This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/48BC2840B0CC11F08FB0892CC4F9AE02.roa File: 48BC2840B0CC11F08FB0892CC4F9AE02.roa (raw, json) Hash identifier: C6tD4mSNlC0ByI49NMGo4/yoShnZixOVTJXn7iSHxXs= Subject key identifier: 68:8C:CB:7F:84:07:17:A4:78:E3:EB:1B:92:6D:CE:9D:09:7C:00:79 Certificate issuer: /CN=A91D560D/serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA Certificate serial: 0925 Authority key identifier: D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/48BC2840B0CC11F08FB0892CC4F9AE02.roa Signing time: Sun 25 Jan 2026 13:53:04 +0000 ROA not before: Sun 25 Jan 2026 13:53:04 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135030 IP address blocks: 103.111.164.0/23 maxlen: 23 103.111.164.0/24 maxlen: 24 103.111.165.0/24 maxlen: 24 103.111.166.0/24 maxlen: 24 103.111.167.0/24 maxlen: 24 2402:9f40::/32 maxlen: 32 2402:9f40:1::/48 maxlen: 48 2402:9f40:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 14:15:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2341 (0x925) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D560D, serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA Validity Not Before: Jan 25 13:53:04 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69762040-8be5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:51:c9:7c:e2:a7:6c:a8:c0:c4:7c:4f:94:2b: b7:77:07:36:56:2b:d1:0a:b1:cc:b2:c8:20:9e:3d: 0e:e5:dc:83:f5:be:ab:68:26:a8:a9:55:1e:17:ed: ef:13:d0:e2:a0:96:50:f0:d1:0a:cc:df:92:69:be: bf:20:e0:29:0e:43:4c:5b:10:77:d9:42:7d:77:0a: 3f:5c:ce:72:d7:48:07:5c:1c:b3:e5:bf:73:5b:f7: 05:3e:49:65:9e:2a:ff:1c:0f:8d:9b:b3:a9:6a:bd: 27:ec:c5:57:21:b9:9d:43:4e:31:77:2e:92:4c:e7: 5f:43:6c:92:73:1f:cb:82:44:a4:11:8c:9e:06:98: 1b:0a:78:b3:45:cc:c5:b7:7e:af:4d:b8:e7:f1:a6: 41:ca:a1:0c:8d:38:f9:c2:d8:b5:d6:54:02:b4:9a: e6:38:cb:58:7b:62:16:19:16:8e:c3:54:21:f3:bc: be:94:9b:a0:08:8c:22:4f:de:9b:e7:fe:04:c7:48: fa:1a:d7:a9:c1:69:9f:8f:94:a1:07:a9:12:3a:91: 59:ab:8f:c6:4e:ee:27:d5:9a:57:01:69:51:f5:48: d8:be:b9:77:c1:e0:dd:5e:6b:5c:04:f7:d7:bd:22: 45:ff:c0:e0:10:0f:e0:8a:e2:11:af:cc:2f:66:db: e1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:8C:CB:7F:84:07:17:A4:78:E3:EB:1B:92:6D:CE:9D:09:7C:00:79 X509v3 Authority Key Identifier: keyid:D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/48BC2840B0CC11F08FB0892CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.111.164.0/22 IPv6: 2402:9f40::/32 Signature Algorithm: sha256WithRSAEncryption