This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/73FFDABAA3F711F0B7D2CC77C4F9AE02.roa File: 73FFDABAA3F711F0B7D2CC77C4F9AE02.roa (raw, json) Hash identifier: POL+sltmlanChY/Qw4pyNcNrabWRWDPUMFA0P9wzk/g= Subject key identifier: 9E:EE:15:DF:C5:BC:1A:1B:46:DD:8D:C9:CB:8A:25:41:3C:72:8C:AA Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4F72 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/73FFDABAA3F711F0B7D2CC77C4F9AE02.roa Signing time: Wed 31 Dec 2025 03:37:14 +0000 ROA not before: Wed 31 Dec 2025 03:37:14 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 150895 IP address blocks: 36.50.26.0/24 maxlen: 24 36.50.27.0/24 maxlen: 24 103.20.102.0/23 maxlen: 24 103.67.162.0/23 maxlen: 23 103.72.56.0/23 maxlen: 23 103.75.76.0/23 maxlen: 23 103.78.2.0/23 maxlen: 23 103.116.52.0/23 maxlen: 24 103.152.164.0/23 maxlen: 24 103.161.172.0/24 maxlen: 24 103.173.66.0/23 maxlen: 24 103.237.86.0/23 maxlen: 24 163.61.72.0/23 maxlen: 24 163.223.210.0/23 maxlen: 23 163.227.230.0/23 maxlen: 24 2401:2be0::/48 maxlen: 48 2401:3560::/48 maxlen: 48 2401:37e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 14:31:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20338 (0x4f72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Dec 31 03:37:14 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69549a6a-0498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9a:c9:1a:50:3a:b4:63:dd:0e:02:10:47:4e: 81:fb:77:fe:c1:75:66:de:ce:24:4e:97:19:80:06: 7a:80:95:df:89:b9:c3:49:80:98:a5:92:03:45:de: 3e:25:9c:b1:63:ba:cc:71:b2:58:f9:20:4a:6c:aa: 9a:4e:69:63:dd:aa:e2:35:31:dc:aa:00:15:3f:99: fe:0d:0c:37:a0:d9:c3:67:1b:2a:c0:2c:59:7c:d2: 5d:ad:30:f7:38:a5:c7:77:1a:c9:be:d8:5e:09:a0: e5:58:2c:fd:d3:c9:1d:e2:34:61:3c:cb:ef:d8:55: c1:6a:2c:12:00:cb:2c:e0:e8:c0:3a:d8:ec:07:6f: 21:a7:af:bc:70:b0:6b:77:e7:28:6d:a8:ab:d6:3a: be:46:03:92:b9:48:0b:04:fb:45:9b:0a:c6:b9:ab: 9c:dd:0e:e3:16:9a:df:16:04:fb:87:01:7a:ec:ee: 95:ad:9c:1e:bd:ee:29:e8:2f:cb:02:80:0d:51:f1: 43:4e:b2:48:18:c8:0a:16:74:53:7b:c7:7a:69:f4: b1:8b:ee:ae:9e:44:0b:65:db:6b:12:1f:e6:46:27: bc:f7:31:8b:4b:db:94:1d:08:10:48:6c:5f:a8:c1: fc:a7:97:37:e6:72:8f:e7:c4:01:8f:28:c2:96:15: bc:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:EE:15:DF:C5:BC:1A:1B:46:DD:8D:C9:CB:8A:25:41:3C:72:8C:AA X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/73FFDABAA3F711F0B7D2CC77C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.50.26.0/23 103.20.102.0/23 103.67.162.0/23 103.72.56.0/23 