This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/D9470BFE7DC811ECB84BD174C4F9AE02.roa File: D9470BFE7DC811ECB84BD174C4F9AE02.roa (raw, json) Hash identifier: nw9u5x08CD03mgdFn7nXXZg6icQsrSkOHTrygrcIIVs= Subject key identifier: AE:97:A1:84:80:79:DF:A0:63:CC:1E:6E:B8:12:11:CA:0D:5A:EB:80 Certificate issuer: /CN=A91B8265/serialNumber=8F11C47E2FEA199C2727C86B4990F3BFAE820162 Certificate serial: 0465 Authority key identifier: 8F:11:C4:7E:2F:EA:19:9C:27:27:C8:6B:49:90:F3:BF:AE:82:01:62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/D9470BFE7DC811ECB84BD174C4F9AE02.roa Signing time: Thu 01 Jan 2026 00:20:11 +0000 ROA not before: Thu 01 Jan 2026 00:20:11 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 137040 IP address blocks: 103.102.221.0/24 maxlen: 24 103.133.75.0/24 maxlen: 24 103.133.82.0/23 maxlen: 23 103.133.82.0/24 maxlen: 24 103.133.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.crl rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 23:20:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1125 (0x465) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8265, serialNumber=8F11C47E2FEA199C2727C86B4990F3BFAE820162 Validity Not Before: Jan 1 00:20:11 2026 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=6955bdbb-d600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:96:f0:8c:25:ce:06:4a:1e:a9:cd:0b:c5:bd: 0c:0a:a0:5c:26:b4:ea:2d:3f:74:5b:5a:40:32:cc: 6d:f2:53:d8:fc:4b:97:82:83:5f:ee:e8:6d:67:ab: 30:c1:c6:47:c0:8d:cf:3b:c1:d0:3b:9d:4f:a1:11: 5e:0a:e1:42:e8:dd:f5:1c:e0:09:71:d3:3d:46:b9: c3:80:40:18:20:c0:7a:e1:90:df:4f:9b:12:47:17: c2:63:c8:73:92:f8:aa:cb:a7:9d:87:0e:af:f2:27: 89:a2:44:48:cb:5a:e9:88:6f:58:26:a1:88:22:dc: 5b:f0:6e:3e:ac:15:1e:61:af:59:07:a9:35:e6:d5: 08:f9:f4:b4:1c:6c:71:b7:a8:00:ae:f5:10:90:31: 11:ae:81:78:4c:55:0e:71:46:a1:84:b6:09:2c:79: f2:9b:3b:fd:cc:70:db:47:c8:26:9c:7a:28:92:75: 16:e6:d3:17:92:79:a9:06:b7:83:43:ea:a2:25:21: 1b:40:7c:30:9c:d9:77:05:29:63:52:6d:e4:5f:5e: 85:c6:71:55:6d:5e:47:90:eb:1c:d4:6a:03:73:ac: d0:0d:8c:d6:f3:bd:a2:d8:dc:1f:d1:85:8a:81:f8: aa:93:e8:2d:e1:d8:cd:1c:be:4e:13:8a:39:d5:d2: ad:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:97:A1:84:80:79:DF:A0:63:CC:1E:6E:B8:12:11:CA:0D:5A:EB:80 X509v3 Authority Key Identifier: keyid:8F:11:C4:7E:2F:EA:19:9C:27:27:C8:6B:49:90:F3:BF:AE:82:01:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/D9470BFE7DC811ECB84BD174C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.102.221.0/24 103.133.75.0/24 103.133.82.0/23 Signature