This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/0C9FD154619611EEADD97F70C4F9AE02.roa File: 0C9FD154619611EEADD97F70C4F9AE02.roa (raw, json) Hash identifier: uYLMGw9sW3ELIcDhRnQRJfyQtQgARFpcNwfnYXrY5Xg= Subject key identifier: 04:E5:0F:91:C4:F1:8B:E0:2C:C9:68:37:78:8C:CF:E0:07:31:D7:00 Certificate issuer: /CN=A91D53AC/serialNumber=4B767FE304D4F27F5111864BA743B9479CE14A7B Certificate serial: 34FC Authority key identifier: 4B:76:7F:E3:04:D4:F2:7F:51:11:86:4B:A7:43:B9:47:9C:E1:4A:7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3Z_4wTU8n9REYZLp0O5R5zhSns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/0C9FD154619611EEADD97F70C4F9AE02.roa Signing time: Fri 02 Jan 2026 15:10:52 +0000 ROA not before: Fri 02 Jan 2026 15:10:52 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 38891 IP address blocks: 103.198.84.0/22 maxlen: 24 103.242.16.0/22 maxlen: 24 202.176.12.0/24 maxlen: 24 203.99.136.0/22 maxlen: 24 223.25.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.crl rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3Z_4wTU8n9REYZLp0O5R5zhSns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Jan 2026 14:47:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13564 (0x34fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D53AC, serialNumber=4B767FE304D4F27F5111864BA743B9479CE14A7B Validity Not Before: Jan 2 15:10:52 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=6957dffc-a560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ba:b7:fe:d7:76:ba:cf:18:a6:36:a5:a9:dd: 61:4e:c6:fc:5c:ca:48:11:c7:60:0f:c5:0f:51:92: ec:03:82:01:43:e8:89:86:3f:d9:3d:cc:2b:18:1a: 98:15:f2:58:2d:8a:63:99:37:10:bf:f0:52:2f:df: 25:07:b5:72:b1:f9:f7:8b:54:3c:bf:c7:fb:61:cb: a3:27:27:89:96:ef:a0:5b:33:5c:f8:f0:f0:6c:58: b9:4f:29:42:bd:57:68:ee:1b:82:b4:b5:86:4a:01: d9:3c:33:de:aa:7a:6e:74:35:47:c3:a6:63:d0:30: 99:61:7c:11:ba:5b:5d:dd:c9:f9:93:7a:39:df:ab: 0e:b1:86:a3:e2:af:2b:1f:72:a8:68:99:5a:9b:ce: 09:71:a7:1e:96:ce:0b:56:b1:a2:e5:5e:29:12:9d: b1:88:eb:93:46:63:d6:56:78:d3:5f:15:87:38:4d: a5:bc:62:bc:d9:2b:6b:e2:97:30:d2:73:0d:cc:fe: 17:da:24:92:42:bc:1d:ac:bc:cf:4f:29:32:e8:d6: 62:72:17:79:6a:05:64:fc:04:f4:48:14:ff:41:bc: 5f:d1:68:15:1c:f0:1c:65:ad:93:fd:78:3e:00:9f: 73:38:42:e6:a0:44:bb:8b:1a:3d:4a:aa:b7:2b:3a: 30:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:E5:0F:91:C4:F1:8B:E0:2C:C9:68:37:78:8C:CF:E0:07:31:D7:00 X509v3 Authority Key Identifier: keyid:4B:76:7F:E3:04:D4:F2:7F:51:11:86:4B:A7:43:B9:47:9C:E1:4A:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3Z_4wTU8n9REYZLp0O5R5zhSns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/0C9FD154619611EEADD97F70C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.198.84.0/22 