This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/B2119B7464BA11ED8544E91DC4F9AE02.roa File: B2119B7464BA11ED8544E91DC4F9AE02.roa (raw, json) Hash identifier: nLlDt2K1GOoN9TauKY+PYkUtWgOq24qU9mHwR7+xwio= Subject key identifier: 37:E9:D2:D3:15:35:04:D9:5A:17:80:65:3B:30:C8:83:E6:94:D6:41 Certificate issuer: /CN=A91BA239/serialNumber=108450C7EDFB78521B7E4871FE86E8F623A1051B Certificate serial: 0254 Authority key identifier: 10:84:50:C7:ED:FB:78:52:1B:7E:48:71:FE:86:E8:F6:23:A1:05:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EIRQx-37eFIbfkhx_obo9iOhBRs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/B2119B7464BA11ED8544E91DC4F9AE02.roa Signing time: Thu 01 Jan 2026 01:21:02 +0000 ROA not before: Thu 01 Jan 2026 01:21:02 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 150424 IP address blocks: 103.38.248.0/23 maxlen: 23 103.38.248.0/24 maxlen: 24 103.38.249.0/24 maxlen: 24 2401:1460::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.crl rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EIRQx-37eFIbfkhx_obo9iOhBRs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Jan 2026 00:46:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 596 (0x254) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA239, serialNumber=108450C7EDFB78521B7E4871FE86E8F623A1051B Validity Not Before: Jan 1 01:21:02 2026 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=6955cbfe-9a19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:68:eb:f9:ab:43:ad:5a:3a:c8:aa:37:26:6d: 56:9a:f7:2d:43:9c:03:4e:6f:3e:42:04:9c:b4:0d: 9b:6f:52:d7:1b:6d:a5:da:91:f1:6c:15:c3:2e:ef: e7:7c:33:89:54:2b:4a:6b:ce:36:88:b3:d3:5d:87: ea:dd:d8:f9:23:5e:f0:a1:8e:ec:93:3b:71:ec:64: 4b:d9:02:e1:1a:57:ae:ea:b3:78:1c:68:2d:ea:5f: e1:f1:5f:3e:a8:f1:42:61:b1:6c:a9:ed:20:9c:52: 2c:c3:58:fb:8a:eb:2e:98:49:69:ee:ce:a9:c8:45: 58:c6:e7:5b:bb:d3:66:ff:dc:4b:f8:e6:d3:7b:aa: 6d:cd:ea:9f:17:55:ba:7a:17:0b:fb:66:fb:e8:2f: 65:9a:22:0e:e7:f8:8b:12:bf:5a:32:bf:e0:cc:f0: f7:dd:da:8d:d4:f5:0d:4c:41:3e:ca:73:46:0a:e5: c6:76:5c:e1:62:20:70:28:5c:56:3c:f2:78:b1:56: 82:9a:3d:e3:ac:af:36:04:45:39:70:63:15:ae:fd: e3:77:17:93:f2:94:82:e6:e5:fd:be:d5:8f:76:d4: 66:27:a2:cb:7e:16:6d:d0:10:f3:cf:f1:7e:24:69: b6:e7:46:8f:87:97:dc:59:32:63:99:f8:88:09:d6: c4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:E9:D2:D3:15:35:04:D9:5A:17:80:65:3B:30:C8:83:E6:94:D6:41 X509v3 Authority Key Identifier: keyid:10:84:50:C7:ED:FB:78:52:1B:7E:48:71:FE:86:E8:F6:23:A1:05:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EIRQx-37eFIbfkhx_obo9iOhBRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/B2119B7464BA11ED8544E91DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.38.248.0/23 