This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/1295B5943FA611EF94664041C4F9AE02.roa File: 1295B5943FA611EF94664041C4F9AE02.roa (raw, json) Hash identifier: Xm1rBXhmf8C7NwIdzHcktuLy6xLXnZf/ojX3SwmWi0s= Subject key identifier: A4:F7:67:D2:74:A2:DF:BC:D7:39:56:5A:B3:A5:FD:4D:00:17:6E:E3 Certificate issuer: /CN=A911ACAC/serialNumber=91E679721ED1E0927EBB7E461C80580D2393592A Certificate serial: 0527 Authority key identifier: 91:E6:79:72:1E:D1:E0:92:7E:BB:7E:46:1C:80:58:0D:23:93:59:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/1295B5943FA611EF94664041C4F9AE02.roa Signing time: Sat 20 Dec 2025 23:20:17 +0000 ROA not before: Sat 20 Dec 2025 23:20:17 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 141433 IP address blocks: 103.174.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Jan 2026 22:49:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1319 (0x527) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ACAC, serialNumber=91E679721ED1E0927EBB7E461C80580D2393592A Validity Not Before: Dec 20 23:20:17 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69472f31-f788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2a:60:28:2e:d3:35:9e:35:75:4e:4f:50:3e: af:5a:ff:e5:56:d5:be:3e:61:45:44:67:a1:3b:1c: 83:d4:0e:db:41:ec:fe:bb:c1:98:e4:4e:a3:15:9f: 37:5f:25:58:70:dd:7d:f2:94:8a:c5:a7:c7:d9:ad: 70:5d:53:23:79:29:9e:30:47:a0:f8:cc:6e:f8:b7: 74:8e:ad:50:4c:bf:7d:0d:b9:0f:f5:c1:e6:a9:70: 5b:27:3a:f8:8e:99:7a:eb:cf:a9:b2:fb:b3:d9:da: a6:1e:ec:7d:59:c7:f4:81:30:05:7e:e6:25:15:a9: bc:d2:4a:40:0b:ca:54:11:71:01:8d:9f:bc:2c:6b: 42:b4:32:69:c2:25:db:3f:a2:b1:c8:c7:79:4c:a8: 1b:37:50:06:a2:28:c2:a4:f5:45:3d:c4:1e:50:1d: ca:6f:d3:4b:2d:63:a4:66:40:66:97:fa:f7:d9:f0: 46:cb:a5:dc:84:7e:39:42:97:bb:7b:13:af:c6:66: 99:2f:c7:24:4d:a5:05:f0:0a:00:ce:3b:19:16:40: a5:2f:b0:ad:0e:33:b5:f1:21:9a:7e:1d:f1:1c:a2: c9:a7:dd:fc:a5:46:1a:ab:81:9c:45:97:8e:93:31: 5c:59:d7:6c:38:a2:88:5b:ef:b4:d4:dc:0f:aa:1f: 72:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:F7:67:D2:74:A2:DF:BC:D7:39:56:5A:B3:A5:FD:4D:00:17:6E:E3 X509v3 Authority Key Identifier: keyid:91:E6:79:72:1E:D1:E0:92:7E:BB:7E:46:1C:80:58:0D:23:93:59:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/1295B5943FA611EF94664041C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.174.189.0/24 Signature Algorithm: sha256WithRSAEncryption 25:79:8e:78:00:30:a7:07:e6:e3:48:f8:59:ce:18:ff:4c:55: 