This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/4E8695C04F6111F0AEF2037CC4F9AE02.roa File: 4E8695C04F6111F0AEF2037CC4F9AE02.roa (raw, json) Hash identifier: DfdDuBAOhzfGJeqTBOgnaBsJwUNyC8g3yFMfzcPqJWY= Subject key identifier: B6:3F:59:E7:D1:A4:32:DF:16:3B:58:B9:A3:A7:A5:60:6A:09:E2:B5 Certificate issuer: /CN=A91DB6F8/serialNumber=237B7D4CA84A26D5FC4958D48191F36A14BC7A2F Certificate serial: 026A Authority key identifier: 23:7B:7D:4C:A8:4A:26:D5:FC:49:58:D4:81:91:F3:6A:14:BC:7A:2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/4E8695C04F6111F0AEF2037CC4F9AE02.roa Signing time: Thu 15 Jan 2026 01:21:09 +0000 ROA not before: Thu 15 Jan 2026 01:21:09 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 153346 IP address blocks: 103.48.20.0/23 maxlen: 23 2001:df1:a0c0::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.crl rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 01:03:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 618 (0x26a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB6F8, serialNumber=237B7D4CA84A26D5FC4958D48191F36A14BC7A2F Validity Not Before: Jan 15 01:21:09 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69684104-6160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4f:2f:fb:5a:9d:3f:ab:30:39:04:85:dc:bf: f8:54:ae:f5:67:91:56:cd:0e:10:96:03:2b:11:7e: 8a:79:6e:b5:c5:9b:b6:c4:f3:2c:e2:85:05:20:fe: bc:14:17:27:06:05:08:fb:83:b1:90:75:84:b9:3b: 97:34:f4:e5:c1:11:a3:de:f4:f0:4c:b3:79:26:71: c7:af:7d:3a:0c:42:e2:a9:d0:30:9c:99:f9:b0:3d: 5f:81:b2:c2:6f:3e:ad:ff:ff:b8:93:d4:bc:49:c1: b2:cb:62:49:bd:57:69:27:13:78:be:ef:88:da:e4: c5:08:4c:00:43:f3:5b:bb:fd:94:cb:a8:92:45:b2: bd:a5:2a:80:0c:96:7e:d4:cf:5a:7e:3c:bd:5f:6b: bb:a5:ca:30:46:36:31:24:3d:99:25:5a:ea:c9:b7: 18:c7:a1:77:e4:5a:fc:b4:8a:1f:ab:3d:13:a1:6a: b2:6f:02:19:2e:a5:b7:45:dc:b4:9b:b7:44:32:11: d2:9e:00:fd:0e:6f:94:c2:75:f2:22:2b:b0:dc:90: d9:e7:af:3a:63:84:81:ef:fe:75:c4:03:64:8d:3b: 5d:be:29:9d:77:90:9b:bd:84:d0:14:12:0d:4a:0e: 47:5a:49:36:9e:9b:dd:d9:bc:a0:63:7c:2a:f4:4e: fe:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:3F:59:E7:D1:A4:32:DF:16:3B:58:B9:A3:A7:A5:60:6A:09:E2:B5 X509v3 Authority Key Identifier: keyid:23:7B:7D:4C:A8:4A:26:D5:FC:49:58:D4:81:91:F3:6A:14:BC:7A:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/4E8695C04F6111F0AEF2037CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.48.20.0/23 IPv6: 2001:df1:a0c0::/47 Signature Algorithm: sha256WithRSAEncryption 