This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/8AD0E57C8FE311EB89767C78C4F9AE02.roa File: 8AD0E57C8FE311EB89767C78C4F9AE02.roa (raw, json) Hash identifier: 9TPoVQoZze0OxiRulcruQ+OHEvw1Bwj4jzFVIB5WLlk= Subject key identifier: 39:60:C9:36:29:E8:96:6D:28:FD:0B:E7:3C:51:CB:80:3B:FB:B8:36 Certificate issuer: /CN=A917CBD7/serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14 Certificate serial: 0AFB Authority key identifier: E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/8AD0E57C8FE311EB89767C78C4F9AE02.roa Signing time: Sun 28 Dec 2025 19:16:25 +0000 ROA not before: Sun 28 Dec 2025 19:16:25 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 137453 IP address blocks: 103.127.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Jan 2026 18:55:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2811 (0xafb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CBD7, serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14 Validity Not Before: Dec 28 19:16:25 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69518209-a563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:52:06:44:53:d5:a9:45:5e:3d:47:6d:2e:7b: ae:01:7c:3c:ad:fc:38:c6:08:10:96:f4:59:3a:0d: 1d:6b:3f:85:eb:3f:a9:ba:b2:db:99:d5:5e:d8:16: d0:d5:d3:8b:c4:d6:09:ae:8e:03:1e:e9:8c:eb:d4: f1:d4:3d:85:d1:7f:0d:b1:1b:d6:51:39:9c:90:d0: 9a:f5:c8:1a:ac:56:41:a0:03:55:f5:22:63:a6:e4: 67:e4:8b:fc:6f:ff:3d:79:c0:be:00:41:31:11:c3: fe:fb:5c:46:75:41:32:ff:3a:a4:7a:3a:ce:19:53: 5f:59:3b:86:ba:34:73:8c:1b:13:15:63:02:4f:4a: e0:17:64:9c:b1:76:54:aa:39:79:55:3d:a7:b1:f3: f3:0a:98:50:9b:05:bd:24:50:6c:ee:a2:b5:90:bb: 32:d1:63:f4:b8:d7:41:b6:64:a0:9a:5c:9b:f1:68: e8:13:6e:7c:26:d8:02:b8:11:41:73:e7:ad:e6:cb: 91:7c:36:28:f3:28:cc:09:44:40:37:97:dc:60:ce: 78:02:3f:b1:6c:53:9b:54:92:5d:55:86:d9:33:12: d6:9d:5d:31:dc:92:10:d7:2e:7f:f9:a0:89:c6:85: 52:20:47:65:2a:1e:a7:00:7a:ea:da:5f:2d:c7:7a: 0b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:60:C9:36:29:E8:96:6D:28:FD:0B:E7:3C:51:CB:80:3B:FB:B8:36 X509v3 Authority Key Identifier: keyid:E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/8AD0E57C8FE311EB89767C78C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.127.3.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:8e:6e:03:cf:f1:61:fa:ae:88:2e:5e:8d:7e:80:5e:73:20: 6d:f5:7a:53:48:c6:8c:6c:ca:47:92:d2:fe:3d:7e:d6:86:de: e7:d6:7b:d5:32:b2:93:8c:74:50:b0:48:46:15:8a:ee:c9:68: 44:f4:56:a4:ec:0c:23:3a:60:ea:e7:83:be:de:69:ae:55:9d: 91:da:6e:67:e8:c8:fd:31:e9:e5:33:e7:25:0c:ea:20:93:f4: 6d:16:a4:cb:63:ef:9b:b9:f9:26:d0:32:06:9f:9a:fc:5b:be: 10:f0:76:dd:f8:32:3c:57:97:27:bd:f9:c3:15:3f:77:d9:66: e0:f6:a8:0b:9d:4b:29:e9:e3:08:03:6c:68:7b:1c:65:50:4f: 6a:9f:6e:bf:89:6e:fb:6b:9a:ae:1b:c2:3c:cb:b5:09:a1:cc: 03:c2:59:1c:ff:b6:9e:07:f1:2e:18:40:4a:af:0d:53:c1:a0: e0:c5:cc:11:51:2e:d1:8e:7e:fa:60:2a:e5:ed:b9:df:a0:42: ad:e5:ca:c8:78:b9:66:bb:25:3c:c4:8c:d3:cf:45:38:85:8f: 99:35:7e:cc:6f:b9:b9:e7:cd:d3:de:79:5e:b5:e4:78:96:9e: 89:fa:82:c9:13:f4:a5:e4:61:ab:19:07:0a:15:25:e8:21:d0: d2:5e:b8:16 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCvswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx N0NCRDcxMTAvBgNVBAUTKEU5OTIzQkFDMEY1QzU4Q0FCRUI5MzI4NkNBMjAyNjZG MUY2RUZCMTQwHhcNMjUxMjI4MTkxNjI1WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTUxODIwOS1hNTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi1IGRFPVqUVePUdtLnuuAXw8rfw4xggQlvRZOg0daz+F6z+purLbmdVe2BbQ 1dOLxNYJro4DHumM69Tx1D2F0X8NsRvWUTmckNCa9cgarFZBoANV9SJjpuRn5Iv8 b/89ecC+AEExEcP++1xGdUEy/zqkejrOGVNfWTuGujRzjBsTFWMCT0rgF2ScsXZU qjl5VT2nsfPzCphQmwW9JFBs7qK1kLsy0WP0uNdBtmSgmlyb8WjoE258JtgCuBFB c+et5suRfDYo8yjMCURAN5fcYM54Aj+xbFObVJJdVYbZMxLWnV0x3JIQ1y5/+aCJ xoVSIEdlKh6nAHrq2l8tx3oLawIDAQABo4IClTCCApEwHQYDVR0OBBYEFDlgyTYp 6JZtKP0L5zxRy4A7+7g2MB8GA1UdIwQYMBaAFOmSO6wPXFjKvrkyhsogJm8fbvsU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0JENy8xOTIzQkY2ODY0 MjgxMUVBQTcwNDFENDhDNEY5QUUwMi82Wkk3ckE5Y1dNcS11VEtHeWlBbWJ4OXUt eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZaSTdyQTljV01xLXVUS0d5aUFtYng5dS14US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0NCRDcvMTkyM0JGNjg2NDI4MTFFQUE3MDQxRDQ4QzRGOUFFMDIvOEFEMEU1N0M4 RkUzMTFFQjg5NzY3Qzc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnfwMwDQYJKoZIhvcNAQELBQADggEBAE2ObgPP8WH6rogu Xo1+gF5zIG31elNIxoxsykeS0v49ftaG3ufWe9UyspOMdFCwSEYViu7JaET0VqTs DCM6YOrng77eaa5VnZHabmfoyP0x6eUz5yUM6iCT9G0WpMtj75u5+SbQMgafmvxb vhDwdt34MjxXlye9+cMVP3fZZuD2qAudSynp4wgDbGh7HGVQT2qfbr+Jbvtrmq4b wjzLtQmhzAPCWRz/tp4H8S4YQEqvDVPBoODFzBFRLtGOfvpgKuXtud+gQq3lysh4 uWa7JTzEjNPPRTiFj5k1fsxvubnnzdPeeV615HiWnon6gskT9KXkYasZBwoVJegh 0NJeuBY= -----END CERTIFICATE-----Generated at Sun Jan 11 06:46:51 2026 by rpki-client