79:a5:f9:cf:74:18:4f:02:94:7a:ef:a3:bd:72:2e:99:f1:6d: e2:18:69:27:95:03:7e:75:8a:8c:ca:3b:b8:62:97:a6:f3:40: 41:ae:53:a7:27:6f:58:0d:4c:13:ff:5b:8d:cf:68:05:8c:f9: 8d:2a:db:73:d9:8b:14:86:a3:71:c0:cc:1d:72:07:45:7d:f7: 38:c5:b4:f5:c9:f0:01:c6:52:5f:ed:7c:e2:cb:6a:38:25:2f: 2d:64:e0:15:76:81:eb:13:2c:c0:56:e5:22:6f:72:a3:b2:ca: 5a:39:6c:5e:79:1c:17:94:48:23:87:17:1a:40:64:37:6b:69: 63:ea:bd:5d:05:87:94:84:c3:b0:96:e4:5a:be:dc:b6:73:ae: 0b:be:30:4c:51:cd:50:54:fc:51:35:85:28:11:a3:4e:47:db: 13:a2:cd:a2:4c:28:45:cf:00:0e:ad:33:da:31:84:d0:1a:91: ea:af:3d:ee:6f:35:4f:ea:02:c9:ee:5a:26:a2:8c:dc:96:10: c7:9c:7a:b7:97:6f:0e:38:c5:66:b3:cc:29:28:88:18:d0:90: ee:39:75:96:79:67:83:bc:9b:3a:b9:e7:ad:e2:ff:5b:36:91: 02:03:33:4c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx MUFDQUMxMTAvBgNVBAUTKDkxRTY3OTcyMUVEMUUwOTI3RUJCN0U0NjFDODA1ODBE MjM5MzU5MkEwHhcNMjUxMjIwMjMyMDE3WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTQ3MmYzMS1mNzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ipgKC7TNZ41dU5PUD6vWv/lVtW+PmFFRGehOxyD1A7bQez+u8GY5E6jFZ83 XyVYcN198pSKxafH2a1wXVMjeSmeMEeg+Mxu+Ld0jq1QTL99DbkP9cHmqXBbJzr4 jpl668+psvuz2dqmHux9Wcf0gTAFfuYlFam80kpAC8pUEXEBjZ+8LGtCtDJpwiXb P6KxyMd5TKgbN1AGoijCpPVFPcQeUB3Kb9NLLWOkZkBml/r32fBGy6XchH45Qpe7 exOvxmaZL8ckTaUF8AoAzjsZFkClL7CtDjO18SGafh3xHKLJp938pUYaq4GcRZeO kzFcWddsOKKIW++01NwPqh9yYQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKT3Z9J0 ot+81zlWWrOl/U0AF27jMB8GA1UdIwQYMBaAFJHmeXIe0eCSfrt+RhyAWA0jk1kq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUNBQy9CM0JEQTU2NDMx RDMxMUVDOEQzQkJGMzBDNEY5QUUwMi9rZVo1Y2g3UjRKSi11MzVHSElCWURTT1RX U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tlWjVjaDdSNEpKLXUzNUdISUJZRFNPVFdTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUFDQUMvQjNCREE1NjQzMUQzMTFFQzhEM0JCRjMwQzRGOUFFMDIvMTI5NUI1OTQz RkE2MTFFRjk0NjY0MDQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnrr0wDQYJKoZIhvcNAQELBQADggEBACV5jngAMKcH5uNI +FnOGP9MVXml+c90GE8ClHrvo71yLpnxbeIYaSeVA351iozKO7hil6bzQEGuU6cn b1gNTBP/W43PaAWM+Y0q23PZixSGo3HAzB1yB0V99zjFtPXJ8AHGUl/tfOLLajgl Ly1k4BV2gesTLMBW5SJvcqOyylo5bF55HBeUSCOHFxpAZDdraWPqvV0Fh5SEw7CW 5Fq+3LZzrgu+MExRzVBU/FE1hSgRo05H2xOizaJMKEXPAA6tM9oxhNAakeqvPe5v NU/qAsnuWiaijNyWEMecereXbw44xWazzCkoiBjQkO45dZZ5Z4O8mzq5563i/1s2 kQIDM0w= -----END CERTIFICATE-----Generated at Sun Jan 11 20:40:38 2026 by rpki-client