This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/56AD05C0D8F711F09DAB56B975D3641D.roa File: 56AD05C0D8F711F09DAB56B975D3641D.roa (raw, json) Hash identifier: Es9bPgKp0v64OSjryiyNquzU+E6CkZKyI4jVnPkxwNc= Subject key identifier: 1C:80:AD:A6:E3:7B:32:E1:AF:C1:C0:EB:36:10:2C:68:79:9C:6C:C2 Certificate issuer: /CN=A9137E65/serialNumber=9E9D0E96AE427F66B58F66B224A6EF5662761E4B Certificate serial: 08A9 Authority key identifier: 9E:9D:0E:96:AE:42:7F:66:B5:8F:66:B2:24:A6:EF:56:62:76:1E:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/56AD05C0D8F711F09DAB56B975D3641D.roa Signing time: Thu 08 Jan 2026 12:39:25 +0000 ROA not before: Thu 08 Jan 2026 12:39:25 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 140962 IP address blocks: 103.153.210.0/23 maxlen: 24 2406:4bc0::/32 maxlen: 32 2406:4bc0:1::/48 maxlen: 48 2406:4bc0:2::/48 maxlen: 48 2406:4bc0:3::/48 maxlen: 48 2406:4bc0:4::/48 maxlen: 48 2406:4bc0:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.crl rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Jan 2026 19:55:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2217 (0x8a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137E65, serialNumber=9E9D0E96AE427F66B58F66B224A6EF5662761E4B Validity Not Before: Jan 8 12:39:25 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=695fa57d-c231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e3:31:71:9a:9e:3a:af:d0:3f:8f:78:b4:7b: 4d:ed:5e:86:5a:4f:57:24:f7:82:f4:4f:4a:12:e6: db:5b:61:78:58:6d:96:6a:75:f0:48:54:a7:a8:4e: 92:59:1a:10:8d:3b:07:8b:9f:fc:52:cf:ee:c6:21: f6:89:16:81:52:9b:37:bb:62:ff:63:84:1c:60:a2: 52:90:1a:16:3d:c6:5e:6d:8b:fd:b1:3c:76:e2:c7: e8:c8:3e:f9:b0:1b:a4:aa:8b:5f:a4:05:50:77:e6: d8:46:28:98:f6:6c:20:6b:06:24:41:d8:ac:d1:81: a9:4c:a5:93:e4:14:b2:aa:d2:71:97:be:33:e5:cb: da:7e:90:c9:17:c2:af:e0:78:49:9a:43:3a:65:46: d3:79:f0:30:98:37:e8:0c:75:ca:91:b3:af:08:05: b7:50:70:fb:84:9a:92:fb:e8:fe:e9:87:44:f7:eb: c4:15:94:d4:4e:dc:9f:1c:94:c7:1e:7b:39:6a:97: 1c:ca:63:16:cd:d9:e4:56:06:7e:05:64:bb:ce:56: 39:66:9b:2f:51:60:d8:25:ea:45:19:13:6a:cc:95: 95:bc:c2:13:86:47:a7:43:a5:12:9e:a1:2f:22:b7: 73:33:9a:c0:21:79:8c:71:de:3b:46:97:a2:2d:5d: 02:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:80:AD:A6:E3:7B:32:E1:AF:C1:C0:EB:36:10:2C:68:79:9C:6C:C2 X509v3 Authority Key Identifier: keyid:9E:9D:0E:96:AE:42:7F:66:B5:8F:66:B2:24:A6:EF:56:62:76:1E:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/56AD05C0D8F711F09DAB56B975D3641D.