This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/0B6B9DE6BAAE11EA8F1DA435C4F9AE02.roa File: 0B6B9DE6BAAE11EA8F1DA435C4F9AE02.roa (raw, json) Hash identifier: 4VGSVDGkNRxbqzKhTUkYTHB/bvhkwrdrsnzSAl6YQ/Q= Subject key identifier: C7:65:A6:B0:A7:84:E1:2F:8B:01:13:44:30:75:F0:CF:FB:61:F7:CD Certificate issuer: /CN=A91CB8BA/serialNumber=922D60EA193967177BC6C39A4068598A3B75A6D3 Certificate serial: 0925 Authority key identifier: 92:2D:60:EA:19:39:67:17:7B:C6:C3:9A:40:68:59:8A:3B:75:A6:D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ki1g6hk5Zxd7xsOaQGhZijt1ptM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/0B6B9DE6BAAE11EA8F1DA435C4F9AE02.roa Signing time: Mon 12 Jan 2026 20:16:39 +0000 ROA not before: Mon 12 Jan 2026 20:16:39 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 137280 IP address blocks: 103.106.208.0/22 maxlen: 22 103.106.208.0/23 maxlen: 23 103.106.210.0/23 maxlen: 23 103.106.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.crl rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ki1g6hk5Zxd7xsOaQGhZijt1ptM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 19:40:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2341 (0x925) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB8BA, serialNumber=922D60EA193967177BC6C39A4068598A3B75A6D3 Validity Not Before: Jan 12 20:16:39 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=696556a7-ef98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:90:a6:cc:09:2f:a1:76:fd:53:87:d4:f5:ea: 6b:35:9f:e3:b9:52:7c:48:d7:41:35:4f:f4:ef:1d: 98:b1:9f:12:6f:be:48:18:a0:d5:32:d8:c1:fd:f7: c8:12:8b:40:8a:e0:39:c9:d8:76:4e:0d:fb:76:cf: 7d:2f:dc:c4:5f:29:ea:d9:88:04:2a:9e:39:4e:6c: 8f:08:3c:61:fc:1a:7d:c8:d3:56:b8:7c:2e:e9:95: e1:b4:1f:82:0b:66:81:f9:94:83:53:96:65:3a:8e: 2a:e5:4c:d4:23:66:ad:dc:ac:2a:66:c3:7f:29:f2: 9a:e9:53:ed:04:e6:e7:77:c9:4b:03:71:90:46:90: 3b:a5:cd:ee:a7:2a:8e:e8:a9:a1:e2:3a:21:10:9d: ab:5a:06:5d:5d:fa:80:f3:90:88:67:28:ee:f2:26: c6:d3:3e:67:5e:9f:75:59:36:08:a9:fa:66:a4:2f: 22:62:5a:e4:26:c4:b8:74:04:36:ad:69:b4:35:5a: c6:71:af:50:c9:58:c9:1b:85:f6:1e:81:23:94:22: 71:74:24:d4:4a:38:14:8f:bf:1b:62:04:17:d9:ba: 60:2c:f4:53:18:f8:69:8a:e3:0f:35:20:6b:47:f8: b0:24:85:24:95:91:8e:b6:85:da:f1:d2:c6:4f:d5: 8b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:65:A6:B0:A7:84:E1:2F:8B:01:13:44:30:75:F0:CF:FB:61:F7:CD X509v3 Authority Key Identifier: keyid:92:2D:60:EA:19:39:67:17:7B:C6:C3:9A:40:68:59:8A:3B:75:A6:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ki1g6hk5Zxd7xsOaQGhZijt1ptM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/0B6B9DE6BAAE11EA8F1DA435C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.106.208.0/22 