This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/AC0E54A8C8E311EF98C2B365C4F9AE02.roa File: AC0E54A8C8E311EF98C2B365C4F9AE02.roa (raw, json) Hash identifier: hpS0Rw4Hpsn18bTXeZcLgHqI4TGOF4pkI9VU9c22APE= Subject key identifier: 66:84:11:5F:11:77:9C:90:A2:63:5C:B7:8D:D6:9D:3B:1C:45:19:09 Certificate issuer: /CN=A91C5832/serialNumber=75D1C7A33303DA8DC6422AE351703F2A528DF3BE Certificate serial: 01A1 Authority key identifier: 75:D1:C7:A3:33:03:DA:8D:C6:42:2A:E3:51:70:3F:2A:52:8D:F3:BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddHHozMD2o3GQirjUXA_KlKN874.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/AC0E54A8C8E311EF98C2B365C4F9AE02.roa Signing time: Wed 07 Jan 2026 03:22:18 +0000 ROA not before: Wed 07 Jan 2026 03:22:18 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 137249 IP address blocks: 103.106.20.0/22 maxlen: 22 103.106.20.0/24 maxlen: 24 103.106.21.0/24 maxlen: 24 103.106.22.0/24 maxlen: 24 103.106.23.0/24 maxlen: 24 2402:37c0::/32 maxlen: 32 2402:37c0::/48 maxlen: 48 2402:37c0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.crl rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddHHozMD2o3GQirjUXA_KlKN874.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 02:42:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 417 (0x1a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5832, serialNumber=75D1C7A33303DA8DC6422AE351703F2A528DF3BE Validity Not Before: Jan 7 03:22:18 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=695dd16a-2619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:24:2f:30:f9:9d:f0:b8:2c:07:f9:ff:74:a0: 7e:97:93:40:39:82:64:9e:2c:99:4b:27:0d:f8:a9: 20:c4:46:fb:3f:16:9f:3f:55:09:65:a3:3b:ea:ef: 9c:3a:ee:b9:00:b9:f6:4c:10:2e:88:1c:ba:0e:4e: c2:90:9e:c5:91:75:fd:f3:98:5a:15:74:fc:c4:d6: 26:03:07:ce:80:40:e6:bb:76:cd:63:3a:5a:ca:c4: 45:fe:ad:78:c1:22:e9:dd:b6:42:0a:1e:0e:cb:ad: 2e:a6:4e:29:e5:38:73:5f:b0:b3:b5:6a:fe:a4:96: 86:b7:1c:f9:43:e6:7d:af:d3:53:b7:16:f0:56:4c: ed:b1:f0:de:f5:a4:a2:7d:0e:5a:d6:8a:f6:f2:9c: ac:f5:69:6a:34:a6:15:f7:2a:9a:08:f9:88:da:e3: ac:c5:2b:04:2c:1e:48:05:d1:f3:5d:92:e8:70:a6: 0e:9d:43:c9:6a:eb:6d:87:40:7b:2a:99:2d:b7:ef: ab:3c:66:91:19:04:6f:b4:f3:1b:b6:4d:8e:5d:38: 60:ee:d8:cf:36:fb:94:bf:75:72:c2:82:f5:33:16: fa:df:9e:39:e6:9d:22:13:86:a9:fc:b3:90:92:c7: 7f:c4:fd:7c:6a:6d:84:6b:f7:17:d7:ce:d2:ec:7e: 85:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:84:11:5F:11:77:9C:90:A2:63:5C:B7:8D:D6:9D:3B:1C:45:19:09 X509v3 Authority Key Identifier: keyid:75:D1:C7:A3:33:03:DA:8D:C6:42:2A:E3:51:70:3F:2A:52:8D:F3:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddHHozMD2o3GQirjUXA_KlKN874.