This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/A0E062260A8C11EAB25FD253C4F9AE02.roa File: A0E062260A8C11EAB25FD253C4F9AE02.roa (raw, json) Hash identifier: rGvn+Xb9+6pa0bOx7i6L0AMIOcUgqgdGFWif5XQ+yTE= Subject key identifier: CA:25:09:57:AB:E4:FC:AF:60:DC:68:C4:50:CC:5B:3A:62:96:37:53 Certificate issuer: /CN=A91C9D5D/serialNumber=372D936E38D8B9CB1F7012219FF82172B90BEE58 Certificate serial: 0C9B Authority key identifier: 37:2D:93:6E:38:D8:B9:CB:1F:70:12:21:9F:F8:21:72:B9:0B:EE:58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/A0E062260A8C11EAB25FD253C4F9AE02.roa Signing time: Tue 30 Dec 2025 18:15:33 +0000 ROA not before: Tue 30 Dec 2025 18:15:33 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 137029 IP address blocks: 103.102.136.0/22 maxlen: 22 103.102.136.0/24 maxlen: 24 103.102.137.0/24 maxlen: 24 103.102.138.0/24 maxlen: 24 103.102.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 18:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3227 (0xc9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9D5D, serialNumber=372D936E38D8B9CB1F7012219FF82172B90BEE58 Validity Not Before: Dec 30 18:15:33 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=695416c5-5798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c1:5d:7c:a9:e7:1d:1d:a6:6a:9d:da:18:2b: a2:eb:08:5b:61:1f:71:37:9b:c3:6d:be:df:64:83: 6c:2c:38:e6:18:d5:c1:5b:85:4e:07:9e:e6:38:4e: 22:35:9e:68:6f:e0:66:55:c4:d3:ff:da:a5:52:67: 30:a7:98:50:6e:70:b7:fe:5a:6b:de:f0:6a:43:64: 65:17:74:0f:59:74:1b:d5:25:06:f5:fc:8b:1c:42: e9:5c:86:8d:c3:cd:14:95:5a:e3:44:6f:dd:8f:f3: f8:ea:96:a1:32:5b:78:6c:2a:72:b9:fc:07:ce:b7: 3b:68:c7:a2:00:a6:9b:85:0c:af:bd:00:4d:43:f3: b1:11:67:d3:5e:9b:dc:63:31:57:04:27:a2:a0:a9: 53:de:33:7d:4f:16:af:8b:5d:e7:41:78:ce:e2:eb: 96:df:43:8e:f9:e1:0f:cf:1e:5e:71:71:7c:9b:c6: fb:81:f5:f1:ec:6a:a9:43:1b:e7:ff:3a:94:3a:2e: 56:56:a7:e5:78:b7:50:05:f5:de:cd:4b:5f:e2:59: 2d:7b:80:a5:89:ba:c4:6b:42:86:6b:1d:01:58:66: af:e1:b2:6c:ab:08:33:ef:39:18:07:8c:a5:82:1f: f2:da:6c:3a:23:cf:b1:01:0d:50:b4:39:b1:a2:88: 62:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:25:09:57:AB:E4:FC:AF:60:DC:68:C4:50:CC:5B:3A:62:96:37:53 X509v3 Authority Key Identifier: keyid:37:2D:93:6E:38:D8:B9:CB:1F:70:12:21:9F:F8:21:72:B9:0B:EE:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/A0E062260A8C11EAB25FD253C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.102.136.0/22 Signature Algorithm: sha256WithRSAEncryption a9:f6:f8:4f:29:e5:30:a3:5c:31:c9:df:e3:03:6a:54:43:fe: cd:eb:a7:e1:3d:7a:b4:45:d6:3a:04:bd:9e:ef:9c:a4:a3:42: 3a:bc:1c:36:5b:df:44:a9:d5:e0:e1:75:7f:7f:c7:fd:86:ec: aa:06:0e:ea:52:5c:85:f5:42:5e:60:a4:94:50:3a:1c:10:32: 5b:5f:f7:b7:e8:5a:69:c7:65:46:67:e9:ec:fa:a8:ba:d0:ee: bd:8c:ec:da:f6:c8:c1:be:12:ae:e7:24:0e:af:fc:ea:1e:14: c9:27:04:02:f1:7f:ef:c5:4b:c7:4a:80:64:a2:b7:8a:66:db: e8:6c:b2:06:ef:8d:e1:df:a9:33:6c:ac:de:70:2f:0e:df:f9: 9d:e8:f7:76:aa:41:22:c4:09:a9:a0:eb:14:71:e3:31:30:b7: 6d:7a:16:8c:07:4b:af:ad:77:d7:23:30:4b:d4:1a:83:56:77: 8b:3e:98:f2:c3:61:09:37:3b:a6:d8:13:bd:02:75:35:48:89: 6d:74:4e:f9:4c:17:03:89:a3:28:50:bf:f2:28:f3:5d:2f:31: 7b:47:c7:1e:67:ff:0a:51:ef:9d:fd:b8:96:c3:86:d7:3a:ea: 43:d6:d3:45:1b:0f:a8:5d:58:14:ec:bf:b3:a0:d9:24:33:9e: c6:32:ce:fd -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QzlENUQxMTAvBgNVBAUTKDM3MkQ5MzZFMzhEOEI5Q0IxRjcwMTIyMTlGRjgyMTcy QjkwQkVFNTgwHhcNMjUxMjMwMTgxNTMzWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU0MTZjNS01Nzk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0MFdfKnnHR2map3aGCui6whbYR9xN5vDbb7fZINsLDjmGNXBW4VOB57mOE4i NZ5ob+BmVcTT/9qlUmcwp5hQbnC3/lpr3vBqQ2RlF3QPWXQb1SUG9fyLHELpXIaN w80UlVrjRG/dj/P46pahMlt4bCpyufwHzrc7aMeiAKabhQyvvQBNQ/OxEWfTXpvc YzFXBCeioKlT3jN9Txavi13nQXjO4uuW30OO+eEPzx5ecXF8m8b7gfXx7GqpQxvn /zqUOi5WVqfleLdQBfXezUtf4lkte4ClibrEa0KGax0BWGav4bJsqwgz7zkYB4yl gh/y2mw6I8+xAQ1QtDmxoohijQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMolCVer 5PyvYNxoxFDMWzpiljdTMB8GA1UdIwQYMBaAFDctk2442LnLH3ASIZ/4IXK5C+5Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUQ1RC9ERDZGMjg3MjBB OEIxMUVBQkNGOUNFNTJDNEY5QUUwMi9OeTJUYmpqWXVjc2ZjQklobl9naGNya0w3 bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL055MlRiampZdWNzZmNCSWhuX2doY3JrTDdsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzlENUQvREQ2RjI4NzIwQThCMTFFQUJDRjlDRTUyQzRGOUFFMDIvQTBFMDYyMjYw QThDMTFFQUIyNUZEMjUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnZogwDQYJKoZIhvcNAQELBQADggEBAKn2+E8p5TCjXDHJ 3+MDalRD/s3rp+E9erRF1joEvZ7vnKSjQjq8HDZb30Sp1eDhdX9/x/2G7KoGDupS XIX1Ql5gpJRQOhwQMltf97foWmnHZUZn6ez6qLrQ7r2M7Nr2yMG+Eq7nJA6v/Ooe FMknBALxf+/FS8dKgGSit4pm2+hssgbvjeHfqTNsrN5wLw7f+Z3o93aqQSLECamg 6xRx4zEwt216FowHS6+td9cjMEvUGoNWd4s+mPLDYQk3O6bYE70CdTVIiW10TvlM FwOJoyhQv/Io810vMXtHxx5n/wpR7539uJbDhtc66kPW00UbD6hdWBTsv7Og2SQz nsYyzv0= -----END CERTIFICATE-----Generated at Mon Jan 26 01:09:24 2026 by rpki-client