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.153.210.0/23 IPv6: 2406:4bc0::/32 Signature Algorithm: sha256WithRSAEncryption 21:71:ad:c0:75:60:ed:8d:98:3a:92:2a:47:c3:55:9d:aa:bd: 1c:09:ee:26:c5:37:59:1d:b4:fb:66:63:e6:e8:bf:0f:9e:10: 71:6e:f7:72:dc:fc:03:5c:f5:c6:14:21:b2:53:d4:e4:81:ac: 90:cb:b8:e2:eb:fa:74:54:6c:4e:bd:7e:5e:00:3b:bc:67:36: 7d:15:25:31:ce:a3:78:c4:ec:c7:20:9a:47:b6:55:40:8a:cd: 91:b6:cc:1d:eb:63:77:3f:b0:47:1b:19:bb:1e:39:87:83:30: ac:c8:8d:40:e1:db:a1:de:51:f9:c2:43:26:6e:41:aa:46:4c: ce:a5:4d:19:9a:ba:b9:e9:1d:8b:4f:21:e7:1a:af:ce:16:36: e3:df:c1:0f:07:3f:97:1e:24:c9:42:38:2a:13:35:52:e0:07: 19:bd:e1:91:e5:3d:da:00:29:52:de:d2:94:0b:9c:dc:67:a8: 73:33:2e:7e:d3:2d:33:95:f4:80:17:9c:eb:4b:61:ef:4b:b5: fe:bb:d1:7f:59:9c:9c:5f:af:b9:8b:d2:1d:d0:db:39:4b:0f: 7b:e6:bc:d1:f1:0e:30:02:a6:38:10:7c:68:c0:fd:55:f7:95: c5:65:d4:a3:00:4f:26:15:bf:e7:86:51:fe:4c:69:5c:36:e3: bb:01:ef:64 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdFNjUxMTAvBgNVBAUTKDlFOUQwRTk2QUU0MjdGNjZCNThGNjZCMjI0QTZFRjU2 NjI3NjFFNEIwHhcNMjYwMTA4MTIzOTI1WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTVmYTU3ZC1jMjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsuMxcZqeOq/QP494tHtN7V6GWk9XJPeC9E9KEubbW2F4WG2WanXwSFSnqE6S WRoQjTsHi5/8Us/uxiH2iRaBUps3u2L/Y4QcYKJSkBoWPcZebYv9sTx24sfoyD75 sBukqotfpAVQd+bYRiiY9mwgawYkQdis0YGpTKWT5BSyqtJxl74z5cvafpDJF8Kv 4HhJmkM6ZUbTefAwmDfoDHXKkbOvCAW3UHD7hJqS++j+6YdE9+vEFZTUTtyfHJTH Hns5apccymMWzdnkVgZ+BWS7zlY5ZpsvUWDYJepFGRNqzJWVvMIThkenQ6USnqEv IrdzM5rAIXmMcd47RpeiLV0ClwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFByArabj ezLhr8HA6zYQLGh5nGzCMB8GA1UdIwQYMBaAFJ6dDpauQn9mtY9msiSm71Zidh5L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0U2NS81RUQwNTUzMkQ0 RDMxMUVBOTczNTM5NDRDNEY5QUUwMi9ucDBPbHE1Q2YyYTFqMmF5SktidlZtSjJI a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25wME9scTVDZjJhMWoyYXlKS2J2Vm1KMkhrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdFNjUvNUVEMDU1MzJENEQzMTFFQTk3MzUzOTQ0QzRGOUFFMDIvNTZBRDA1QzBE OEY3MTFGMDlEQUI1NkI5NzVEMzY0MUQucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnmdIwDQQCAAIwBwMFACQGS8AwDQYJKoZIhvcNAQELBQAD ggEBACFxrcB1YO2NmDqSKkfDVZ2qvRwJ7ibFN1kdtPtmY+bovw+eEHFu93Lc/ANc 9cYUIbJT1OSBrJDLuOLr+nRUbE69fl4AO7xnNn0VJTHOo3jE7Mcgmke2VUCKzZG2 zB3rY3c/sEcbGbseOYeDMKzIjUDh26HeUfnCQyZuQapGTM6lTRmaurnpHYtPIeca r84WNuPfwQ8HP5ceJMlCOCoTNVLgBxm94ZHlPdoAKVLe0pQLnNxnqHMzLn7TLTOV 9IAXnOtLYe9Ltf670X9ZnJxfr7mL0h3Q2zlLD3vmvNHxDjACpjgQfGjA/VX3lcVl 1KMATyYVv+eGUf5MaVw247sB72Q= -----END CERTIFICATE-----Generated at Mon Jan 12 01:33:24 2026 by rpki-client