This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/65877060BF3C11EAAF328582C4F9AE02.roa File: 65877060BF3C11EAAF328582C4F9AE02.roa (raw, json) Hash identifier: MG0SdsEsbuU73nUtAiSPFMPB7n8Hdru7g9MXP23ua38= Subject key identifier: 1C:6E:1E:40:FA:42:0E:8C:14:B5:C6:79:EF:9C:ED:E1:77:EA:C8:04 Certificate issuer: /CN=A91DEA56/serialNumber=BBE49FCB41F5026A35BF6C93B91FDFF3C88C736E Certificate serial: 090D Authority key identifier: BB:E4:9F:CB:41:F5:02:6A:35:BF:6C:93:B9:1F:DF:F3:C8:8C:73:6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/65877060BF3C11EAAF328582C4F9AE02.roa Signing time: Fri 02 Jan 2026 20:17:20 +0000 ROA not before: Fri 02 Jan 2026 20:17:20 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 132827 IP address blocks: 43.248.40.0/22 maxlen: 22 103.16.36.0/22 maxlen: 22 103.23.220.0/24 maxlen: 24 103.23.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.crl rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Jan 2026 19:44:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2317 (0x90d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEA56, serialNumber=BBE49FCB41F5026A35BF6C93B91FDFF3C88C736E Validity Not Before: Jan 2 20:17:20 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=695827d0-890d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:98:52:fb:01:3d:20:9e:a9:64:6a:bc:4e:5e: c4:96:de:03:9d:39:12:72:7a:bd:2b:18:63:80:9c: 2d:72:18:8a:d5:fe:f1:ff:57:63:62:76:16:a8:1a: 11:a5:eb:dc:d2:6c:f4:37:9f:13:91:1d:df:a3:02: 91:1c:14:4d:d6:40:d3:1f:5a:18:dc:14:d9:e3:24: 3c:9e:37:7b:01:15:b1:db:b9:1c:94:cf:ba:67:69: 77:45:c2:53:ba:7e:a6:b4:f1:01:51:38:f6:e3:77: 9c:7b:c1:af:6b:27:f3:ae:21:00:79:2a:e9:b3:a5: 54:70:e4:28:67:65:db:b8:f9:77:ec:22:95:ee:85: 6f:0e:ec:9c:18:93:53:54:80:37:67:97:da:3c:da: 82:42:22:fd:61:ab:26:b0:08:a2:5b:ee:73:b8:ff: 98:65:8d:59:48:f3:52:ac:c6:74:22:0f:1e:ec:61: 7b:21:9d:cf:72:06:7a:02:6c:0d:a4:e5:c2:44:0f: 5b:93:35:2f:e3:ac:3e:8d:57:81:d4:5f:87:66:89: d8:af:e4:68:15:30:6d:d8:4e:da:9b:d7:3b:47:41: f0:be:15:16:60:f2:77:ee:c3:26:3a:7c:23:6c:df: bf:3d:27:01:90:28:71:b5:00:b8:f3:79:3f:84:fb: 6b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:6E:1E:40:FA:42:0E:8C:14:B5:C6:79:EF:9C:ED:E1:77:EA:C8:04 X509v3 Authority Key Identifier: keyid:BB:E4:9F:CB:41:F5:02:6A:35:BF:6C:93:B9:1F:DF:F3:C8:8C:73:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/65877060BF3C11EAAF328582C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.248.40.0/22 103.16.36.0/22 103.23.220.0/24 103.23.223.0/24 Signature Algorithm: