This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/2EA5CD40F87911F0BB9C431B4E6F56BC.roa File: 2EA5CD40F87911F0BB9C431B4E6F56BC.roa (raw, json) Hash identifier: 4BukiagQkrgc4Q+BvGeKWl5vic7KJcUlFwCZcgflCUU= Subject key identifier: 54:D3:A0:94:69:8D:6B:56:6F:5B:EF:81:E6:74:25:BF:9A:E8:F2:F3 Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34 Certificate serial: 36C0 Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/2EA5CD40F87911F0BB9C431B4E6F56BC.roa Signing time: Fri 23 Jan 2026 16:33:01 +0000 ROA not before: Fri 23 Jan 2026 16:33:01 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 23750 IP address blocks: 103.207.86.0/24 maxlen: 24 103.207.87.0/24 maxlen: 24 116.90.100.0/24 maxlen: 24 116.90.106.0/24 maxlen: 24 116.90.107.0/24 maxlen: 24 116.90.108.0/24 maxlen: 24 116.90.109.0/24 maxlen: 24 116.90.110.0/24 maxlen: 24 116.90.111.0/24 maxlen: 24 116.90.120.0/24 maxlen: 24 116.90.123.0/24 maxlen: 24 116.90.124.0/24 maxlen: 24 116.90.125.0/24 maxlen: 24 116.90.126.0/24 maxlen: 24 116.90.127.0/24 maxlen: 24 121.46.64.0/24 maxlen: 24 121.46.65.0/24 maxlen: 24 121.46.66.0/24 maxlen: 24 202.69.32.0/24 maxlen: 24 202.69.33.0/24 maxlen: 24 202.69.34.0/24 maxlen: 24 202.69.35.0/24 maxlen: 24 202.69.36.0/24 maxlen: 24 202.69.37.0/24 maxlen: 24 202.69.38.0/24 maxlen: 24 202.69.39.0/24 maxlen: 24 202.69.40.0/24 maxlen: 24 202.69.41.0/24 maxlen: 24 202.69.42.0/24 maxlen: 24 202.69.43.0/24 maxlen: 24 202.69.44.0/24 maxlen: 24 202.69.45.0/24 maxlen: 24 202.69.46.0/24 maxlen: 24 202.69.47.0/24 maxlen: 24 202.69.48.0/24 maxlen: 24 202.69.49.0/24 maxlen: 24 202.69.50.0/24 maxlen: 24 202.69.51.0/24 maxlen: 24 202.69.52.0/24 maxlen: 24 202.69.53.0/24 maxlen: 24 202.69.54.0/24 maxlen: 24 202.69.55.0/24 maxlen: 24 202.69.56.0/24 maxlen: 24 202.69.57.0/24 maxlen: 24 202.69.58.0/24 maxlen: 24 202.69.59.0/24 maxlen: 24 202.69.60.0/24 maxlen: 24 202.69.61.0/24 maxlen: 24 202.69.62.0/24 maxlen: 24 202.69.63.0/24 maxlen: 24 202.142.144.0/24 maxlen: 24 202.142.145.0/24 maxlen: 24 202.142.146.0/24 maxlen: 24 202.142.147.0/24 maxlen: 24 202.142.148.0/24 maxlen: 24 202.142.149.0/24 maxlen: 24 202.142.150.0/24 maxlen: 24 202.142.152.0/24 maxlen: 24 202.142.153.0/24 maxlen: 24 202.142.154.0/24 maxlen: 24 202.142.156.0/24 maxlen: 24 202.142.157.0/24 maxlen: 24 202.142.158.0/24 maxlen: 24 202.142.159.0/24 maxlen: 24 2406:ac00:1::/48 maxlen: 48 2406:ac00:2::/48 