This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/8C48B22C47E711EE91530D28C4F9AE02.roa File: 8C48B22C47E711EE91530D28C4F9AE02.roa (raw, json) Hash identifier: Kj9sN/OBzKppmcG5oP7VAOMrdejW1RyL9i6F6SFa73Q= Subject key identifier: 0E:B0:42:0F:42:75:9E:4A:22:D0:B8:0E:88:AF:34:6E:FB:C2:D2:B4 Certificate issuer: /CN=A91E4C30/serialNumber=58A0DDD02555C837486D55435186DCC576A1283E Certificate serial: 024E Authority key identifier: 58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/8C48B22C47E711EE91530D28C4F9AE02.roa Signing time: Sun 25 Jan 2026 01:21:27 +0000 ROA not before: Sun 25 Jan 2026 01:21:27 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 138640 IP address blocks: 103.61.240.0/23 maxlen: 23 103.61.240.0/24 maxlen: 24 103.61.241.0/24 maxlen: 24 2001:df1:c340::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.crl rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 01:21:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 590 (0x24e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4C30, serialNumber=58A0DDD02555C837486D55435186DCC576A1283E Validity Not Before: Jan 25 01:21:27 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69757017-de16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ff:af:1d:3d:15:1e:69:6e:b0:8d:1d:c9:de: 00:e6:e9:77:05:f3:0a:f4:2d:16:92:59:12:b6:e0: 01:b7:3a:a2:eb:88:56:5e:1e:49:b6:46:57:47:90: fb:33:2b:9a:58:9b:e0:0d:d7:77:31:b0:7b:46:54: 2b:28:4f:00:f6:02:cd:38:f7:47:9e:f5:c2:e4:42: dc:18:80:5f:a2:88:72:5e:e6:bb:b7:b3:cc:c8:e3: 1c:c8:b2:5b:05:cb:30:05:04:1c:2e:a8:45:07:38: dd:a9:ea:6e:8e:a4:60:4d:17:56:95:3a:e2:42:45: 2f:ae:c7:09:74:dc:a1:d2:c1:4e:a8:07:d6:5b:b7: ab:d6:54:b5:0a:a5:28:5f:b4:8e:e8:a8:db:e8:d7: 5c:fe:e1:64:82:13:f0:58:cc:86:85:c4:7c:ba:d6: 76:f1:fc:46:18:3b:2e:02:ee:16:07:d3:9b:28:82: 2a:bb:99:ef:f9:75:a6:ca:e2:6c:2d:03:0d:57:94: 55:45:d0:e5:16:82:27:39:2c:55:04:70:5e:f4:b1: e1:96:33:f2:39:fc:5e:31:de:96:db:f5:05:af:69: c4:5c:9b:65:f3:cd:b4:29:2c:42:5c:4e:c1:e2:1f: 2c:4b:22:df:a6:f0:98:ef:9d:58:6f:7b:17:5e:4e: 15:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:B0:42:0F:42:75:9E:4A:22:D0:B8:0E:88:AF:34:6E:FB:C2:D2:B4 X509v3 Authority Key Identifier: keyid:58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/8C48B22C47E711EE91530D28C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.61.240.0/23 IPv6: 2001:df1:c340::/48 Signature Algorithm: sha256WithRSAEncryption 