This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/DBE8B4205F0F11ECA6315D2AC4F9AE02.roa File: DBE8B4205F0F11ECA6315D2AC4F9AE02.roa (raw, json) Hash identifier: fzvZdbCPCSOz9E/nMpGgi5/zJ/anQ2NI//aD7hvVP1E= Subject key identifier: 08:0C:55:24:62:F0:02:13:39:B7:CD:61:7C:69:79:AD:12:B9:6A:E9 Certificate issuer: /CN=A91E331D/serialNumber=572E760DBCE6D65553098B017EFC32ECB1CECAE1 Certificate serial: 04A9 Authority key identifier: 57:2E:76:0D:BC:E6:D6:55:53:09:8B:01:7E:FC:32:EC:B1:CE:CA:E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/DBE8B4205F0F11ECA6315D2AC4F9AE02.roa Signing time: Sun 04 Jan 2026 23:19:19 +0000 ROA not before: Sun 04 Jan 2026 23:19:19 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 149168 IP address blocks: 103.177.186.0/23 maxlen: 24 2001:df0:28c0::/48 maxlen: 56 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.crl rsync://rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 23:10:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1193 (0x4a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E331D, serialNumber=572E760DBCE6D65553098B017EFC32ECB1CECAE1 Validity Not Before: Jan 4 23:19:19 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=695af577-d9d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:55:cf:e7:53:a7:46:7a:5d:36:92:9c:54:ae: 8c:59:79:9e:2c:93:e3:0a:c7:a7:bd:ae:52:72:86: 54:77:43:80:9a:0d:22:d4:93:fc:04:25:99:83:be: 77:87:31:9e:8a:da:f2:81:95:a3:40:fa:1e:9f:dc: 88:3c:89:96:14:52:80:2d:4a:4d:14:ff:1e:5c:da: 9f:3b:61:bf:7f:c0:6b:1c:02:8d:67:21:29:35:47: a1:69:d9:db:49:06:77:a1:68:f1:cd:2a:ba:62:03: dd:45:78:f6:30:4d:60:a2:8a:7f:d1:d2:d4:5a:7c: dc:b3:ce:63:95:d9:a1:cf:99:7a:e1:01:3b:be:44: c4:cb:62:c2:06:2a:1a:54:91:fd:ae:73:5f:a5:47: 14:6f:1c:5f:cb:59:f0:a0:49:53:c3:c5:93:6f:d9: e2:ec:ff:c9:38:e5:c4:41:8d:3f:65:32:04:9a:8e: d6:06:7e:44:f0:2c:fa:47:8d:6b:f4:63:6c:e1:7a: 2f:12:6a:24:59:52:0a:4b:9b:b4:65:59:a2:8d:1f: f3:fc:8f:8f:0f:52:94:69:8b:f1:72:fe:55:85:f2: d3:dd:36:e8:bf:d1:a5:5f:fe:ad:22:4c:2d:49:48: 7f:3e:d8:c3:f1:90:55:50:97:14:8c:04:ac:ef:35: f2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:0C:55:24:62:F0:02:13:39:B7:CD:61:7C:69:79:AD:12:B9:6A:E9 X509v3 Authority Key Identifier: keyid:57:2E:76:0D:BC:E6:D6:55:53:09:8B:01:7E:FC:32:EC:B1:CE:CA:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/DBE8B4205F0F11ECA6315D2AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.177.186.0/23 IPv6: 2001:df0:28c0::/48 Signature Algorithm: sha256WithRSAEncryption 50:a6:f5:01:15:38:87:4f:26:50:1e:4f:fd:ec:ba:e7:38:ba: cc:33:8d:24:cf:0b:1f:25:d3:df:cd:1e:aa:e8:a4:44:64:e6: 3a:a8:27:27:57:c5:56:53:51:df:d7:07:66:54:27:36:5f:ec: 78:ba:29:b9:91:f8:b4:bb:24:ce:32:76:d9:0c:15:f0:f0:90: 2e:14:d6:47:fe:62:b8:35:a3:7e:d1:cb:0d:56:cd:09:a4:d9: 65:19:81:9d:43:98:cb:ed:f6:99:f0:0c:76:13:d5:c3:d3:90: e9:95:9f:49:ec:c3:fd:d9:b4:49:5b:15:6c:5e:37:99:f7:86: 98:0b:e3:b5:92:5b:0f:8d:47:50:49:88:de:fd:bf:3d:93:ac: 96:b2:44:66:ea:91:8d:17:44:0f:4f:bb:97:65:ca:61:54:46: 02:b2:39:c7:c5:a2:f3:f7:23:a8:8b:18:ad:94:f7:bc:dd:22: 57:6c:6e:bf:8e:15:7a:1a:bf:2b:02:cc:c8:8e:a6:0e:f3:97: b9:1c:e1:62:79:a7:5f:86:c1:2f:01:e5:5c:9f:5c:28:02:11: 33:c4:32:76:36:4c:ba:d0:6c:01:e7:49:c4:99:8d:bc:ac:07: cd:5a:b5:4d:64:7e:46:20:25:84:75:72:7e:81:ae:50:de:76: 63:35:41:f3 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx RTMzMUQxMTAvBgNVBAUTKDU3MkU3NjBEQkNFNkQ2NTU1MzA5OEIwMTdFRkMzMkVD QjFDRUNBRTEwHhcNMjYwMTA0MjMxOTE5WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTVhZjU3Ny1kOWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3lXP51OnRnpdNpKcVK6MWXmeLJPjCsenva5ScoZUd0OAmg0i1JP8BCWZg753 hzGeitrygZWjQPoen9yIPImWFFKALUpNFP8eXNqfO2G/f8BrHAKNZyEpNUehadnb SQZ3oWjxzSq6YgPdRXj2ME1goop/0dLUWnzcs85jldmhz5l64QE7vkTEy2LCBioa VJH9rnNfpUcUbxxfy1nwoElTw8WTb9ni7P/JOOXEQY0/ZTIEmo7WBn5E8Cz6R41r 9GNs4XovEmokWVIKS5u0ZVmijR/z/I+PD1KUaYvxcv5VhfLT3Tbov9GlX/6tIkwt SUh/PtjD8ZBVUJcUjASs7zXy7QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFAgMVSRi 8AITObfNYXxpea0SuWrpMB8GA1UdIwQYMBaAFFcudg285tZVUwmLAX78Muyxzsrh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzMxRC9FNzYxMENDRTVG MEMxMUVDQTkxNDQ0MjZDNEY5QUUwMi9WeTUyRGJ6bTFsVlRDWXNCZnZ3eTdMSE95 dUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z5NTJEYnptMWxWVENZc0Jmdnd5N0xIT3l1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTMzMUQvRTc2MTBDQ0U1RjBDMTFFQ0E5MTQ0NDI2QzRGOUFFMDIvREJFOEI0MjA1 RjBGMTFFQ0E2MzE1RDJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnsbowDwQCAAIwCQMHACABDfAowDANBgkqhkiG9w0BAQsF AAOCAQEAUKb1ARU4h08mUB5P/ey65zi6zDONJM8LHyXT380equikRGTmOqgnJ1fF VlNR39cHZlQnNl/seLopuZH4tLskzjJ22QwV8PCQLhTWR/5iuDWjftHLDVbNCaTZ ZRmBnUOYy+32mfAMdhPVw9OQ6ZWfSezD/dm0SVsVbF43mfeGmAvjtZJbD41HUEmI 3v2/PZOslrJEZuqRjRdED0+7l2XKYVRGArI5x8Wi8/cjqIsYrZT3vN0iV2xuv44V ehq/KwLMyI6mDvOXuRzhYnmnX4bBLwHlXJ9cKAIRM8QydjZMutBsAedJxJmNvKwH zVq1TWR+RiAlhHVyfoGuUN52YzVB8w== -----END CERTIFICATE-----Generated at Sun Jan 25 11:06:37 2026 by rpki-client