This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/9D664600CB1211EAACC0E528C4F9AE02.roa File: 9D664600CB1211EAACC0E528C4F9AE02.roa (raw, json) Hash identifier: UoilLNu3ETB9DmYNTcuXP1NIaDKZxQjUXn9bZTv+2gY= Subject key identifier: 79:74:1D:CE:6E:2A:B2:DC:1B:3F:9C:B6:65:F5:E0:E6:30:49:39:4F Certificate issuer: /CN=A91DBF0D/serialNumber=0D68DBAD600F8BD90B355B98F4B238FB9E9A57FA Certificate serial: 08CF Authority key identifier: 0D:68:DB:AD:60:0F:8B:D9:0B:35:5B:98:F4:B2:38:FB:9E:9A:57:FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWjbrWAPi9kLNVuY9LI4-56aV_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/9D664600CB1211EAACC0E528C4F9AE02.roa Signing time: Fri 16 Jan 2026 20:16:50 +0000 ROA not before: Fri 16 Jan 2026 20:16:50 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 63920 IP address blocks: 43.225.48.0/22 maxlen: 24 103.44.32.0/22 maxlen: 24 103.65.252.0/22 maxlen: 24 103.208.164.0/22 maxlen: 24 137.59.168.0/22 maxlen: 24 2401:cd80::/31 maxlen: 48 2404:4180::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.crl rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWjbrWAPi9kLNVuY9LI4-56aV_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 19:50:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2255 (0x8cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBF0D, serialNumber=0D68DBAD600F8BD90B355B98F4B238FB9E9A57FA Validity Not Before: Jan 16 20:16:50 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=696a9cb2-d525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5d:65:2a:a8:ac:97:ea:f3:f3:71:57:55:76: 69:57:0d:ef:68:e1:c7:1d:ba:38:8a:3b:36:d2:d9: e7:c8:5f:a1:f5:e8:74:71:d8:0b:95:f3:06:13:72: 8b:68:63:d4:b8:1d:8e:a1:c1:46:87:0f:fb:bc:59: b5:70:04:b7:81:95:50:4d:a2:79:7f:48:c8:83:3d: 80:84:03:e0:31:9d:81:cd:db:14:28:80:44:f8:9e: c9:a4:61:b5:e8:8f:17:34:15:3c:62:ab:9d:b0:dc: cd:3c:a7:26:37:88:c5:2d:63:b2:3b:65:bb:d1:02: 3a:08:10:0c:f1:7b:92:69:cf:5e:d0:ca:52:8b:c5: a3:60:9c:6d:9e:c5:80:0e:c7:cd:5a:77:5b:30:7c: 24:d1:1e:66:7c:fc:7f:50:c3:3a:d7:7a:d1:94:74: 7b:f4:bd:12:25:8e:43:e3:72:12:34:73:4e:0c:7f: 14:95:87:8a:4a:8c:55:50:c3:b8:32:05:2f:4c:bc: 70:5d:c4:01:03:bb:8a:48:1e:5e:4b:53:db:18:94: b5:13:4c:82:7e:6e:4e:6e:12:53:8f:9b:5a:61:7a: 3c:66:82:a2:d2:25:0f:02:38:0b:0a:5e:bd:b0:0b: 41:38:cc:6f:58:0c:fa:ae:dc:58:b2:9d:08:e4:f0: 18:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:74:1D:CE:6E:2A:B2:DC:1B:3F:9C:B6:65:F5:E0:E6:30:49:39:4F X509v3 Authority Key Identifier: keyid:0D:68:DB:AD:60:0F:8B:D9:0B:35:5B:98:F4:B2:38:FB:9E:9A:57:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWjbrWAPi9kLNVuY9LI4-56aV_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/9D664600CB1211EAACC0E528C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.225.48.0/22 