This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/ADA9DA3C2AAE11E9BEFAEF4EC4F9AE02.roa File: ADA9DA3C2AAE11E9BEFAEF4EC4F9AE02.roa (raw, json) Hash identifier: XMFqQzm2eeka83s4HK4p8PyT9qjqCAvV4n347+CZfBI= Subject key identifier: D9:6F:69:E9:21:E7:60:0E:5A:EA:A1:A0:16:3A:86:A9:73:E5:13:0B Certificate issuer: /CN=A91995D5/serialNumber=6F2C207558764EAB50EF85066F78590CE5B1C561 Certificate serial: 1115 Authority key identifier: 6F:2C:20:75:58:76:4E:AB:50:EF:85:06:6F:78:59:0C:E5:B1:C5:61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bywgdVh2TqtQ74UGb3hZDOWxxWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/ADA9DA3C2AAE11E9BEFAEF4EC4F9AE02.roa Signing time: Tue 06 Jan 2026 17:14:46 +0000 ROA not before: Tue 06 Jan 2026 17:14:46 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 138443 IP address blocks: 103.125.136.0/22 maxlen: 22 103.125.136.0/24 maxlen: 24 103.125.137.0/24 maxlen: 24 103.125.138.0/24 maxlen: 24 103.125.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.crl rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bywgdVh2TqtQ74UGb3hZDOWxxWE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 16:58:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4373 (0x1115) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91995D5, serialNumber=6F2C207558764EAB50EF85066F78590CE5B1C561 Validity Not Before: Jan 6 17:14:46 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=695d4306-6d4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:16:15:85:d5:1a:96:08:59:6e:ce:df:40:2c: 67:23:1e:47:d1:ad:b5:f8:0b:01:9c:3c:69:2c:26: 9d:1c:5a:6a:c5:86:30:99:36:e1:00:c2:52:e6:03: c4:93:f2:19:c9:15:4e:10:df:58:a8:9c:6c:56:05: 39:5e:83:c8:47:e2:a4:52:21:64:fc:ab:87:82:12: 73:e4:2d:42:9a:91:99:18:e2:a3:c0:e8:4a:a9:e8: 14:21:77:ca:80:b9:c2:63:b8:e6:a9:9e:8e:d4:d7: df:44:57:7d:af:c7:9e:65:70:64:20:f4:89:79:ca: d7:9f:62:9e:b8:96:0a:7f:0c:be:b4:23:9f:89:60: 9c:a4:b7:e1:6d:05:42:ba:58:24:a2:90:74:2f:93: 74:7e:58:2f:58:bf:3a:52:7f:ec:28:31:54:dd:86: 42:6b:5e:40:b2:4f:5c:14:98:7b:76:60:76:9c:0b: 2a:61:4d:eb:a3:52:9c:df:19:f4:d3:4f:6a:1c:2c: 9c:fa:b2:1a:6a:c3:72:0c:31:15:e2:ff:19:28:ff: 35:67:64:8e:5a:98:89:ef:b3:d0:bf:64:3d:f2:ab: db:6d:1f:20:3c:91:2e:e8:b5:3b:c3:e1:bc:c0:22: 4e:1a:6e:b2:69:af:02:40:4f:9a:20:b1:32:74:49: 3a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:6F:69:E9:21:E7:60:0E:5A:EA:A1:A0:16:3A:86:A9:73:E5:13:0B X509v3 Authority Key Identifier: keyid:6F:2C:20:75:58:76:4E:AB:50:EF:85:06:6F:78:59:0C:E5:B1:C5:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bywgdVh2TqtQ74UGb3hZDOWxxWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/ADA9DA3C2AAE11E9BEFAEF4EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.125.136.0/22 