This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/1D231FDEBDD511F0BAEEED5AC4F9AE02.roa File: 1D231FDEBDD511F0BAEEED5AC4F9AE02.roa (raw, json) Hash identifier: Rnlo3WBr+nxbNAtWHHFh/5s3M4lTqFqjqzq5MenWQR8= Subject key identifier: 9A:14:6A:5D:A7:4F:DD:DB:B8:22:00:D6:9B:AA:2E:70:D2:9A:71:F2 Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Certificate serial: 0CF9 Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/1D231FDEBDD511F0BAEEED5AC4F9AE02.roa Signing time: Thu 22 Jan 2026 11:05:07 +0000 ROA not before: Thu 22 Jan 2026 11:05:07 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 23532 IP address blocks: 43.231.189.0/24 maxlen: 24 43.246.129.0/24 maxlen: 24 43.251.185.0/24 maxlen: 24 45.124.61.0/24 maxlen: 24 103.7.209.0/24 maxlen: 24 103.7.210.0/24 maxlen: 24 103.26.164.0/24 maxlen: 24 103.26.165.0/24 maxlen: 24 103.244.211.0/24 maxlen: 24 160.20.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 18:33:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3321 (0xcf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Validity Not Before: Jan 22 11:05:07 2026 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69720463-37a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8a:db:ca:a3:c3:82:86:8e:ff:ac:3e:d2:b7: 9e:1e:0c:6b:e3:be:26:f3:6c:fd:8f:f6:b5:28:a2: 6f:40:9f:f1:ee:42:01:2e:33:27:87:18:74:b0:de: 95:35:ee:ef:fa:d0:3c:e2:01:7f:9b:66:aa:20:a5: 4d:85:82:1b:7a:08:db:85:03:c7:8a:ed:ab:50:69: 92:af:38:57:1f:ce:9c:6c:2c:14:cb:66:2f:9a:10: 65:30:54:1f:c4:3b:bf:10:90:bf:24:62:71:43:fc: 35:ce:7b:e5:f6:b0:80:72:d7:a2:9b:20:d8:5f:67: 8c:12:b5:16:f0:a7:6b:ac:26:e7:7f:e9:d6:f7:0b: ca:7a:88:60:ab:52:06:83:8b:55:9d:06:b8:d5:ce: 0d:2c:73:8e:08:59:1a:50:eb:dc:8d:0f:e8:6a:3d: ab:1f:0c:56:6c:4a:26:d6:72:4f:3d:b7:cf:c3:f8: 28:99:b5:cf:e3:3a:7d:67:aa:36:90:70:4a:8a:d4: 75:a2:ad:df:02:9e:6c:c6:77:f6:85:97:f6:35:2d: 20:8c:b0:1f:28:03:6f:e6:c6:13:97:e8:53:2e:7d: e5:1c:23:26:4c:87:33:72:66:ad:30:5f:35:97:4e: 0d:24:07:c8:cf:42:3b:5a:3c:02:02:93:5b:51:5b: b0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:14:6A:5D:A7:4F:DD:DB:B8:22:00:D6:9B:AA:2E:70:D2:9A:71:F2 X509v3 Authority Key Identifier: keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/1D231FDEBDD511F0BAEEED5AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.231.189.0/24 43.246.129.0/24 43.251.185.0/24 45.124.61.0/24 