103.44.32.0/22 103.65.252.0/22 103.208.164.0/22 137.59.168.0/22 IPv6: 2401:cd80::/31 2404:4180::/32 Signature Algorithm: sha256WithRSAEncryption 5d:86:e4:2f:a2:16:88:d3:08:dd:30:9c:15:ff:17:d3:b0:d2: a5:da:22:23:4f:5c:42:0c:5e:4f:90:db:8f:6b:b3:7d:72:d2: dc:7e:e2:69:4d:4e:e9:9a:98:02:e4:ce:09:51:32:1d:68:a8: 15:bf:bf:59:5e:f2:b1:17:97:9e:6d:b1:3e:d7:3a:f7:ac:53: 87:e8:58:92:7c:00:6c:3b:d2:6b:ce:28:1c:e3:6b:59:d4:8a: 87:4a:00:2a:37:0f:7f:dc:d1:e8:a5:49:3b:53:1c:85:58:f1: 7c:d2:86:53:90:47:ba:88:00:22:09:4d:05:4a:24:78:b8:bb: 4d:39:61:26:66:7f:b4:6c:f1:2c:21:f7:2f:7d:1d:4f:76:96: 57:2d:27:f3:d3:8c:a0:d7:a6:f9:da:ed:68:2c:7c:5c:70:f7: 4e:d1:5a:67:aa:39:e5:cd:a1:7f:a6:82:e7:11:b9:d2:8e:58: 5c:64:ac:25:78:4b:ff:01:22:45:f6:c5:c9:9d:12:9c:87:2a: 48:1a:7a:e0:87:26:c8:8d:4f:37:2f:6c:50:87:26:9c:8c:1a: 91:5f:46:2d:ba:d4:8d:2d:a9:35:96:ce:37:56:15:d5:74:46: 4d:6b:32:b4:41:49:46:cd:02:54:9e:d0:37:2a:bf:7a:16:68: e1:c3:17:91 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgICCM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx REJGMEQxMTAvBgNVBAUTKDBENjhEQkFENjAwRjhCRDkwQjM1NUI5OEY0QjIzOEZC OUU5QTU3RkEwHhcNMjYwMTE2MjAxNjUwWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTZhOWNiMi1kNTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr11lKqisl+rz83FXVXZpVw3vaOHHHbo4ijs20tnnyF+h9eh0cdgLlfMGE3KL aGPUuB2OocFGhw/7vFm1cAS3gZVQTaJ5f0jIgz2AhAPgMZ2BzdsUKIBE+J7JpGG1 6I8XNBU8YqudsNzNPKcmN4jFLWOyO2W70QI6CBAM8XuSac9e0MpSi8WjYJxtnsWA DsfNWndbMHwk0R5mfPx/UMM613rRlHR79L0SJY5D43ISNHNODH8UlYeKSoxVUMO4 MgUvTLxwXcQBA7uKSB5eS1PbGJS1E0yCfm5ObhJTj5taYXo8ZoKi0iUPAjgLCl69 sAtBOMxvWAz6rtxYsp0I5PAYBwIDAQABo4ICwzCCAr8wHQYDVR0OBBYEFHl0Hc5u KrLcGz+ctmX14OYwSTlPMB8GA1UdIwQYMBaAFA1o261gD4vZCzVbmPSyOPuemlf6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkYwRC81Nzk2NEQ0QUNC MEUxMUVBQTEwRjMzMURDNEY5QUUwMi9EV2picldBUGk5a0xOVnVZOUxJNC01NmFW X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RXamJyV0FQaTlrTE5WdVk5TEk0LTU2YVZfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REJGMEQvNTc5NjRENEFDQjBFMTFFQUExMEYzMzFEQzRGOUFFMDIvOUQ2NjQ2MDBD QjEyMTFFQUFDQzBFNTI4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTQYIKwYBBQUHAQcBAf8E PjA8MCQEAgABMB4DBAIr4TADBAJnLCADBAJnQfwDBAJn0KQDBAKJO6gwFAQCAAIw DgMFASQBzYADBQAkBEGAMA0GCSqGSIb3DQEBCwUAA4IBAQBdhuQvohaI0wjdMJwV /xfTsNKl2iIjT1xCDF5PkNuPa7N9ctLcfuJpTU7pmpgC5M4JUTIdaKgVv79ZXvKx F5eebbE+1zr3rFOH6FiSfABsO9Jrzigc42tZ1IqHSgAqNw9/3NHopUk7UxyFWPF8 0oZTkEe6iAAiCU0FSiR4uLtNOWEmZn+0bPEsIfcvfR1PdpZXLSfz04yg16b52u1o LHxccPdO0VpnqjnlzaF/poLnEbnSjlhcZKwleEv/ASJF9sXJnRKchypIGnrghybI jU83L2xQhyacjBqRX0YtutSNLak1ls43VhXVdEZNazK0QUlGzQJUntA3Kr96Fmjh wxeR -----END CERTIFICATE-----Generated at Sun Jan 25 13:57:15 2026 by rpki-client