This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/AA13A4AC58BA11F08C19015DC4F9AE02.roa File: AA13A4AC58BA11F08C19015DC4F9AE02.roa (raw, json) Hash identifier: 1UG6AGklU8a4Kd40wy/AD1TfEeuMV8NSzlNJIm9DPQA= Subject key identifier: D6:49:70:B5:B9:14:66:42:CA:84:2B:0C:B7:45:78:F5:E3:D5:76:A0 Certificate issuer: /CN=A919D2AF/serialNumber=E8486374449ADE5581EB78C3982F1DE12A4A6003 Certificate serial: 61 Authority key identifier: E8:48:63:74:44:9A:DE:55:81:EB:78:C3:98:2F:1D:E1:2A:4A:60:03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EhjdESa3lWB63jDmC8d4SpKYAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/AA13A4AC58BA11F08C19015DC4F9AE02.roa Signing time: Thu 01 Jan 2026 02:21:38 +0000 ROA not before: Thu 01 Jan 2026 02:21:38 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 135632 IP address blocks: 103.77.9.0/24 maxlen: 24 103.77.10.0/24 maxlen: 24 103.77.11.0/24 maxlen: 24 116.206.164.0/24 maxlen: 24 116.206.165.0/24 maxlen: 24 116.206.166.0/24 maxlen: 24 116.206.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.crl rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EhjdESa3lWB63jDmC8d4SpKYAM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 01:27:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D2AF, serialNumber=E8486374449ADE5581EB78C3982F1DE12A4A6003 Validity Not Before: Jan 1 02:21:38 2026 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=6955da32-a745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:10:9b:6d:b6:d8:f3:ac:5b:7c:70:99:79:32: 3c:18:5c:0e:c4:a9:be:1c:01:96:dd:20:f2:8a:d5: 41:3f:9f:a3:3e:c2:18:22:b6:fe:a7:66:1c:55:42: 01:73:13:e6:9e:c6:5a:2e:c5:5d:9b:33:f1:0c:e0: e2:27:f4:06:2a:c4:7f:11:c0:6d:a1:29:d7:1f:97: 09:e4:64:dd:40:1d:59:7f:a9:68:a2:ae:44:81:82: a8:f2:ff:f9:cd:b1:d1:a3:89:00:aa:8b:65:a5:10: a5:7c:b8:7c:1c:de:38:e8:3c:47:8e:6b:68:45:ae: a3:2d:a2:ec:d0:70:28:34:18:da:94:81:b4:e9:b0: 6d:71:49:b4:ac:e0:bd:de:ea:e6:6f:1f:3d:f9:16: ca:5f:ba:88:83:68:0c:66:e3:df:f5:d0:99:e0:15: 5f:95:5c:2d:6c:82:fd:c1:8b:71:cb:1a:63:c6:4c: 92:01:d6:2e:d3:f4:48:39:5d:25:b2:0b:8c:51:cc: 5e:8b:d6:1e:53:8c:de:12:3d:d8:e4:d2:b6:7a:d1: 9d:61:50:ab:74:b2:10:00:3a:63:08:7d:67:65:fa: 22:c3:c9:82:80:df:56:6f:9c:81:63:c3:d6:b2:52: 36:f4:86:6c:c7:02:dd:bf:07:94:61:74:ab:85:d5: 02:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:49:70:B5:B9:14:66:42:CA:84:2B:0C:B7:45:78:F5:E3:D5:76:A0 X509v3 Authority Key Identifier: keyid:E8:48:63:74:44:9A:DE:55:81:EB:78:C3:98:2F:1D:E1:2A:4A:60:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EhjdESa3lWB63jDmC8d4SpKYAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/AA13A4AC58BA11F08C19015DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.77.9.0-103.77.11.255 