This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/99DC33DA621D11F0B3B28C17C4F9AE02.roa File: 99DC33DA621D11F0B3B28C17C4F9AE02.roa (raw, json) Hash identifier: 4b+Zn4KsagGvBxJYgePsU5UpAKIjBDYtGiGuj48bvLM= Subject key identifier: 36:29:BC:B0:B4:93:38:BD:83:F1:13:D2:1F:2F:7F:82:44:9D:21:64 Certificate issuer: /CN=A919318C/serialNumber=BE4301E2A40B4F6A47E185A6757D9A6E8D7C7442 Certificate serial: 6A Authority key identifier: BE:43:01:E2:A4:0B:4F:6A:47:E1:85:A6:75:7D:9A:6E:8D:7C:74:42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkMB4qQLT2pH4YWmdX2abo18dEI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/99DC33DA621D11F0B3B28C17C4F9AE02.roa Signing time: Fri 09 Jan 2026 06:25:16 +0000 ROA not before: Fri 09 Jan 2026 06:25:16 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 24315 IP address blocks: 203.18.248.0/24 maxlen: 24 203.18.249.0/24 maxlen: 24 203.18.250.0/24 maxlen: 24 203.18.251.0/24 maxlen: 24 203.18.252.0/24 maxlen: 24 203.18.253.0/24 maxlen: 24 203.18.254.0/24 maxlen: 24 203.18.255.0/24 maxlen: 24 2001:df5:df40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.crl rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkMB4qQLT2pH4YWmdX2abo18dEI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 06:08:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919318C, serialNumber=BE4301E2A40B4F6A47E185A6757D9A6E8D7C7442 Validity Not Before: Jan 9 06:25:16 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69609f4c-c565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:49:55:22:8f:bb:34:00:45:7b:3d:1f:e2:b8: 3e:9a:59:23:eb:bf:e8:74:60:fb:bc:ce:f6:7e:2c: 96:70:05:c0:8e:e0:ec:21:16:af:87:ec:fb:0e:4c: c3:19:e4:35:37:3a:97:f1:98:b0:ee:d6:c3:32:8e: db:92:b4:2e:ad:5f:63:2b:8f:38:7e:70:7c:1e:ab: 79:24:18:e8:d1:6c:01:39:31:87:8e:5a:f7:4f:96: f9:c6:e5:6e:f2:b9:cc:fe:26:85:b3:4f:d1:00:68: 19:de:e5:d3:fd:dc:3b:09:32:bc:4f:51:c3:d6:ce: d6:68:36:06:c2:d2:fe:cb:39:1a:c4:22:ca:51:c2: 3f:d5:58:ef:4e:a4:77:f5:39:7e:d1:a4:6b:43:c4: 2a:40:18:2f:09:e2:a9:93:05:89:a1:c0:ac:b6:2f: de:f1:fa:ce:cf:ea:65:60:82:b5:01:51:e6:47:76: 94:8d:8c:15:29:77:77:cd:7b:0f:cc:07:e8:21:60: bf:59:77:9e:ed:14:fa:a4:01:c9:71:98:9a:29:39: 49:b1:07:d2:02:00:b7:47:fd:dc:fd:85:93:b8:bf: 73:36:f3:49:3d:40:42:dd:61:78:ae:c0:e1:d8:2f: ea:41:00:01:b2:bf:b5:fe:44:94:b0:4a:dc:23:6d: 79:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:29:BC:B0:B4:93:38:BD:83:F1:13:D2:1F:2F:7F:82:44:9D:21:64 X509v3 Authority Key Identifier: keyid:BE:43:01:E2:A4:0B:4F:6A:47:E1:85:A6:75:7D:9A:6E:8D:7C:74:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkMB4qQLT2pH4YWmdX2abo18dEI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/99DC33DA621D11F0B3B28C17C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.18.248.0/21 