This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/994AC0903E1E11EFB5BBDD3BC4F9AE02.roa File: 994AC0903E1E11EFB5BBDD3BC4F9AE02.roa (raw, json) Hash identifier: B5TkA+MLjQHCrhXehplEcSF5XqTQxni/T673jjc09no= Subject key identifier: F9:4E:E8:68:5E:9C:DD:5B:6E:9C:82:DD:1D:6C:3F:36:BA:09:E5:90 Certificate issuer: /CN=A91D5AA8/serialNumber=D04CB1E27157868F74F36D707915D9D7F097C908 Certificate serial: 0247 Authority key identifier: D0:4C:B1:E2:71:57:86:8F:74:F3:6D:70:79:15:D9:D7:F0:97:C9:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/994AC0903E1E11EFB5BBDD3BC4F9AE02.roa Signing time: Fri 23 Jan 2026 01:22:10 +0000 ROA not before: Fri 23 Jan 2026 01:22:10 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 25687 IP address blocks: 103.224.8.0/22 maxlen: 22 103.224.8.0/24 maxlen: 24 103.224.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.crl rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 01:15:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 583 (0x247) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5AA8, serialNumber=D04CB1E27157868F74F36D707915D9D7F097C908 Validity Not Before: Jan 23 01:22:10 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=6972cd42-e10e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b2:a6:53:9c:6d:e4:a1:b9:27:1d:c9:91:67: 6a:cf:b2:51:be:71:26:ff:6b:c0:49:1f:07:d2:66: 78:55:fd:af:c4:73:93:83:ea:56:be:40:1a:15:ac: c4:c2:90:94:bb:33:e3:16:25:7d:a7:10:7c:4c:4c: 2f:91:85:60:52:77:8d:74:d0:48:2d:90:a5:cf:4f: 7f:78:09:51:44:9c:df:29:7f:f5:10:b7:51:92:61: d9:c6:9e:24:77:2b:82:3a:be:20:74:b4:0f:be:84: 44:2c:01:a4:5b:7b:f2:84:1f:9c:ff:33:bf:47:76: 2e:f4:14:8a:76:e9:c5:85:5f:17:01:b1:b6:70:45: ad:4d:a6:20:5c:de:e1:c8:06:d9:14:5f:7f:c6:56: 3f:24:57:d1:ab:41:42:a5:b6:f0:39:09:d0:ac:98: c0:e9:71:ed:cf:63:36:9c:89:09:ae:83:35:56:26: 20:6f:ff:61:5b:22:a6:60:2f:04:9f:8d:15:a4:e0: 13:7d:59:3d:74:7e:76:4a:5f:44:42:cf:74:45:ff: c6:f8:3d:48:07:a1:ea:40:ee:3c:fd:dd:f2:b1:18: 79:be:c4:15:47:80:3b:0d:41:60:38:da:05:44:dd: 45:e2:08:ac:6d:fa:a3:eb:fc:d6:66:83:f9:e2:ba: f2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:4E:E8:68:5E:9C:DD:5B:6E:9C:82:DD:1D:6C:3F:36:BA:09:E5:90 X509v3 Authority Key Identifier: keyid:D0:4C:B1:E2:71:57:86:8F:74:F3:6D:70:79:15:D9:D7:F0:97:C9:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/994AC0903E1E11EFB5BBDD3BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.224.8.0/22 Signature Algorithm: