This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/58FDD2EA10C211EA977E7378C4F9AE02.roa File: 58FDD2EA10C211EA977E7378C4F9AE02.roa (raw, json) Hash identifier: dvRdh50/xn/D7bMGn9vB380IMAVU4GAMptZfM3ZKdew= Subject key identifier: DE:F1:90:EA:4A:41:D7:F4:89:39:AF:07:0E:CD:3A:D1:EA:D3:0B:B3 Certificate issuer: /CN=A91BE1BC/serialNumber=429E9BDDA296620003CEC5EFABB823D303FE4F71 Certificate serial: 10A6 Authority key identifier: 42:9E:9B:DD:A2:96:62:00:03:CE:C5:EF:AB:B8:23:D3:03:FE:4F:71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/58FDD2EA10C211EA977E7378C4F9AE02.roa Signing time: Mon 12 Jan 2026 17:14:59 +0000 ROA not before: Mon 12 Jan 2026 17:14:59 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 9587 IP address blocks: 103.26.20.0/22 maxlen: 22 103.26.22.0/24 maxlen: 24 103.26.23.0/24 maxlen: 24 124.40.224.0/20 maxlen: 20 124.40.230.0/24 maxlen: 24 124.40.231.0/24 maxlen: 24 124.40.233.0/24 maxlen: 24 124.40.234.0/24 maxlen: 24 124.40.235.0/24 maxlen: 24 124.40.238.0/24 maxlen: 24 2407:ed00::/32 maxlen: 32 2407:ed00:1000::/36 maxlen: 36 2407:ed00:1e00::/40 maxlen: 40 2407:ed00:1eff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 17:04:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4262 (0x10a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE1BC, serialNumber=429E9BDDA296620003CEC5EFABB823D303FE4F71 Validity Not Before: Jan 12 17:14:59 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69652c13-9b4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5a:6f:4f:07:b7:c5:27:00:bc:b3:12:64:9a: 98:f1:67:4e:68:23:58:50:90:1e:7a:d1:97:d1:9a: 2b:4f:aa:1f:6e:2f:ff:7a:41:5a:7d:33:d8:f0:f7: 45:c1:23:e4:f6:5d:62:46:30:f2:a3:30:79:ae:d4: 1e:8e:d6:dc:31:5f:4b:37:42:d2:08:fd:c0:b9:ec: f2:9b:47:b0:e7:55:d7:ad:2a:e5:a7:91:ad:09:78: 80:52:0b:25:ee:0b:99:eb:bc:eb:cc:7c:52:f0:86: 80:f4:bb:3a:21:8a:ec:59:b3:bb:8d:b3:2d:c0:58: 17:fe:b5:9a:df:4c:ae:c8:fb:01:de:6e:09:aa:35: dc:2d:b5:0d:9d:52:64:6d:3c:17:76:d8:62:76:34: 6d:3f:ea:c9:43:d4:0f:6b:48:44:9c:89:de:0a:fe: 64:41:15:02:1f:0a:fb:ce:6e:7c:14:a4:1b:79:f6: ae:db:f2:04:f4:77:5f:74:8f:90:28:e4:4d:f1:b4: a9:19:20:01:2f:5d:4e:a8:09:b3:71:0d:d0:9a:e7: 6e:d8:6d:c3:dd:a0:d2:03:f0:1d:69:a7:4a:92:cc: 5f:9c:34:36:b7:90:2f:7c:e3:17:b6:48:d5:b1:f8: 3b:c2:4d:c4:e5:75:ac:36:ff:bc:af:be:6f:b4:3e: 0f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:F1:90:EA:4A:41:D7:F4:89:39:AF:07:0E:CD:3A:D1:EA:D3:0B:B3 X509v3 Authority Key Identifier: keyid:42:9E:9B:DD:A2:96:62:00:03:CE:C5:EF:AB:B8:23:D3:03:FE:4F:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/58FDD2EA10C211EA977E7378C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.26.20.0/22 