This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/B58038B838FF11EAB8D91529C4F9AE02.roa File: B58038B838FF11EAB8D91529C4F9AE02.roa (raw, json) Hash identifier: tqcAVz0GATSzytoLsaeinY4freq/h5Zd03b4mNXHeQk= Subject key identifier: EE:29:84:64:0E:55:0C:FE:6C:CE:87:B0:7F:75:94:F5:8B:44:3F:5B Certificate issuer: /CN=A91B727C/serialNumber=1D882C8CF2434CC9BBFD79191DC2C6982926E8AB Certificate serial: 1206 Authority key identifier: 1D:88:2C:8C:F2:43:4C:C9:BB:FD:79:19:1D:C2:C6:98:29:26:E8:AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/B58038B838FF11EAB8D91529C4F9AE02.roa Signing time: Fri 16 Jan 2026 17:14:40 +0000 ROA not before: Fri 16 Jan 2026 17:14:40 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 138505 IP address blocks: 103.127.68.0/22 maxlen: 22 103.127.68.0/23 maxlen: 23 103.127.68.0/24 maxlen: 24 103.127.69.0/24 maxlen: 24 103.127.70.0/23 maxlen: 23 103.127.70.0/24 maxlen: 24 103.127.71.0/24 maxlen: 24 2404:19c0::/32 maxlen: 32 2404:19c0::/36 maxlen: 36 2404:19c0:1000::/36 maxlen: 36 2404:19c0:2000::/36 maxlen: 36 2404:19c0:3000::/36 maxlen: 36 2404:19c0:4000::/36 maxlen: 36 2404:19c0:5000::/36 maxlen: 36 2404:19c0:6000::/36 maxlen: 36 2404:19c0:7000::/36 maxlen: 36 2404:19c0:8000::/36 maxlen: 36 2404:19c0:9000::/36 maxlen: 36 2404:19c0:a000::/36 maxlen: 36 2404:19c0:b000::/36 maxlen: 36 2404:19c0:c000::/36 maxlen: 36 2404:19c0:d000::/36 maxlen: 36 2404:19c0:e000::/36 maxlen: 36 2404:19c0:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 16:53:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4614 (0x1206) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B727C, serialNumber=1D882C8CF2434CC9BBFD79191DC2C6982926E8AB Validity Not Before: Jan 16 17:14:40 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=696a7200-bd11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:32:7b:5c:80:46:a2:0a:12:22:8b:be:18:20: 2f:54:04:20:80:5e:19:f5:b8:7b:b1:d4:66:b3:49: 54:90:68:82:76:4c:35:0d:21:3c:02:ac:45:2a:3d: ac:a5:ac:56:1b:76:dd:1e:c6:8c:71:73:b8:a4:be: 1d:7a:12:22:1d:7a:d7:ec:03:14:99:1d:a9:7d:06: 5a:3b:12:df:7f:bb:61:02:6c:42:24:d7:16:de:41: 5f:37:e5:8b:6d:de:59:65:19:36:32:b1:70:02:9c: 94:d6:4e:72:fe:92:a5:a2:d0:f0:52:ea:d9:71:7f: 56:fe:e3:b0:eb:cd:a9:98:90:18:c3:d9:b9:02:3a: e8:1b:17:97:12:63:9d:e6:06:8d:ed:9b:06:99:57: c4:a6:35:c1:0a:e8:ad:0a:25:f4:e8:1b:ae:58:95: bf:8c:23:72:95:ba:56:92:74:76:a4:31:e2:9a:6e: 39:ee:14:39:aa:0a:f6:c4:dc:42:52:29:b3:79:89: 7f:d1:2f:44:bd:8d:31:56:3a:25:d7:c4:0d:63:13: fc:50:5c:cf:5b:37:40:d8:48:47:78:fa:5a:3d:2d: 47:b3:fa:b1:c2:06:74:fa:48:c8:e2:aa:65:7b:1c: 69:61:be:e7:15:fd:36:a4:68:52:6e:c7:00:5b:35: d7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:29:84:64:0E:55:0C:FE:6C:CE:87:B0:7F:75:94:F5:8B:44:3F:5B X509v3 Authority Key Identifier: