This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/F6921460F58D11F0BCCF7FE5756F56BC.roa File: F6921460F58D11F0BCCF7FE5756F56BC.roa (raw, json) Hash identifier: tVrrylSFPXX4f/uBOg5gxYytLtT1vYd/bYgLKIT3L4I= Subject key identifier: 88:AA:D9:AC:A6:CA:BF:FD:5D:61:C9:FD:7D:E3:9A:B3:9D:55:7B:6B Certificate issuer: /CN=A91D983B/serialNumber=B316C01B7B754314E2F18F737A7D7D89ACAB7E68 Certificate serial: 27 Authority key identifier: B3:16:C0:1B:7B:75:43:14:E2:F1:8F:73:7A:7D:7D:89:AC:AB:7E:68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/F6921460F58D11F0BCCF7FE5756F56BC.roa Signing time: Mon 19 Jan 2026 23:24:12 +0000 ROA not before: Mon 19 Jan 2026 23:24:12 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 58750 IP address blocks: 103.21.48.0/22 maxlen: 22 2403:ecc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.crl rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 06:51:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D983B, serialNumber=B316C01B7B754314E2F18F737A7D7D89ACAB7E68 Validity Not Before: Jan 19 23:24:12 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=696ebd1c-142e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:05:71:f6:d9:15:9e:15:b6:f3:2b:2b:31:e4: 53:cd:2a:bb:b4:47:fe:91:9c:02:e9:20:ca:8b:19: dd:32:17:95:60:a7:8c:dc:36:35:7d:fe:88:cf:d2: e4:1d:b9:ba:d2:89:c3:96:b8:74:9b:60:23:53:19: 02:3e:2d:f8:b7:60:5e:d9:8f:71:fd:bf:f0:50:7c: a6:3f:58:6a:0d:23:0b:09:39:12:b5:37:47:43:8b: 2f:da:01:b4:57:ca:4f:df:1a:7e:d1:46:f9:35:ed: 02:c1:5c:d9:aa:65:c3:7b:cf:87:06:f7:88:ae:4a: 9d:21:6e:70:68:30:a6:cf:e8:39:a8:51:ce:7c:04: 74:1f:db:e8:df:db:20:a7:d5:00:c3:3b:31:c8:60: b7:30:10:03:c3:0f:79:ac:a4:ee:93:dd:db:34:8d: 8e:34:bd:3e:80:a1:ea:b3:70:a0:22:b3:ab:92:a5: 58:b3:c9:7c:c2:97:2b:8a:5f:26:5e:b6:38:e7:4f: 90:ab:34:e4:ce:c2:96:19:fd:67:4d:67:e8:e7:b2: f2:75:7c:bf:40:3d:1a:a3:e6:49:55:58:a4:0d:da: 2a:d3:d5:93:e9:69:49:6a:4f:e4:98:ce:a6:62:9c: 3f:c0:86:0d:1b:4d:3c:82:a7:7d:f6:db:a9:28:5f: 0d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:AA:D9:AC:A6:CA:BF:FD:5D:61:C9:FD:7D:E3:9A:B3:9D:55:7B:6B X509v3 Authority Key Identifier: keyid:B3:16:C0:1B:7B:75:43:14:E2:F1:8F:73:7A:7D:7D:89:AC:AB:7E:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/F6921460F58D11F0BCCF7FE5756F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.21.48.0/22 IPv6: 2403:ecc0::/32 Signature Algorithm: sha256WithRSAEncryption 4a:f6:49:3f:d0:d3:de:84:3f:13:d0:ef:8c:ea:35:b9:9c:1a: 