Algorithm: sha256WithRSAEncryption 3f:67:8c:34:17:00:8a:6d:21:5f:bc:9e:dd:71:41:a4:31:3e: f4:98:2c:ad:5e:9d:07:5c:3b:e1:b9:19:f7:9c:2f:10:13:52: 37:19:5b:fe:8c:48:9e:50:fb:a0:eb:25:df:0e:59:e6:6e:4d: 37:54:02:0d:64:09:f1:b9:ce:bb:97:f3:6d:e1:e8:da:f6:d4: 17:47:88:a9:b6:8f:36:76:95:3e:f2:68:a0:35:85:b3:a9:07: 8a:3a:23:52:c2:27:c4:1d:d2:d3:04:94:a5:99:d1:b7:78:4a: e8:c9:64:84:f9:3b:83:bd:f3:e9:36:80:75:ef:cf:bc:5d:d0: c6:cd:2f:04:3f:55:85:8a:fd:9e:0a:9e:53:f8:4e:f7:8e:dc: c9:c9:f9:f4:ab:27:5c:9d:93:9e:50:1e:9a:e0:ce:29:52:07: 31:34:af:65:b8:ac:d6:62:7f:be:c8:df:22:01:cb:dc:d1:45: 85:e3:08:28:e1:fc:a8:72:b1:22:43:b0:34:ce:48:5d:f2:f3: 15:bc:ae:c0:d5:85:99:ef:16:e4:ed:8f:01:b5:18:9e:01:25: ba:9b:85:5e:64:f4:fd:bc:b8:0e:4f:f5:56:65:45:32:55:a4: f8:ee:08:88:48:0f:4a:37:8d:ab:6f:25:18:3d:7f:97:9f:37: ea:d1:47:19 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICBGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QjgyNjUxMTAvBgNVBAUTKDhGMTFDNDdFMkZFQTE5OUMyNzI3Qzg2QjQ5OTBGM0JG QUU4MjAxNjIwHhcNMjYwMTAxMDAyMDExWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU1YmRiYi1kNjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtZbwjCXOBkoeqc0Lxb0MCqBcJrTqLT90W1pAMsxt8lPY/EuXgoNf7uhtZ6sw wcZHwI3PO8HQO51PoRFeCuFC6N31HOAJcdM9RrnDgEAYIMB64ZDfT5sSRxfCY8hz kviqy6edhw6v8ieJokRIy1rpiG9YJqGIItxb8G4+rBUeYa9ZB6k15tUI+fS0HGxx t6gArvUQkDERroF4TFUOcUahhLYJLHnymzv9zHDbR8gmnHooknUW5tMXknmpBreD Q+qiJSEbQHwwnNl3BSljUm3kX16FxnFVbV5HkOsc1GoDc6zQDYzW872i2Nwf0YWK gfiqk+gt4djNHL5OE4o51dKt4wIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFK6XoYSA ed+gY8webrgSEcoNWuuAMB8GA1UdIwQYMBaAFI8RxH4v6hmcJyfIa0mQ87+uggFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODI2NS80Q0Q1RkUwRTdE QzQxMUVDQTlDNDQzMURDNEY5QUUwMi9qeEhFZmlfcUdad25KOGhyU1pEenY2NkNB V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p4SEVmaV9xR1p3bko4aHJTWkR6djY2Q0FXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjgyNjUvNENENUZFMEU3REM0MTFFQ0E5QzQ0MzFEQzRGOUFFMDIvRDk0NzBCRkU3 REM4MTFFQ0I4NEJEMTc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBABnZt0DBABnhUsDBAFnhVIwDQYJKoZIhvcNAQELBQADggEB AD9njDQXAIptIV+8nt1xQaQxPvSYLK1enQdcO+G5GfecLxATUjcZW/6MSJ5Q+6Dr Jd8OWeZuTTdUAg1kCfG5zruX823h6Nr21BdHiKm2jzZ2lT7yaKA1hbOpB4o6I1LC J8Qd0tMElKWZ0bd4SujJZIT5O4O98+k2gHXvz7xd0MbNLwQ/VYWK/Z4KnlP4TveO 3MnJ+fSrJ1ydk55QHprgzilSBzE0r2W4rNZif77I3yIBy9zRRYXjCCjh/KhysSJD sDTOSF3y8xW8rsDVhZnvFuTtjwG1GJ4BJbqbhV5k9P28uA5P9VZlRTJVpPjuCIhI D0o3jatvJRg9f5efN+rRRxk= -----END CERTIFICATE-----Generated at Sun Jan 25 18:52:46 2026 by rpki-client