keyid:1D:88:2C:8C:F2:43:4C:C9:BB:FD:79:19:1D:C2:C6:98:29:26:E8:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/B58038B838FF11EAB8D91529C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.127.68.0/22 IPv6: 2404:19c0::/32 Signature Algorithm: sha256WithRSAEncryption 85:49:e8:fb:be:8f:e0:ad:71:4a:0b:34:a9:7c:de:0c:ae:6b: 71:18:13:bd:9e:17:c2:4c:1e:8e:af:ac:13:6b:d0:01:70:f6: 85:56:8e:eb:07:40:c0:4a:92:ec:04:96:d8:4c:21:0c:e9:fc: e0:02:a0:fa:89:76:47:f2:fa:75:a7:77:6d:b6:6c:f5:f1:d7: 8d:63:19:33:fb:5d:5d:e8:0a:43:b0:63:0a:31:3b:aa:c4:b8: 95:d4:90:b8:e4:a1:4c:a3:ac:ec:58:79:b0:11:16:ca:e9:80: 23:95:ac:71:e7:25:9b:f2:83:a3:8b:e7:98:f6:24:a2:01:30: 8c:59:cb:bf:45:db:1c:23:cf:c7:ee:31:75:17:d0:06:97:cf: 0e:ca:04:cf:be:02:82:5a:22:22:52:09:27:16:6a:4f:6e:ba: 98:5b:4f:e4:c4:66:90:56:19:83:a6:9c:79:31:32:82:83:b3: f8:8c:c2:4e:8f:41:e6:b7:ac:4a:f4:63:c0:f7:bf:d5:c6:79: b9:24:40:c3:a9:1f:87:ed:e3:3e:ce:f1:89:c6:39:75:7d:d0: bf:22:a2:5f:a2:f0:56:61:96:da:ea:7f:cc:4a:db:66:4b:26: a7:6a:86:da:33:84:17:a5:e2:5b:87:9c:6a:be:60:8c:19:d6: b9:57:be:76 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICEgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QjcyN0MxMTAvBgNVBAUTKDFEODgyQzhDRjI0MzRDQzlCQkZENzkxOTFEQzJDNjk4 MjkyNkU4QUIwHhcNMjYwMTE2MTcxNDQwWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTZhNzIwMC1iZDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnjJ7XIBGogoSIou+GCAvVAQggF4Z9bh7sdRms0lUkGiCdkw1DSE8AqxFKj2s paxWG3bdHsaMcXO4pL4dehIiHXrX7AMUmR2pfQZaOxLff7thAmxCJNcW3kFfN+WL bd5ZZRk2MrFwApyU1k5y/pKlotDwUurZcX9W/uOw682pmJAYw9m5AjroGxeXEmOd 5gaN7ZsGmVfEpjXBCuitCiX06BuuWJW/jCNylbpWknR2pDHimm457hQ5qgr2xNxC UimzeYl/0S9EvY0xVjol18QNYxP8UFzPWzdA2EhHePpaPS1Hs/qxwgZ0+kjI4qpl exxpYb7nFf02pGhSbscAWzXXIQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFO4phGQO VQz+bM6HsH91lPWLRD9bMB8GA1UdIwQYMBaAFB2ILIzyQ0zJu/15GR3CxpgpJuir MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzI3Qy85RDc3QzZENDAy OEYxMUU5OUQ4MUY2NDBDNEY5QUUwMi9IWWdzalBKRFRNbTdfWGtaSGNMR21Da202 S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hZZ3NqUEpEVE1tN19Ya1pIY0xHbUNrbTZLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjcyN0MvOUQ3N0M2RDQwMjhGMTFFOTlEODFGNjQwQzRGOUFFMDIvQjU4MDM4Qjgz OEZGMTFFQUI4RDkxNTI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnf0QwDQQCAAIwBwMFACQEGcAwDQYJKoZIhvcNAQELBQAD ggEBAIVJ6Pu+j+CtcUoLNKl83gyua3EYE72eF8JMHo6vrBNr0AFw9oVWjusHQMBK kuwElthMIQzp/OACoPqJdkfy+nWnd222bPXx141jGTP7XV3oCkOwYwoxO6rEuJXU kLjkoUyjrOxYebARFsrpgCOVrHHnJZvyg6OL55j2JKIBMIxZy79F2xwjz8fuMXUX 0AaXzw7KBM++AoJaIiJSCScWak9uuphbT+TEZpBWGYOmnHkxMoKDs/iMwk6PQea3 rEr0Y8D3v9XGebkkQMOpH4ft4z7O8YnGOXV90L8iol+i8FZhltrqf8xK22ZLJqdq htozhBel4luHnGq+YIwZ1rlXvnY= -----END CERTIFICATE-----Generated at Sun Jan 25 15:44:21 2026 by rpki-client