97:8b:1c:9c:e8:dc:29:e3:49:d7:a2:a6:c6:af:66:ce:37:90: 3d:0e:2a:e8:b3:25:87:b1:91:46:8a:9e:83:1c:ac:4c:73:5d: 67:d3:54:79:5b:55:a1:a0:69:1b:77:18:a9:90:fe:80:b1:e4: f2:65:32:b4:4e:aa:79:43:b9:7b:64:bb:dc:7f:5d:f3:4f:e4: 44:72:8d:6b:0e:51:7e:c3:20:60:79:a1:96:aa:71:a7:21:03: 0f:26:7a:e2:5d:2f:6c:bf:73:25:bf:00:9a:2b:f3:65:48:b3: 5c:8e:94:68:b8:63:03:14:be:36:6f:1e:1a:7d:8c:a5:3d:5a: 82:d3:37:9d:32:59:e4:8f:01:fa:8e:1f:49:33:80:b7:41:d4: 40:8b:5e:65:36:59:3c:0b:bb:ae:76:43:ae:c2:7f:26:4a:69: 56:f1:75:88:1f:27:69:d5:e8:70:d1:a2:a9:7b:fc:8e:50:8c: a1:fb:5a:b7:6b:ea:9a:e4:35:21:0e:98:c1:e9:36:e7:c0:e2: 47:06:c1:7e:2b:86:33:b2:1e:c1:cd:f9:62:f5:45:f9:83:18: 94:3c:8f:80:1f:5b:56:3f:89:0a:1d:99:42:b9:2f:37:02:0e: 14:28:54:72 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFE OTgzQjExMC8GA1UEBRMoQjMxNkMwMUI3Qjc1NDMxNEUyRjE4RjczN0E3RDdEODlB Q0FCN0U2ODAeFw0yNjAxMTkyMzI0MTJaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV BAMMDTY5NmViZDFjLTE0MmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChBXH22RWeFbbzKysx5FPNKru0R/6RnALpIMqLGd0yF5Vgp4zcNjV9/ojP0uQd ubrSicOWuHSbYCNTGQI+Lfi3YF7Zj3H9v/BQfKY/WGoNIwsJORK1N0dDiy/aAbRX yk/fGn7RRvk17QLBXNmqZcN7z4cG94iuSp0hbnBoMKbP6DmoUc58BHQf2+jf2yCn 1QDDOzHIYLcwEAPDD3mspO6T3ds0jY40vT6AoeqzcKAis6uSpVizyXzClyuKXyZe tjjnT5CrNOTOwpYZ/WdNZ+jnsvJ1fL9APRqj5klVWKQN2irT1ZPpaUlqT+SYzqZi nD/Ahg0bTTyCp33226koXw3dAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUiKrZrKbK v/1dYcn9feOas51Ve2swHwYDVR0jBBgwFoAUsxbAG3t1QxTi8Y9zen19iayrfmgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5ODNCL0RGQUY5OTkyQ0Mw MzExRjBCMUUyNUI0MUM0RjlBRTAyL3N4YkFHM3QxUXhUaThZOXplbjE5aWF5cmZt Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc3hiQUczdDFReFRpOFk5emVuMTlpYXlyZm1nLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTgzQi9ERkFGOTk5MkNDMDMxMUYwQjFFMjVCNDFDNEY5QUUwMi9GNjkyMTQ2MEY1 OEQxMUYwQkNDRjdGRTU3NTZGNTZCQy5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAmcVMDANBAIAAjAHAwUAJAPswDANBgkqhkiG9w0BAQsFAAOC AQEASvZJP9DT3oQ/E9DvjOo1uZwal4scnOjcKeNJ16Kmxq9mzjeQPQ4q6LMlh7GR RoqegxysTHNdZ9NUeVtVoaBpG3cYqZD+gLHk8mUytE6qeUO5e2S73H9d80/kRHKN aw5RfsMgYHmhlqpxpyEDDyZ64l0vbL9zJb8AmivzZUizXI6UaLhjAxS+Nm8eGn2M pT1agtM3nTJZ5I8B+o4fSTOAt0HUQIteZTZZPAu7rnZDrsJ/JkppVvF1iB8nadXo cNGiqXv8jlCMoftat2vqmuQ1IQ6Ywek258DiRwbBfiuGM7Iewc35YvVF+YMYlDyP gB9bVj+JCh2ZQrkvNwIOFChUcg== -----END CERTIFICATE-----Generated at Sun Jan 25 05:54:50 2026 by rpki-client