This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/89A93D5E971811E9AE51CA15C4F9AE02.roa File: 89A93D5E971811E9AE51CA15C4F9AE02.roa (raw, json) Hash identifier: d+whIiEXh86M/fJB2X2sH2vZ5K1XYOVZNOCCGnxRDyI= Subject key identifier: E2:26:7C:AC:CD:2B:17:7C:FD:E3:7F:38:AB:9D:09:7D:34:F1:E5:FB Certificate issuer: /CN=A919EB4E/serialNumber=1D3694EF1421C91854A887ACA9610BC560AE7084 Certificate serial: 0F1F Authority key identifier: 1D:36:94:EF:14:21:C9:18:54:A8:87:AC:A9:61:0B:C5:60:AE:70:84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/89A93D5E971811E9AE51CA15C4F9AE02.roa Signing time: Tue 30 Dec 2025 18:14:33 +0000 ROA not before: Tue 30 Dec 2025 18:14:32 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 131447 IP address blocks: 103.253.134.0/23 maxlen: 23 103.253.134.0/24 maxlen: 24 103.253.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.crl rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 17:18:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3871 (0xf1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EB4E, serialNumber=1D3694EF1421C91854A887ACA9610BC560AE7084 Validity Not Before: Dec 30 18:14:32 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69541688-f0c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:cd:9e:d3:5b:cd:26:85:74:25:16:64:2e:67: 83:25:52:0f:94:cf:cc:44:aa:61:e6:b9:ed:a0:63: a4:ae:49:56:ea:9a:5e:66:4e:a6:81:f6:3d:c3:55: 9a:9c:3a:6e:10:b1:a0:0d:6d:7d:db:9a:a3:ef:cc: cf:61:f6:55:8a:b7:67:9f:3e:aa:fd:51:0c:de:75: 9b:a9:b9:ed:11:c7:0d:ef:b5:93:f6:9a:ce:7b:0f: 01:46:ce:a2:6d:3a:aa:9c:5f:fc:f0:2c:a0:a8:1e: d9:14:c7:5c:23:79:78:92:34:c1:20:4f:9e:0f:94: 30:95:71:41:60:4d:a5:ac:1e:82:54:7d:d6:65:97: 04:c6:9b:61:61:2f:40:6d:60:0f:e9:4d:55:83:65: 19:7f:3d:38:84:71:39:e7:d2:3f:25:c4:f2:14:a8: 30:5b:c3:ea:07:56:d4:28:ac:64:0e:45:74:04:c6: bd:19:7b:96:74:47:86:fe:ac:1e:1a:2f:8e:3c:b0: 1d:6e:6c:bb:72:e1:a8:18:4d:0d:84:53:fd:c7:69: c3:bd:6c:8e:18:78:27:32:1d:35:9c:9d:4a:2b:04: c1:a8:20:ba:c7:0c:47:b9:a8:61:6e:fe:63:a2:34: 10:70:e6:48:ff:ac:41:f4:5e:44:ff:44:7c:77:9b: cb:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:26:7C:AC:CD:2B:17:7C:FD:E3:7F:38:AB:9D:09:7D:34:F1:E5:FB X509v3 Authority Key Identifier: keyid:1D:36:94:EF:14:21:C9:18:54:A8:87:AC:A9:61:0B:C5:60:AE:70:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/89A93D5E971811E9AE51CA15C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.253.134.0/23 Signature Algorithm: