This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/A607F8965F4611EE80BD8D2DC4F9AE02.roa File: A607F8965F4611EE80BD8D2DC4F9AE02.roa (raw, json) Hash identifier: ZLkmQTX2ukDjNjn8W5ENtkFmk1At3yyLRmstiPrB0YU= Subject key identifier: F8:B9:82:BD:87:6C:60:F7:1C:E8:03:30:C5:55:73:01:C3:D8:5A:1F Certificate issuer: /CN=A9149C2D/serialNumber=1BDC4767A6D5EBE0BEFA5CA1235308F75E48891A Certificate serial: 1C24 Authority key identifier: 1B:DC:47:67:A6:D5:EB:E0:BE:FA:5C:A1:23:53:08:F7:5E:48:89:1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9xHZ6bV6-C--lyhI1MI915IiRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/A607F8965F4611EE80BD8D2DC4F9AE02.roa Signing time: Fri 30 Jan 2026 16:14:36 +0000 ROA not before: Fri 30 Jan 2026 16:14:36 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 63927 IP address blocks: 103.44.232.0/22 maxlen: 24 2401:da80::/32 maxlen: 32 2401:da80::/36 maxlen: 36 2401:da80:1000::/36 maxlen: 36 2401:da80:2000::/36 maxlen: 36 2401:da80:3000::/36 maxlen: 36 2401:da80:4000::/36 maxlen: 36 2401:da80:5000::/36 maxlen: 36 2401:da80:6000::/36 maxlen: 36 2401:da80:7000::/36 maxlen: 36 2401:da80:8000::/36 maxlen: 36 2401:da80:9000::/36 maxlen: 36 2401:da80:a000::/36 maxlen: 36 2401:da80:b000::/36 maxlen: 36 2401:da80:c000::/36 maxlen: 36 2401:da80:d000::/36 maxlen: 36 2401:da80:e000::/36 maxlen: 36 2401:da80:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.crl rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9xHZ6bV6-C--lyhI1MI915IiRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Feb 2026 15:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7204 (0x1c24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149C2D, serialNumber=1BDC4767A6D5EBE0BEFA5CA1235308F75E48891A Validity Not Before: Jan 30 16:14:36 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=697cd8ec-bff8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:82:04:2c:b2:79:f8:76:e6:24:a8:b8:5b:68: 24:c6:13:bd:a7:50:fb:ea:38:da:53:44:16:9e:fb: 7c:c8:e9:e0:e0:91:82:3e:e1:30:e7:f8:fc:06:4c: c1:6f:4d:05:ea:10:24:8c:55:83:92:02:2c:b5:ad: 9a:45:0b:28:af:8f:32:a8:e7:02:32:a5:84:5f:9c: d2:2c:9d:99:3c:21:09:99:04:6e:37:b5:75:b4:3d: c0:e1:e5:84:3a:e0:cf:e3:95:dc:77:6e:5f:e4:5f: 62:f0:83:ed:ba:7d:4b:07:e1:ba:25:a3:3b:e9:68: 99:a3:fa:e1:1a:72:94:47:ab:19:35:bd:eb:d2:56: b0:92:67:2c:60:bd:35:1e:bb:ec:f3:6e:d2:65:e8: 1b:ab:e1:17:de:fe:72:c8:90:44:67:f4:19:9e:6f: b5:47:2c:29:43:f0:17:3a:10:4a:cf:0c:a1:c9:de: 14:88:42:c8:f7:12:57:95:18:03:34:1d:4b:c0:bc: 88:53:eb:3e:b7:dd:b2:05:1c:ab:70:10:f6:63:16: 10:a6:de:30:5f:a5:d6:38:db:4e:8d:76:e1:62:24: ca:83:7a:79:1e:16:a2:66:bb:58:b2:02:fe:32:3e: 4c:6a:29:71:00:12:f8:f6:09:95:69:92:66:a6:7d: 4e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B9:82:BD:87:6C:60:F7:1C:E8:03:30:C5:55:73:01:C3:D8:5A:1F X509v3 Authority Key Identifier: keyid:1B:DC:47:67:A6:D5:EB:E0:BE:FA:5C:A1:23:53:08:F7:5E:48:89:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9xHZ6bV6-C--lyhI1MI915IiRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/A607F8965F4611EE80BD8D2DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.44.232.0/22 IPv6: 2401:da80::/32 Signature Algorithm: sha256WithRSAEncryption 77:b6:b9:cf:41:f3:e3:6e:a3:1f:6f:8e:e6:be:24:fb:9b:e5: f0:61:58:f8:23:e5:65:0c:e3:96:6e:83:77:86:17:0b:bd:94: 89:ff:1d:64:64:4b:7f:b7:d3:4d:b8:d8:55:2d:6a:36:24:7b: 5d:7e:07:f9:e0:88:6a:a2:4a:40:f7:1e:a3:3a:80:03:c7:6b: 34:39:47:7b:e6:6d:43:f9:95:8d:0f:84:88:6a:74:54:cb:51: 20:a1:f7:66:f6:30:b9:ce:fe:1d:85:18:4b:a6:a9:72:57:95: ec:80:21:56:d0:a4:fa:b9:d2:f3:42:4c:4d:3f:d6:49:55:ce: 19:eb:fb:8b:44:2b:56:13:8b:eb:9d:6d:9e:53:18:69:41:a3: 8b:67:1c:74:c4:b7:54:38:a3:77:8b:dd:9d:3a:2b:39:bd:a2: 5c:d4:64:1a:d8:13:8a:6e:01:98:59:d8:e8:e4:49:37:21:5b: e2:63:3c:c0:7b:ad:ba:24:71:4f:fd:56:86:c4:3a:18:03:53: 23:06:8a:35:b9:42:d0:58:86:d7:8f:82:5a:19:3f:4f:2f:c4: 79:fb:94:5a:73:09:5c:ce:0b:48:17:6f:26:29:d5:4b:f0:fb: dc:b2:63:49:59:9f:fb:a1:90:35:a9:cf:4a:ea:49:ec:26:ee: 87:59:2b:ac -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICHCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NDlDMkQxMTAvBgNVBAUTKDFCREM0NzY3QTZENUVCRTBCRUZBNUNBMTIzNTMwOEY3 NUU0ODg5MUEwHhcNMjYwMTMwMTYxNDM2WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTdjZDhlYy1iZmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0IIELLJ5+HbmJKi4W2gkxhO9p1D76jjaU0QWnvt8yOng4JGCPuEw5/j8BkzB b00F6hAkjFWDkgIsta2aRQsor48yqOcCMqWEX5zSLJ2ZPCEJmQRuN7V1tD3A4eWE OuDP45Xcd25f5F9i8IPtun1LB+G6JaM76WiZo/rhGnKUR6sZNb3r0lawkmcsYL01 Hrvs827SZegbq+EX3v5yyJBEZ/QZnm+1RywpQ/AXOhBKzwyhyd4UiELI9xJXlRgD NB1LwLyIU+s+t92yBRyrcBD2YxYQpt4wX6XWONtOjXbhYiTKg3p5HhaiZrtYsgL+ Mj5MailxABL49gmVaZJmpn1OWQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFPi5gr2H bGD3HOgDMMVVcwHD2FofMB8GA1UdIwQYMBaAFBvcR2em1evgvvpcoSNTCPdeSIka MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUMyRC80RDVBNzg4MDA4 NzMxMUU3OUM4MzlCMDlDNEY5QUUwMi9HOXhIWjZiVjYtQy0tbHloSTFNSTkxNUlp Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c5eEhaNmJWNi1DLS1seWhJMU1JOTE1SWlSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlDMkQvNEQ1QTc4ODAwODczMTFFNzlDODM5QjA5QzRGOUFFMDIvQTYwN0Y4OTY1 RjQ2MTFFRTgwQkQ4RDJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnLOgwDQQCAAIwBwMFACQB2oAwDQYJKoZIhvcNAQELBQAD ggEBAHe2uc9B8+Nuox9vjua+JPub5fBhWPgj5WUM45Zug3eGFwu9lIn/HWRkS3+3 00242FUtajYke11+B/ngiGqiSkD3HqM6gAPHazQ5R3vmbUP5lY0PhIhqdFTLUSCh 92b2MLnO/h2FGEumqXJXleyAIVbQpPq50vNCTE0/1klVzhnr+4tEK1YTi+udbZ5T GGlBo4tnHHTEt1Q4o3eL3Z06Kzm9olzUZBrYE4puAZhZ2OjkSTchW+JjPMB7rbok cU/9VobEOhgDUyMGijW5QtBYhtePgloZP08vxHn7lFpzCVzOC0gXbyYp1Uvw+9yy Y0lZn/uhkDWpz0rqSewm7odZK6w= -----END CERTIFICATE-----Generated at Thu Feb 12 18:41:20 2026 by rpki-client