0a:f4:e3:ac:0f:c5:33:ff:3c:9a:76:04:54:03:38:b9:d6:7b: 71:15:4f:89:08:32:87:43:73:97:6a:18:db:c1:8e:e0:fe:9c: 1c:bd:8b:29:75:a3:88:a1:ec:bb:4b:1f:ca:08:70:74:d6:b4: b4:e9:58:f2:43:9f:0f:3a:43:61:78:eb:63:7a:9d:7c:85:d2: 4c:0d:f9:55:46:39:5e:90:0e:6c:36:0a:75:d2:27:97:d4:3c: 90:ff:95:b4:8f:80:8d:1b:fb:00:3d:8e:5d:7d:5c:45:25:fe: a5:37:83:c3:10:67:ca:17:1c:58:0c:94:42:a0:6e:79:11:42: 22:f5:09:79:e8:58:2e:37:d1:01:b8:e1:52:7e:df:46:be:5e: b5:d7:9e:7b:6c:6f:f2:32:dd:5e:6a:3d:25:79:93:75:b2:b2: 60:74:4d:8e:e7:75:a6:e9:f1:6c:97:0b:dd:1e:9b:1c:cd:a7: 76:94:81:0f:75:d2:39:47:7e:0b:8c:b0:51:de:6c:9f:72:15: 26:60:58:5a:ae:1d:a6:a6:38:01:47:40:16:7e:3b:f2:d2:57: 2f:1c:09:4a:98:20:2a:2b:38:c9:f5:c4:f4:44:be:13:a6:f8: 63:d6:98:11:21:24:5d:fc:e2:c1:ec:1c:92:f5:70:d5:3b:a4: 0f:1a:ba:8f -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx REI2RjgxMTAvBgNVBAUTKDIzN0I3RDRDQTg0QTI2RDVGQzQ5NThENDgxOTFGMzZB MTRCQzdBMkYwHhcNMjYwMTE1MDEyMTA5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTY4NDEwNC02MTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw08v+1qdP6swOQSF3L/4VK71Z5FWzQ4QlgMrEX6KeW61xZu2xPMs4oUFIP68 FBcnBgUI+4OxkHWEuTuXNPTlwRGj3vTwTLN5JnHHr306DELiqdAwnJn5sD1fgbLC bz6t//+4k9S8ScGyy2JJvVdpJxN4vu+I2uTFCEwAQ/Nbu/2Uy6iSRbK9pSqADJZ+ 1M9afjy9X2u7pcowRjYxJD2ZJVrqybcYx6F35Fr8tIofqz0ToWqybwIZLqW3Rdy0 m7dEMhHSngD9Dm+UwnXyIiuw3JDZ5686Y4SB7/51xANkjTtdvimdd5CbvYTQFBIN Sg5HWkk2npvd2bygY3wq9E7+1QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFLY/WefR pDLfFjtYuaOnpWBqCeK1MB8GA1UdIwQYMBaAFCN7fUyoSibV/ElY1IGR82oUvHov MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjZGOC81NjJDM0NCNDcy NEUxMUVEOEUyMDY3M0VDNEY5QUUwMi9JM3Q5VEtoS0p0WDhTVmpVZ1pIemFoUzhl aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kzdDlUS2hLSnRYOFNWalVnWkh6YWhTOGVpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REI2RjgvNTYyQzNDQjQ3MjRFMTFFRDhFMjA2NzNFQzRGOUFFMDIvNEU4Njk1QzA0 RjYxMTFGMEFFRjIwMzdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnMBQwDwQCAAIwCQMHASABDfGgwDANBgkqhkiG9w0BAQsF AAOCAQEACvTjrA/FM/88mnYEVAM4udZ7cRVPiQgyh0Nzl2oY28GO4P6cHL2LKXWj iKHsu0sfyghwdNa0tOlY8kOfDzpDYXjrY3qdfIXSTA35VUY5XpAObDYKddInl9Q8 kP+VtI+AjRv7AD2OXX1cRSX+pTeDwxBnyhccWAyUQqBueRFCIvUJeehYLjfRAbjh Un7fRr5etdeee2xv8jLdXmo9JXmTdbKyYHRNjud1punxbJcL3R6bHM2ndpSBD3XS OUd+C4ywUd5sn3IVJmBYWq4dpqY4AUdAFn478tJXLxwJSpggKis4yfXE9ES+E6b4 Y9aYESEkXfziwewckvVw1TukDxq6jw== -----END CERTIFICATE-----Generated at Sun Jan 25 07:46:57 2026 by rpki-client