This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/5EA04634181911EA9CA3C619C4F9AE02.roa File: 5EA04634181911EA9CA3C619C4F9AE02.roa (raw, json) Hash identifier: UlIwZ813sp1F+w/CnOeDTkjtjoyAmxS8dMG9Ml/cK8U= Subject key identifier: C2:2D:B8:17:2A:68:3C:79:23:94:E0:5B:0A:D6:2C:C2:A0:5E:03:DF Certificate issuer: /CN=A91936EB/serialNumber=54721E086109690A39652CBAA8A0E61AB0A9F072 Certificate serial: 0C5F Authority key identifier: 54:72:1E:08:61:09:69:0A:39:65:2C:BA:A8:A0:E6:1A:B0:A9:F0:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/5EA04634181911EA9CA3C619C4F9AE02.roa Signing time: Sun 28 Dec 2025 18:15:26 +0000 ROA not before: Sun 28 Dec 2025 18:15:26 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 139826 IP address blocks: 103.146.36.0/23 maxlen: 23 103.146.36.0/24 maxlen: 24 103.146.37.0/24 maxlen: 24 2001:df2:4280::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Jan 2026 18:14:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3167 (0xc5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91936EB, serialNumber=54721E086109690A39652CBAA8A0E61AB0A9F072 Validity Not Before: Dec 28 18:15:26 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=695173be-56aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:59:82:36:fd:9e:21:f4:2c:ad:f8:d3:a7:96: ca:35:7a:6e:0c:07:72:ff:9d:df:0f:37:72:07:87: ce:e0:e8:cf:8e:5e:65:af:b1:39:0d:33:f6:87:a1: 8e:50:69:07:6b:ba:c0:80:71:62:31:54:7f:10:80: 79:eb:a1:6d:5e:b8:0d:9a:52:f3:60:96:c2:9b:19: 9f:a2:f7:94:cc:9d:0e:54:f1:2f:19:64:9f:2a:ac: c0:91:d8:23:b3:19:62:c1:ac:7a:72:8b:b2:c4:20: 3d:44:fd:3d:ce:af:62:7b:c2:de:21:51:33:3d:cc: 57:43:99:28:b2:3a:17:d2:d2:90:6e:47:b3:37:b5: f3:d3:5a:f8:bb:9e:c0:09:74:5a:0d:f0:96:70:b5: 35:29:4a:ce:4b:a1:65:1d:16:32:00:5e:41:cf:5e: 35:5e:5f:87:41:a3:55:a3:c9:27:7e:9e:72:14:cd: 6b:d7:45:92:dd:13:eb:0d:ae:43:ee:f6:c5:d9:e6: e4:f7:91:8a:e4:47:f7:60:6f:5e:d5:a9:4d:6e:f1: 27:a2:13:93:77:b5:b4:fc:9d:a6:46:c7:00:93:50: 39:b1:ce:4d:83:ea:ea:4d:cf:96:e4:5d:db:fa:b5: b2:5f:54:78:29:1f:99:cf:96:83:79:bb:32:17:7f: 35:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:2D:B8:17:2A:68:3C:79:23:94:E0:5B:0A:D6:2C:C2:A0:5E:03:DF X509v3 Authority Key Identifier: keyid:54:72:1E:08:61:09:69:0A:39:65:2C:BA:A8:A0:E6:1A:B0:A9:F0:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/5EA04634181911EA9CA3C619C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.146.36.0/23 IPv6: 2001:df2:4280::/48 Signature Algorithm: sha256WithRSAEncryption