This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/F3529CDCAE1511EE92D99E46C4F9AE02.roa File: F3529CDCAE1511EE92D99E46C4F9AE02.roa (raw, json) Hash identifier: Es8XS7g0+bPB2VUMzuh8jLLqheaUliLQZn9wcmlkbao= Subject key identifier: AA:89:21:D1:DC:D9:51:8C:57:A9:D9:97:19:A5:33:3A:33:CB:24:58 Certificate issuer: /CN=A91D4345/serialNumber=E537D0C348FD7DC49F5FC3B0066A31C584FAE1AB Certificate serial: 0CCE Authority key identifier: E5:37:D0:C3:48:FD:7D:C4:9F:5F:C3:B0:06:6A:31:C5:84:FA:E1:AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/F3529CDCAE1511EE92D99E46C4F9AE02.roa Signing time: Wed 14 Jan 2026 18:16:06 +0000 ROA not before: Wed 14 Jan 2026 18:16:06 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 17471 IP address blocks: 103.7.112.0/22 maxlen: 24 122.99.96.0/21 maxlen: 24 202.125.64.0/20 maxlen: 24 203.83.160.0/19 maxlen: 24 203.191.32.0/23 maxlen: 24 2407:f040::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.crl rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 17:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3278 (0xcce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4345, serialNumber=E537D0C348FD7DC49F5FC3B0066A31C584FAE1AB Validity Not Before: Jan 14 18:16:06 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6967dd66-3ba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:63:ef:7d:f3:21:67:58:27:e9:2a:07:51:33: 94:79:ae:ff:2a:ec:8e:60:98:74:65:d7:40:5f:22: 90:1e:bf:f7:77:b5:91:e8:76:4a:18:84:e6:77:8a: c7:b2:ce:e0:45:b8:fc:30:e4:53:d0:7d:58:d8:34: 80:ef:8c:49:5c:6d:ce:d1:a4:79:8e:c2:3f:bb:6d: 91:61:56:9c:c2:0b:37:9b:56:bb:91:78:cc:69:1a: 01:94:5f:5a:b5:44:31:64:9e:3d:23:08:bb:49:2f: 96:5c:1a:ee:95:f0:03:8e:93:ba:68:df:e6:7b:c8: cd:2e:84:75:69:3a:8b:48:c1:94:d8:f6:a5:56:27: 55:e4:fb:c4:aa:fb:0f:47:62:95:a7:28:a9:38:6e: 02:7e:84:da:bb:30:6e:9a:fe:4f:e6:d2:fa:2b:59: e2:60:3d:a8:fd:7e:84:46:ce:4e:c8:18:c5:9f:05: 4a:87:69:91:44:9d:85:d5:94:73:f2:f1:e1:78:6f: 2c:59:71:3b:c6:75:88:c2:69:00:0f:73:e8:c1:5d: 67:e1:de:2a:63:32:c6:e4:c8:22:21:35:ca:9c:b8: eb:0f:64:b4:b1:e1:cf:82:89:e4:ac:16:8a:fd:38: 29:2f:62:00:45:88:13:0f:42:eb:c5:3c:0f:6d:b5: da:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:89:21:D1:DC:D9:51:8C:57:A9:D9:97:19:A5:33:3A:33:CB:24:58 X509v3 Authority Key Identifier: keyid:E5:37:D0:C3:48:FD:7D:C4:9F:5F:C3:B0:06:6A:31:C5:84:FA:E1:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/F3529CDCAE1511EE92D99E46C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.7.112.0/22 122.99.96.0/21 202.125.64.0/20 203.83.160.0/19 203.191.32.0/23 IPv6: 2407:f040::/32 Signature