Signature Algorithm: sha256WithRSAEncryption 1e:88:f8:b0:84:fd:af:63:e8:84:7d:94:8b:f3:ac:f4:54:1a: 5a:68:ca:72:be:2a:f1:86:82:b9:51:f2:4e:a2:11:55:15:5f: 36:e5:ac:80:b9:44:f3:16:fb:f3:f7:e8:3a:99:94:aa:28:fe: 13:c4:57:1b:be:47:8a:85:39:63:af:2b:a2:f7:be:e8:58:c3: 93:67:5f:66:44:28:7d:15:b5:50:c1:21:78:68:58:3a:78:01: 13:a0:ce:c8:61:eb:f3:2a:98:67:aa:80:3c:18:b9:4f:a4:f3: e9:71:ef:5a:6b:ec:39:3e:00:31:50:51:2a:7a:e3:a8:ac:9f: f7:53:66:1b:52:ee:4a:5b:7f:2c:a6:0a:03:7d:04:7e:d3:a6: bc:59:84:a2:6a:b7:4f:5f:af:02:16:a1:50:38:6d:25:e5:69: 36:68:a8:3f:c9:fe:04:6d:7e:18:c9:d1:9e:a6:15:60:4b:67: 76:c7:72:7e:be:af:ab:ac:b2:53:39:45:a1:0c:b5:3d:a9:87: 55:d3:de:44:9d:d9:4a:80:4d:81:e1:31:0e:29:1e:b6:b6:38: a7:c6:ff:8e:af:ad:b2:e9:00:56:ff:c1:a5:9a:48:50:a3:a5: 17:5f:1e:12:f3:24:ad:d1:99:64:7f:62:61:3b:41:06:c1:21: ff:ad:d5:be -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICERUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx OTk1RDUxMTAvBgNVBAUTKDZGMkMyMDc1NTg3NjRFQUI1MEVGODUwNjZGNzg1OTBD RTVCMUM1NjEwHhcNMjYwMTA2MTcxNDQ2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTVkNDMwNi02ZDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjhYVhdUalghZbs7fQCxnIx5H0a21+AsBnDxpLCadHFpqxYYwmTbhAMJS5gPE k/IZyRVOEN9YqJxsVgU5XoPIR+KkUiFk/KuHghJz5C1CmpGZGOKjwOhKqegUIXfK gLnCY7jmqZ6O1NffRFd9r8eeZXBkIPSJecrXn2KeuJYKfwy+tCOfiWCcpLfhbQVC ulgkopB0L5N0flgvWL86Un/sKDFU3YZCa15Ask9cFJh7dmB2nAsqYU3ro1Kc3xn0 009qHCyc+rIaasNyDDEV4v8ZKP81Z2SOWpiJ77PQv2Q98qvbbR8gPJEu6LU7w+G8 wCJOGm6yaa8CQE+aILEydEk6pQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNlvaekh 52AOWuqhoBY6hqlz5RMLMB8GA1UdIwQYMBaAFG8sIHVYdk6rUO+FBm94WQzlscVh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTVENS8xNjNCMUU3QzJB QUUxMUU5QUE1NzRFNEVDNEY5QUUwMi9ieXdnZFZoMlRxdFE3NFVHYjNoWkRPV3h4 V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J5d2dkVmgyVHF0UTc0VUdiM2haRE9XeHhXRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTk1RDUvMTYzQjFFN0MyQUFFMTFFOUFBNTc0RTRFQzRGOUFFMDIvQURBOURBM0My QUFFMTFFOUJFRkFFRjRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnfYgwDQYJKoZIhvcNAQELBQADggEBAB6I+LCE/a9j6IR9 lIvzrPRUGlpoynK+KvGGgrlR8k6iEVUVXzblrIC5RPMW+/P36DqZlKoo/hPEVxu+ R4qFOWOvK6L3vuhYw5NnX2ZEKH0VtVDBIXhoWDp4AROgzshh6/MqmGeqgDwYuU+k 8+lx71pr7Dk+ADFQUSp646isn/dTZhtS7kpbfyymCgN9BH7TprxZhKJqt09frwIW oVA4bSXlaTZoqD/J/gRtfhjJ0Z6mFWBLZ3bHcn6+r6usslM5RaEMtT2ph1XT3kSd 2UqATYHhMQ4pHra2OKfG/46vrbLpAFb/waWaSFCjpRdfHhLzJK3RmWR/YmE7QQbB If+t1b4= -----END CERTIFICATE-----Generated at Sun Jan 25 11:06:33 2026 by rpki-client