103.75.76.0/23 103.78.2.0/23 103.116.52.0/23 103.152.164.0/23 103.161.172.0/24 103.173.66.0/23 103.237.86.0/23 163.61.72.0/23 163.223.210.0/23 163.227.230.0/23 IPv6: 2401:2be0::/48 2401:3560::/48 2401:37e0::/48 Signature Algorithm: sha256WithRSAEncryption 67:72:f2:cd:fc:fe:93:5d:8f:8b:ac:8e:d8:5a:7b:43:c6:23: 7a:98:24:52:c5:0b:59:ef:fc:be:c8:a5:22:89:12:e1:b6:dd: cd:5b:d5:cb:2e:07:35:ba:6d:d5:ca:5c:7d:84:7c:17:50:22: 61:fc:de:27:7d:55:40:58:3a:8b:e5:ed:1e:7d:65:15:03:bd: 41:88:9f:27:d5:d9:4c:0e:0b:ad:a8:9f:3c:f2:9a:c0:a8:1c: 26:62:0a:66:b8:a0:b2:70:bc:dc:3e:a8:5d:31:80:b8:f3:0f: c3:2d:86:53:ad:68:bd:71:1b:ff:e4:65:1d:44:b6:d2:0f:f3: 5d:cc:78:d4:fa:4f:8d:8b:2d:65:8d:33:9e:0a:34:0b:ab:f6: fc:cd:cf:47:a4:8f:6b:b0:03:2c:f6:77:bc:b6:18:f3:c3:fd: fa:07:6d:6c:f9:fe:d4:45:82:44:a9:c5:ee:f3:ca:81:be:51: 5c:a1:ea:34:88:e0:d0:61:1b:b3:c8:c7:57:01:73:fe:b6:cf: d4:e3:33:f8:d1:57:91:70:a5:27:9c:e4:58:41:19:a0:a2:3c: 1b:a4:ea:d5:95:1f:7f:b2:2d:6e:9e:82:60:09:58:83:49:40: c8:5f:31:e3:50:f5:9c:97:f4:ce:87:37:e2:76:52:90:3c:35: cc:08:12:a9 -----BEGIN CERTIFICATE----- MIIF5DCCBMygAwIBAgICT3IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUxMjMxMDMzNzE0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU0OWE2YS0wNDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzJrJGlA6tGPdDgIQR06B+3f+wXVm3s4kTpcZgAZ6gJXfibnDSYCYpZIDRd4+ JZyxY7rMcbJY+SBKbKqaTmlj3ariNTHcqgAVP5n+DQw3oNnDZxsqwCxZfNJdrTD3 OKXHdxrJvtheCaDlWCz908kd4jRhPMvv2FXBaiwSAMss4OjAOtjsB28hp6+8cLBr d+cobair1jq+RgOSuUgLBPtFmwrGuauc3Q7jFprfFgT7hwF67O6VrZweve4p6C/L AoANUfFDTrJIGMgKFnRTe8d6afSxi+6unkQLZdtrEh/mRie89zGLS9uUHQgQSGxf qMH8p5c35nKP58QBjyjClhW8CwIDAQABo4IDCDCCAwQwHQYDVR0OBBYEFJ7uFd/F vBobRt2NycuKJUE8coyqMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNzNGRkRBQkFB M0Y3MTFGMEI3RDJDQzc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgZEGCCsGAQUFBwEHAQH/ BIGBMH8wWgQCAAEwVAMEASQyGgMEAWcUZgMEAWdDogMEAWdIOAMEAWdLTAMEAWdO AgMEAWd0NAMEAWeYpAMEAGehrAMEAWetQgMEAWftVgMEAaM9SAMEAaPf0gMEAaPj 5jAhBAIAAjAbAwcAJAEr4AAAAwcAJAE1YAAAAwcAJAE34AAAMA0GCSqGSIb3DQEB CwUAA4IBAQBncvLN/P6TXY+LrI7YWntDxiN6mCRSxQtZ7/y+yKUiiRLhtt3NW9XL Lgc1um3Vylx9hHwXUCJh/N4nfVVAWDqL5e0efWUVA71BiJ8n1dlMDgutqJ888prA qBwmYgpmuKCycLzcPqhdMYC48w/DLYZTrWi9cRv/5GUdRLbSD/NdzHjU+k+Niy1l jTOeCjQLq/b8zc9HpI9rsAMs9ne8thjzw/36B21s+f7URYJEqcXu88qBvlFcoeo0 iODQYRuzyMdXAXP+ts/U4zP40VeRcKUnnORYQRmgojwbpOrVlR9/si1unoJgCViD SUDIXzHjUPWcl/TOhzfidlKQPDXMCBKp -----END CERTIFICATE-----Generated at Sun Jan 25 11:06:28 2026 by rpki-client