This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/35AFBD5AE0D011F09634A562536F56BC.roa File: 35AFBD5AE0D011F09634A562536F56BC.roa (raw, json) Hash identifier: mXfBjIwE7dVS2Z/ekCgvAw5O7Ia4zLLX0lNsZ/bmCws= Subject key identifier: 6C:1E:05:64:81:EB:09:6C:47:0A:7B:12:68:05:15:CF:17:0F:8B:E6 Certificate issuer: /CN=A91CC0C9/serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620 Certificate serial: 8D Authority key identifier: 47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/35AFBD5AE0D011F09634A562536F56BC.roa Signing time: Sun 11 Jan 2026 06:24:45 +0000 ROA not before: Sun 11 Jan 2026 06:24:45 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 137933 IP address blocks: 43.224.30.0/24 maxlen: 24 43.224.31.0/24 maxlen: 24 45.117.144.0/24 maxlen: 24 45.119.252.0/24 maxlen: 24 45.119.253.0/24 maxlen: 24 45.120.77.0/24 maxlen: 24 103.43.68.0/24 maxlen: 24 103.46.226.0/24 maxlen: 24 103.46.227.0/24 maxlen: 24 103.50.89.0/24 maxlen: 24 103.54.46.0/24 maxlen: 32 103.82.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 06:04:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC0C9, serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620 Validity Not Before: Jan 11 06:24:45 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=6963422d-be17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7d:fa:6a:f8:94:63:95:1b:5c:aa:df:3a:7e: 1f:83:3e:84:c8:90:2b:c4:ad:0c:b8:63:53:2f:ac: 0f:ea:d3:5e:39:9e:d9:ae:85:5d:19:7e:58:df:aa: d9:69:b2:2d:ac:cd:ae:b1:c9:e7:85:83:7e:05:ab: 70:70:dc:88:a6:72:d3:a5:9b:8f:0c:6e:bd:8e:83: d9:10:95:90:26:ab:ae:7f:f9:22:76:60:19:ec:9b: cd:8d:68:f1:82:69:66:d2:67:4f:5d:02:9c:4a:c0: ea:4f:86:2e:a2:c9:7a:9f:a8:98:28:31:79:1a:83: ba:52:a2:2f:14:39:35:89:0f:2a:84:3d:d5:22:33: 25:67:fc:db:77:cc:22:e3:d0:89:62:11:f3:09:32: ee:63:3f:78:18:ee:b1:43:79:18:17:95:48:74:fa: 03:34:1f:b8:6b:14:35:27:97:ae:d8:8c:eb:54:92: 01:53:83:b0:b1:ef:42:41:07:c5:3c:67:ec:9a:b6: 51:97:c9:2f:ef:2d:a8:69:bd:b3:93:fa:96:34:7f: 8f:74:3b:83:a3:8a:7c:50:30:b7:9d:94:9f:5d:5f: 95:9c:d9:71:b3:1b:95:3e:bc:26:2d:ac:96:b7:b0: 58:b7:a0:cb:b7:6d:70:ba:74:72:af:fb:d3:5b:aa: 4f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:1E:05:64:81:EB:09:6C:47:0A:7B:12:68:05:15:CF:17:0F:8B:E6 X509v3 Authority Key Identifier: keyid:47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/35AFBD5AE0D011F09634A562536F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.224.30.0/23 45.117.144.0/24 45.119.252.0/23 45.120.77.0/24 103.43.68.0/24 103.46.226.0/23 103.50.89.0/24 103.54.46.0/24 103.82.140.0/24 Signature Algorithm: