This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/D8EA816A3EEE11EF98924D60C4F9AE02.roa File: D8EA816A3EEE11EF98924D60C4F9AE02.roa (raw, json) Hash identifier: 6VJ/GNSIy/hylC1oQdETMxyFm2bwrQgv/DatQcgwGhU= Subject key identifier: 52:79:FE:73:9C:70:43:EA:A0:0D:53:19:20:00:9F:F7:66:F2:A2:30 Certificate issuer: /CN=A91A6943/serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Certificate serial: 0A64 Authority key identifier: 0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/D8EA816A3EEE11EF98924D60C4F9AE02.roa Signing time: Tue 13 Jan 2026 11:03:26 +0000 ROA not before: Tue 13 Jan 2026 11:03:26 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 139879 IP address blocks: 103.74.20.0/24 maxlen: 24 103.74.21.0/24 maxlen: 24 103.74.22.0/24 maxlen: 24 103.74.23.0/24 maxlen: 24 103.235.76.0/24 maxlen: 24 103.235.77.0/24 maxlen: 24 103.235.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 19:17:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2660 (0xa64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6943, serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Validity Not Before: Jan 13 11:03:26 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6966267e-f8bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:76:ac:a1:03:8e:b5:8f:6f:3c:33:ca:df:30: b3:79:28:2d:92:e9:27:38:c8:8b:d7:54:cf:21:07: f2:c5:7e:2f:e4:b6:c9:cd:47:ff:a1:03:4d:f6:ca: de:dc:50:48:65:01:4b:68:6a:35:a0:2f:e4:3c:18: 8f:6b:4a:02:1e:38:3c:16:03:d7:af:f0:14:ad:b6: 43:0f:73:20:b3:70:36:4c:df:ee:72:bb:b5:2e:65: c2:c4:c3:b8:68:dc:62:66:65:3b:67:1c:78:c8:53: ee:18:92:f7:3f:e0:4e:72:9a:6a:c0:34:75:36:bd: db:b7:1d:52:5f:45:64:f7:cf:04:0b:34:79:66:02: 97:b0:51:49:05:8f:23:05:10:f4:ad:0d:b7:7c:87: f7:d5:19:66:4d:41:68:68:3b:3a:09:49:82:21:47: 7d:2c:26:5e:b0:15:50:91:24:85:c4:9f:c0:93:47: 9a:89:06:04:96:f0:14:75:e4:f6:8a:f3:7c:90:a2: e6:0c:b2:ff:16:41:15:9b:7d:42:a3:c2:3b:67:3d: c3:14:2f:34:90:bf:90:bf:e1:2d:4a:32:f4:72:42: e3:8f:51:31:27:1c:e3:89:50:2b:f4:d3:53:fd:fb: 92:b1:ba:50:10:e4:60:43:f8:3f:fb:b6:01:88:c1: e3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:79:FE:73:9C:70:43:EA:A0:0D:53:19:20:00:9F:F7:66:F2:A2:30 X509v3 Authority Key Identifier: keyid:0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/D8EA816A3EEE11EF98924D60C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.74.20.0/22 103.235.76.0/23 103.235.79.0/24 Signature Algorithm: sha256WithRSAEncryption a6:d9:2f:a4:bb:1e:7c:52:59:46:31:91:d8:dc:1f:70:ee:46: 88:47:40:71:9d:b1:10:98:7d:8f:c5:a1:bc:0f:0d:2f:26:e9: ac:12:b8:66:27:75:52:b2:46:9f:53:11:d0:4a:53:68:00:45: 85:82:61:0c:51:bc:eb:8a:58:46:56:2a:21:41:5e:cc:1c:f0: c4:ba:44:70:60:de:25:44:82:0f:59:cf:c2:0a:fb:1b:7c:94: 56:c8:3b:e2:8e:fa:0c:37:e1:38:10:28:d6:b6:73:55:50:00: 7e:36:72:0c:9e:c8:60:c5:26:27:db:88:13:ed:3f:25:91:4e: 3c:12:fd:d3:4f:05:0e:e4:0c:b2:77:80:33:55:ef:94:cd:bc: 68:1e:ba:05:2f:79:3e:88:a8:7c:e8:3a:ce:8e:9f:74:bb:4f: 25:37:3a:45:c6:ed:bf:05:a6:a7:29:12:44:c8:9e:d7:dd:cf: d2:45:2e:50:8a:8a:6f:0b:9b:de:dc:ce:61:24:09:26:e6:1a: 38:b1:b1:86:0e:c9:62:64:e2:cf:96:dd:f2:ac:c0:ee:bf:95: 53:fd:89:9b:9d:81:d0:9e:0f:fb:6c:49:e2:92:65:ad:28:4d: d3:a6:fe:d0:4f:9b:67:04:a4:22:09:a3:45:10:69:0c:c9:6e: 79:a4:48:12 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICCmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY5NDMxMTAvBgNVBAUTKDBBQjk5RjUyQzlBRDlCRTBCOUMwNDQ3MENGQjFCNkMy MzYwRkQwRjUwHhcNMjYwMTEzMTEwMzI2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDDA02OTY2MjY3ZS1mOGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi3asoQOOtY9vPDPK3zCzeSgtkuknOMiL11TPIQfyxX4v5LbJzUf/oQNN9sre 3FBIZQFLaGo1oC/kPBiPa0oCHjg8FgPXr/AUrbZDD3Mgs3A2TN/ucru1LmXCxMO4 aNxiZmU7Zxx4yFPuGJL3P+BOcppqwDR1Nr3btx1SX0Vk988ECzR5ZgKXsFFJBY8j BRD0rQ23fIf31RlmTUFoaDs6CUmCIUd9LCZesBVQkSSFxJ/Ak0eaiQYElvAUdeT2 ivN8kKLmDLL/FkEVm31Co8I7Zz3DFC80kL+Qv+EtSjL0ckLjj1ExJxzjiVAr9NNT /fuSsbpQEORgQ/g/+7YBiMHjPwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFFJ5/nOc cEPqoA1TGSAAn/dm8qIwMB8GA1UdIwQYMBaAFAq5n1LJrZvgucBEcM+xtsI2D9D1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjk0My9CNzE4MTE2ODhE NTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0tQzV3RVJ3ejdHMndqWVAw UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NybWZVc210bS1DNXdFUnd6N0cyd2pZUDBQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTY5NDMvQjcxODExNjg4RDUxMTFFQUI4QjI2Mzg0QzRGOUFFMDIvRDhFQTgxNkEz RUVFMTFFRjk4OTI0RDYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAJnShQDBAFn60wDBABn608wDQYJKoZIhvcNAQELBQADggEB AKbZL6S7HnxSWUYxkdjcH3DuRohHQHGdsRCYfY/FobwPDS8m6awSuGYndVKyRp9T EdBKU2gARYWCYQxRvOuKWEZWKiFBXswc8MS6RHBg3iVEgg9Zz8IK+xt8lFbIO+KO +gw34TgQKNa2c1VQAH42cgyeyGDFJifbiBPtPyWRTjwS/dNPBQ7kDLJ3gDNV75TN vGgeugUveT6IqHzoOs6On3S7TyU3OkXG7b8FpqcpEkTIntfdz9JFLlCKim8Lm97c zmEkCSbmGjixsYYOyWJk4s+W3fKswO6/lVP9iZudgdCeD/tsSeKSZa0oTdOm/tBP m2cEpCIJo0UQaQzJbnmkSBI= -----END CERTIFICATE-----Generated at Sun Jan 25 14:07:48 2026 by rpki-client