This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/06CD7DF074F211F09D01EA15C4F9AE02.roa File: 06CD7DF074F211F09D01EA15C4F9AE02.roa (raw, json) Hash identifier: vDErs/5pk9NXqxY501ai4Ko3JSuE05q/oDfQwKHYqZ8= Subject key identifier: CB:9E:4F:F9:ED:F4:E6:C4:B4:1F:F7:CF:0B:9A:0A:05:D8:BE:2E:49 Certificate issuer: /CN=A91AF2CD/serialNumber=5874520DA781F780DBD710D42C841C13A7AD1757 Certificate serial: 0234 Authority key identifier: 58:74:52:0D:A7:81:F7:80:DB:D7:10:D4:2C:84:1C:13:A7:AD:17:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/06CD7DF074F211F09D01EA15C4F9AE02.roa Signing time: Fri 09 Jan 2026 02:21:45 +0000 ROA not before: Fri 09 Jan 2026 02:21:45 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 398478 IP address blocks: 103.88.188.0/22 maxlen: 22 116.204.236.0/22 maxlen: 22 116.204.236.0/24 maxlen: 24 116.204.237.0/24 maxlen: 24 116.204.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.crl rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 01:37:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 564 (0x234) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF2CD, serialNumber=5874520DA781F780DBD710D42C841C13A7AD1757 Validity Not Before: Jan 9 02:21:45 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69606639-c723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0e:fa:89:b1:d1:2e:76:23:e5:23:a1:96:4b: 52:8d:ba:0e:88:61:7f:51:95:a5:a1:69:8c:20:90: 06:51:de:b3:03:95:37:1e:45:80:e2:92:fd:c1:e7: 56:87:38:bd:59:03:5c:f7:99:a8:dc:02:db:a7:5e: d9:50:04:88:ca:e8:8e:74:a9:84:bc:6b:26:d7:e0: ef:77:34:7c:0e:e0:1a:f5:e8:fe:ac:a4:f5:e5:15: 52:d4:bf:4b:02:98:52:20:7e:ba:b4:85:e4:9e:0d: f8:4d:0b:ca:c8:b0:e0:15:5d:25:ff:49:6e:42:d2: cd:44:fb:0b:78:cd:81:8b:a5:46:41:1c:ae:7b:75: 40:81:ae:34:7e:79:07:23:ed:ac:39:b8:6c:0e:1c: dc:71:47:82:8a:4f:50:88:f2:ef:a8:14:66:73:79: 7e:2c:d2:1b:1b:c5:83:7e:f3:cf:f7:4e:3f:e5:fa: 6b:18:a2:47:a4:aa:25:f6:a3:15:2b:1e:04:38:2a: 04:70:d1:a5:70:9a:e4:ef:13:85:07:36:64:32:ef: 9d:61:8e:af:1c:a3:8f:e3:5b:65:47:95:0b:09:5e: bc:92:56:14:ad:21:10:82:2d:db:23:5f:ba:58:b9: 26:5e:37:27:8a:a0:d3:9a:ff:d0:52:59:8c:52:4f: 5e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:9E:4F:F9:ED:F4:E6:C4:B4:1F:F7:CF:0B:9A:0A:05:D8:BE:2E:49 X509v3 Authority Key Identifier: keyid:58:74:52:0D:A7:81:F7:80:DB:D7:10:D4:2C:84:1C:13:A7:AD:17:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/06CD7DF074F211F09D01EA15C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.88.188.0/22 116.204.236.0/22 