Algorithm: sha256WithRSAEncryption 6f:39:20:f6:04:32:af:1b:77:a6:eb:4a:f7:20:a8:9d:e4:eb: 51:ef:d4:b0:bb:ac:1e:c6:91:19:6d:db:b1:e8:ee:c9:b2:24: 4e:bf:dd:25:42:dc:6f:42:62:e2:c4:a8:01:43:3a:f4:4e:64: f6:33:0d:c0:5d:ae:b6:13:a9:eb:07:a7:a3:fe:a7:d6:ff:c2: c5:76:12:ad:e3:ab:da:27:c3:28:0b:64:f4:f1:00:29:88:cd: f1:50:87:8b:2f:42:68:d1:5f:8f:2b:06:e7:56:36:19:6d:61: 1c:b4:44:5e:b1:ab:01:4b:1d:74:1e:fc:03:5a:e9:64:55:bb: 6e:34:53:ed:f4:1a:08:6e:67:e4:39:22:81:03:83:de:7f:20: f3:f0:2e:ee:f2:89:47:2a:c5:d0:f9:fe:c0:ec:10:06:63:d6: 42:ee:df:63:fc:3b:80:ef:05:be:13:b9:2b:57:d7:00:48:dc: 86:3d:12:cd:05:39:da:8d:28:76:48:14:f4:76:67:69:86:00: a8:45:31:e7:33:ed:7f:80:bb:71:f5:35:d5:c0:38:23:9d:13: a5:5a:e0:87:d7:6c:fa:0d:50:7c:e1:11:2a:8d:58:f6:8b:9d: 70:93:c2:ef:c9:d8:55:35:6a:ff:30:a5:c2:24:d7:9b:d0:e4: fd:e5:53:cf -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgICDM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx RDQzNDUxMTAvBgNVBAUTKEU1MzdEMEMzNDhGRDdEQzQ5RjVGQzNCMDA2NkEzMUM1 ODRGQUUxQUIwHhcNMjYwMTE0MTgxNjA2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTY3ZGQ2Ni0zYmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlWPvffMhZ1gn6SoHUTOUea7/KuyOYJh0ZddAXyKQHr/3d7WR6HZKGITmd4rH ss7gRbj8MORT0H1Y2DSA74xJXG3O0aR5jsI/u22RYVacwgs3m1a7kXjMaRoBlF9a tUQxZJ49Iwi7SS+WXBrulfADjpO6aN/me8jNLoR1aTqLSMGU2PalVidV5PvEqvsP R2KVpyipOG4CfoTauzBumv5P5tL6K1niYD2o/X6ERs5OyBjFnwVKh2mRRJ2F1ZRz 8vHheG8sWXE7xnWIwmkAD3PowV1n4d4qYzLG5MgiITXKnLjrD2S0seHPgonkrBaK /TgpL2IARYgTD0LrxTwPbbXaGwIDAQABo4ICvDCCArgwHQYDVR0OBBYEFKqJIdHc 2VGMV6nZlxmlMzozyyRYMB8GA1UdIwQYMBaAFOU30MNI/X3En1/DsAZqMcWE+uGr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDM0NS9FQzc4Q0REQTA1 MzgxMUVBQjU4OTc2NjhDNEY5QUUwMi81VGZRdzBqOWZjU2ZYOE93Qm1veHhZVDY0 YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVUZlF3MGo5ZmNTZlg4T3dCbW94eFlUNjRhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDQzNDUvRUM3OENEREEwNTM4MTFFQUI1ODk3NjY4QzRGOUFFMDIvRjM1MjlDRENB RTE1MTFFRTkyRDk5RTQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRgYIKwYBBQUHAQcBAf8E NzA1MCQEAgABMB4DBAJnB3ADBAN6Y2ADBATKfUADBAXLU6ADBAHLvyAwDQQCAAIw BwMFACQH8EAwDQYJKoZIhvcNAQELBQADggEBAG85IPYEMq8bd6brSvcgqJ3k61Hv 1LC7rB7GkRlt27Ho7smyJE6/3SVC3G9CYuLEqAFDOvROZPYzDcBdrrYTqesHp6P+ p9b/wsV2Eq3jq9onwygLZPTxACmIzfFQh4svQmjRX48rBudWNhltYRy0RF6xqwFL HXQe/ANa6WRVu240U+30GghuZ+Q5IoEDg95/IPPwLu7yiUcqxdD5/sDsEAZj1kLu 32P8O4DvBb4TuStX1wBI3IY9Es0FOdqNKHZIFPR2Z2mGAKhFMecz7X+Au3H1NdXA OCOdE6Va4IfXbPoNUHzhESqNWPaLnXCTwu/J2FU1av8wpcIk15vQ5P3lU88= -----END CERTIFICATE-----Generated at Sun Jan 25 07:55:13 2026 by rpki-client