This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/43DCAEE0BBE811F092C97714C4F9AE02.roa File: 43DCAEE0BBE811F092C97714C4F9AE02.roa (raw, json) Hash identifier: JEhR2zBmD2A/rPY6XO8MkTgPqkwZOJZUpbNeRa8O4uk= Subject key identifier: 0F:AE:A0:D2:E8:4F:4E:CF:B6:2C:54:C5:4F:11:B1:74:EA:5D:EB:B5 Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Certificate serial: 0CF8 Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/43DCAEE0BBE811F092C97714C4F9AE02.roa Signing time: Thu 22 Jan 2026 11:05:05 +0000 ROA not before: Thu 22 Jan 2026 11:05:05 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 202736 IP address blocks: 43.231.189.0/24 maxlen: 24 43.246.129.0/24 maxlen: 24 43.251.185.0/24 maxlen: 24 45.124.61.0/24 maxlen: 24 103.7.209.0/24 maxlen: 24 103.7.210.0/24 maxlen: 24 103.26.164.0/24 maxlen: 24 103.26.165.0/24 maxlen: 24 103.244.211.0/24 maxlen: 24 160.20.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 18:33:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3320 (0xcf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Validity Not Before: Jan 22 11:05:05 2026 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69720461-802f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bb:c3:2f:63:c9:03:8f:df:91:19:54:c7:f7: e8:39:81:c7:1e:1d:7b:50:e1:04:d0:78:69:2d:1e: ce:d0:d7:70:83:7e:66:b7:6c:c5:b4:1b:35:df:1a: b5:d5:4d:b1:fe:cb:68:d3:49:55:25:9e:88:0e:bc: 7a:8c:e5:91:94:cd:d5:47:b3:f8:0f:87:c8:8f:04: fb:28:84:c4:5e:3d:af:53:06:d8:0d:58:70:9a:3c: 67:1b:c8:4a:98:27:7f:40:36:df:c0:26:93:a0:65: c6:25:5f:be:8a:33:12:9e:07:0b:f4:b9:7f:fd:3e: 00:31:8d:4f:d8:19:b4:ee:60:83:2b:b5:82:d2:54: c3:2e:f9:6b:a9:73:39:84:21:af:da:01:74:fe:42: 0e:5e:42:d8:ae:ec:e0:5d:ef:c9:32:bc:84:e4:6a: 0d:10:de:17:4e:0b:03:ff:69:00:eb:10:95:ab:b3: 4b:0f:9b:3b:a1:b0:bc:90:68:75:e3:a9:36:9c:25: f1:05:df:a4:1a:af:bb:00:95:f3:26:35:c3:23:a4: 98:4d:18:c1:5e:88:1d:7f:f3:ba:ce:31:c0:03:ce: 4f:09:31:60:b0:f0:a8:6d:98:a7:8e:95:7d:8d:33: 71:da:1c:78:58:63:79:79:86:3e:39:af:ef:bf:00: 65:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:AE:A0:D2:E8:4F:4E:CF:B6:2C:54:C5:4F:11:B1:74:EA:5D:EB:B5 X509v3 Authority Key Identifier: keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/43DCAEE0BBE811F092C97714C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.231.189.0/24 43.246.129.0/24 43.251.185.0/24 45.124.61.0/24 103.7.209.0-103.7.210.255 103.26.164.0/23 103.244.211.0/24 160.20.45.0/24 Signature Algorithm: sha256WithRSAEncryption 92:fe:f2:b2:21:2d:ab:3e:d8:5b:52:93:f6:49:cd:7c:8e:f2: f1:2a:c0:bd:b6:ab:49:bd:77:d3:64:4b:88:53:5b:69:99:e2: 88:0d:72:9b:2d:99:93:5c:e4:b7:7c:e0:49:5a:d5:c8:2e:de: a6:0f:3f:41:76:27:e0:66:7f:56:22:0a:d6:9e:2b:46:f8:d7: b9:42:d0:db:bc:72:c4:fa:f0:57:62:11:9d:fc:c8:a1:0a:a4: 8d:83:28:f7:0d:28:fa:4b:4f:1a:fd:de:e5:f4:f1:3b:58:43: 7b:ce:5f:a3:1c:5b:6e:9f:64:60:df:11:64:87:80:f5:d6:31: ff:db:d0:87:fc:dc:c5:64:55:48:41:74:b0:d6:72:6f:d3:30: fb:49:9a:69:8c:bb:ea:7d:34:25:a8:55:81:51:c9:83:f0:50: 96:51:ad:2b:8f:4e:45:f2:12:30:1a:13:ef:a5:82:0a:9f:41: 4b:2d:34:60:c9:15:07:43:1a:aa:e9:e8:54:91:40:b6:15:d7: 07:6d:38:74:3c:1f:94:b2:a9:60:66:7a:25:0b:4c:c6:0c:a2: 41:35:29:e7:8e:b8:e3:ef:38:bc:8d:1b:24:db:d8:0a:8d:bf: 3e:a3:55:87:f8:9f:26:11:75:9c:2c:ea:5c:de:fe:ec:c3:cc: 23:71:46:08 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgICDPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG NjlDQkE4NDYwHhcNMjYwMTIyMTEwNTA1WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDDA02OTcyMDQ2MS04MDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsLvDL2PJA4/fkRlUx/foOYHHHh17UOEE0HhpLR7O0Ndwg35mt2zFtBs13xq1 1U2x/sto00lVJZ6IDrx6jOWRlM3VR7P4D4fIjwT7KITEXj2vUwbYDVhwmjxnG8hK mCd/QDbfwCaToGXGJV++ijMSngcL9Ll//T4AMY1P2Bm07mCDK7WC0lTDLvlrqXM5 hCGv2gF0/kIOXkLYruzgXe/JMryE5GoNEN4XTgsD/2kA6xCVq7NLD5s7obC8kGh1 46k2nCXxBd+kGq+7AJXzJjXDI6SYTRjBXogdf/O6zjHAA85PCTFgsPCobZinjpV9 jTNx2hx4WGN5eYY+Oa/vvwBltQIDAQABo4ICxzCCAsMwHQYDVR0OBBYEFA+uoNLo T07PtixUxU8RsXTqXeu1MB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ0MDIvRkRCRkQwMjAzRDk2MTFFQThFQTA3MDJGQzRGOUFFMDIvNDNEQ0FFRTBC QkU4MTFGMDkyQzk3NzE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUQYIKwYBBQUHAQcBAf8E QjBAMD4EAgABMDgDBAAr570DBAAr9oEDBAAr+7kDBAAtfD0wDAMEAGcH0QMEAGcH 0gMEAWcapAMEAGf00wMEAKAULTANBgkqhkiG9w0BAQsFAAOCAQEAkv7ysiEtqz7Y W1KT9knNfI7y8SrAvbarSb1302RLiFNbaZniiA1ymy2Zk1zkt3zgSVrVyC7epg8/ QXYn4GZ/ViIK1p4rRvjXuULQ27xyxPrwV2IRnfzIoQqkjYMo9w0o+ktPGv3e5fTx O1hDe85foxxbbp9kYN8RZIeA9dYx/9vQh/zcxWRVSEF0sNZyb9Mw+0maaYy76n00 JahVgVHJg/BQllGtK49ORfISMBoT76WCCp9BSy00YMkVB0MaqunoVJFAthXXB204 dDwflLKpYGZ6JQtMxgyiQTUp54644+84vI0bJNvYCo2/PqNVh/ifJhF1nCzqXN7+ 7MPMI3FGCA== -----END CERTIFICATE-----Generated at Sun Jan 25 13:53:21 2026 by rpki-client