a8:69:b6:10:39:d1:36:cb:e1:38:0e:95:98:54:39:32:f1:e7: 4b:d6:9d:c7:4f:db:24:46:14:76:a1:a6:f4:02:fb:ce:b1:ef: 3a:4f:e8:89:8f:b8:90:f6:7a:63:62:df:f9:2d:8f:ff:5d:c3: a5:37:94:07:80:0e:63:cf:2b:46:3d:7b:8d:37:2c:55:27:b3: 21:2e:4a:9c:ec:1f:74:6b:23:57:01:d4:4b:88:1c:cf:f4:95: 00:98:26:0e:1c:11:9a:6e:1f:66:b9:5d:71:14:57:90:2f:bb: 1e:5f:c4:f3:5a:40:11:2b:c6:10:b9:e1:ba:53:da:12:14:02: 51:ff:57:c9:17:e8:c4:ac:95:93:c5:55:fe:7b:ff:1e:26:8b: bb:1b:98:19:89:a2:f6:f7:1a:65:22:98:16:23:fe:ce:89:8f: c2:4c:5e:7d:65:2a:17:79:63:b2:92:e9:07:d0:21:1b:df:3d: 25:0b:80:84:ed:6e:a3:15:00:03:51:fb:4b:3a:1c:39:65:8f: 08:cb:2e:66:69:73:5d:48:a8:21:44:fb:6b:e9:a9:b1:7c:f9: a5:c2:2d:2a:2a:9f:f0:61:73:7d:cd:e2:70:d8:cd:3c:c6:63: c0:a2:c1:c1:4f:f0:e1:98:18:ea:e3:ca:c4:f9:8e:e0:cd:3d: e7:19:6b:80 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICDF8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx OTM2RUIxMTAvBgNVBAUTKDU0NzIxRTA4NjEwOTY5MEEzOTY1MkNCQUE4QTBFNjFB QjBBOUYwNzIwHhcNMjUxMjI4MTgxNTI2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTUxNzNiZS01NmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8FmCNv2eIfQsrfjTp5bKNXpuDAdy/53fDzdyB4fO4OjPjl5lr7E5DTP2h6GO UGkHa7rAgHFiMVR/EIB566FtXrgNmlLzYJbCmxmfoveUzJ0OVPEvGWSfKqzAkdgj sxliwax6couyxCA9RP09zq9ie8LeIVEzPcxXQ5kosjoX0tKQbkezN7Xz01r4u57A CXRaDfCWcLU1KUrOS6FlHRYyAF5Bz141Xl+HQaNVo8knfp5yFM1r10WS3RPrDa5D 7vbF2ebk95GK5Ef3YG9e1alNbvEnohOTd7W0/J2mRscAk1A5sc5Ng+rqTc+W5F3b +rWyX1R4KR+Zz5aDebsyF381AwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFMItuBcq aDx5I5TgWwrWLMKgXgPfMB8GA1UdIwQYMBaAFFRyHghhCWkKOWUsuqig5hqwqfBy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzZFQi8zRUMwMkVDQTE3 NUExMUVBQjJBNkE4NTFDNEY5QUUwMi9WSEllQ0dFSmFRbzVaU3k2cUtEbUdyQ3A4 SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZISWVDR0VKYVFvNVpTeTZxS0RtR3JDcDhISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTM2RUIvM0VDMDJFQ0ExNzVBMTFFQUIyQTZBODUxQzRGOUFFMDIvNUVBMDQ2MzQx ODE5MTFFQTlDQTNDNjE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnkiQwDwQCAAIwCQMHACABDfJCgDANBgkqhkiG9w0BAQsF AAOCAQEAqGm2EDnRNsvhOA6VmFQ5MvHnS9adx0/bJEYUdqGm9AL7zrHvOk/oiY+4 kPZ6Y2Lf+S2P/13DpTeUB4AOY88rRj17jTcsVSezIS5KnOwfdGsjVwHUS4gcz/SV AJgmDhwRmm4fZrldcRRXkC+7Hl/E81pAESvGELnhulPaEhQCUf9XyRfoxKyVk8VV /nv/HiaLuxuYGYmi9vcaZSKYFiP+zomPwkxefWUqF3ljspLpB9AhG989JQuAhO1u oxUAA1H7SzocOWWPCMsuZmlzXUioIUT7a+mpsXz5pcItKiqf8GFzfc3icNjNPMZj wKLBwU/w4ZgY6uPKxPmO4M095xlrgA== -----END CERTIFICATE-----Generated at Fri Jan 2 23:25:34 2026 by rpki-client