This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/CE3FCE34AF1611F0B50BFF7AC4F9AE02.roa File: CE3FCE34AF1611F0B50BFF7AC4F9AE02.roa (raw, json) Hash identifier: Yzm2sxy6Wc8GSrCkWvHieh5N9DgpO5D+oRUtJYq3agI= Subject key identifier: 41:FB:E4:D5:00:2C:1C:95:6D:32:DA:2A:DC:BA:5E:FE:7E:0C:65:18 Certificate issuer: /CN=A91E7BC4/serialNumber=DDA7F8A74A0A74CFF6EB630428B6C9D70D57BD76 Certificate serial: 0E26 Authority key identifier: DD:A7:F8:A7:4A:0A:74:CF:F6:EB:63:04:28:B6:C9:D7:0D:57:BD:76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3af4p0oKdM_262MEKLbJ1w1XvXY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/CE3FCE34AF1611F0B50BFF7AC4F9AE02.roa Signing time: Wed 21 Jan 2026 08:36:02 +0000 ROA not before: Wed 21 Jan 2026 08:36:02 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 19551 IP address blocks: 203.121.47.0/24 maxlen: 24 211.24.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.crl rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3af4p0oKdM_262MEKLbJ1w1XvXY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 17:33:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3622 (0xe26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7BC4, serialNumber=DDA7F8A74A0A74CFF6EB630428B6C9D70D57BD76 Validity Not Before: Jan 21 08:36:02 2026 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=69708ff2-f06c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ac:97:86:29:06:96:8a:5d:57:8e:35:0d:56: 44:e6:a9:7f:0b:c1:43:33:66:bb:b6:01:65:1a:fb: 76:07:6a:02:82:d0:8c:ed:34:64:1f:bf:1e:3f:36: ff:e0:88:96:72:b7:21:51:7d:3e:34:85:c0:b4:cb: bd:1e:25:02:78:42:b0:81:51:70:b8:87:53:90:9b: f2:89:e6:ff:61:f9:1e:f8:6f:34:d8:7a:a6:3f:17: 78:e3:f5:13:04:58:ca:9b:b5:71:74:2e:b1:a3:a0: fd:9d:1e:f5:f1:17:c3:35:c9:07:ab:02:77:80:2d: 0f:bd:81:1a:62:92:9e:50:a5:c4:9a:f9:a8:ee:de: 7a:77:93:98:10:a0:c6:aa:c5:d3:1f:b0:d2:e3:73: 9d:7a:38:89:7a:9d:f8:55:33:0e:b2:3b:13:cb:16: db:6e:6b:b1:b2:fe:ca:5a:6e:11:5c:d9:56:c2:1f: 6c:b0:dc:39:7e:02:2b:7a:10:e2:71:43:be:81:6b: ec:2d:f7:2b:9e:18:9b:5a:2f:70:02:00:1d:15:dc: c4:67:a2:03:d5:67:23:8e:16:c0:2e:9a:2b:f2:65: 42:b5:cd:e9:2d:b3:af:cd:64:d8:53:42:4f:e2:68: 8c:76:8c:5d:ed:07:cd:45:61:f9:11:8c:de:24:ca: 84:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:FB:E4:D5:00:2C:1C:95:6D:32:DA:2A:DC:BA:5E:FE:7E:0C:65:18 X509v3 Authority Key Identifier: keyid:DD:A7:F8:A7:4A:0A:74:CF:F6:EB:63:04:28:B6:C9:D7:0D:57:BD:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3af4p0oKdM_262MEKLbJ1w1XvXY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/CE3FCE34AF1611F0B50BFF7AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.121.47.0/24 