Signature Algorithm: sha256WithRSAEncryption 02:9d:0c:5a:c4:67:47:3b:de:21:0f:c7:32:56:2f:05:11:be: 17:d3:04:19:13:7c:99:a2:7a:ee:df:6a:70:9d:56:14:4b:ec: 38:d9:9a:3f:42:cd:fe:6a:4b:2a:18:94:93:71:f0:82:04:ac: b6:1d:26:12:70:11:cb:c8:f4:2a:65:f9:ec:5b:2e:f7:2b:67: 5a:d8:61:d5:94:5e:29:da:c3:51:9f:a4:23:0a:40:42:6a:18: b5:75:03:5a:0f:94:43:25:78:28:c2:ea:f1:55:ab:cc:5c:82: eb:3d:e9:86:18:8a:94:e1:e1:07:25:4f:b1:d8:e9:35:17:e9: ba:9f:d5:88:bb:f3:2c:c4:bc:77:8f:ef:c8:72:46:46:f6:bc: 1f:c6:90:0f:b4:af:9a:d4:51:75:dc:07:b3:17:4a:ea:2a:07: ae:13:c0:c1:fd:ad:6d:4e:49:50:ce:5c:fc:2f:41:6b:fd:37: 44:79:2e:92:9d:c3:e2:8a:39:95:7b:36:dd:5f:9d:a8:9e:7a: 13:a1:8e:ae:fb:21:0a:1f:4f:fe:bd:ee:20:35:4b:03:06:de: 96:00:2d:de:21:09:2a:ca:a1:3a:d5:8d:fc:1e:df:51:41:3e: ee:8e:63:c3:67:09:10:ae:44:ff:7c:0e:5f:71:54:e6:b0:59: 42:ee:f7:68 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx Q0I4QkExMTAvBgNVBAUTKDkyMkQ2MEVBMTkzOTY3MTc3QkM2QzM5QTQwNjg1OThB M0I3NUE2RDMwHhcNMjYwMTEyMjAxNjM5WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTY1NTZhNy1lZjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqpCmzAkvoXb9U4fU9eprNZ/juVJ8SNdBNU/07x2YsZ8Sb75IGKDVMtjB/ffI EotAiuA5ydh2Tg37ds99L9zEXynq2YgEKp45TmyPCDxh/Bp9yNNWuHwu6ZXhtB+C C2aB+ZSDU5ZlOo4q5UzUI2at3KwqZsN/KfKa6VPtBObnd8lLA3GQRpA7pc3upyqO 6Kmh4johEJ2rWgZdXfqA85CIZyju8ibG0z5nXp91WTYIqfpmpC8iYlrkJsS4dAQ2 rWm0NVrGca9QyVjJG4X2HoEjlCJxdCTUSjgUj78bYgQX2bpgLPRTGPhpiuMPNSBr R/iwJIUklZGOtoXa8dLGT9WLiwIDAQABo4IClTCCApEwHQYDVR0OBBYEFMdlprCn hOEviwETRDB18M/7YffNMB8GA1UdIwQYMBaAFJItYOoZOWcXe8bDmkBoWYo7dabT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjhCQS8zMjA5MDFDNEJB ODUxMUVBQkE4MzhFMzBDNEY5QUUwMi9raTFnNmhrNVp4ZDd4c09hUUdoWmlqdDFw dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tpMWc2aGs1WnhkN3hzT2FRR2haaWp0MXB0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0I4QkEvMzIwOTAxQzRCQTg1MTFFQUJBODM4RTMwQzRGOUFFMDIvMEI2QjlERTZC QUFFMTFFQThGMURBNDM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnatAwDQYJKoZIhvcNAQELBQADggEBAAKdDFrEZ0c73iEP xzJWLwURvhfTBBkTfJmieu7fanCdVhRL7DjZmj9Czf5qSyoYlJNx8IIErLYdJhJw EcvI9Cpl+exbLvcrZ1rYYdWUXinaw1GfpCMKQEJqGLV1A1oPlEMleCjC6vFVq8xc gus96YYYipTh4QclT7HY6TUX6bqf1Yi78yzEvHeP78hyRkb2vB/GkA+0r5rUUXXc B7MXSuoqB64TwMH9rW1OSVDOXPwvQWv9N0R5LpKdw+KKOZV7Nt1fnaieehOhjq77 IQofT/697iA1SwMG3pYALd4hCSrKoTrVjfwe31FBPu6OY8NnCRCuRP98Dl9xVOaw WULu92g= -----END CERTIFICATE-----Generated at Sun Jan 25 04:33:43 2026 by rpki-client