IPv6: 2401:1460::/32 Signature Algorithm: sha256WithRSAEncryption a3:3e:88:16:60:6a:eb:d9:c1:67:3a:0a:b6:7a:43:33:5e:c4: f9:12:30:d8:04:2e:5a:08:36:e3:6f:e2:3c:dd:1d:28:cc:68: 55:83:0f:b0:5c:14:68:c0:95:db:1c:e0:bf:20:f0:3a:00:1c: 4c:bc:46:a6:9f:80:49:bd:73:6e:93:81:35:06:5e:7b:b9:f9: 58:85:24:8f:5f:c7:b2:47:ce:c1:37:26:42:61:7f:6d:3e:7f: a9:d0:41:1c:06:b2:f0:60:8a:72:17:e7:96:ac:3c:e0:cc:25: 5c:0e:a9:63:8d:2e:a8:1d:8a:42:8d:a3:a9:05:a6:65:1c:a2: f0:c0:ae:96:10:97:6f:bb:f5:a4:63:61:39:c2:7c:49:89:d5: 5e:ad:c5:45:df:00:f7:08:6a:cd:f4:a9:7c:ef:e6:19:64:5e: 67:67:96:35:d7:2a:7d:69:ce:4b:40:25:74:2a:86:04:81:f9: 01:81:0b:86:c7:6c:e3:ba:3f:6a:b9:96:5a:3d:51:ff:a5:92: 43:d4:e5:72:24:f1:a4:8e:f0:32:53:77:e9:d4:e8:3b:ab:cb: 26:ae:e0:09:94:08:b4:43:3f:33:e2:0b:ab:1e:07:c1:fd:1e: 32:72:93:c7:33:67:17:9b:11:a1:83:17:68:d1:d0:29:5e:e8: 69:05:ca:15 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QkEyMzkxMTAvBgNVBAUTKDEwODQ1MEM3RURGQjc4NTIxQjdFNDg3MUZFODZFOEY2 MjNBMTA1MUIwHhcNMjYwMTAxMDEyMTAyWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU1Y2JmZS05YTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Wjr+atDrVo6yKo3Jm1WmvctQ5wDTm8+QgSctA2bb1LXG22l2pHxbBXDLu/n fDOJVCtKa842iLPTXYfq3dj5I17woY7skztx7GRL2QLhGleu6rN4HGgt6l/h8V8+ qPFCYbFsqe0gnFIsw1j7iusumElp7s6pyEVYxudbu9Nm/9xL+ObTe6ptzeqfF1W6 ehcL+2b76C9lmiIO5/iLEr9aMr/gzPD33dqN1PUNTEE+ynNGCuXGdlzhYiBwKFxW PPJ4sVaCmj3jrK82BEU5cGMVrv3jdxeT8pSC5uX9vtWPdtRmJ6LLfhZt0BDzz/F+ JGm250aPh5fcWTJjmfiICdbERwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFDfp0tMV NQTZWheAZTswyIPmlNZBMB8GA1UdIwQYMBaAFBCEUMft+3hSG35Icf6G6PYjoQUb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTIzOS8xOUFEMEYxMDY0 QjcxMUVEQTA5MThBODNDNEY5QUUwMi9FSVJReC0zN2VGSWJma2h4X29ibzlpT2hC UnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VJUlF4LTM3ZUZJYmZraHhfb2JvOWlPaEJScy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkEyMzkvMTlBRDBGMTA2NEI3MTFFREEwOTE4QTgzQzRGOUFFMDIvQjIxMTlCNzQ2 NEJBMTFFRDg1NDRFOTFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnJvgwDQQCAAIwBwMFACQBFGAwDQYJKoZIhvcNAQELBQAD ggEBAKM+iBZgauvZwWc6CrZ6QzNexPkSMNgELloINuNv4jzdHSjMaFWDD7BcFGjA ldsc4L8g8DoAHEy8RqafgEm9c26TgTUGXnu5+ViFJI9fx7JHzsE3JkJhf20+f6nQ QRwGsvBginIX55asPODMJVwOqWONLqgdikKNo6kFpmUcovDArpYQl2+79aRjYTnC fEmJ1V6txUXfAPcIas30qXzv5hlkXmdnljXXKn1pzktAJXQqhgSB+QGBC4bHbOO6 P2q5llo9Uf+lkkPU5XIk8aSO8DJTd+nU6Duryyau4AmUCLRDPzPiC6seB8H9HjJy k8czZxebEaGDF2jR0Cle6GkFyhU= -----END CERTIFICATE-----Generated at Mon Jan 5 19:09:04 2026 by rpki-client