This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/4AC75BA8FFE311EBB4FA4965C4F9AE02.roa File: 4AC75BA8FFE311EBB4FA4965C4F9AE02.roa (raw, json) Hash identifier: WswI+8pxK8C3Nf4yupP2BjBwMEepARxcTxQ4ND98UNM= Subject key identifier: BF:0B:83:64:13:DE:98:87:71:71:87:3A:EB:51:5F:5F:AA:4E:59:F8 Certificate issuer: /CN=A9191436/serialNumber=2DA251C11AC68814F527F22E55DE9AC8C57FD66C Certificate serial: 13C7 Authority key identifier: 2D:A2:51:C1:1A:C6:88:14:F5:27:F2:2E:55:DE:9A:C8:C5:7F:D6:6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/4AC75BA8FFE311EBB4FA4965C4F9AE02.roa Signing time: Fri 09 Jan 2026 02:48:47 +0000 ROA not before: Fri 09 Jan 2026 02:48:47 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 133200 IP address blocks: 103.23.136.0/24 maxlen: 24 103.23.138.0/24 maxlen: 24 103.23.139.0/24 maxlen: 24 103.25.92.0/24 maxlen: 24 103.25.94.0/24 maxlen: 24 103.244.251.0/24 maxlen: 24 110.235.223.0/24 maxlen: 24 123.108.252.0/24 maxlen: 24 124.199.112.0/24 maxlen: 24 124.199.113.0/24 maxlen: 24 124.199.115.0/24 maxlen: 24 124.199.116.0/24 maxlen: 24 124.199.120.0/24 maxlen: 24 124.199.121.0/24 maxlen: 24 124.199.122.0/24 maxlen: 24 124.199.123.0/24 maxlen: 24 124.199.124.0/24 maxlen: 24 163.53.196.0/24 maxlen: 24 163.53.198.0/24 maxlen: 24 163.53.199.0/24 maxlen: 24 202.124.32.0/24 maxlen: 24 202.124.33.0/24 maxlen: 24 202.124.36.0/24 maxlen: 24 202.124.37.0/24 maxlen: 24 202.124.38.0/24 maxlen: 24 202.124.42.0/24 maxlen: 24 202.124.44.0/24 maxlen: 24 203.80.160.0/24 maxlen: 24 203.80.162.0/24 maxlen: 24 203.80.163.0/24 maxlen: 24 203.80.164.0/24 maxlen: 24 203.80.165.0/24 maxlen: 24 203.80.166.0/24 maxlen: 24 203.80.167.0/24 maxlen: 24 203.167.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 16:45:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5063 (0x13c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191436, serialNumber=2DA251C11AC68814F527F22E55DE9AC8C57FD66C Validity Not Before: Jan 9 02:48:47 2026 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69606c8f-7915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5e:4e:e2:63:1d:0f:04:8d:5c:0a:59:90:5e: cc:2b:0b:cc:dd:af:d8:5e:e5:02:dd:d7:11:1a:ce: 89:c9:06:38:d1:d8:d3:6a:8b:4d:52:20:7d:97:ca: 6a:82:b1:1a:70:28:68:7e:3d:44:bf:a5:25:7b:2b: e1:62:e9:6d:91:7b:13:c7:97:c2:02:77:d9:26:53: f1:8e:77:24:6d:99:17:ab:2f:3b:29:bf:83:fc:12: 18:12:c3:00:35:39:e8:f3:62:25:bf:9d:86:eb:8a: 1a:91:1a:ed:2a:fb:7b:35:4b:ee:57:dd:23:1e:ce: fd:d1:00:c2:40:9f:ff:f7:f4:ba:64:ab:d9:71:b2: e5:d4:3f:6e:6c:3c:9e:c6:5a:21:de:e2:04:17:f4: c1:6d:32:39:1b:67:25:dd:87:4f:55:b1:03:b7:3e: ee:b1:2e:ab:71:78:31:56:40:a2:2e:e6:6c:0a:1c: 1e:c8:d0:ae:4c:4d:e4:59:2e:10:64:ec:54:e6:5c: cd:4d:b8:20:c2:99:d6:5f:6c:a0:c9:ef:59:ea:d4: 31:ff:ee:75:04:92:76:e6:33:93:d3:f6:60:f2:a1: e7:76:96:d3:09:d2:fc:22:1d:8a:db:b3:9a:76:d8: 83:72:99:af:84:b1:ec:27:35:df:c6:a1:c1:ba:51: 02:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:0B:83:64:13:DE:98:87:71:71:87:3A:EB:51:5F:5F:AA:4E:59:F8 X509v3 Authority Key Identifier: keyid:2D:A2:51:C1:1A:C6:88:14:F5:27:F2:2E:55:DE:9A:C8:C5:7F:D6:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/4AC75BA8FFE311EBB4FA4965C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.23.136.0/24 103.23.138.0/23 103.25.92.0/24 103.25.94.0/24 103.244.251.0/24 110.235.223.0/24 123.108.252.0/24 124.199.112.0/23 124.199.115.0-124.199.116.255 124.199.120.0-124.199.124.255 163.53.196.0/24 163.53.198.0/23 202.124.32.0/23 202.124.36.0-202.124.38.255 202.124.42.0/24 202.124.44.0/24 203.80.160.0/24 203.80.162.0-203.80.167.255 203.167.18.