This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/3E6CF84C883311EE8822D90BC4F9AE02.roa File: 3E6CF84C883311EE8822D90BC4F9AE02.roa (raw, json) Hash identifier: lJL4OyQQvMn6qBDjsbTMOw2wH6AlTxIpAcNj3bDWVv4= Subject key identifier: 28:B5:8C:6D:31:D4:E7:CD:ED:E8:48:62:35:6F:1D:DB:27:93:28:AC Certificate issuer: /CN=A91C5832/serialNumber=75D1C7A33303DA8DC6422AE351703F2A528DF3BE Certificate serial: 01A0 Authority key identifier: 75:D1:C7:A3:33:03:DA:8D:C6:42:2A:E3:51:70:3F:2A:52:8D:F3:BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddHHozMD2o3GQirjUXA_KlKN874.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/3E6CF84C883311EE8822D90BC4F9AE02.roa Signing time: Wed 07 Jan 2026 03:22:17 +0000 ROA not before: Wed 07 Jan 2026 03:22:17 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 137085 IP address blocks: 103.106.20.0/24 maxlen: 24 103.106.21.0/24 maxlen: 24 103.106.22.0/24 maxlen: 24 103.106.23.0/24 maxlen: 24 2402:37c0::/48 maxlen: 48 2402:37c0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.crl rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddHHozMD2o3GQirjUXA_KlKN874.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 02:42:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 416 (0x1a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5832, serialNumber=75D1C7A33303DA8DC6422AE351703F2A528DF3BE Validity Not Before: Jan 7 03:22:17 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=695dd169-6d01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:12:ca:45:9a:12:bf:ce:bf:9a:33:90:a9:bf: 6c:60:fc:76:e8:56:99:7e:fa:6a:4a:8e:e6:dd:4e: b4:a5:cc:a4:85:b1:85:5e:bb:65:a9:ea:bc:7e:f7: 7e:18:e5:f8:81:f5:ba:21:f1:92:24:76:fd:74:2a: 19:0a:fc:5e:f4:27:50:1d:3c:d1:d7:56:1b:ed:7c: ed:fd:dc:c2:c0:4e:44:51:f5:9b:71:ce:cc:34:6a: 58:a7:68:6c:ce:39:73:67:eb:73:7e:e6:7b:72:67: c0:b5:59:18:0a:fb:1a:01:4b:3e:e9:9a:2f:df:50: bb:31:44:ab:f2:d5:cb:b4:ff:a6:0e:6c:a4:0f:43: 5d:4f:df:10:d5:74:aa:38:80:23:04:e1:57:96:7c: 06:7c:22:11:cb:f1:6e:9d:e9:2a:e9:6e:8a:b7:c6: ea:0f:67:a2:65:c9:21:4d:18:fa:2f:4c:ad:6c:8d: 59:d3:05:e4:9d:b2:3c:30:b3:a4:52:54:19:aa:38: 51:04:ff:c8:28:35:f3:94:59:61:84:57:98:0d:44: 36:2a:cc:0a:b8:95:8f:20:c2:d3:f0:1f:f8:00:09: 41:79:7e:6c:ba:5a:32:99:b1:ae:1f:6a:33:39:5d: 78:1b:45:11:5a:d5:72:c2:de:af:cf:2b:42:16:02: 29:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B5:8C:6D:31:D4:E7:CD:ED:E8:48:62:35:6F:1D:DB:27:93:28:AC X509v3 Authority Key Identifier: keyid:75:D1:C7:A3:33:03:DA:8D:C6:42:2A:E3:51:70:3F:2A:52:8D:F3:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddHHozMD2o3GQirjUXA_KlKN874.