This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/08CD5AD2DA2B11EBA1C6AA3CC4F9AE02.roa File: 08CD5AD2DA2B11EBA1C6AA3CC4F9AE02.roa (raw, json) Hash identifier: PaVbntFuy/7D1D/nJKZWreM/kWoQ6YIIije82h6y/VI= Subject key identifier: DC:3E:9A:75:4C:A1:B9:D7:05:ED:AA:63:EE:D3:8A:39:0D:88:17:05 Certificate issuer: /CN=A91E5FCD/serialNumber=273AAAE2E3BE994FC2833F85712923CD417B7FAD Certificate serial: 0605 Authority key identifier: 27:3A:AA:E2:E3:BE:99:4F:C2:83:3F:85:71:29:23:CD:41:7B:7F:AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/08CD5AD2DA2B11EBA1C6AA3CC4F9AE02.roa Signing time: Fri 02 Jan 2026 16:15:27 +0000 ROA not before: Fri 02 Jan 2026 16:15:27 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 136807 IP address blocks: 103.205.39.0/24 maxlen: 24 2001:df0:3b00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.crl rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 16:09:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1541 (0x605) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5FCD, serialNumber=273AAAE2E3BE994FC2833F85712923CD417B7FAD Validity Not Before: Jan 2 16:15:27 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6957ef1f-88c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8a:28:45:a3:8c:56:23:4d:b3:7d:12:a8:46: 76:a0:76:a7:50:b7:d4:0c:ce:4b:6b:2e:ea:3f:9c: b5:87:96:c1:84:58:ea:b5:54:c6:3b:2b:e0:d8:42: dd:9a:e4:fd:a9:16:fe:41:f0:13:83:84:96:d3:d4: f5:d7:f0:bd:dc:d0:be:68:cc:5e:2f:5f:87:cb:a0: 80:4d:0c:a2:92:a8:a7:e3:7b:a1:6f:96:31:de:96: 8f:a0:7e:08:ec:99:74:4e:bb:8c:57:90:a7:7e:cb: bf:3c:42:5c:17:e5:6d:9d:30:ad:b6:8e:4b:87:ea: a9:65:2e:f4:55:52:02:0b:d2:c8:6c:01:e8:4b:aa: 92:ca:ca:aa:53:77:f2:90:0a:68:27:db:20:80:04: b1:28:67:10:a1:83:ff:9c:ff:0f:b6:e8:af:55:df: c0:88:67:de:b9:1a:a9:01:44:f6:35:ef:48:87:12: ce:7d:21:16:8a:42:cc:f1:b6:0e:41:20:20:16:5e: e7:81:be:a0:1a:ae:4f:13:f4:aa:d7:c8:df:38:8b: 3c:5a:96:b1:3d:5e:36:07:ba:77:bb:48:9f:cd:d7: 7c:81:60:9e:63:ec:69:52:7c:d2:5d:35:ab:b5:a5: 59:02:5c:dc:95:c4:b5:7d:0c:f9:62:45:ec:bb:74: 10:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:3E:9A:75:4C:A1:B9:D7:05:ED:AA:63:EE:D3:8A:39:0D:88:17:05 X509v3 Authority Key Identifier: keyid:27:3A:AA:E2:E3:BE:99:4F:C2:83:3F:85:71:29:23:CD:41:7B:7F:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/08CD5AD2DA2B11EBA1C6AA3CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.205.39.0/24 IPv6: 2001:df0:3b00::/48 Signature Algorithm: sha256WithRSAEncryption 