211.24.174.0/24 Signature Algorithm: sha256WithRSAEncryption a8:44:8a:5e:67:84:d0:9e:d2:0d:2e:97:08:4a:cc:69:dc:79: 3e:1e:ec:38:b5:50:dc:4c:89:04:4d:f8:09:09:a2:0c:8f:f4: 53:59:0d:66:cc:2e:4f:05:69:49:0d:46:93:96:fd:86:46:e7: fa:7d:04:ef:51:04:26:30:fa:4f:87:c9:c1:9f:be:63:1e:8c: 33:10:14:4b:a5:b5:3a:a5:22:43:c9:5c:57:34:d9:1b:d9:f2: 4d:01:ed:fe:57:0a:29:e3:10:70:ab:6c:de:47:9f:98:fb:52: c6:10:3e:17:89:88:af:4f:1a:7c:ba:e6:cd:ed:b7:e2:7c:4b: a6:7e:25:27:71:82:7f:09:28:e7:47:8b:2c:d0:a4:dc:a4:ea: b1:6f:e0:fe:f4:7c:a6:df:19:02:77:49:94:59:c6:b2:3f:3a: 93:0b:03:37:7f:e7:b9:0e:fc:9e:c8:03:af:36:31:76:40:dc: a9:de:04:ed:00:db:4d:cf:ea:dc:92:6f:c6:87:61:2c:36:1b: 91:88:39:76:83:d5:a7:13:23:05:d7:17:0d:5d:50:70:4f:96: 94:33:e0:a8:8f:b4:a3:42:24:0f:12:ba:55:23:58:94:61:f8: 02:a4:b6:7b:3f:43:16:74:f9:11:f6:c9:75:42:1d:7a:59:f1: 12:34:8b:cb -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICDiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdCQzQxMTAvBgNVBAUTKEREQTdGOEE3NEEwQTc0Q0ZGNkVCNjMwNDI4QjZDOUQ3 MEQ1N0JENzYwHhcNMjYwMTIxMDgzNjAyWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTcwOGZmMi1mMDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA06yXhikGlopdV441DVZE5ql/C8FDM2a7tgFlGvt2B2oCgtCM7TRkH78ePzb/ 4IiWcrchUX0+NIXAtMu9HiUCeEKwgVFwuIdTkJvyieb/Yfke+G802HqmPxd44/UT BFjKm7VxdC6xo6D9nR718RfDNckHqwJ3gC0PvYEaYpKeUKXEmvmo7t56d5OYEKDG qsXTH7DS43OdejiJep34VTMOsjsTyxbbbmuxsv7KWm4RXNlWwh9ssNw5fgIrehDi cUO+gWvsLfcrnhibWi9wAgAdFdzEZ6ID1WcjjhbALpor8mVCtc3pLbOvzWTYU0JP 4miMdoxd7QfNRWH5EYzeJMqEFwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFEH75NUA LByVbTLaKty6Xv5+DGUYMB8GA1UdIwQYMBaAFN2n+KdKCnTP9utjBCi2ydcNV712 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0JDNC8yRDFBNTk1QUQ1 MEQxMUU5QkFENkMyMjZDNEY5QUUwMi8zYWY0cDBvS2RNXzI2Mk1FS0xiSjF3MVh2 WFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNhZjRwMG9LZE1fMjYyTUVLTGJKMXcxWHZYWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTdCQzQvMkQxQTU5NUFENTBEMTFFOUJBRDZDMjI2QzRGOUFFMDIvQ0UzRkNFMzRB RjE2MTFGMEI1MEJGRjdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBADLeS8DBADTGK4wDQYJKoZIhvcNAQELBQADggEBAKhEil5n hNCe0g0ulwhKzGnceT4e7Di1UNxMiQRN+AkJogyP9FNZDWbMLk8FaUkNRpOW/YZG 5/p9BO9RBCYw+k+HycGfvmMejDMQFEultTqlIkPJXFc02RvZ8k0B7f5XCinjEHCr bN5Hn5j7UsYQPheJiK9PGny65s3tt+J8S6Z+JSdxgn8JKOdHiyzQpNyk6rFv4P70 fKbfGQJ3SZRZxrI/OpMLAzd/57kO/J7IA682MXZA3KneBO0A203P6tySb8aHYSw2 G5GIOXaD1acTIwXXFw1dUHBPlpQz4KiPtKNCJA8SulUjWJRh+AKktns/QxZ0+RH2 yXVCHXpZ8RI0i8s= -----END CERTIFICATE-----Generated at Sun Jan 25 06:18:38 2026 by rpki-client