IPv6: 2001:df5:df40::/48 Signature Algorithm: sha256WithRSAEncryption 9d:df:38:b0:f0:11:ae:06:2c:5d:f0:e5:64:04:a3:3f:c3:63: 21:2c:1b:50:a7:a3:8b:4e:2d:cf:00:ac:a6:22:17:03:61:31: 9a:80:a1:ef:b8:a6:e5:68:de:01:8c:c4:13:d8:4d:fa:ee:3d: c3:d9:25:ed:ed:8e:f6:ea:50:92:4f:f4:d3:35:15:f7:29:68: c7:bf:66:9e:72:87:64:a5:de:89:8c:72:d0:1b:b9:0c:d4:be: f4:e7:3f:8f:3d:74:2c:95:96:5a:28:cf:34:5e:f6:19:8f:61: 4c:68:32:18:59:b8:e4:13:49:28:14:75:45:f6:e0:21:8d:09: 66:48:51:ab:a8:cc:fe:28:5f:12:ef:a9:1d:08:c4:74:08:a9: 23:5c:41:7f:37:25:40:5d:dd:71:e5:1a:0f:d7:a1:36:2f:41: ca:ea:f5:76:6f:5b:bc:7e:76:ea:b7:31:90:18:f4:2e:64:74: 61:b2:37:65:a8:f3:93:33:89:d5:b1:2d:67:5b:f6:34:76:e1: 94:71:25:5c:13:f3:92:f8:c8:e4:eb:18:6f:c2:cc:2a:94:a1: a7:6e:a1:0a:19:1c:74:b8:0c:0b:43:a7:33:5e:c9:c0:d3:d5: f8:c1:ee:d5:00:70:d5:90:5b:e8:c5:19:30:4d:61:ff:7b:51: 1a:f9:66:a3 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTE5 MzE4QzExMC8GA1UEBRMoQkU0MzAxRTJBNDBCNEY2QTQ3RTE4NUE2NzU3RDlBNkU4 RDdDNzQ0MjAeFw0yNjAxMDkwNjI1MTZaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV BAMMDTY5NjA5ZjRjLWM1NjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqSVUij7s0AEV7PR/iuD6aWSPrv+h0YPu8zvZ+LJZwBcCO4OwhFq+H7PsOTMMZ 5DU3OpfxmLDu1sMyjtuStC6tX2Mrjzh+cHweq3kkGOjRbAE5MYeOWvdPlvnG5W7y ucz+JoWzT9EAaBne5dP93DsJMrxPUcPWztZoNgbC0v7LORrEIspRwj/VWO9OpHf1 OX7RpGtDxCpAGC8J4qmTBYmhwKy2L97x+s7P6mVggrUBUeZHdpSNjBUpd3fNew/M B+ghYL9Zd57tFPqkAclxmJopOUmxB9ICALdH/dz9hZO4v3M280k9QELdYXiuwOHY L+pBAAGyv7X+RJSwStwjbXlNAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUNim8sLST OL2D8RPSHy9/gkSdIWQwHwYDVR0jBBgwFoAUvkMB4qQLT2pH4YWmdX2abo18dEIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzMThDL0NFOUIwOUVFNjE1 NDExRjBCQjUwRkEzN0M0RjlBRTAyL3ZrTUI0cVFMVDJwSDRZV21kWDJhYm8xOGRF SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdmtNQjRxUUxUMnBINFlXbWRYMmFibzE4ZEVJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzE4Qy9DRTlCMDlFRTYxNTQxMUYwQkI1MEZBMzdDNEY5QUUwMi85OURDMzNEQTYy MUQxMUYwQjNCMjhDMTdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEA8sS+DAPBAIAAjAJAwcAIAEN9d9AMA0GCSqGSIb3DQEBCwUA A4IBAQCd3ziw8BGuBixd8OVkBKM/w2MhLBtQp6OLTi3PAKymIhcDYTGagKHvuKbl aN4BjMQT2E367j3D2SXt7Y726lCST/TTNRX3KWjHv2aecodkpd6JjHLQG7kM1L70 5z+PPXQslZZaKM80XvYZj2FMaDIYWbjkE0koFHVF9uAhjQlmSFGrqMz+KF8S76kd CMR0CKkjXEF/NyVAXd1x5RoP16E2L0HK6vV2b1u8fnbqtzGQGPQuZHRhsjdlqPOT M4nVsS1nW/Y0duGUcSVcE/OS+Mjk6xhvwswqlKGnbqEKGRx0uAwLQ6czXsnA09X4 we7VAHDVkFvoxRkwTWH/e1Ea+Waj -----END CERTIFICATE-----Generated at Mon Jan 26 08:01:52 2026 by rpki-client