103.7.209.0-103.7.210.255 103.26.164.0/23 103.244.211.0/24 160.20.45.0/24 Signature Algorithm: sha256WithRSAEncryption b7:32:68:35:4e:20:86:64:91:b9:ca:9b:9b:18:eb:d1:26:73: e6:03:c8:14:d4:e1:32:3c:2c:5e:91:17:b6:5c:79:b9:81:e2: 43:00:ea:bb:e7:92:31:1e:25:32:47:a5:0b:be:69:57:51:17: ab:f6:c5:0d:65:47:14:9b:cc:03:7a:aa:4e:22:76:fe:88:a7: d3:37:01:a6:27:54:18:7f:16:84:89:21:ec:17:1d:1f:40:b0: 56:a4:fa:b3:16:67:f9:a5:e1:5e:96:51:fb:55:3a:b5:0e:e5: 95:a7:5e:b2:66:f6:22:2a:3e:03:d1:79:aa:b3:66:f3:0b:0f: 7a:ea:aa:2f:08:66:ab:89:35:b1:07:a8:e1:04:e7:f7:be:b3: 90:4b:dd:32:16:b5:8b:6c:fd:f3:63:87:3e:8c:0b:a1:c9:04: 2b:ed:d4:88:af:73:b4:c3:c7:c2:bc:7f:aa:93:f2:79:0f:61: a1:df:26:42:7f:77:c9:0b:a2:93:f1:8f:05:71:d3:97:b3:79: 1d:90:19:0e:3f:aa:eb:4a:d9:6e:a9:f1:9f:da:61:5f:ba:0a: a3:d5:df:ee:3b:c9:76:0b:f4:e8:74:05:1e:15:2c:b6:ed:a7: e2:c5:72:d0:fb:cd:3f:f4:0e:b0:c4:9c:07:5c:75:0b:42:0b: 02:83:43:32 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgICDPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG NjlDQkE4NDYwHhcNMjYwMTIyMTEwNTA3WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDDA02OTcyMDQ2My0zN2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4rbyqPDgoaO/6w+0reeHgxr474m82z9j/a1KKJvQJ/x7kIBLjMnhxh0sN6V Ne7v+tA84gF/m2aqIKVNhYIbegjbhQPHiu2rUGmSrzhXH86cbCwUy2YvmhBlMFQf xDu/EJC/JGJxQ/w1znvl9rCActeimyDYX2eMErUW8KdrrCbnf+nW9wvKeohgq1IG g4tVnQa41c4NLHOOCFkaUOvcjQ/oaj2rHwxWbEom1nJPPbfPw/gombXP4zp9Z6o2 kHBKitR1oq3fAp5sxnf2hZf2NS0gjLAfKANv5sYTl+hTLn3lHCMmTIczcmatMF81 l04NJAfIz0I7WjwCApNbUVuw6wIDAQABo4ICxzCCAsMwHQYDVR0OBBYEFJoUal2n T93buCIA1puqLnDSmnHyMB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ0MDIvRkRCRkQwMjAzRDk2MTFFQThFQTA3MDJGQzRGOUFFMDIvMUQyMzFGREVC REQ1MTFGMEJBRUVFRDVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUQYIKwYBBQUHAQcBAf8E QjBAMD4EAgABMDgDBAAr570DBAAr9oEDBAAr+7kDBAAtfD0wDAMEAGcH0QMEAGcH 0gMEAWcapAMEAGf00wMEAKAULTANBgkqhkiG9w0BAQsFAAOCAQEAtzJoNU4ghmSR ucqbmxjr0SZz5gPIFNThMjwsXpEXtlx5uYHiQwDqu+eSMR4lMkelC75pV1EXq/bF DWVHFJvMA3qqTiJ2/oin0zcBpidUGH8WhIkh7BcdH0CwVqT6sxZn+aXhXpZR+1U6 tQ7lladesmb2Iio+A9F5qrNm8wsPeuqqLwhmq4k1sQeo4QTn976zkEvdMha1i2z9 82OHPowLockEK+3UiK9ztMPHwrx/qpPyeQ9hod8mQn93yQuik/GPBXHTl7N5HZAZ Dj+q60rZbqnxn9phX7oKo9Xf7jvJdgv06HQFHhUstu2n4sVy0PvNP/QOsMScB1x1 C0ILAoNDMg== -----END CERTIFICATE-----Generated at Sun Jan 25 08:53:58 2026 by rpki-client