This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/382BB29EF45011F0AF80EBA1636F56BC.roa File: 382BB29EF45011F0AF80EBA1636F56BC.roa (raw, json) Hash identifier: NY/2y4MANNTK1zTSG1qkupCOLjGCFE4oS1t2pVDusp4= Subject key identifier: EA:FD:75:24:97:D6:94:D4:12:D3:B1:51:F1:AC:F3:97:54:9D:AE:AD Certificate issuer: /CN=A91A532D/serialNumber=875B42F7C62725778F56D951B712EB8879348A45 Certificate serial: 081C Authority key identifier: 87:5B:42:F7:C6:27:25:77:8F:56:D9:51:B7:12:EB:88:79:34:8A:45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/382BB29EF45011F0AF80EBA1636F56BC.roa Signing time: Sun 18 Jan 2026 09:29:43 +0000 ROA not before: Sun 18 Jan 2026 09:29:43 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 134226 IP address blocks: 103.59.176.0/22 maxlen: 22 103.59.176.0/24 maxlen: 24 103.59.178.0/24 maxlen: 24 103.59.179.0/24 maxlen: 24 2404:2d80::/32 maxlen: 32 2404:2d80::/40 maxlen: 40 2404:2d80::/48 maxlen: 48 2404:2d80::/64 maxlen: 64 2404:2d80:10::/48 maxlen: 48 2404:2d80:11::/48 maxlen: 48 2404:2d80:12::/48 maxlen: 48 2404:2d80:13::/48 maxlen: 48 2404:2d80:14::/48 maxlen: 48 2404:2d80:15::/48 maxlen: 48 2404:2d80:16::/48 maxlen: 48 2404:2d80:17::/48 maxlen: 48 2404:2d80:18::/48 maxlen: 48 2404:2d80:19::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.crl rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 20:23:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2076 (0x81c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A532D, serialNumber=875B42F7C62725778F56D951B712EB8879348A45 Validity Not Before: Jan 18 09:29:43 2026 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=696ca806-66b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d9:03:b7:ba:b9:05:c6:81:35:42:8e:d7:aa: 48:17:ab:d8:8d:e5:97:52:42:35:ca:a6:95:4a:ad: 42:b8:49:5f:9e:11:62:59:71:b3:f2:32:0c:eb:0f: 5a:c2:81:ab:06:d1:5e:55:94:5c:db:78:81:06:03: d3:f4:a2:29:98:d6:c9:7a:a0:db:2d:1a:80:be:b1: 86:56:a5:31:ce:77:a5:c9:8d:8f:de:7f:78:f9:4e: 72:54:46:c2:8f:c5:b4:4b:6e:99:75:ef:94:f8:cd: f2:17:e1:00:a5:04:69:ca:fe:67:49:70:26:89:35: 45:f2:01:8d:49:2e:d4:e5:fa:fc:98:bd:ba:06:b6: dd:84:16:64:64:ed:a6:05:7c:2e:e4:b0:dc:9d:1e: 4f:85:34:44:e4:43:7c:f3:78:b0:9d:54:fa:7d:c0: 4e:f6:d7:09:75:cf:ce:e2:bb:1e:ac:ec:6f:f6:ca: 99:a3:04:71:11:3e:f6:36:c0:b8:79:b8:9e:4d:97: 70:46:55:ec:a2:15:3d:ca:9e:5b:fc:7f:1d:b8:88: 3a:28:f2:3f:03:44:25:7b:08:b1:3f:52:60:8e:dd: 82:42:8f:56:c4:ff:79:fb:da:57:ef:52:80:4a:ae: a6:3a:ac:e9:a3:37:a5:b8:5f:92:d8:5a:86:13:77: 68:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:FD:75:24:97:D6:94:D4:12:D3:B1:51:F1:AC:F3:97:54:9D:AE:AD X509v3 Authority Key Identifier: