This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/84210E0A9AAB11F0AFE54B2AC4F9AE02.roa File: 84210E0A9AAB11F0AFE54B2AC4F9AE02.roa (raw, json) Hash identifier: bH7sQ4lr70nz+VLgPJdmBstLMXLyH/4aEMmeKqWZy8k= Subject key identifier: B5:43:21:CB:54:83:BE:91:57:EE:A4:0F:22:7B:C2:AD:2C:B9:10:2A Certificate issuer: /CN=A91A2359/serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5 Certificate serial: 0BC3 Authority key identifier: E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/84210E0A9AAB11F0AFE54B2AC4F9AE02.roa Signing time: Thu 22 Jan 2026 11:14:02 +0000 ROA not before: Thu 22 Jan 2026 11:14:02 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 23532 IP address blocks: 103.245.233.0/24 maxlen: 24 103.245.234.0/24 maxlen: 24 103.245.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 18:36:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3011 (0xbc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2359, serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5 Validity Not Before: Jan 22 11:14:02 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6972067a-b33f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:14:34:53:97:87:95:b8:84:71:32:2f:64:e7: 9e:0f:14:bf:49:6b:0a:54:b9:00:59:db:3d:e2:5f: 27:03:0c:04:66:01:43:e4:a2:9a:55:34:a0:9d:74: 0c:41:e4:bc:07:eb:33:ad:f4:e5:0a:9f:2c:ef:b6: 4e:3c:60:b1:88:2c:a3:a1:d7:74:29:cd:09:86:80: f0:ff:ba:be:68:54:1c:25:ee:8e:a7:b0:b5:c9:a6: 9f:21:70:58:99:11:43:fc:27:34:9b:04:15:b9:e1: 19:fc:e9:6f:45:a6:c9:4b:a9:46:cc:6b:76:70:98: 6d:47:b3:85:50:68:b0:34:f6:5f:7b:86:2e:4c:82: 83:19:93:3a:f5:41:a8:d7:4a:a5:a2:9a:cb:12:86: de:27:ba:01:c9:c7:bb:dc:f7:50:f2:b6:82:4e:58: 0b:91:9a:75:38:a0:09:db:c4:72:eb:c0:12:1e:ce: 2a:3d:3a:59:8c:8e:41:2d:06:25:32:49:59:a1:47: 6d:e9:d3:94:05:fc:25:36:82:67:b1:9e:9a:00:e7: 5e:8e:da:e2:76:98:71:9e:fc:e2:54:35:4d:8b:ec: 19:e1:bf:2f:e8:24:1e:a1:b1:37:dc:14:31:74:c2: 22:bf:f5:a2:5c:3c:50:cf:96:23:73:bb:30:b9:3d: bc:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:43:21:CB:54:83:BE:91:57:EE:A4:0F:22:7B:C2:AD:2C:B9:10:2A X509v3 Authority Key Identifier: keyid:E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/84210E0A9AAB11F0AFE54B2AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.245.233.0-103.245.235.255 Signature Algorithm: sha256WithRSAEncryption b0:60:af:c0:a3:d7:fd:97:ce:10:3e:fa:6e:0e:58:fe:09:b2: 2c:fa:97:2e:fd:94:b1:d9:9e:c1:e3:53:e8:69:b1:8a:2e:9d: 36:d6:5a:21:a8:60:bd:66:30:d8:6d:a6:ed:29:bd:a8:59:49: 1f:7d:09:f4:6b:73:e8:2f:85:b1:3a:ca:0d:e8:20:96:eb:56: e7:b6:dd:95:f3:b2:65:ae:78:8a:8e:33:fc:88:e4:c1:aa:c3: 81:7f:9c:15:3a:9c:59:33:78:23:5f:ca:78:3a:a3:cd:ff:fa: 55:d9:87:cc:41:86:83:27:ae:bf:06:65:94:31:e0:b7:2f:db: d1:c4:63:48:57:4d:a4:81:6b:f6:f5:04:b1:d8:f6:28:d8:ca: bd:5e:cd:0a:5b:95:73:a0:f3:cc:79:91:4e:f6:94:a9:0e:95: ac:af:9a:7f:cd:30:3f:4f:4d:04:32:6c:72:38:20:0c:fc:fc: 50:1c:a5:70:6d:d0:89:d5:05:1c:a7:70:d6:f2:38:a0:0a:98: 51:7f:90:f2:0e:a2:f8:1c:00:ec:6c:9a:43:20:7c:ba:99:d7: 8e:50:30:e5:ba:f4:bb:d7:d3:f3:23:f1:1a:36:4b:2c:ba:d7: 2c:78:89:2d:03:9e:b6:47:13:d6:d9:10:df:81:f4:28:9f:3c: a1:5e:9c:38 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICC8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTIzNTkxMTAvBgNVBAUTKEU5OTFBNUEyREQ5RDFGMkEyNDNERjZBQTI0QjlGNTBF MUNCOEZFRTUwHhcNMjYwMTIyMTExNDAyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTcyMDY3YS1iMzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuBQ0U5eHlbiEcTIvZOeeDxS/SWsKVLkAWds94l8nAwwEZgFD5KKaVTSgnXQM QeS8B+szrfTlCp8s77ZOPGCxiCyjodd0Kc0JhoDw/7q+aFQcJe6Op7C1yaafIXBY mRFD/Cc0mwQVueEZ/OlvRabJS6lGzGt2cJhtR7OFUGiwNPZfe4YuTIKDGZM69UGo 10qloprLEobeJ7oByce73PdQ8raCTlgLkZp1OKAJ28Ry68ASHs4qPTpZjI5BLQYl MklZoUdt6dOUBfwlNoJnsZ6aAOdejtridphxnvziVDVNi+wZ4b8v6CQeobE33BQx dMIiv/WiXDxQz5Yjc7swuT28XQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFLVDIctU g76RV+6kDyJ7wq0suRAqMB8GA1UdIwQYMBaAFOmRpaLdnR8qJD32qiS59Q4cuP7l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjM1OS9GQzI5OERFQTQx NzAxMUVBOThERTY1NkFDNEY5QUUwMi82Wkdsb3QyZEh5b2tQZmFxSkxuMURoeTRf dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZaR2xvdDJkSHlva1BmYXFKTG4xRGh5NF91VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTIzNTkvRkMyOThERUE0MTcwMTFFQTk4REU2NTZBQzRGOUFFMDIvODQyMTBFMEE5 QUFCMTFGMEFGRTU0QjJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEAGf16QMEAmf16DANBgkqhkiG9w0BAQsFAAOCAQEAsGCv wKPX/ZfOED76bg5Y/gmyLPqXLv2UsdmeweNT6Gmxii6dNtZaIahgvWYw2G2m7Sm9 qFlJH30J9Gtz6C+FsTrKDegglutW57bdlfOyZa54io4z/IjkwarDgX+cFTqcWTN4 I1/KeDqjzf/6VdmHzEGGgyeuvwZllDHgty/b0cRjSFdNpIFr9vUEsdj2KNjKvV7N CluVc6DzzHmRTvaUqQ6VrK+af80wP09NBDJscjggDPz8UBylcG3QidUFHKdw1vI4 oAqYUX+Q8g6i+BwA7GyaQyB8upnXjlAw5br0u9fT8yPxGjZLLLrXLHiJLQOetkcT 1tkQ34H0KJ88oV6cOA== -----END CERTIFICATE-----Generated at Sun Jan 25 09:17:59 2026 by rpki-client