ae:50:68:08:c2:e8:8c:09:c0:a6:ba:18:b1:02:4b:7a:9a:6d: 97:eb:88:e6:0d:69:40:cd:ea:10:9b:3a:3b:23:f6:d4:0f:c3: ca:86:92:50:83:dd:f0:27:84:22:6c:c7:59:0d:cd:30:c7:36: c8:37:4d:5e:f4:82:1a:e6:81:89:bc:c7:e9:c8:ca:1c:9f:ce: f6:e6:d6:29:7c:da:ce:2c:78:79:7f:e7:e1:80:52:dd:fd:ed: 29:3a:dc:a6:e4:68:22:fc:4f:4f:af:50:84:ff:39:df:08:f5: 41:21:73:d6:eb:f3:b5:45:b3:02:ca:09:dd:72:92:e6:6e:56: dd:0f:2a:37:60:9a:25:51:1b:c5:8e:2a:98:b7:9e:29:c6:62: 35:70:5e:f8:ab:f3:4c:f3:67:c9:33:e4:c1:3d:e8:9c:9d:4d: 74:64:a8:87:55:dc:a1:a2:57:46:25:9d:14:54:f0:dd:ab:e5: 68:dd:b3:f7:3a:3b:65:aa:a4:99:48:10:88:47:7a:ba:c9:cb: 08:b1:32:85:5c:c7:72:37:d5:aa:a0:cf:c5:1f:f2:7d:92:e4: 33:6b:1e:89:3b:e0:21:7c:04:19:c3:bd:42:e4:11:98:c9:cb: ca:9c:ef:f0:3d:07:c9:f5:5e:86:a4:66:d3:db:5b:95:4c:3d: 11:a3:a9:5b -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU2MEQxMTAvBgNVBAUTKEQ3MTQ2REE5REUyOEY1QkI1RTNERTJGRjAwQzU5RkM4 NUM5OTM4REEwHhcNMjYwMTI1MTM1MzA0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTc2MjA0MC04YmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsVHJfOKnbKjAxHxPlCu3dwc2VivRCrHMssggnj0O5dyD9b6raCaoqVUeF+3v E9DioJZQ8NEKzN+Sab6/IOApDkNMWxB32UJ9dwo/XM5y10gHXByz5b9zW/cFPkll nir/HA+Nm7Opar0n7MVXIbmdQ04xdy6STOdfQ2yScx/LgkSkEYyeBpgbCnizRczF t36vTbjn8aZByqEMjTj5wti11lQCtJrmOMtYe2IWGRaOw1Qh87y+lJugCIwiT96b 5/4Ex0j6GtepwWmfj5ShB6kSOpFZq4/GTu4n1ZpXAWlR9UjYvrl3weDdXmtcBPfX vSJF/8DgEA/giuIRr8wvZtvhCwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFGiMy3+E BxekeOPrG5Jtzp0JfAB5MB8GA1UdIwQYMBaAFNcUbaneKPW7Xj3i/wDFn8hcmTja MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTYwRC82OEMzRjQ5QTQx RUUxMUVBOUNFQTFGNzVDNEY5QUUwMi8xeFJ0cWQ0bzlidGVQZUxfQU1XZnlGeVpP Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF4UnRxZDRvOWJ0ZVBlTF9BTVdmeUZ5Wk9Oby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDU2MEQvNjhDM0Y0OUE0MUVFMTFFQTlDRUExRjc1QzRGOUFFMDIvNDhCQzI4NDBC MENDMTFGMDhGQjA4OTJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnb6QwDQQCAAIwBwMFACQCn0AwDQYJKoZIhvcNAQELBQAD ggEBAK5QaAjC6IwJwKa6GLECS3qabZfriOYNaUDN6hCbOjsj9tQPw8qGklCD3fAn hCJsx1kNzTDHNsg3TV70ghrmgYm8x+nIyhyfzvbm1il82s4seHl/5+GAUt397Sk6 3KbkaCL8T0+vUIT/Od8I9UEhc9br87VFswLKCd1ykuZuVt0PKjdgmiVRG8WOKpi3 ninGYjVwXvir80zzZ8kz5ME96JydTXRkqIdV3KGiV0YlnRRU8N2r5Wjds/c6O2Wq pJlIEIhHerrJywixMoVcx3I31aqgz8Uf8n2S5DNrHok74CF8BBnDvULkEZjJy8qc 7/A9B8n1XoakZtPbW5VMPRGjqVs= -----END CERTIFICATE-----Generated at Sun Jan 25 17:02:04 2026 by rpki-client