116.206.164.0/22 Signature Algorithm: sha256WithRSAEncryption 13:a8:14:52:3a:45:40:be:7a:7c:40:7a:1b:36:45:0b:71:6e: 0a:e2:90:13:53:66:d2:a1:ad:1b:60:14:0f:43:f0:8e:c4:d0: 67:31:b4:e6:c5:04:20:a7:ef:8f:94:0a:32:46:8f:08:68:fa: 1b:42:c2:e5:3c:5b:d6:c4:76:72:43:32:6d:cd:85:25:28:db: 07:4d:12:43:74:26:6f:c9:2b:b5:22:54:10:c2:95:fa:39:6f: 18:64:ed:75:c0:07:e6:c1:0b:b7:a9:4c:d9:b8:a5:17:a6:b1: 45:40:0e:90:4f:f1:e6:d0:83:9a:19:5f:c9:1e:43:6d:e0:d8: db:eb:cf:7e:12:9f:49:48:58:02:58:29:64:9b:b3:f6:99:2f: f7:18:c8:8a:ad:c4:2e:1c:ef:3d:7f:e7:0d:9c:89:28:ec:1a: 7b:3e:7a:83:58:fe:3b:45:57:8e:c6:fd:65:44:18:79:bb:f9: 0a:67:08:ae:6d:56:13:29:73:5b:ca:1b:37:5b:65:ae:3b:2e: 72:09:0c:af:8b:4a:6e:44:82:f9:71:47:41:0e:0f:0d:53:22: 4c:20:c3:0d:45:12:4b:2b:9e:f7:57:03:6b:9d:75:fa:0d:19: 57:66:51:5d:a6:13:de:b2:d2:3c:b3:fa:e1:c9:da:06:7a:dd: cc:59:77:6f -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTE5 RDJBRjExMC8GA1UEBRMoRTg0ODYzNzQ0NDlBREU1NTgxRUI3OEMzOTgyRjFERTEy QTRBNjAwMzAeFw0yNjAxMDEwMjIxMzhaFw0yNjA1MDEwMDAwMDBaMBgxFjAUBgNV BAMMDTY5NTVkYTMyLWE3NDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+EJttttjzrFt8cJl5MjwYXA7Eqb4cAZbdIPKK1UE/n6M+whgitv6nZhxVQgFz E+aexlouxV2bM/EM4OIn9AYqxH8RwG2hKdcflwnkZN1AHVl/qWiirkSBgqjy//nN sdGjiQCqi2WlEKV8uHwc3jjoPEeOa2hFrqMtouzQcCg0GNqUgbTpsG1xSbSs4L3e 6uZvHz35FspfuoiDaAxm49/10JngFV+VXC1sgv3Bi3HLGmPGTJIB1i7T9Eg5XSWy C4xRzF6L1h5TjN4SPdjk0rZ60Z1hUKt0shAAOmMIfWdl+iLDyYKA31ZvnIFjw9ay Ujb0hmzHAt2/B5RhdKuF1QKJAgMBAAGjggKjMIICnzAdBgNVHQ4EFgQU1klwtbkU ZkLKhCsMt0V49ePVdqAwHwYDVR0jBBgwFoAU6EhjdESa3lWB63jDmC8d4SpKYAMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlEMkFGL0YzRUZCODk4QkNC QTExRUQ5QzlBRkEyNUM0RjlBRTAyLzZFaGpkRVNhM2xXQjYzakRtQzhkNFNwS1lB TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNkVoamRFU2EzbFdCNjNqRG1DOGQ0U3BLWUFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDJBRi9GM0VGQjg5OEJDQkExMUVEOUM5QUZBMjVDNEY5QUUwMi9BQTEzQTRBQzU4 QkExMUYwOEMxOTAxNURDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAtBggrBgEFBQcBBwEB/wQe MBwwGgQCAAEwFDAMAwQAZ00JAwQCZ00IAwQCdM6kMA0GCSqGSIb3DQEBCwUAA4IB AQATqBRSOkVAvnp8QHobNkULcW4K4pATU2bSoa0bYBQPQ/COxNBnMbTmxQQgp++P lAoyRo8IaPobQsLlPFvWxHZyQzJtzYUlKNsHTRJDdCZvySu1IlQQwpX6OW8YZO11 wAfmwQu3qUzZuKUXprFFQA6QT/Hm0IOaGV/JHkNt4Njb689+Ep9JSFgCWClkm7P2 mS/3GMiKrcQuHO89f+cNnIko7Bp7PnqDWP47RVeOxv1lRBh5u/kKZwiubVYTKXNb yhs3W2WuOy5yCQyvi0puRIL5cUdBDg8NUyJMIMMNRRJLK573VwNrnXX6DRlXZlFd phPestI8s/rhydoGet3MWXdv -----END CERTIFICATE-----Generated at Sun Jan 25 20:07:45 2026 by rpki-client