103.242.16.0/22 202.176.12.0/24 203.99.136.0/22 223.25.248.0/22 Signature Algorithm: sha256WithRSAEncryption 04:54:54:b6:5e:ae:9e:bb:c1:54:95:de:ce:15:12:05:81:d8: a2:22:fb:1a:d0:50:73:5f:5e:5c:e7:fe:ed:a6:eb:b5:56:de: 74:cf:c7:09:bb:ce:f9:0c:26:65:5c:18:4b:79:04:3f:57:48: a1:92:ab:bb:97:fa:20:ce:95:22:70:34:30:ad:ec:62:e8:10: 6d:3f:a5:b3:71:42:fd:42:06:8a:9d:25:12:7a:ff:b0:40:b5: ce:0c:b2:6e:5a:a9:e1:99:9a:ef:fb:19:71:e9:f6:c9:7b:8a: 3b:25:3e:fd:c1:c2:e5:2d:e6:29:7d:9e:89:bb:04:95:ca:50: ab:69:18:7e:a4:9c:b9:64:a3:b5:57:a7:b6:15:6e:6a:4a:c5: b1:e2:ce:1a:9b:55:85:03:a5:04:1a:79:dc:e7:68:3a:a6:83: bc:fd:50:20:bc:bd:0b:cd:d4:28:7a:61:84:8b:86:1e:50:c8: a5:d1:03:02:28:2c:9f:12:19:37:cc:17:f7:cf:b2:c3:4d:c5: 93:42:6a:ee:6c:85:99:ae:33:cc:66:35:0c:08:15:de:3b:96: 8a:88:c8:23:18:58:2d:9b:a4:76:92:6a:5c:96:4a:8a:a0:c7: 0a:3c:6b:e3:f1:c8:fb:1a:f5:74:76:24:3a:bf:7a:23:da:1d: 59:83:db:2b -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICNPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx RDUzQUMxMTAvBgNVBAUTKDRCNzY3RkUzMDRENEYyN0Y1MTExODY0QkE3NDNCOTQ3 OUNFMTRBN0IwHhcNMjYwMTAyMTUxMDUyWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU3ZGZmYy1hNTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApbq3/td2us8Ypjalqd1hTsb8XMpIEcdgD8UPUZLsA4IBQ+iJhj/ZPcwrGBqY FfJYLYpjmTcQv/BSL98lB7Vysfn3i1Q8v8f7YcujJyeJlu+gWzNc+PDwbFi5TylC vVdo7huCtLWGSgHZPDPeqnpudDVHw6Zj0DCZYXwRultd3cn5k3o536sOsYaj4q8r H3KoaJlam84Jcacels4LVrGi5V4pEp2xiOuTRmPWVnjTXxWHOE2lvGK82Str4pcw 0nMNzP4X2iSSQrwdrLzPTyky6NZichd5agVk/AT0SBT/Qbxf0WgVHPAcZa2T/Xg+ AJ9zOELmoES7ixo9Sqq3Kzow/QIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFATlD5HE 8YvgLMloN3iMz+AHMdcAMB8GA1UdIwQYMBaAFEt2f+ME1PJ/URGGS6dDuUec4Up7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTNBQy8wMzE2OEM0RTFE OTcxMUUyOEI2QzAwODAwOEIwMkNEMi9TM1pfNHdUVThuOVJFWVpMcDBPNVI1emhT bnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MzWl80d1RVOG45UkVZWkxwME81UjV6aFNucy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDUzQUMvMDMxNjhDNEUxRDk3MTFFMjhCNkMwMDgwMDhCMDJDRDIvMEM5RkQxNTQ2 MTk2MTFFRUFERDk3RjcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMCQEAgABMB4DBAJnxlQDBAJn8hADBADKsAwDBALLY4gDBALfGfgwDQYJKoZI hvcNAQELBQADggEBAARUVLZerp67wVSV3s4VEgWB2KIi+xrQUHNfXlzn/u2m67VW 3nTPxwm7zvkMJmVcGEt5BD9XSKGSq7uX+iDOlSJwNDCt7GLoEG0/pbNxQv1CBoqd JRJ6/7BAtc4Msm5aqeGZmu/7GXHp9sl7ijslPv3BwuUt5il9nom7BJXKUKtpGH6k nLlko7VXp7YVbmpKxbHizhqbVYUDpQQaedznaDqmg7z9UCC8vQvN1Ch6YYSLhh5Q yKXRAwIoLJ8SGTfMF/fPssNNxZNCau5shZmuM8xmNQwIFd47loqIyCMYWC2bpHaS alyWSoqgxwo8a+PxyPsa9XR2JDq/eiPaHVmD2ys= -----END CERTIFICATE-----Generated at Tue Jan 6 20:29:28 2026 by rpki-client