124.40.224.0/20 IPv6: 2407:ed00::/32 Signature Algorithm: sha256WithRSAEncryption c9:74:54:fc:3b:d9:45:42:ed:f3:af:1e:63:20:60:65:3c:3c: bf:b2:7e:83:cc:a8:db:63:5d:84:91:c5:4e:cd:49:96:a8:76: 4c:0e:15:8d:d1:34:17:69:0f:ca:77:40:34:79:fd:cd:61:cc: f7:8a:48:f5:3f:a3:27:b3:ce:69:13:71:88:2e:66:e3:ab:26: a8:c1:bb:c3:f8:f1:06:a3:cb:60:fc:d0:4c:7a:52:65:c3:8c: 29:2b:58:d8:32:b9:c4:af:8b:46:0b:64:80:2f:50:7c:37:9f: a2:30:b5:f5:52:9d:da:e4:4b:e4:8e:8d:f0:4d:07:06:ed:2b: 51:01:29:7a:b9:ac:dd:41:aa:a4:ce:c9:cd:69:13:2a:59:42: 1f:b7:d7:24:3b:98:cd:e6:9d:08:b7:8c:dd:6c:fa:74:57:a8: fa:31:86:c8:b7:3b:5a:e7:20:e5:f7:dd:26:cf:a3:9b:25:13: 6e:fa:4a:2e:68:84:ed:5b:43:5b:fd:a1:5f:61:f8:96:f0:3f: 72:35:77:85:25:13:64:8d:4e:a8:7b:c3:0c:62:ef:db:d6:af: 6c:f4:69:4b:3a:26:a1:f4:38:2a:32:88:24:8b:4a:93:1b:e5: 30:a6:49:25:bf:21:20:39:1d:b3:6d:8f:f6:62:81:84:43:32: dc:07:c6:55 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICEKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QkUxQkMxMTAvBgNVBAUTKDQyOUU5QkREQTI5NjYyMDAwM0NFQzVFRkFCQjgyM0Qz MDNGRTRGNzEwHhcNMjYwMTEyMTcxNDU5WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTY1MmMxMy05YjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqVpvTwe3xScAvLMSZJqY8WdOaCNYUJAeetGX0ZorT6ofbi//ekFafTPY8PdF wSPk9l1iRjDyozB5rtQejtbcMV9LN0LSCP3Auezym0ew51XXrSrlp5GtCXiAUgsl 7guZ67zrzHxS8IaA9Ls6IYrsWbO7jbMtwFgX/rWa30yuyPsB3m4JqjXcLbUNnVJk bTwXdthidjRtP+rJQ9QPa0hEnIneCv5kQRUCHwr7zm58FKQbefau2/IE9HdfdI+Q KORN8bSpGSABL11OqAmzcQ3Qmudu2G3D3aDSA/AdaadKksxfnDQ2t5AvfOMXtkjV sfg7wk3E5XWsNv+8r75vtD4P7wIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFN7xkOpK Qdf0iTmvBw7NOtHq0wuzMB8GA1UdIwQYMBaAFEKem92ilmIAA87F76u4I9MD/k9x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTFCQy84OTZDNkM0ODQ2 Q0UxMUU5OTI4NTBBM0NDNEY5QUUwMi9RcDZiM2FLV1lnQUR6c1h2cTdnajB3UC1U M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FwNmIzYUtXWWdBRHpzWHZxN2dqMHdQLVQzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkUxQkMvODk2QzZDNDg0NkNFMTFFOTkyODUwQTNDQzRGOUFFMDIvNThGREQyRUEx MEMyMTFFQTk3N0U3Mzc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJnGhQDBAR8KOAwDQQCAAIwBwMFACQH7QAwDQYJKoZIhvcN AQELBQADggEBAMl0VPw72UVC7fOvHmMgYGU8PL+yfoPMqNtjXYSRxU7NSZaodkwO FY3RNBdpD8p3QDR5/c1hzPeKSPU/oyezzmkTcYguZuOrJqjBu8P48Qajy2D80Ex6 UmXDjCkrWNgyucSvi0YLZIAvUHw3n6IwtfVSndrkS+SOjfBNBwbtK1EBKXq5rN1B qqTOyc1pEypZQh+31yQ7mM3mnQi3jN1s+nRXqPoxhsi3O1rnIOX33SbPo5slE276 Si5ohO1bQ1v9oV9h+JbwP3I1d4UlE2SNTqh7wwxi79vWr2z0aUs6JqH0OCoyiCSL SpMb5TCmSSW/ISA5HbNtj/ZigYRDMtwHxlU= -----END CERTIFICATE-----Generated at Sun Jan 25 12:47:53 2026 by rpki-client