maxlen: 48 2406:ac00:203::/48 maxlen: 48 2406:ac00:204::/48 maxlen: 48 2406:ac00:205::/48 maxlen: 48 2406:ac00:206::/48 maxlen: 48 2406:ac00:207::/48 maxlen: 48 2406:ac00:208::/48 maxlen: 48 2406:ac00:209::/48 maxlen: 48 2406:ac00:300::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 14:27:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14016 (0x36c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5D7E, serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34 Validity Not Before: Jan 23 16:33:01 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6973a2bc-307d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:87:7f:33:1c:3a:4e:13:2a:66:f3:40:c1:95: 78:ac:27:70:f6:fd:75:01:d4:d8:8d:70:cb:75:47: 91:c7:20:8e:f5:2c:14:9b:19:a2:03:c3:69:03:69: f6:13:43:4a:84:f2:9e:33:d3:5c:3b:c8:a8:63:e1: 38:b7:f5:42:50:53:61:f1:36:46:0c:a9:76:c3:05: 3e:17:0c:45:46:02:de:f1:a5:ab:cd:4c:55:d5:a7: 75:2d:a2:9a:68:0c:fb:7a:ac:0b:8c:04:9e:c1:b0: 47:40:ac:01:72:b8:bb:ab:3b:1d:0e:d3:a4:e9:be: c7:7f:66:3c:65:dc:de:df:f4:13:c9:c7:11:93:15: 28:13:f7:28:75:d2:70:4a:38:a0:56:0d:09:76:1e: 17:05:39:82:0b:f6:6b:55:3f:04:31:a2:b2:d2:47: 23:b9:6f:84:42:4b:12:1c:ad:2c:2e:c3:a7:3f:43: 3f:96:1a:88:de:3f:c3:93:75:77:2e:7b:2d:64:8a: a9:a3:37:f6:1a:ed:af:cd:79:e2:49:84:ae:2a:cc: 30:f6:d7:79:7a:df:3c:8c:e6:17:a2:9c:3b:3e:33: ad:b4:e0:e2:97:c2:35:87:7e:7e:9b:66:ef:4f:d4: 2b:3d:a0:eb:cb:b2:67:e8:fe:b6:2e:44:14:a7:3f: c4:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:D3:A0:94:69:8D:6B:56:6F:5B:EF:81:E6:74:25:BF:9A:E8:F2:F3 X509v3 Authority Key Identifier: keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/2EA5CD40F87911F0BB9C431B4E6F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.207.86.0/23 116.90.100.0/24 116.90.106.0-116.90.111.255 116.90.120.0/24 116.90.123.0-116.90.127.255 121.46.64.0-121.46.66.255 202.69.32.0/19 202.142.144.0-202.142.150.255 202.142.152.0-202.142.154.255 202.142.156.0/22 IPv6: 2406:ac00:1::-2406:ac00:2:ffff:ffff:ffff:ffff:ffff 2406:ac00:203::-2406:ac00:209:ffff:ffff:ffff:ffff:ffff 2406:ac00:300::/48 Signature Algorithm: sha256WithRSAEncryption 30:76:29:ad:bd:18:b8:59:07:9e:f3:2c:49:a9:aa:0a:f4:2b: ae:6e:ff:7d:33:f8:6c:75:0c:74:9c:27:47:7e:19:04:fb:ac: 03:e2:f8:06:e9:e9:8c:9a:cc:af:d3:83:90:cc:33:1e:cd:05: e5:fa:10:9c:20:08:39:4b:24:a4:92:3b:72:c1:df:99:21:a9: f2:39:b3:23:9b:e4:87:bc:b3:a7:78:ba:28:31:af:fe:a7:9b: b3:ed:87:11:d4:b2:d8:2c:ea:3c:14:67:98:f8:a8:30:25:9b: 30:91:99:5d:5a:d8:38:1c:81:17:a5:5c:f9:13:90:18:52:c5: 7b:2d:cc:34:02:04:20:32:f9:d5:16:0f:c0:54:ac:13:9f:74: 6d:73:1d:de:a5:ba:fc:27:2d:55:65:b8:b8:41:78:fb:f8:3d: 7f:3a:e9:3b:49:5d:cd:6a:ad:91:bd:2d:13:bc:d2:1e:8b:ea: c4:b3:bc:8f:3d:92:1a:dc:ef:30:07:87:44:96:df:86:06:18: 67:31:93:50:2b:64:11:2b:2a:63:51:d6:f2:7c:df:74:f8:97: 7d:ec:6f:a7:23:70:3f:a2:79:9c:26:2e:f5:1d:a0:7c:c4:f1: f0:8f:13:41:4d:f0:7e:5d:c3:e9:74:d0:10:03:3a:0f:d3:96: fb:d1:59:d1 -----BEGIN CERTIFICATE----- MIIGCzCCBPOgAwIBAgICNsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVEN0UxMTAvBgNVBAUTKDRDQUUzQUVGQjFBQzhBQkREQjk5QkNDRUU0RkE1QTkx NkQxNTdCMzQwHhcNMjYwMTIzMTYzMzAxWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTczYTJiYy0zMDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkId/Mxw6ThMqZvNAwZV4rCdw9v11AdTYjXDLdUeRxyCO9SwUmxmiA8NpA2n2 E0NKhPKeM9NcO8ioY+E4t/VCUFNh8TZGDKl2wwU+FwxFRgLe8aWrzUxV1ad1LaKa aAz7eqwLjASewbBHQKwBcri7qzsdDtOk6b7Hf2Y8Zdze3/QTyccRkxUoE/coddJw SjigVg0Jdh4XBTmCC/ZrVT8EMaKy0kcjuW+EQksSHK0sLsOnP0M/lhqI3j/Dk3V3 LnstZIqpozf2Gu2vzXniSYSuKsww9td5et88jOYXopw7PjOttODil8I1h35+m2bv T9QrPaDry7Jn6P62LkQUpz/EawIDAQABo4IDLzCCAyswHQYDVR0OBBYEFFTToJRp jWtWb1vvgeZ0Jb+a6PLzMB8GA1UdIwQYMBaAFEyuOu+xrIq925m8zuT6WpFtFXs0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUQ3RS9FQ0E2ODIzNDFE ODcxMUUyOTgzMjJERTAwOEIwMkNEMi9USzQ2NzdHc2lyM2JtYnpPNVBwYWtXMFZl elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLNDY3N0dzaXIzYm1iek81UHBha1cwVmV6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjVEN0UvRUNBNjgyMzQxRDg3MTFFMjk4MzIyREUwMDhCMDJDRDIvMkVBNUNENDBG ODc5MTFGMEJCOUM0MzFCNEU2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgbgGCCsGAQUFBwEHAQH/ BIGoMIGlMGoEAgABMGQDBAFnz1YDBAB0WmQwDAMEAXRaagMEBHRaYAMEAHRaeDAM AwQAdFp7AwQHdFoAMAwDBAZ5LkADBAB5LkIDBAXKRSAwDAMEBMqOkAMEAMqOljAM AwQDyo6YAwQAyo6aAwQCyo6cMDcEAgACMDEwEgMHACQGrAAAAQMHACQGrAAAAjAS AwcAJAasAAIDAwcBJAasAAIIAwcAJAasAAMAMA0GCSqGSIb3DQEBCwUAA4IBAQAw dimtvRi4WQee8yxJqaoK9Cuubv99M/hsdQx0nCdHfhkE+6wD4vgG6emMmsyv04OQ zDMezQXl+hCcIAg5SySkkjtywd+ZIanyObMjm+SHvLOneLooMa/+p5uz7YcR1LLY LOo8FGeY+KgwJZswkZldWtg4HIEXpVz5E5AYUsV7Lcw0AgQgMvnVFg/AVKwTn3Rt cx3epbr8Jy1VZbi4QXj7+D1/Ouk7SV3Naq2RvS0TvNIei+rEs7yPPZIa3O8wB4dE lt+GBhhnMZNQK2QRKypjUdbyfN90+Jd97G+nI3A/onmcJi71HaB8xPHwjxNBTfB+ XcPpdNAQAzoP05b70VnR -----END CERTIFICATE-----Generated at Sun Jan 25 15:36:35 2026 by rpki-client