sha256WithRSAEncryption 3b:6a:35:92:7c:d3:5e:06:4f:9c:72:f9:f3:cd:bf:bc:cf:5f: b2:be:79:8b:b2:2a:04:dd:a2:a4:42:bd:27:2e:84:4c:71:ad: e5:38:fc:c6:d7:85:a6:7b:ff:2c:88:6e:80:09:f9:2e:43:aa: cc:00:0d:a3:b9:1b:e8:20:c4:12:1d:9b:c1:f1:f0:3a:ad:66: f0:e1:6c:94:60:d5:9c:83:f9:16:8b:06:a7:27:8f:53:f3:b7: b0:b9:ac:4f:92:b8:5a:21:2d:30:f7:2a:89:b5:89:ab:f9:c2: 36:d0:47:98:07:e7:ee:53:3c:cc:e3:a8:ad:de:ed:0c:58:4d: 53:d2:47:8a:cb:c0:ed:c4:0f:f0:c4:9b:77:3d:6b:a9:d3:54: c6:ab:0b:a3:0a:81:81:0d:50:af:3d:54:7f:eb:b8:5a:a6:b6: 56:89:b7:41:13:c5:a6:47:59:29:c9:ff:f9:6e:57:a2:d9:c6: 7b:47:b3:33:91:7e:c7:27:af:de:5e:c7:b1:07:eb:b5:70:93: e2:3d:6e:88:11:5f:03:ca:ea:ec:91:cf:b7:54:16:a0:c2:43: a5:32:3e:04:9d:c9:2c:3a:4e:2c:f7:e3:21:42:09:17:ce:bc: b1:7e:da:c8:4b:73:b5:8d:8f:c1:da:28:2b:e1:2a:05:bf:2a: 12:da:61:52 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx OUVCNEUxMTAvBgNVBAUTKDFEMzY5NEVGMTQyMUM5MTg1NEE4ODdBQ0E5NjEwQkM1 NjBBRTcwODQwHhcNMjUxMjMwMTgxNDMyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU0MTY4OC1mMGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqs2e01vNJoV0JRZkLmeDJVIPlM/MRKph5rntoGOkrklW6ppeZk6mgfY9w1Wa nDpuELGgDW1925qj78zPYfZVirdnnz6q/VEM3nWbqbntEccN77WT9prOew8BRs6i bTqqnF/88CygqB7ZFMdcI3l4kjTBIE+eD5QwlXFBYE2lrB6CVH3WZZcExpthYS9A bWAP6U1Vg2UZfz04hHE559I/JcTyFKgwW8PqB1bUKKxkDkV0BMa9GXuWdEeG/qwe Gi+OPLAdbmy7cuGoGE0NhFP9x2nDvWyOGHgnMh01nJ1KKwTBqCC6xwxHuahhbv5j ojQQcOZI/6xB9F5E/0R8d5vLJwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOImfKzN Kxd8/eN/OKudCX008eX7MB8GA1UdIwQYMBaAFB02lO8UIckYVKiHrKlhC8VgrnCE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUI0RS9BMjg0M0MwODk3 MTcxMUU5ODVGQ0FCMTRDNEY5QUUwMi9IVGFVN3hRaHlSaFVxSWVzcVdFTHhXQ3Vj SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hUYVU3eFFoeVJoVXFJZXNxV0VMeFdDdWNJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUVCNEUvQTI4NDNDMDg5NzE3MTFFOTg1RkNBQjE0QzRGOUFFMDIvODlBOTNENUU5 NzE4MTFFOUFFNTFDQTE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFn/YYwDQYJKoZIhvcNAQELBQADggEBADtqNZJ8014GT5xy +fPNv7zPX7K+eYuyKgTdoqRCvScuhExxreU4/MbXhaZ7/yyIboAJ+S5DqswADaO5 G+ggxBIdm8Hx8DqtZvDhbJRg1ZyD+RaLBqcnj1Pzt7C5rE+SuFohLTD3Kom1iav5 wjbQR5gH5+5TPMzjqK3e7QxYTVPSR4rLwO3ED/DEm3c9a6nTVMarC6MKgYENUK89 VH/ruFqmtlaJt0ETxaZHWSnJ//luV6LZxntHszORfscnr95ex7EH67Vwk+I9bogR XwPK6uyRz7dUFqDCQ6UyPgSdySw6Tiz34yFCCRfOvLF+2shLc7WNj8HaKCvhKgW/ KhLaYVI= -----END CERTIFICATE-----Generated at Sun Jan 25 11:21:13 2026 by rpki-client