0e:8d:29:68:85:d7:57:55:8b:96:8c:44:83:17:e7:df:c8:9d: 8a:b1:04:8e:1f:2a:a4:0d:d3:9b:9e:14:ac:d5:f4:f0:fb:9f: 4f:f1:4f:6b:cb:b4:19:63:09:48:ef:13:9e:79:b3:78:32:f8: f6:06:d7:56:82:00:83:53:e7:5e:25:31:ed:a8:e1:47:1a:a6: 3c:83:4c:d9:66:38:b2:3f:75:f5:fb:e9:44:91:9d:1f:54:e0: 1e:11:7b:73:0d:d2:e7:f8:25:64:6e:54:d9:7f:aa:40:b1:0e: 05:85:67:6d:e6:c3:1c:74:84:fc:1a:bc:6d:86:0a:fe:e9:7f: e8:6f:72:54:4b:74:9a:e7:9a:c1:89:81:5b:1b:c5:26:6b:5a: 4b:20:69:94:0e:e8:ca:54:45:97:02:17:3e:6e:e2:40:7a:ff: ff:b0:0a:5f:73:52:f2:a4:6f:ba:7d:c8:9a:cb:9c:29:ec:a8: e9:9e:22:53:10:05:bb:8c:b0:9f:74:dc:0a:40:5a:b4:8d:40: 49:8b:3d:a6:9e:62:ff:1a:62:c5:ee:04:b7:fe:66:6d:9a:f5: af:9f:51:3b:2b:bd:f6:e3:0a:fa:eb:a3:f6:db:28:a5:25:ff: e7:87:1d:90:80:94:b5:b4:06:51:11:9c:68:c8:5f:04:63:ae: 14:8d:9b:bc -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx RTVGQ0QxMTAvBgNVBAUTKDI3M0FBQUUyRTNCRTk5NEZDMjgzM0Y4NTcxMjkyM0NE NDE3QjdGQUQwHhcNMjYwMTAyMTYxNTI3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU3ZWYxZi04OGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq4ooRaOMViNNs30SqEZ2oHanULfUDM5Lay7qP5y1h5bBhFjqtVTGOyvg2ELd muT9qRb+QfATg4SW09T11/C93NC+aMxeL1+Hy6CATQyikqin43uhb5Yx3paPoH4I 7Jl0TruMV5Cnfsu/PEJcF+VtnTCtto5Lh+qpZS70VVICC9LIbAHoS6qSysqqU3fy kApoJ9sggASxKGcQoYP/nP8PtuivVd/AiGfeuRqpAUT2Ne9IhxLOfSEWikLM8bYO QSAgFl7ngb6gGq5PE/Sq18jfOIs8WpaxPV42B7p3u0ifzdd8gWCeY+xpUnzSXTWr taVZAlzclcS1fQz5YkXsu3QQLQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFNw+mnVM obnXBe2qY+7TijkNiBcFMB8GA1UdIwQYMBaAFCc6quLjvplPwoM/hXEpI81Be3+t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUZDRC8wQkUwRkZFMDc4 MEUxMUU3ODMzNEM1MjFDNEY5QUUwMi9KenFxNHVPLW1VX0Nnei1GY1NranpVRjdm NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p6cXE0dU8tbVVfQ2d6LUZjU2tqelVGN2Y2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTVGQ0QvMEJFMEZGRTA3ODBFMTFFNzgzMzRDNTIxQzRGOUFFMDIvMDhDRDVBRDJE QTJCMTFFQkExQzZBQTNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnzScwDwQCAAIwCQMHACABDfA7ADANBgkqhkiG9w0BAQsF AAOCAQEADo0paIXXV1WLloxEgxfn38idirEEjh8qpA3Tm54UrNX08PufT/FPa8u0 GWMJSO8TnnmzeDL49gbXVoIAg1PnXiUx7ajhRxqmPINM2WY4sj919fvpRJGdH1Tg HhF7cw3S5/glZG5U2X+qQLEOBYVnbebDHHSE/Bq8bYYK/ul/6G9yVEt0mueawYmB WxvFJmtaSyBplA7oylRFlwIXPm7iQHr//7AKX3NS8qRvun3ImsucKeyo6Z4iUxAF u4ywn3TcCkBatI1ASYs9pp5i/xpixe4Et/5mbZr1r59ROyu99uMK+uuj9tsopSX/ 54cdkICUtbQGURGcaMhfBGOuFI2bvA== -----END CERTIFICATE-----Generated at Sun Jan 25 06:06:28 2026 by rpki-client