Signature Algorithm: sha256WithRSAEncryption 5d:0d:0f:72:0c:c2:39:6a:4b:bb:66:5f:2e:2f:25:39:a2:9c: 59:3c:7c:c8:9f:6f:db:20:e7:b8:73:09:47:a9:70:b4:0c:b8: ec:a6:f4:e6:5e:eb:85:38:62:54:09:4c:91:14:4a:a6:dd:bf: bf:45:3b:db:7b:b0:eb:12:69:e9:e9:b5:9d:55:2f:7b:9e:1b: 62:97:3e:87:9e:78:07:17:3f:70:7e:43:5b:4b:c4:53:68:5e: 90:f9:4b:a3:45:4b:ac:1e:b6:02:4a:e0:1c:49:d8:fd:b1:ed: 9e:1b:cd:5c:f5:83:66:f0:63:82:fe:7c:64:e0:a2:6a:14:ac: e3:70:c6:9b:23:72:b8:4f:c2:cd:71:01:e8:bc:d0:da:f0:e7: be:9f:24:c4:18:c9:8b:10:30:71:4e:69:3d:fe:3a:41:a3:c4: 70:7c:c6:8a:5b:12:47:f0:36:2d:31:c0:71:8c:e7:c4:48:4f: 18:e0:8b:f4:4f:54:b2:e4:49:87:3f:8e:93:1c:2f:2b:4e:c1: fc:d8:9c:24:a4:35:3a:da:c6:b3:d0:4e:3f:09:ca:b4:e9:c6: c8:e9:89:03:75:b1:20:6c:eb:85:2b:44:a0:d5:fb:98:7d:86: fd:62:e6:99:b2:4d:64:9f:5a:28:30:8d:0e:18:ef:eb:2e:4b: 55:1d:4f:86 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QUYyQ0QxMTAvBgNVBAUTKDU4NzQ1MjBEQTc4MUY3ODBEQkQ3MTBENDJDODQxQzEz QTdBRDE3NTcwHhcNMjYwMTA5MDIyMTQ1WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTYwNjYzOS1jNzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtA76ibHRLnYj5SOhlktSjboOiGF/UZWloWmMIJAGUd6zA5U3HkWA4pL9wedW hzi9WQNc95mo3ALbp17ZUASIyuiOdKmEvGsm1+DvdzR8DuAa9ej+rKT15RVS1L9L AphSIH66tIXkng34TQvKyLDgFV0l/0luQtLNRPsLeM2Bi6VGQRyue3VAga40fnkH I+2sObhsDhzccUeCik9QiPLvqBRmc3l+LNIbG8WDfvPP904/5fprGKJHpKol9qMV Kx4EOCoEcNGlcJrk7xOFBzZkMu+dYY6vHKOP41tlR5ULCV68klYUrSEQgi3bI1+6 WLkmXjcniqDTmv/QUlmMUk9eqQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFMueT/nt 9ObEtB/3zwuaCgXYvi5JMB8GA1UdIwQYMBaAFFh0Ug2ngfeA29cQ1CyEHBOnrRdX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjJDRC80RkNCQUMwMEQ0 NEMxMUVEODYyNzE1ODJDNEY5QUUwMi9XSFJTRGFlQjk0RGIxeERVTElRY0U2ZXRG MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dIUlNEYWVCOTREYjF4RFVMSVFjRTZldEYxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUYyQ0QvNEZDQkFDMDBENDRDMTFFRDg2MjcxNTgyQzRGOUFFMDIvMDZDRDdERjA3 NEYyMTFGMDlEMDFFQTE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnWLwDBAJ0zOwwDQYJKoZIhvcNAQELBQADggEBAF0ND3IM wjlqS7tmXy4vJTminFk8fMifb9sg57hzCUepcLQMuOym9OZe64U4YlQJTJEUSqbd v79FO9t7sOsSaenptZ1VL3ueG2KXPoeeeAcXP3B+Q1tLxFNoXpD5S6NFS6wetgJK 4BxJ2P2x7Z4bzVz1g2bwY4L+fGTgomoUrONwxpsjcrhPws1xAei80Nrw576fJMQY yYsQMHFOaT3+OkGjxHB8xopbEkfwNi0xwHGM58RITxjgi/RPVLLkSYc/jpMcLytO wfzYnCSkNTraxrPQTj8JyrTpxsjpiQN1sSBs64UrRKDV+5h9hv1i5pmyTWSfWigw jQ4Y7+suS1UdT4Y= -----END CERTIFICATE-----Generated at Sun Jan 25 14:43:44 2026 by rpki-client