sha256WithRSAEncryption b1:b6:70:2d:bd:8b:1a:83:fa:3a:0c:ee:5a:92:c1:03:c5:04: 51:df:92:42:39:d5:ce:60:f4:04:56:db:df:54:e4:74:60:aa: ff:09:ab:32:85:a8:6c:4a:39:1a:22:17:ee:f7:95:54:9c:fe: 3d:ff:09:33:67:c5:4d:38:c4:19:a3:8e:2b:cf:a0:be:0a:39: 65:46:25:02:36:88:73:79:71:bd:c5:38:28:cb:ca:a7:82:9a: 98:06:57:79:b6:b7:0c:ab:8b:a0:6a:5b:a5:bf:35:22:e5:2b: fb:a2:72:b4:43:ea:57:10:bc:fd:76:5c:cd:51:26:dd:18:6b: d7:3c:b4:82:1c:d4:1d:74:89:8f:fa:f3:cd:93:73:da:c4:17: 0d:d2:dc:f2:96:df:ff:91:09:dc:b2:f8:28:67:49:65:94:87: 39:37:10:eb:2a:f0:32:16:bb:8b:0b:50:97:93:99:17:a0:e9: 37:a6:6b:97:50:28:d4:95:cb:18:d9:82:c1:e2:65:ce:6a:e5: ee:f6:ec:95:16:d6:bd:5e:d3:e9:fa:fb:58:a6:2e:81:fa:7b: 18:7b:3d:ab:50:dc:9d:e3:33:65:6c:db:d8:ca:75:8c:7d:65: 7d:9a:cd:b7:76:cd:c6:83:f2:35:fb:b2:62:e3:5d:83:de:ba: 5e:32:a6:c8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx RDVBQTgxMTAvBgNVBAUTKEQwNENCMUUyNzE1Nzg2OEY3NEYzNkQ3MDc5MTVEOUQ3 RjA5N0M5MDgwHhcNMjYwMTIzMDEyMjEwWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTcyY2Q0Mi1lMTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7KmU5xt5KG5Jx3JkWdqz7JRvnEm/2vASR8H0mZ4Vf2vxHOTg+pWvkAaFazE wpCUuzPjFiV9pxB8TEwvkYVgUneNdNBILZClz09/eAlRRJzfKX/1ELdRkmHZxp4k dyuCOr4gdLQPvoRELAGkW3vyhB+c/zO/R3Yu9BSKdunFhV8XAbG2cEWtTaYgXN7h yAbZFF9/xlY/JFfRq0FCpbbwOQnQrJjA6XHtz2M2nIkJroM1ViYgb/9hWyKmYC8E n40VpOATfVk9dH52Sl9EQs90Rf/G+D1IB6HqQO48/d3ysRh5vsQVR4A7DUFgONoF RN1F4gisbfqj6/zWZoP54rryrQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPlO6Ghe nN1bbpyC3R1sPza6CeWQMB8GA1UdIwQYMBaAFNBMseJxV4aPdPNtcHkV2dfwl8kI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUFBOC8yNzg1OTkxMjkx RUYxMUVEQjA2QkFEMUZDNEY5QUUwMi8wRXl4NG5GWGhvOTA4MjF3ZVJYWjFfQ1h5 UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBFeXg0bkZYaG85MDgyMXdlUlhaMV9DWHlRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDVBQTgvMjc4NTk5MTI5MUVGMTFFREIwNkJBRDFGQzRGOUFFMDIvOTk0QUMwOTAz RTFFMTFFRkI1QkJERDNCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJn4AgwDQYJKoZIhvcNAQELBQADggEBALG2cC29ixqD+joM 7lqSwQPFBFHfkkI51c5g9ARW299U5HRgqv8JqzKFqGxKORoiF+73lVSc/j3/CTNn xU04xBmjjivPoL4KOWVGJQI2iHN5cb3FOCjLyqeCmpgGV3m2twyri6BqW6W/NSLl K/uicrRD6lcQvP12XM1RJt0Ya9c8tIIc1B10iY/6882Tc9rEFw3S3PKW3/+RCdyy +ChnSWWUhzk3EOsq8DIWu4sLUJeTmReg6Tema5dQKNSVyxjZgsHiZc5q5e727JUW 1r1e0+n6+1imLoH6exh7PatQ3J3jM2Vs29jKdYx9ZX2azbd2zcaD8jX7smLjXYPe ul4ypsg= -----END CERTIFICATE-----Generated at Sun Jan 25 06:17:36 2026 by rpki-client