1d:42:0c:58:50:36:1d:de:62:1e:b1:a7:90:5e:03:9e:b8:53: ff:01:11:b3:8d:fd:b5:3f:c1:cd:16:d6:a7:b2:a4:9c:c7:fd: 26:68:f7:fb:90:1a:36:3e:11:9c:15:49:be:d4:eb:b4:5b:0a: a7:e6:e4:b6:48:7c:fe:95:00:ff:4c:f4:bb:fd:97:b9:1c:9e: 5a:11:b0:f7:6c:2c:13:1c:9e:5e:9f:f5:54:2a:bf:b6:ab:84: e9:c7:92:f3:c4:04:0b:28:8a:28:8f:23:48:f9:61:3c:79:43: 0c:64:d5:78:63:f2:20:69:14:34:e2:ab:aa:cf:d6:6c:7b:c9: ec:23:3e:9f:4e:7e:ce:9d:91:14:f8:a9:1d:e3:63:13:c4:ee: 15:13:67:3a:b8:13:75:7b:32:a4:4b:ca:a6:81:39:18:cd:70: 22:30:a5:d5:24:e0:44:a3:7b:f8:80:f5:cf:16:0d:50:a5:ec: 94:3f:ce:f8:a1:e1:57:e4:b4:54:65:3c:fb:ee:14:52:73:9a: b5:28:04:21:ee:e1:d4:28:20:30:c2:97:63:69:47:f9:63:9c: 81:38:e4:c6:c4:0e:ae:d4:61:2f:fc:7f:7b:aa:bc:35:8a:78: 29:aa:69:7f:6c:35:16:23:37:16:f6:a3:34:39:35:b1:b9:f7: b5:04:95:f0 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx RTRDMzAxMTAvBgNVBAUTKDU4QTBEREQwMjU1NUM4Mzc0ODZENTU0MzUxODZEQ0M1 NzZBMTI4M0UwHhcNMjYwMTI1MDEyMTI3WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTc1NzAxNy1kZTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1P+vHT0VHmlusI0dyd4A5ul3BfMK9C0WklkStuABtzqi64hWXh5JtkZXR5D7 MyuaWJvgDdd3MbB7RlQrKE8A9gLNOPdHnvXC5ELcGIBfoohyXua7t7PMyOMcyLJb BcswBQQcLqhFBzjdqepujqRgTRdWlTriQkUvrscJdNyh0sFOqAfWW7er1lS1CqUo X7SO6Kjb6Ndc/uFkghPwWMyGhcR8utZ28fxGGDsuAu4WB9ObKIIqu5nv+XWmyuJs LQMNV5RVRdDlFoInOSxVBHBe9LHhljPyOfxeMd6W2/UFr2nEXJtl8820KSxCXE7B 4h8sSyLfpvCY751Yb3sXXk4VIwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFA6wQg9C dZ5KItC4DoivNG77wtK0MB8GA1UdIwQYMBaAFFig3dAlVcg3SG1VQ1GG3MV2oSg+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEMzMC8wRjFGN0NFODk2 NDExMUVEQkE5RENDNEZDNEY5QUUwMi9XS0RkMENWVnlEZEliVlZEVVliY3hYYWhL RDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dLRGQwQ1ZWeURkSWJWVkRVWWJjeFhhaEtENC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTRDMzAvMEYxRjdDRTg5NjQxMTFFREJBOURDQzRGQzRGOUFFMDIvOEM0OEIyMkM0 N0U3MTFFRTkxNTMwRDI4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnPfAwDwQCAAIwCQMHACABDfHDQDANBgkqhkiG9w0BAQsF AAOCAQEAHUIMWFA2Hd5iHrGnkF4DnrhT/wERs439tT/BzRbWp7KknMf9Jmj3+5Aa Nj4RnBVJvtTrtFsKp+bktkh8/pUA/0z0u/2XuRyeWhGw92wsExyeXp/1VCq/tquE 6ceS88QECyiKKI8jSPlhPHlDDGTVeGPyIGkUNOKrqs/WbHvJ7CM+n05+zp2RFPip HeNjE8TuFRNnOrgTdXsypEvKpoE5GM1wIjCl1STgRKN7+ID1zxYNUKXslD/O+KHh V+S0VGU8++4UUnOatSgEIe7h1CggMMKXY2lH+WOcgTjkxsQOrtRhL/x/e6q8NYp4 Kappf2w1FiM3FvajNDk1sbn3tQSV8A== -----END CERTIFICATE-----Generated at Sun Jan 25 07:55:16 2026 by rpki-client