This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/4BEA1D1CEEB911F0963844DC6D6F56BC.roa File: 4BEA1D1CEEB911F0963844DC6D6F56BC.roa (raw, json) Hash identifier: 8zjQ/ctnCACGLUD5KS+dbqfgeQ1P5j765xqPebnQFWo= Subject key identifier: A0:29:ED:F7:D0:0A:AB:A9:A3:70:B4:ED:E4:DC:99:29:D0:94:E9:A9 Certificate issuer: /CN=A91F605B/serialNumber=91338690DEBA578CE738218A9E220854D1B5275F Certificate serial: 04C5 Authority key identifier: 91:33:86:90:DE:BA:57:8C:E7:38:21:8A:9E:22:08:54:D1:B5:27:5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTOGkN66V4znOCGKniIIVNG1J18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/4BEA1D1CEEB911F0963844DC6D6F56BC.roa Signing time: Sun 11 Jan 2026 06:49:16 +0000 ROA not before: Sun 11 Jan 2026 06:49:16 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 149300 IP address blocks: 103.178.66.0/23 maxlen: 24 2001:df0:3540::/48 maxlen: 48 2402:46a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.crl rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTOGkN66V4znOCGKniIIVNG1J18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 23:13:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1221 (0x4c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F605B, serialNumber=91338690DEBA578CE738218A9E220854D1B5275F Validity Not Before: Jan 11 06:49:16 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=696347ec-8fed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:97:ae:13:db:b5:a8:95:f1:3e:9e:39:b3:85: a9:a4:f4:e6:e4:7c:9c:58:18:e0:88:bb:8e:a0:6a: b2:47:ab:34:2f:ed:2c:97:ac:2d:a0:3c:b2:86:d4: 7f:e2:1c:e1:39:a0:1f:cb:55:ef:35:5d:ea:33:ea: b6:6a:bc:a1:df:31:2e:c0:cf:8e:1a:f1:9a:0b:8a: d4:96:01:78:61:1a:cd:46:35:df:16:c2:d6:ef:24: 3f:35:4a:15:f7:c6:5d:b9:51:19:e3:20:9e:c3:04: ae:6b:84:78:d8:17:d5:03:da:b7:ce:b5:f6:4b:d6: 5e:11:af:8b:75:56:8f:9b:d8:7e:ac:30:97:1d:56: 0c:b1:03:6e:2c:98:96:3b:d1:46:45:dc:4e:68:44: d4:b8:87:de:c6:a0:79:c7:b1:23:87:eb:a1:7c:4b: ba:8a:ac:9b:4c:a5:23:a7:ca:74:83:1c:fb:b8:65: a9:28:2a:58:2d:76:d6:fe:24:9f:1b:93:6b:32:13: ef:97:86:d5:f4:98:98:1f:24:31:ea:b5:20:43:b9: 3b:d5:5a:c4:34:85:e3:ef:55:7a:f1:23:23:72:35: 12:18:89:bf:5f:89:79:e6:11:f8:13:08:19:13:6f: 39:40:31:0d:10:3c:70:02:18:1a:cd:17:82:64:e5: 2a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:29:ED:F7:D0:0A:AB:A9:A3:70:B4:ED:E4:DC:99:29:D0:94:E9:A9 X509v3 Authority Key Identifier: keyid:91:33:86:90:DE:BA:57:8C:E7:38:21:8A:9E:22:08:54:D1:B5:27:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTOGkN66V4znOCGKniIIVNG1J18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/4BEA1D1CEEB911F0963844DC6D6F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.178.66.0/23 