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/AC0E54A8C8E311EF98C2B365C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.106.20.0/22 IPv6: 2402:37c0::/32 Signature Algorithm: sha256WithRSAEncryption 5b:f9:a5:69:ba:51:93:e1:21:12:f4:ea:4f:5f:f0:dc:4a:11: 74:2a:ed:cf:ed:70:33:b9:7e:24:ca:73:b9:1c:30:ce:fd:7e: d2:1b:2e:68:f1:5a:7b:65:ab:a0:a5:ed:80:dc:76:aa:37:cb: 15:20:fa:ba:7f:fd:72:2c:35:1d:41:85:ed:ef:ea:f1:2c:75: 2f:0c:6d:f5:bf:8b:9f:03:ae:13:5f:10:ac:04:74:21:93:d0: b3:5c:43:8f:67:b5:96:79:7c:69:7d:b9:eb:1f:8b:e1:26:2b: d2:e3:99:01:ca:ed:24:3e:b8:24:1a:f2:ba:7c:e1:49:6f:72: 8b:bb:7b:6f:f0:92:5c:b4:2c:f4:5a:9a:b6:51:8d:b8:9d:30: 15:91:13:04:ac:72:ed:6e:49:a2:fd:5e:a2:70:42:72:a4:58: b4:7b:e1:5d:49:b3:bf:be:89:35:ae:ac:f5:2b:be:b2:47:92: 48:4f:8d:27:12:5a:a0:02:8b:40:10:c2:8a:61:ea:65:9c:d6: c9:2f:10:11:e9:34:c4:13:dc:b5:1a:11:29:17:04:bc:ad:72: 53:e0:91:f2:9f:80:91:eb:41:7b:6c:0f:f9:1b:a9:71:6a:98: 9a:79:f1:41:d5:88:ec:ef:f0:d7:66:2b:d7:b9:a2:b0:57:0b: 78:6a:1a:d7 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QzU4MzIxMTAvBgNVBAUTKDc1RDFDN0EzMzMwM0RBOERDNjQyMkFFMzUxNzAzRjJB NTI4REYzQkUwHhcNMjYwMTA3MDMyMjE4WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTVkZDE2YS0yNjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0yQvMPmd8LgsB/n/dKB+l5NAOYJkniyZSycN+KkgxEb7PxafP1UJZaM76u+c Ou65ALn2TBAuiBy6Dk7CkJ7FkXX985haFXT8xNYmAwfOgEDmu3bNYzpaysRF/q14 wSLp3bZCCh4Oy60upk4p5ThzX7CztWr+pJaGtxz5Q+Z9r9NTtxbwVkztsfDe9aSi fQ5a1or28pys9WlqNKYV9yqaCPmI2uOsxSsELB5IBdHzXZLocKYOnUPJautth0B7 Kpktt++rPGaRGQRvtPMbtk2OXThg7tjPNvuUv3VywoL1Mxb635455p0iE4ap/LOQ ksd/xP18am2Ea/cX187S7H6FPwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFGaEEV8R d5yQomNct43WnTscRRkJMB8GA1UdIwQYMBaAFHXRx6MzA9qNxkIq41FwPypSjfO+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTgzMi82RDYwRjlEODg3 OTcxMUVFOUYzRUQ0NEZDNEY5QUUwMi9kZEhIb3pNRDJvM0dRaXJqVVhBX0tsS044 NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RkSEhvek1EMm8zR1FpcmpVWEFfS2xLTjg3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzU4MzIvNkQ2MEY5RDg4Nzk3MTFFRTlGM0VENDRGQzRGOUFFMDIvQUMwRTU0QThD OEUzMTFFRjk4QzJCMzY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnahQwDQQCAAIwBwMFACQCN8AwDQYJKoZIhvcNAQELBQAD ggEBAFv5pWm6UZPhIRL06k9f8NxKEXQq7c/tcDO5fiTKc7kcMM79ftIbLmjxWntl q6Cl7YDcdqo3yxUg+rp//XIsNR1Bhe3v6vEsdS8MbfW/i58DrhNfEKwEdCGT0LNc Q49ntZZ5fGl9uesfi+EmK9LjmQHK7SQ+uCQa8rp84Ulvcou7e2/wkly0LPRamrZR jbidMBWREwSscu1uSaL9XqJwQnKkWLR74V1Js7++iTWurPUrvrJHkkhPjScSWqAC i0AQwoph6mWc1skvEBHpNMQT3LUaESkXBLytclPgkfKfgJHrQXtsD/kbqXFqmJp5 8UHViOzv8NdmK9e5orBXC3hqGtc= -----END CERTIFICATE-----Generated at Sun Jan 25 18:32:26 2026 by rpki-client