This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/D442A7A0BE2E11EEAFAF1934C4F9AE02.roa File: D442A7A0BE2E11EEAFAF1934C4F9AE02.roa (raw, json) Hash identifier: RLZuHwOgQEUaPkuZuTnWsz7rfKPwv51ebWShkrRfCcE= Subject key identifier: E5:7B:53:C8:74:B9:CD:94:51:EB:23:E9:5E:5E:33:FB:F5:B3:F1:B7 Certificate issuer: /CN=A91D8117/serialNumber=897DBAD64702378A6EE18630E18BF75A17298269 Certificate serial: 017A Authority key identifier: 89:7D:BA:D6:47:02:37:8A:6E:E1:86:30:E1:8B:F7:5A:17:29:82:69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/D442A7A0BE2E11EEAFAF1934C4F9AE02.roa Signing time: Fri 09 Jan 2026 03:23:56 +0000 ROA not before: Fri 09 Jan 2026 03:23:56 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 58460 IP address blocks: 103.9.226.0/24 maxlen: 24 103.209.54.0/24 maxlen: 24 2404:f440::/32 maxlen: 32 2404:f440:1012::/48 maxlen: 48 2404:f440:2012::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.crl rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 03:05:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 378 (0x17a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8117, serialNumber=897DBAD64702378A6EE18630E18BF75A17298269 Validity Not Before: Jan 9 03:23:56 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=696074cc-9c55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:53:ce:c2:36:b0:70:1f:be:d5:af:97:19:dc: 6f:62:0f:c3:58:d4:52:ba:5a:89:52:8a:39:9b:db: a5:2c:d4:82:75:4c:bf:35:7b:0a:7c:f4:8d:e9:8f: d2:35:d5:49:51:96:b8:63:25:55:80:f1:c4:64:e6: 1b:ee:5d:39:34:c8:89:1e:85:ef:87:14:04:18:ca: 9e:c6:3f:46:41:8e:27:2e:ea:67:d3:e5:ea:4a:d5: 94:29:e0:b2:2d:e9:bd:f4:06:27:ab:0f:a3:03:d4: 6f:bd:2f:23:80:fd:e2:50:c5:14:c6:08:06:dc:a5: 85:21:b5:f9:f9:0c:72:c0:84:d6:7a:3d:01:ba:32: e7:9b:87:79:e8:bc:c5:83:ec:ce:4f:6d:67:74:14: 93:98:45:f3:f3:c8:08:5a:8b:2f:cf:20:60:5f:ed: e4:b2:41:49:cb:13:cd:94:e0:c3:56:fd:22:41:7d: b6:b4:74:35:63:91:5e:11:5c:5e:e5:0a:32:62:53: d9:5e:5c:bb:8b:33:82:45:9f:fc:e8:a7:7c:52:43: 88:b3:ec:3d:52:d4:83:fd:6a:92:f2:dc:0d:13:6d: e1:3c:f3:b3:a3:27:8a:2d:27:2c:0a:51:08:b2:09: 54:51:bb:0f:52:b9:bb:91:e9:a2:a7:e7:cd:51:e9: 24:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:7B:53:C8:74:B9:CD:94:51:EB:23:E9:5E:5E:33:FB:F5:B3:F1:B7 X509v3 Authority Key Identifier: keyid:89:7D:BA:D6:47:02:37:8A:6E:E1:86:30:E1:8B:F7:5A:17:29:82:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/D442A7A0BE2E11EEAFAF1934C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.9.226.0/24 103.209.54.0/24 IPv6: 2404:f440::/32 Signature Algorithm: sha256WithRSAEncryption 4d:04:3d:81:71:be:83:c9:d3:4d:71:ea:60:f5:5a:12:e6:08: 24:61:21:71:34:e8:1b:85:3a:43:8a:bd:ee:6c:98:4d:45:b5: ae:04:2f:09:a3:74:7b:85:e1:5a:28:91:73:af:3d:99:a6:1b: 7e:f3:24:6f:ba:57:81:99:17:ca:f6:e8:03:30:d9:a4:9b:52: a7:a4:dd:b1:8b:d3:60:52:da:0a:b5:da:61:4e:eb:09:4f:47: 05:d4:7f:0a:dd:2b:a1:39:29:8f:e5:85:24:dd:e0:3d:0a:20: 92:e2:15:a4:7c:12:d8:8d:4d:bc:3d:42:32:cc:77:cf:4a:ff: 65:e6:02:3c:b4:18:d6:c9:58:66:5d:12:4a:a8:47:5b:01:bc: dc:96:d7:5a:e9:08:91:a0:c2:e6:a2:0a:ab:40:09:d0:7c:5c: b1:4a:fe:aa:59:ab:06:a5:24:e0:9a:3e:fb:ff:98:93:ce:c1: 7e:62:97:6c:7d:a1:39:eb:5c:a1:2a:85:4f:6a:08:06:ce:9c: f9:6a:f0:39:f5:42:44:23:f4:c9:a1:db:7e:c6:83:23:7d:b5: d4:4e:3e:02:f9:2f:b4:91:80:f0:2f:9b:11:e3:70:04:7c:e1: 51:d3:ba:62:86:60:8f:a2:d7:e6:9a:54:27:a4:e2:d5:c1:cc: aa:82:f1:ee -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICAXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx RDgxMTcxMTAvBgNVBAUTKDg5N0RCQUQ2NDcwMjM3OEE2RUUxODYzMEUxOEJGNzVB MTcyOTgyNjkwHhcNMjYwMTA5MDMyMzU2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTYwNzRjYy05YzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn1POwjawcB++1a+XGdxvYg/DWNRSulqJUoo5m9ulLNSCdUy/NXsKfPSN6Y/S NdVJUZa4YyVVgPHEZOYb7l05NMiJHoXvhxQEGMqexj9GQY4nLupn0+XqStWUKeCy Lem99AYnqw+jA9RvvS8jgP3iUMUUxggG3KWFIbX5+QxywITWej0BujLnm4d56LzF g+zOT21ndBSTmEXz88gIWosvzyBgX+3kskFJyxPNlODDVv0iQX22tHQ1Y5FeEVxe 5QoyYlPZXly7izOCRZ/86Kd8UkOIs+w9UtSD/WqS8twNE23hPPOzoyeKLScsClEI sglUUbsPUrm7kemip+fNUekkEQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFOV7U8h0 uc2UUesj6V5eM/v1s/G3MB8GA1UdIwQYMBaAFIl9utZHAjeKbuGGMOGL91oXKYJp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODExNy84RTI4RTc5NEJF MkQxMUVFODUzNkQwMzBDNEY5QUUwMi9pWDI2MWtjQ040cHU0WVl3NFl2M1doY3Bn bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lYMjYxa2NDTjRwdTRZWXc0WXYzV2hjcGdtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDgxMTcvOEUyOEU3OTRCRTJEMTFFRTg1MzZEMDMwQzRGOUFFMDIvRDQ0MkE3QTBC RTJFMTFFRUFGQUYxOTM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBABnCeIDBABn0TYwDQQCAAIwBwMFACQE9EAwDQYJKoZIhvcN AQELBQADggEBAE0EPYFxvoPJ001x6mD1WhLmCCRhIXE06BuFOkOKve5smE1Fta4E LwmjdHuF4VookXOvPZmmG37zJG+6V4GZF8r26AMw2aSbUqek3bGL02BS2gq12mFO 6wlPRwXUfwrdK6E5KY/lhSTd4D0KIJLiFaR8EtiNTbw9QjLMd89K/2XmAjy0GNbJ WGZdEkqoR1sBvNyW11rpCJGgwuaiCqtACdB8XLFK/qpZqwalJOCaPvv/mJPOwX5i l2x9oTnrXKEqhU9qCAbOnPlq8Dn1QkQj9Mmh237GgyN9tdROPgL5L7SRgPAvmxHj cAR84VHTumKGYI+i1+aaVCek4tXBzKqC8e4= -----END CERTIFICATE-----Generated at Sun Jan 25 21:10:36 2026 by rpki-client