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:ad:c6:ab:23:ab:49:9e:a2:05:07:7c:c6:a2:c2:e9:2e:2e: 32:88:fc:80:e4:15:4e:80:33:13:26:3d:4a:b2:66:ed:99:bb: 69:da:32:3c:5f:a8:2e:fb:2f:3b:f3:ac:7b:5f:14:31:87:45: d5:f3:8a:25:f8:07:8c:c3:0c:bd:5c:4c:be:cc:47:06:d1:1d: 1a:18:e3:37:f5:6e:5a:1e:c0:62:58:f2:2f:14:ef:bb:ed:75: 14:f7:d9:a9:7e:cd:c9:ce:95:21:6c:36:61:86:41:3c:5f:2d: b0:26:e0:d3:e3:ce:30:5c:7c:99:eb:15:b8:4d:45:90:e7:28: 0d:a8:75:cc:63:cb:d6:ff:cf:4a:61:07:43:ce:54:74:66:fa: 51:44:33:01:af:40:cd:35:a1:e3:c8:a6:fa:ff:12:ce:1d:b9: dc:83:b8:b0:ca:af:47:84:35:22:22:41:d4:d0:12:c2:31:29: 89:b5:41:aa:94:6b:6a:d7:6d:b0:08:8f:3c:24:4a:cd:ca:81: 1d:fa:4d:a1:0b:99:f0:14:be:a0:c0:06:eb:9b:77:02:cc:13: 28:40:8d:cd:26:67:39:e2:4a:09:10:8c:de:c2:c5:c2:a9:18: 67:50:35:d0:3d:da:78:0a:6d:20:2b:0a:c9:b0:96:58:c6:5f: 97:2f:ec:cf -----BEGIN CERTIFICATE----- MIIGAjCCBOqgAwIBAgICE8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE0MzYxMTAvBgNVBAUTKDJEQTI1MUMxMUFDNjg4MTRGNTI3RjIyRTU1REU5QUM4 QzU3RkQ2NkMwHhcNMjYwMTA5MDI0ODQ3WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDDA02OTYwNmM4Zi03OTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv15O4mMdDwSNXApZkF7MKwvM3a/YXuUC3dcRGs6JyQY40djTaotNUiB9l8pq grEacChofj1Ev6UleyvhYultkXsTx5fCAnfZJlPxjnckbZkXqy87Kb+D/BIYEsMA NTno82Ilv52G64oakRrtKvt7NUvuV90jHs790QDCQJ//9/S6ZKvZcbLl1D9ubDye xloh3uIEF/TBbTI5G2cl3YdPVbEDtz7usS6rcXgxVkCiLuZsChweyNCuTE3kWS4Q ZOxU5lzNTbggwpnWX2ygye9Z6tQx/+51BJJ25jOT0/Zg8qHndpbTCdL8Ih2K27Oa dtiDcpmvhLHsJzXfxqHBulEC8wIDAQABo4IDJjCCAyIwHQYDVR0OBBYEFL8Lg2QT 3piHcXGHOutRX1+qTln4MB8GA1UdIwQYMBaAFC2iUcEaxogU9SfyLlXemsjFf9Zs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTQzNi9BQUI4MDJFOEM3 OEMxMUU4QTc2Q0Q5MTRDNEY5QUUwMi9MYUpSd1JyR2lCVDFKX0l1VmQ2YXlNVl8x bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xhSlJ3UnJHaUJUMUpfSXVWZDZheU1WXzFtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTE0MzYvQUFCODAyRThDNzhDMTFFOEE3NkNEOTE0QzRGOUFFMDIvNEFDNzVCQThG RkUzMTFFQkI0RkE0OTY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwga8GCCsGAQUFBwEHAQH/ BIGfMIGcMIGZBAIAATCBkgMEAGcXiAMEAWcXigMEAGcZXAMEAGcZXgMEAGf0+wME AG7r3wMEAHts/AMEAXzHcDAMAwQAfMdzAwQAfMd0MAwDBAN8x3gDBAB8x3wDBACj NcQDBAGjNcYDBAHKfCAwDAMEAsp8JAMEAMp8JgMEAMp8KgMEAMp8LAMEAMtQoDAM AwQBy1CiAwQDy1CgAwQAy6cSMA0GCSqGSIb3DQEBCwUAA4IBAQAurcarI6tJnqIF B3zGosLpLi4yiPyA5BVOgDMTJj1Ksmbtmbtp2jI8X6gu+y8786x7XxQxh0XV84ol +AeMwwy9XEy+zEcG0R0aGOM39W5aHsBiWPIvFO+77XUU99mpfs3JzpUhbDZhhkE8 Xy2wJuDT484wXHyZ6xW4TUWQ5ygNqHXMY8vW/89KYQdDzlR0ZvpRRDMBr0DNNaHj yKb6/xLOHbncg7iwyq9HhDUiIkHU0BLCMSmJtUGqlGtq122wCI88JErNyoEd+k2h C5nwFL6gwAbrm3cCzBMoQI3NJmc54koJEIzewsXCqRhnUDXQPdp4Cm0gKwrJsJZY xl+XL+zP -----END CERTIFICATE-----Generated at Sun Jan 25 14:21:43 2026 by rpki-client