keyid:87:5B:42:F7:C6:27:25:77:8F:56:D9:51:B7:12:EB:88:79:34:8A:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/382BB29EF45011F0AF80EBA1636F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.59.176.0/22 IPv6: 2404:2d80::/32 Signature Algorithm: sha256WithRSAEncryption 1f:40:75:bb:86:29:fa:4b:8b:25:dd:3c:61:25:19:ac:86:a9: 5b:1b:0e:28:60:53:38:45:97:ee:bf:b9:44:d4:f3:39:bc:4d: 0e:cd:87:3a:55:53:ee:03:cb:4e:b7:cf:5b:91:b9:3e:9b:06: d0:33:46:85:0c:39:55:66:34:b7:4c:80:ad:b4:70:80:d1:b3: ac:1a:1a:20:b2:da:28:34:46:2c:84:4e:c9:08:28:66:6e:59: 20:a8:34:43:0f:9d:3f:44:41:ad:1b:0c:a2:0c:b9:00:40:a6: fb:5d:53:88:cb:71:83:8d:36:95:b1:eb:3b:ab:92:81:9d:a1: aa:32:5b:89:b6:93:8a:53:fa:69:43:27:1f:f4:c2:c0:22:30: fe:d6:c7:a8:dc:f4:d6:47:59:4b:db:65:f7:09:fb:c9:d2:7c: 6b:0f:ab:93:c2:18:ea:fc:26:fa:69:02:d7:38:c3:f7:91:19: 60:37:cb:41:23:63:9b:be:cb:2c:72:a7:cd:1f:20:85:db:ff: a4:2e:4e:8c:3f:6b:60:93:82:db:d2:53:2e:94:40:f4:25:31: 84:d2:e1:4c:f9:61:97:28:18:29:78:a6:48:dc:ff:4f:73:f5: e3:f4:cb:11:03:28:5d:61:78:ef:05:f9:cb:af:d1:69:b5:e2: 86:7e:6f:ed -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCBwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUzMkQxMTAvBgNVBAUTKDg3NUI0MkY3QzYyNzI1Nzc4RjU2RDk1MUI3MTJFQjg4 NzkzNDhBNDUwHhcNMjYwMTE4MDkyOTQzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDDA02OTZjYTgwNi02NmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq9kDt7q5BcaBNUKO16pIF6vYjeWXUkI1yqaVSq1CuElfnhFiWXGz8jIM6w9a woGrBtFeVZRc23iBBgPT9KIpmNbJeqDbLRqAvrGGVqUxznelyY2P3n94+U5yVEbC j8W0S26Zde+U+M3yF+EApQRpyv5nSXAmiTVF8gGNSS7U5fr8mL26BrbdhBZkZO2m BXwu5LDcnR5PhTRE5EN883iwnVT6fcBO9tcJdc/O4rserOxv9sqZowRxET72NsC4 ebieTZdwRlXsohU9yp5b/H8duIg6KPI/A0QlewixP1Jgjt2CQo9WxP95+9pX71KA Sq6mOqzpozeluF+S2FqGE3do/wIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFOr9dSSX 1pTUEtOxUfGs85dUna6tMB8GA1UdIwQYMBaAFIdbQvfGJyV3j1bZUbcS64h5NIpF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTMyRC9FQUE5NzlGQTBB QzMxMUVCOTY0QTg5MjRDNEY5QUUwMi9oMXRDOThZbkpYZVBWdGxSdHhMcmlIazBp a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gxdEM5OFluSlhlUFZ0bFJ0eExyaUhrMGlrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTUzMkQvRUFBOTc5RkEwQUMzMTFFQjk2NEE4OTI0QzRGOUFFMDIvMzgyQkIyOUVG NDUwMTFGMEFGODBFQkExNjM2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnO7AwDQQCAAIwBwMFACQELYAwDQYJKoZIhvcNAQELBQAD ggEBAB9AdbuGKfpLiyXdPGElGayGqVsbDihgUzhFl+6/uUTU8zm8TQ7NhzpVU+4D y063z1uRuT6bBtAzRoUMOVVmNLdMgK20cIDRs6waGiCy2ig0RiyETskIKGZuWSCo NEMPnT9EQa0bDKIMuQBApvtdU4jLcYONNpWx6zurkoGdoaoyW4m2k4pT+mlDJx/0 wsAiMP7Wx6jc9NZHWUvbZfcJ+8nSfGsPq5PCGOr8JvppAtc4w/eRGWA3y0EjY5u+ yyxyp80fIIXb/6QuTow/a2CTgtvSUy6UQPQlMYTS4Uz5YZcoGCl4pkjc/09z9eP0 yxEDKF1heO8F+cuv0Wm14oZ+b+0= -----END CERTIFICATE-----Generated at Sun Jan 25 13:33:03 2026 by rpki-client