sha256WithRSAEncryption 97:79:2c:f5:b6:90:6d:10:45:8e:e9:81:65:a2:65:8d:e7:33: 22:70:85:b3:c6:55:44:b6:6c:ed:30:ec:e4:62:be:42:a3:0e: 0a:3d:88:59:b5:4b:93:fc:b6:79:a8:22:71:3b:9d:a8:3a:eb: 7d:eb:5f:2b:ad:e9:6f:f8:15:70:36:4c:c9:fe:8f:6b:2d:c1: 5d:2d:9d:1a:9e:c7:95:46:ad:b8:66:0a:25:6f:fb:3b:30:f6: fe:f2:b4:2c:0d:6b:84:32:4e:b1:50:db:9a:90:fa:36:a5:3e: 1b:0a:14:c5:05:7b:dc:1c:5c:4c:96:8e:f2:24:27:df:7e:61: cc:58:0f:f8:e9:40:2e:bf:36:d2:fa:f1:c2:1f:72:1f:98:43: f2:52:e3:f8:a6:d9:4b:ea:75:a3:27:f5:32:74:29:8f:cf:d0: 6e:e3:a5:38:21:dc:68:69:c3:b9:f1:91:e9:e6:d7:77:19:40: a3:d0:2d:c4:91:af:4d:ac:19:d7:a1:62:d0:ec:03:ea:72:03: 18:e1:03:57:67:17:33:69:a7:f1:1f:c6:c1:74:a8:41:c1:32: d1:86:eb:00:aa:0f:72:98:07:eb:51:39:10:6c:f9:13:fd:da: 4b:ca:ce:af:ce:18:53:87:af:b3:6c:a7:e5:3c:3c:32:7a:1d: e8:82:68:77 -----BEGIN CERTIFICATE----- MIIFoTCCBImgAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx Q0MwQzkxMTAvBgNVBAUTKDQ3QjU3N0I5QzhBQkUyQzM2MDBDNUI0RTc5M0ZGNEQ0 N0I2NTA2MjAwHhcNMjYwMTExMDYyNDQ1WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTYzNDIyZC1iZTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvH36aviUY5UbXKrfOn4fgz6EyJArxK0MuGNTL6wP6tNeOZ7ZroVdGX5Y36rZ abItrM2uscnnhYN+BatwcNyIpnLTpZuPDG69joPZEJWQJquuf/kidmAZ7JvNjWjx gmlm0mdPXQKcSsDqT4Yuosl6n6iYKDF5GoO6UqIvFDk1iQ8qhD3VIjMlZ/zbd8wi 49CJYhHzCTLuYz94GO6xQ3kYF5VIdPoDNB+4axQ1J5eu2IzrVJIBU4Owse9CQQfF PGfsmrZRl8kv7y2oab2zk/qWNH+PdDuDo4p8UDC3nZSfXV+VnNlxsxuVPrwmLayW t7BYt6DLt21wunRyr/vTW6pPpwIDAQABo4ICxTCCAsEwHQYDVR0OBBYEFGweBWSB 6wlsRwp7EmgFFc8XD4vmMB8GA1UdIwQYMBaAFEe1d7nIq+LDYAxbTnk/9NR7ZQYg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzBDOS9DNURBQkVFQTVG QjQxMUYwODIwMzQ0N0RDNEY5QUUwMi9SN1YzdWNpcjRzTmdERnRPZVRfMDFIdGxC aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1I3VjN1Y2lyNHNOZ0RGdE9lVF8wMUh0bEJpQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0MwQzkvQzVEQUJFRUE1RkI0MTFGMDgyMDM0NDdEQzRGOUFFMDIvMzVBRkJENUFF MEQwMTFGMDk2MzRBNTYyNTM2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTwYIKwYBBQUHAQcBAf8E QDA+MDwEAgABMDYDBAEr4B4DBAAtdZADBAEtd/wDBAAteE0DBABnK0QDBAFnLuID BABnMlkDBABnNi4DBABnUowwDQYJKoZIhvcNAQELBQADggEBAJd5LPW2kG0QRY7p gWWiZY3nMyJwhbPGVUS2bO0w7ORivkKjDgo9iFm1S5P8tnmoInE7nag6633rXyut 6W/4FXA2TMn+j2stwV0tnRqex5VGrbhmCiVv+zsw9v7ytCwNa4QyTrFQ25qQ+jal PhsKFMUFe9wcXEyWjvIkJ99+YcxYD/jpQC6/NtL68cIfch+YQ/JS4/im2UvqdaMn 9TJ0KY/P0G7jpTgh3Ghpw7nxkenm13cZQKPQLcSRr02sGdehYtDsA+pyAxjhA1dn FzNpp/EfxsF0qEHBMtGG6wCqD3KYB+tRORBs+RP92kvKzq/OGFOHr7Nsp+U8PDJ6 HeiCaHc= -----END CERTIFICATE-----Generated at Sun Jan 25 09:18:40 2026 by rpki-client