IPv6: 2001:df0:3540::/48 2402:46a0::/32 Signature Algorithm: sha256WithRSAEncryption d6:33:8c:53:db:eb:7f:a5:39:21:3d:ba:e8:9d:6a:f7:b2:2e: c2:82:d6:26:34:7a:44:45:7a:a1:b3:bc:d8:7b:0e:65:f0:03: 70:34:8b:f2:6c:45:2f:09:20:e0:f6:d0:8e:90:45:b0:51:e1: ea:9e:33:bd:30:29:91:a5:4a:3a:02:9e:60:ed:74:c0:a7:2c: 01:0d:82:17:d3:5e:e2:f7:d6:3e:ce:10:77:8a:2b:51:1d:e9: 54:cc:f5:57:75:c5:9e:0d:59:95:8e:07:46:45:60:11:ad:7e: 9e:f9:62:64:57:c9:86:4c:e6:4b:16:e1:84:36:3a:61:c2:71: ee:a9:a0:0f:3a:1f:1e:0a:71:29:07:46:7d:c7:ce:db:8d:3c: 7a:99:ad:d9:7e:e7:8e:fc:d4:86:59:9d:20:21:43:38:1f:04: 01:c6:f1:32:62:ea:73:a1:a7:9c:7e:c2:dc:19:b6:25:bd:55: d6:d0:de:a5:62:86:8c:1b:0c:04:1e:cd:a9:c7:75:9e:3c:f5: 2e:28:80:3b:11:9c:f8:ce:81:16:af:ae:41:e9:ca:84:95:3b: fd:a4:5e:30:f0:28:98:90:ce:e4:ff:e5:af:b4:fc:83:dd:47: ee:b1:56:a7:04:12:9f:72:ee:02:6c:26:de:5b:d4:37:67:1e: 02:49:16:b6 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICBMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx RjYwNUIxMTAvBgNVBAUTKDkxMzM4NjkwREVCQTU3OENFNzM4MjE4QTlFMjIwODU0 RDFCNTI3NUYwHhcNMjYwMTExMDY0OTE2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTYzNDdlYy04ZmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZeuE9u1qJXxPp45s4WppPTm5HycWBjgiLuOoGqyR6s0L+0sl6wtoDyyhtR/ 4hzhOaAfy1XvNV3qM+q2aryh3zEuwM+OGvGaC4rUlgF4YRrNRjXfFsLW7yQ/NUoV 98ZduVEZ4yCewwSua4R42BfVA9q3zrX2S9ZeEa+LdVaPm9h+rDCXHVYMsQNuLJiW O9FGRdxOaETUuIfexqB5x7Ejh+uhfEu6iqybTKUjp8p0gxz7uGWpKCpYLXbW/iSf G5NrMhPvl4bV9JiYHyQx6rUgQ7k71VrENIXj71V68SMjcjUSGIm/X4l55hH4EwgZ E285QDENEDxwAhgazReCZOUqPwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFKAp7ffQ Cqupo3C07eTcmSnQlOmpMB8GA1UdIwQYMBaAFJEzhpDeuleM5zghip4iCFTRtSdf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjA1Qi85ODE3RDI3MjY0 Q0MxMUVDOTZENEE1NThDNEY5QUUwMi9rVE9Ha042NlY0em5PQ0dLbmlJSVZORzFK MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tUT0drTjY2VjR6bk9DR0tuaUlJVk5HMUoxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjYwNUIvOTgxN0QyNzI2NENDMTFFQzk2RDRBNTU4QzRGOUFFMDIvNEJFQTFEMUNF RUI5MTFGMDk2Mzg0NERDNkQ2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMAwEAgABMAYDBAFnskIwFgQCAAIwEAMHACABDfA1QAMFACQCRqAwDQYJKoZI hvcNAQELBQADggEBANYzjFPb63+lOSE9uuidaveyLsKC1iY0ekRFeqGzvNh7DmXw A3A0i/JsRS8JIOD20I6QRbBR4eqeM70wKZGlSjoCnmDtdMCnLAENghfTXuL31j7O EHeKK1Ed6VTM9Vd1xZ4NWZWOB0ZFYBGtfp75YmRXyYZM5ksW4YQ2OmHCce6poA86 Hx4KcSkHRn3HztuNPHqZrdl+54781IZZnSAhQzgfBAHG8TJi6nOhp5x+wtwZtiW9 VdbQ3qVihowbDAQezanHdZ489S4ogDsRnPjOgRavrkHpyoSVO/2kXjDwKJiQzuT/ 5a+0/IPdR+6xVqcEEp9y7gJsJt5b1DdnHgJJFrY= -----END CERTIFICATE-----Generated at Sun Jan 25 06:15:34 2026 by rpki-client