:20:ed:25: a7:3a:82:6e:54:34:f6:c9:47:9a:b9:b9:8c:97:ca: 39:93:ce:93:bc:51:0d:52:3f:d6:e6:28:f5:12:7a: 4b:f4:33:4b:27:ee:a8:1e:92:64:0e:34:21:63:07: ad:41:ef:26:05:f2:56:99:b2:66:ee:e2:80:f6:91: 21:cd:44:d0:d2:44:ea:1f:10:27:cc:01:91:f6:95: 12:18:9d:1f:9c:b7:97:f4:b9:e8:ba:69:c9:c9:58: 32:c2:42:8e:73:2c:51:82:11:a1:f8:6c:46:93:86: 70:61:61:0e:be:6a:ff:d5:2f:87:c5:70:5f:0a:26: 12:7b:85:bd:54:dd:d4:8a:f0:04:0b:ef:6f:45:f3: f0:89:90:96:22:55:fd:ef:f4:07:71:af:5e:76:55: 6e:bd:c9:73:b9:bd:de:4f:65:fd:6d:de:e8:1e:d8: 4e:28:50:1c:c0:a7:48:03:6b:a2:85:78:53:16:12: 34:09:a4:06:c2:da:54:23:23:c8:4f:49:5b:62:dc: de:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:A8:F8:2F:6F:D2:67:F4:A8:7A:8F:6A:07:E0:5A:27:6A:07:96:60 X509v3 Authority Key Identifier: keyid:16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/4AD53F9AEA0B11F09069D0EA6F6F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.23.72.0/22 103.246.255.0/24 Signature Algorithm: sha256WithRSAEncryption 30:eb:5d:cb:ca:8e:4d:f8:0e:68:7d:e8:11:4a:31:11:c4:8a: c1:93:a8:ff:23:45:77:02:c2:5d:b4:41:66:c9:97:c0:e1:c8: 42:2b:d5:cd:13:1a:54:1b:12:d1:0b:35:d9:1a:9c:bc:d2:aa: f9:9c:4e:72:32:fe:20:4f:96:6c:0f:28:ae:11:c7:02:0c:3d: 5a:e3:97:26:97:a8:5c:92:eb:e1:84:c7:67:42:6c:57:57:f6: 50:fa:4c:35:2b:d2:72:9b:ea:30:23:67:d5:fd:40:b6:a0:95: 04:dd:21:3a:ea:cb:53:8e:3f:da:63:23:d8:02:fe:eb:35:a4: 0c:37:36:d8:2e:34:b9:74:23:1b:6d:0e:72:99:af:fd:f6:15: 36:43:02:97:23:35:01:e6:75:b0:ad:66:f7:fe:5f:44:2c:ef: b8:b6:c8:07:f9:d0:bd:80:ac:44:9c:00:01:e0:22:2a:e6:2e: 67:6f:95:03:46:42:4f:65:f1:54:dd:ee:74:90:07:38:d6:cf: ed:86:98:20:27:47:4f:c3:e8:3d:dc:04:94:4b:27:26:13:6b: e7:8c:f0:bd:dc:a6:d1:77:f0:d5:71:aa:eb:e6:19:9b:b8:8e: 78:d6:fa:21:9d:4e:2a:d9:c4:95:ac:6d:89:61:1c:d3:e3:79: 8f:99:67:96 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICC8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZDNDAxMTAvBgNVBAUTKDE2MDFEODY1MERENTU2QjJBRkIwODNCMjMzRkY2NUFF M0RBRDE1NzEwHhcNMjYwMTIxMDg0MDU2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTcwOTExOC02NDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0GclOPQJOzECVWUR9clhq766LkP2pv4yGBP23ioJ/oCtWgYIOtfPb+QLj/Uu q5MIhVnh6Wjg1kAg7SWnOoJuVDT2yUeaubmMl8o5k86TvFENUj/W5ij1EnpL9DNL J+6oHpJkDjQhYwetQe8mBfJWmbJm7uKA9pEhzUTQ0kTqHxAnzAGR9pUSGJ0fnLeX 9LnoumnJyVgywkKOcyxRghGh+GxGk4ZwYWEOvmr/1S+HxXBfCiYSe4W9VN3UivAE C+9vRfPwiZCWIlX97/QHca9edlVuvclzub3eT2X9bd7oHthOKFAcwKdIA2uihXhT FhI0CaQGwtpUIyPIT0lbYtze3QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFKuo+C9v 0mf0qHqPagfgWidqB5ZgMB8GA1UdIwQYMBaAFBYB2GUN1Vayr7CDsjP/Za49rRVx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkM0MC82MTdGMzUzNjQw RTExMUVBQkM2MkRCMjZDNEY5QUUwMi9GZ0hZWlEzVlZyS3ZzSU95TV85bHJqMnRG WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnSFlaUTNWVnJLdnNJT3lNXzlscmoydEZYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEZDNDAvNjE3RjM1MzY0MEUxMTFFQUJDNjJEQjI2QzRGOUFFMDIvNEFENTNGOUFF QTBCMTFGMDkwNjlEMEVBNkY2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnF0gDBABn9v8wDQYJKoZIhvcNAQELBQADggEBADDrXcvK jk34Dmh96BFKMRHEisGTqP8jRXcCwl20QWbJl8DhyEIr1c0TGlQbEtELNdkanLzS qvmcTnIy/iBPlmwPKK4RxwIMPVrjlyaXqFyS6+GEx2dCbFdX9lD6TDUr0nKb6jAj Z9X9QLaglQTdITrqy1OOP9pjI9gC/us1pAw3NtguNLl0IxttDnKZr/32FTZDApcj NQHmdbCtZvf+X0Qs77i2yAf50L2ArEScAAHgIirmLmdvlQNGQk9l8VTd7nSQBzjW z+2GmCAnR0/D6D3cBJRLJyYTa+eM8L3cptF38NVxquvmGZu4jnjW+iGdTirZxJWs bYlhHNPjeY+ZZ5Y= -----END CERTIFICATE-----Generated at Sun Jan 25 15:01:38 2026 by rpki-client