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/3E6CF84C883311EE8822D90BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.106.20.0/22 IPv6: 2402:37c0::/47 Signature Algorithm: sha256WithRSAEncryption be:48:d1:54:3e:e7:52:49:58:3b:0b:5a:52:f9:09:13:4a:55: 1d:1a:04:ad:8c:52:03:01:7d:e2:0e:9a:8e:91:55:fa:c3:7e: 15:bb:5c:75:4d:46:0b:85:8a:06:ae:c0:08:83:54:9f:b5:ce: ca:13:e4:ea:85:b3:72:91:6d:5a:9a:69:02:d4:82:5e:9c:03: 0d:4b:c9:71:2a:0b:7d:cc:b9:06:59:2e:17:1f:eb:c4:f8:4c: 08:45:68:4e:21:35:47:76:d0:9f:18:72:7d:e8:6b:4c:c1:e9: 22:ab:c0:57:0f:e7:26:ab:1a:e5:0e:2c:ed:bf:a6:7d:e3:12: 45:d3:47:d6:de:f9:68:09:d0:5f:42:7b:f7:04:0d:34:ab:a4: 7c:63:0f:0e:cc:7b:99:aa:5b:9e:49:13:1a:01:92:37:03:86: ee:6c:f8:6b:87:e4:f3:b7:ad:64:64:3c:e6:ff:18:63:4e:bf: e5:5c:2a:ed:d6:dc:f5:08:de:32:9f:fe:d3:b8:5b:d8:7a:92: 76:bb:a8:33:78:49:79:62:2d:59:c8:72:3e:f9:ba:ce:72:7b: 9e:7b:58:8e:de:62:0c:94:fa:a1:0a:7e:08:71:bf:02:92:b3: 65:29:ea:15:8b:35:8c:f9:05:95:e7:5d:18:8e:cc:27:4a:b0: 8b:3b:f9:b0 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QzU4MzIxMTAvBgNVBAUTKDc1RDFDN0EzMzMwM0RBOERDNjQyMkFFMzUxNzAzRjJB NTI4REYzQkUwHhcNMjYwMTA3MDMyMjE3WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTVkZDE2OS02ZDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuBLKRZoSv86/mjOQqb9sYPx26FaZfvpqSo7m3U60pcykhbGFXrtlqeq8fvd+ GOX4gfW6IfGSJHb9dCoZCvxe9CdQHTzR11Yb7Xzt/dzCwE5EUfWbcc7MNGpYp2hs zjlzZ+tzfuZ7cmfAtVkYCvsaAUs+6Zov31C7MUSr8tXLtP+mDmykD0NdT98Q1XSq OIAjBOFXlnwGfCIRy/Funekq6W6Kt8bqD2eiZckhTRj6L0ytbI1Z0wXknbI8MLOk UlQZqjhRBP/IKDXzlFlhhFeYDUQ2KswKuJWPIMLT8B/4AAlBeX5suloymbGuH2oz OV14G0URWtVywt6vzytCFgIpVQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFCi1jG0x 1OfN7ehIYjVvHdsnkyisMB8GA1UdIwQYMBaAFHXRx6MzA9qNxkIq41FwPypSjfO+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTgzMi82RDYwRjlEODg3 OTcxMUVFOUYzRUQ0NEZDNEY5QUUwMi9kZEhIb3pNRDJvM0dRaXJqVVhBX0tsS044 NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RkSEhvek1EMm8zR1FpcmpVWEFfS2xLTjg3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzU4MzIvNkQ2MEY5RDg4Nzk3MTFFRTlGM0VENDRGQzRGOUFFMDIvM0U2Q0Y4NEM4 ODMzMTFFRTg4MjJEOTBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAJnahQwDwQCAAIwCQMHASQCN8AAADANBgkqhkiG9w0BAQsF AAOCAQEAvkjRVD7nUklYOwtaUvkJE0pVHRoErYxSAwF94g6ajpFV+sN+FbtcdU1G C4WKBq7ACINUn7XOyhPk6oWzcpFtWpppAtSCXpwDDUvJcSoLfcy5BlkuFx/rxPhM CEVoTiE1R3bQnxhyfehrTMHpIqvAVw/nJqsa5Q4s7b+mfeMSRdNH1t75aAnQX0J7 9wQNNKukfGMPDsx7mapbnkkTGgGSNwOG7mz4a4fk87etZGQ85v8YY06/5Vwq7dbc 9QjeMp/+07hb2HqSdruoM3hJeWItWchyPvm6znJ7nntYjt5iDJT6oQp+CHG/ApKz ZSnqFYs1jPkFleddGI7MJ0qwizv5sA== -----END CERTIFICATE-----Generated at Sun Jan 25 09:23:41 2026 by rpki-client