sha256WithRSAEncryption a7:2b:d9:82:f7:03:2f:d6:3e:0f:29:8a:d7:50:41:28:44:d4: a2:ae:8a:9a:0b:fa:d1:0b:e0:1a:97:14:ec:57:37:6b:74:80: dc:a5:af:2a:c6:8d:7c:17:e2:d9:30:d9:cf:a2:95:07:f3:92: e7:99:53:05:d3:6b:4d:e9:7f:88:bb:e6:37:4b:58:63:c0:32: 98:91:f7:72:a8:2a:a4:79:82:f7:7a:f8:50:9f:16:42:10:1e: 17:75:32:dc:87:65:ee:15:e6:06:e9:89:dd:6e:03:59:0b:d3: 79:d2:cf:f4:db:d8:5f:14:cf:d5:44:d5:1e:38:9e:b3:7e:f3: 56:8c:9e:bd:da:b3:93:a9:6b:31:bf:66:a3:02:15:e2:31:af: 7d:cf:1a:64:94:b4:49:2c:39:d0:92:c3:07:12:e2:57:96:11: 85:a3:a2:43:9e:c7:f6:c9:92:ba:54:65:95:ce:63:e4:64:bc: 68:39:4a:2a:06:36:1d:e9:e0:e2:72:42:f2:8d:93:6a:58:69: 62:ca:cf:71:fa:21:61:52:28:34:ce:51:b7:bc:01:db:64:2f: 9f:f6:42:f5:83:1b:05:3c:1b:2d:cf:2b:54:db:9a:66:9a:e5: 78:f9:7a:d3:04:87:e6:ef:9a:91:61:3b:2b:f3:4d:e7:85:88: 6a:97:6a:b1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICCQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx REVBNTYxMTAvBgNVBAUTKEJCRTQ5RkNCNDFGNTAyNkEzNUJGNkM5M0I5MUZERkYz Qzg4QzczNkUwHhcNMjYwMTAyMjAxNzIwWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU4MjdkMC04OTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJhS+wE9IJ6pZGq8Tl7Elt4DnTkScnq9KxhjgJwtchiK1f7x/1djYnYWqBoR pevc0mz0N58TkR3fowKRHBRN1kDTH1oY3BTZ4yQ8njd7ARWx27kclM+6Z2l3RcJT un6mtPEBUTj243ece8GvayfzriEAeSrps6VUcOQoZ2XbuPl37CKV7oVvDuycGJNT VIA3Z5faPNqCQiL9YasmsAiiW+5zuP+YZY1ZSPNSrMZ0Ig8e7GF7IZ3PcgZ6AmwN pOXCRA9bkzUv46w+jVeB1F+HZonYr+RoFTBt2E7am9c7R0HwvhUWYPJ37sMmOnwj bN+/PScBkChxtQC483k/hPtr9QIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFBxuHkD6 Qg6MFLXGee+c7eF36sgEMB8GA1UdIwQYMBaAFLvkn8tB9QJqNb9sk7kf3/PIjHNu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUE1Ni82ODQ2NjdGNEJG M0ExMUVBOTRBRTRFN0NDNEY5QUUwMi91LVNmeTBIMUFtbzF2MnlUdVJfZjg4aU1j MjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UtU2Z5MEgxQW1vMXYyeVR1Ul9mODhpTWMyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REVBNTYvNjg0NjY3RjRCRjNBMTFFQTk0QUU0RTdDQzRGOUFFMDIvNjU4NzcwNjBC RjNDMTFFQUFGMzI4NTgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAIr+CgDBAJnECQDBABnF9wDBABnF98wDQYJKoZIhvcNAQEL BQADggEBAKcr2YL3Ay/WPg8pitdQQShE1KKuipoL+tEL4BqXFOxXN2t0gNylryrG jXwX4tkw2c+ilQfzkueZUwXTa03pf4i75jdLWGPAMpiR93KoKqR5gvd6+FCfFkIQ Hhd1MtyHZe4V5gbpid1uA1kL03nSz/Tb2F8Uz9VE1R44nrN+81aMnr3as5OpazG/ ZqMCFeIxr33PGmSUtEksOdCSwwcS4leWEYWjokOex/bJkrpUZZXOY+RkvGg5SioG Nh3p4OJyQvKNk2pYaWLKz3H6IWFSKDTOUbe8AdtkL5/2QvWDGwU8Gy3PK1Tbmmaa 5Xj5etMEh+bvmpFhOyvzTeeFiGqXarE= -----END CERTIFICATE-----Generated at Sun Jan 11 18:12:00 2026 by rpki-client