This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/C66D2D8C467B11EA9717DF7CC4F9AE02.roa File: C66D2D8C467B11EA9717DF7CC4F9AE02.roa (raw, json) Hash identifier: S+dNTyse9kCTBEP4gXcZU5PSzPHsrHfEn7opNLFxMUk= Subject key identifier: 89:9C:1D:15:13:E0:06:98:C3:A7:AA:02:F2:03:2A:BE:9C:60:24:00 Certificate issuer: /CN=A91AB384/serialNumber=8C9F44077CC51DB0948FB295F0CA50FEE006254B Certificate serial: 0B8A Authority key identifier: 8C:9F:44:07:7C:C5:1D:B0:94:8F:B2:95:F0:CA:50:FE:E0:06:25:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/C66D2D8C467B11EA9717DF7CC4F9AE02.roa Signing time: Fri 16 Jan 2026 19:16:08 +0000 ROA not before: Fri 16 Jan 2026 19:16:08 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 133938 IP address blocks: 103.48.119.0/24 maxlen: 24 103.108.140.0/24 maxlen: 24 103.132.96.0/24 maxlen: 24 2404:2f40::/32 maxlen: 32 2404:2f40::/36 maxlen: 36 2404:2f40:1000::/36 maxlen: 36 2404:2f40:2000::/36 maxlen: 36 2404:2f40:3000::/36 maxlen: 36 2404:2f40:4000::/36 maxlen: 36 2404:2f40:5000::/36 maxlen: 36 2404:2f40:6000::/36 maxlen: 36 2404:2f40:7000::/36 maxlen: 36 2404:2f40:8000::/36 maxlen: 36 2404:2f40:9000::/36 maxlen: 36 2404:2f40:a000::/36 maxlen: 36 2404:2f40:b000::/36 maxlen: 36 2404:2f40:c000::/36 maxlen: 36 2404:2f40:d000::/36 maxlen: 36 2404:2f40:e000::/36 maxlen: 36 2404:2f40:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.crl rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 18:39:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2954 (0xb8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB384, serialNumber=8C9F44077CC51DB0948FB295F0CA50FEE006254B Validity Not Before: Jan 16 19:16:08 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=696a8e78-e8f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:8d:05:d2:0c:a5:19:9d:aa:4e:0a:e3:cd:7c: c7:45:0d:ec:ae:32:c0:19:0f:65:b3:6f:c1:a2:31: 09:95:fb:9b:24:e4:e0:12:68:70:99:02:78:0e:3e: 5a:6c:a9:4e:45:c6:7d:3c:3b:fd:26:39:b1:2b:96: db:91:07:73:20:ec:b9:e4:c0:24:a0:a1:4f:6c:33: f7:07:32:d6:20:f3:08:02:f2:41:a2:16:d5:3e:96: bc:b9:77:95:67:7f:99:1a:19:cf:9d:c8:17:c1:13: 90:eb:cf:66:c6:da:99:84:f8:79:cc:f8:46:72:f5: 02:4a:24:6a:fb:f3:ba:10:05:9a:8b:c5:b9:b9:a1: 6b:a5:c8:ca:67:74:67:e0:e9:6f:e2:4d:82:e2:53: 79:6c:47:94:23:44:43:3d:ed:8e:4f:a2:78:98:1d: 9d:15:04:0a:38:75:3f:f6:9e:cb:c8:2b:3e:66:8d: 7d:9e:b2:3a:49:c0:bb:df:9b:ea:3d:a3:12:06:eb: fc:19:88:d2:44:0c:91:ae:32:59:66:b6:ea:87:17: b5:49:e0:6b:23:9e:e4:fe:aa:39:2a:b5:10:a0:b5: 97:58:98:4b:25:49:66:be:95:01:c8:80:1c:3a:c2: b7:63:cf:da:70:4a:a3:bd:3c:54:ca:6e:d6:6c:0a: 33:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:9C:1D:15:13:E0:06:98:C3:A7:AA:02:F2:03:2A:BE:9C:60:24:00 X509v3 Authority Key Identifier: keyid:8C:9F:44:07:7C:C5:1D:B0:94:8F:B2:95:F0:CA:50:FE:E0:06:25:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/C66D2D8C467B11EA9717DF7CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.48.119.0/24 103.108.140.0/24 103.132.96.0/24 IPv6: 2404:2f40::/32 Signature Algorithm: sha256WithRSAEncryption 44:a1:86:62:24:a5:85:2d:e6:b7:67:30:46:0f:43:b3:e9:39: 19:d1:44:d2:65:e0:3e:4b:e6:e9:d2:cf:94:e0:0f:55:58:46: 5b:20:09:5e:b9:33:ed:c6:04:03:86:93:83:6e:2d:f9:63:d9: 9f:97:eb:89:bf:28:5f:09:ec:b5:a0:e1:d8:9c:3c:dd:aa:39: 5c:f4:09:b1:5e:9f:dc:0f:44:f4:2b:aa:8a:17:84:d6:fd:cb: d4:29:dc:10:59:a7:81:ee:d7:86:70:e0:7e:6f:2d:84:88:13: fb:e6:03:6d:d7:27:09:84:ab:7e:8e:c3:16:83:b8:89:91:ea: 29:42:75:fc:1f:a9:ea:2e:4a:1c:22:f4:e2:08:41:43:fc:3e: 27:a9:14:9c:30:4f:d0:b9:3c:12:82:78:99:74:9b:8d:97:e5: 8b:be:0f:71:a8:12:03:af:b5:4c:12:9d:ae:8c:39:45:1e:3a: 7d:cf:d2:74:f3:47:e0:5d:d2:b4:ed:d5:57:e7:f3:7f:81:5c: 05:16:50:71:4b:d3:74:89:34:d0:ea:bf:f2:26:b8:13:2b:db: 1a:05:62:5b:58:5e:ca:12:1e:6d:29:d2:50:27:67:8c:69:cd: 9f:60:e3:53:cf:f3:a0:82:14:dc:03:4d:99:ac:10:28:d6:28: 6d:95:f3:13 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICC4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QUIzODQxMTAvBgNVBAUTKDhDOUY0NDA3N0NDNTFEQjA5NDhGQjI5NUYwQ0E1MEZF RTAwNjI1NEIwHhcNMjYwMTE2MTkxNjA4WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTZhOGU3OC1lOGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlI0F0gylGZ2qTgrjzXzHRQ3srjLAGQ9ls2/BojEJlfubJOTgEmhwmQJ4Dj5a bKlORcZ9PDv9JjmxK5bbkQdzIOy55MAkoKFPbDP3BzLWIPMIAvJBohbVPpa8uXeV Z3+ZGhnPncgXwROQ689mxtqZhPh5zPhGcvUCSiRq+/O6EAWai8W5uaFrpcjKZ3Rn 4Olv4k2C4lN5bEeUI0RDPe2OT6J4mB2dFQQKOHU/9p7LyCs+Zo19nrI6ScC735vq PaMSBuv8GYjSRAyRrjJZZrbqhxe1SeBrI57k/qo5KrUQoLWXWJhLJUlmvpUByIAc OsK3Y8/acEqjvTxUym7WbAozBQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFImcHRUT 4AaYw6eqAvIDKr6cYCQAMB8GA1UdIwQYMBaAFIyfRAd8xR2wlI+ylfDKUP7gBiVL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjM4NC9CRjRCRDQ1ODQ0 ODMxMUVBOEVCQzZEMjVDNEY5QUUwMi9qSjlFQjN6RkhiQ1VqN0tWOE1wUV91QUdK VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pKOUVCM3pGSGJDVWo3S1Y4TXBRX3VBR0pVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUIzODQvQkY0QkQ0NTg0NDgzMTFFQThFQkM2RDI1QzRGOUFFMDIvQzY2RDJEOEM0 NjdCMTFFQTk3MTdERjdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBABnMHcDBABnbIwDBABnhGAwDQQCAAIwBwMFACQEL0AwDQYJ KoZIhvcNAQELBQADggEBAEShhmIkpYUt5rdnMEYPQ7PpORnRRNJl4D5L5unSz5Tg D1VYRlsgCV65M+3GBAOGk4NuLflj2Z+X64m/KF8J7LWg4dicPN2qOVz0CbFen9wP RPQrqooXhNb9y9Qp3BBZp4Hu14Zw4H5vLYSIE/vmA23XJwmEq36OwxaDuImR6ilC dfwfqeouShwi9OIIQUP8PiepFJwwT9C5PBKCeJl0m42X5Yu+D3GoEgOvtUwSna6M OUUeOn3P0nTzR+Bd0rTt1Vfn83+BXAUWUHFL03SJNNDqv/ImuBMr2xoFYltYXsoS Hm0p0lAnZ4xpzZ9g41PP86CCFNwDTZmsECjWKG2V8xM= -----END CERTIFICATE-----Generated at Sun Jan 25 09:34:16 2026 by rpki-client