This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/9B3123BEC38C11F0A8D49A37C4F9AE02.roa File: 9B3123BEC38C11F0A8D49A37C4F9AE02.roa (raw, json) Hash identifier: ghxwV1wLR6LJsj8L1EVuyF3FDUdkp9SAyCxkwGXF0Ac= Subject key identifier: 8F:C5:C5:82:45:F0:0A:6A:AB:3F:30:17:45:9E:FF:D4:00:09:4C:19 Certificate issuer: /CN=A91B3B4C/serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Certificate serial: 0100 Authority key identifier: B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/9B3123BEC38C11F0A8D49A37C4F9AE02.roa Signing time: Wed 31 Dec 2025 05:52:01 +0000 ROA not before: Wed 31 Dec 2025 05:52:01 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 140227 IP address blocks: 103.110.220.0/23 maxlen: 24 2400:9e20:1111::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 04:30:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 256 (0x100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3B4C, serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Validity Not Before: Dec 31 05:52:01 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=6954ba01-069c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:eb:e5:5f:0b:48:3d:41:18:8d:bd:de:f3:28: bf:f3:14:44:48:97:c3:a0:a6:33:d5:09:7c:1c:96: 82:fc:1d:05:72:af:08:84:10:ae:7a:eb:26:3e:9a: 71:aa:f4:de:9e:ae:ea:9e:c6:47:7a:57:65:7d:9c: 36:d7:f3:d9:d4:b0:85:78:60:87:b4:87:d7:fd:f8: 07:d7:c2:fd:fb:77:12:30:e9:29:80:bc:cd:2c:e0: 2b:11:8e:c7:81:91:ac:c3:11:a5:38:bf:59:73:25: 2c:7c:9c:f9:68:5d:aa:c0:a4:36:31:99:19:57:b1: 06:f7:b3:89:bd:4d:e3:c9:78:c0:6d:02:71:55:b3: f5:a8:af:c5:32:5c:cb:db:17:0c:4e:03:34:db:6d: 50:0b:1e:24:68:ac:d0:ea:7b:01:f3:60:e5:a1:b3: 1b:c1:25:6e:a9:ec:66:13:d0:d5:92:85:5d:44:f3: d9:20:40:ec:94:53:e6:30:36:ae:cf:bb:2a:5f:4f: 33:58:ab:0f:c7:53:47:80:a3:b9:d3:c1:ee:14:14: 6f:86:70:aa:e5:81:d3:3e:a6:31:e5:f4:a1:ba:b8: 5f:d1:27:ae:5e:a5:05:db:5c:0f:67:2a:b7:df:f3: c8:5a:57:8f:ac:93:82:50:f0:86:3e:5d:e6:86:31: 19:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C5:C5:82:45:F0:0A:6A:AB:3F:30:17:45:9E:FF:D4:00:09:4C:19 X509v3 Authority Key Identifier: keyid:B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/9B3123BEC38C11F0A8D49A37C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.110.220.0/23 IPv6: 2400:9e20:1111::/48 Signature Algorithm: sha256WithRSAEncryption 29:69:75:2b:cb:6e:9f:e9:0e:cb:b9:73:91:c2:f3:00:94:68: fc:61:3f:fc:81:2e:31:b1:c9:12:25:67:24:33:2e:ab:12:67: 68:66:32:0a:1c:7d:ca:88:79:5c:cf:14:dd:a3:86:02:59:f6: 91:41:f1:e9:34:45:2d:0e:72:aa:33:84:16:b6:44:1e:be:07: 73:8a:fb:5f:ce:70:b4:60:ad:ad:4f:e9:16:ce:ce:e9:b8:eb: 0b:89:81:43:db:6c:53:ee:16:aa:9b:d2:3c:58:d0:a4:ee:3e: 9e:94:8a:ec:36:2b:4f:f3:f5:ed:0b:af:c7:78:0e:c6:e9:a1: c5:b5:27:ad:aa:f7:d5:d0:0c:25:7e:a9:78:5e:08:1d:6f:7e: 56:c4:10:bc:1c:b2:fe:ea:cd:1b:21:50:69:9d:86:a5:5c:3c: 18:45:34:d0:98:66:7a:45:76:1d:df:a0:43:6a:1a:91:37:03: 87:d0:41:99:d0:51:73:c5:bf:5a:1d:7a:b2:3f:3d:ed:91:b1: e6:b4:3c:cc:fa:92:ed:f6:b5:53:39:45:90:57:d4:44:44:88: e6:36:b3:cb:9f:88:c1:4a:75:fe:32:fa:30:66:28:36:bc:4f: b6:87:ff:0a:9a:66:3f:47:75:78:a6:33:3f:7f:46:54:cd:99: e7:18:f3:75 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNCNEMxMTAvBgNVBAUTKEI2M0RGRDY4NkNFMEE5MDA3NkU0RjVGRjQyODY4NUY2 M0ZCMDhFREQwHhcNMjUxMjMxMDU1MjAxWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU0YmEwMS0wNjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk+vlXwtIPUEYjb3e8yi/8xRESJfDoKYz1Ql8HJaC/B0Fcq8IhBCueusmPppx qvTenq7qnsZHeldlfZw21/PZ1LCFeGCHtIfX/fgH18L9+3cSMOkpgLzNLOArEY7H gZGswxGlOL9ZcyUsfJz5aF2qwKQ2MZkZV7EG97OJvU3jyXjAbQJxVbP1qK/FMlzL 2xcMTgM0221QCx4kaKzQ6nsB82DlobMbwSVuqexmE9DVkoVdRPPZIEDslFPmMDau z7sqX08zWKsPx1NHgKO508HuFBRvhnCq5YHTPqYx5fShurhf0SeuXqUF21wPZyq3 3/PIWlePrJOCUPCGPl3mhjEZywIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFI/FxYJF 8Apqqz8wF0We/9QACUwZMB8GA1UdIwQYMBaAFLY9/Whs4KkAduT1/0KGhfY/sI7d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0I0Qy9EQzlERTI4RThD NTAxMUVGQTA2N0M4MTVDNEY5QUUwMi90ajM5YUd6Z3FRQjI1UFhfUW9hRjlqLXdq dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqMzlhR3pncVFCMjVQWF9Rb2FGOWotd2p0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjNCNEMvREM5REUyOEU4QzUwMTFFRkEwNjdDODE1QzRGOUFFMDIvOUIzMTIzQkVD MzhDMTFGMEE4RDQ5QTM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnbtwwDwQCAAIwCQMHACQAniARETANBgkqhkiG9w0BAQsF AAOCAQEAKWl1K8tun+kOy7lzkcLzAJRo/GE//IEuMbHJEiVnJDMuqxJnaGYyChx9 yoh5XM8U3aOGAln2kUHx6TRFLQ5yqjOEFrZEHr4Hc4r7X85wtGCtrU/pFs7O6bjr C4mBQ9tsU+4WqpvSPFjQpO4+npSK7DYrT/P17Quvx3gOxumhxbUnrar31dAMJX6p eF4IHW9+VsQQvByy/urNGyFQaZ2GpVw8GEU00JhmekV2Hd+gQ2oakTcDh9BBmdBR c8W/Wh16sj897ZGx5rQ8zPqS7fa1UzlFkFfURESI5jazy5+IwUp1/jL6MGYoNrxP tof/CppmP0d1eKYzP39GVM2Z5xjzdQ== -----END CERTIFICATE-----Generated at Sun Jan 25 04:34:29 2026 by rpki-client