This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/1CA70F32E44C11F0B985B081746F56BC.roa File: 1CA70F32E44C11F0B985B081746F56BC.roa (raw, json) Hash identifier: QIRosKmCI+yanYqaIdAdXn8bQCstEqkgQsTKRvt2FXI= Subject key identifier: 3F:66:2D:B7:F2:04:A7:E7:B9:57:BE:D2:07:02:39:1D:C9:B0:96:38 Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Certificate serial: 3B5C Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/1CA70F32E44C11F0B985B081746F56BC.roa Signing time: Mon 29 Dec 2025 00:20:00 +0000 ROA not before: Mon 29 Dec 2025 00:20:00 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 14618 IP address blocks: 103.104.86.0/24 maxlen: 24 103.253.240.0/22 maxlen: 22 144.48.40.0/22 maxlen: 24 211.44.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Jan 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15196 (0x3b5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Validity Not Before: Dec 29 00:20:00 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6951c930-d403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6e:54:89:41:f4:49:f5:d1:c1:36:27:c7:e3: e4:d8:39:3e:9d:20:8b:0e:ce:17:f6:c5:8f:76:df: 76:a8:41:4b:ca:89:5a:fe:a1:26:79:5a:f2:e7:56: 04:21:59:d1:89:bd:dd:dd:92:17:7f:9d:e2:6b:5b: 5c:83:1a:21:2c:bd:0c:f9:fa:75:0b:50:7f:6f:66: 26:f1:c1:57:89:7c:df:55:07:71:93:79:ab:85:80: a5:2a:fd:58:19:b0:c0:5a:2e:3b:e1:4d:26:f8:44: 9d:12:25:e7:2c:74:49:90:6b:1b:fb:95:48:e6:f8: b9:21:10:8b:27:4b:36:8f:c5:66:51:9c:9a:b0:3a: a4:4e:5b:1d:3f:af:0f:5f:23:71:e5:02:fb:bd:9a: dc:2c:46:7b:2a:64:55:6a:02:61:8d:33:91:a1:d9: 81:52:fe:fd:32:eb:69:29:50:f5:52:78:00:03:d2: 1c:34:f1:cf:b5:48:1d:e8:6f:37:3d:ef:9a:0c:8a: cf:9b:39:6a:b7:65:9a:4f:2b:3d:ce:e8:2a:08:4c: 99:dd:d3:87:26:00:eb:39:cc:96:75:92:74:f0:c0: dd:3a:12:aa:dc:63:4f:5d:24:b3:39:3d:44:62:75: 1d:36:52:a5:f7:4e:80:ed:c4:45:9e:2e:ec:79:2a: 36:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:66:2D:B7:F2:04:A7:E7:B9:57:BE:D2:07:02:39:1D:C9:B0:96:38 X509v3 Authority Key Identifier: keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/1CA70F32E44C11F0B985B081746F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.104.86.0/24 103.253.240.0/22 144.48.40.0/22 211.44.103.0/24 Signature Algorithm: sha256WithRSAEncryption ca:8f:61:7b:06:2c:f9:b9:e9:75:bd:8a:5c:c8:e7:b7:86:e0: 37:73:dd:c8:a6:57:4c:17:46:76:c9:3b:8d:c7:ff:8b:3e:fd: 9a:a2:74:e8:e8:40:c0:23:69:9a:e7:48:f3:55:c1:92:3c:ec: 7b:f1:85:fb:82:b1:56:24:60:68:57:2f:2c:54:22:a8:1c:08: 31:44:17:c1:33:31:2b:4f:07:50:48:71:07:be:af:ef:94:2d: 13:4d:fe:9a:12:77:e5:5d:b8:d2:be:92:5f:96:84:c4:d5:d6: af:ab:7e:c0:e9:cd:f3:b6:dc:64:5f:bf:52:ed:7b:73:8c:28: 24:7c:3c:71:cd:82:61:03:29:80:bd:58:82:5c:92:d1:3d:e5: 14:3c:dc:4e:64:2a:d9:91:8d:ea:74:b4:72:7b:6f:87:ac:a1: a0:4c:77:37:c5:f4:45:5e:ff:34:2a:e7:df:cd:ba:c5:e2:7e: 75:b2:ae:03:ae:3b:e8:28:92:2f:3b:cc:c0:2c:70:ce:87:57: 2f:c3:e2:8e:4b:f1:7d:98:df:bb:33:e5:fb:bb:77:c6:02:58: 61:2e:db:89:fd:c4:4f:8b:27:b8:c7:72:42:24:5b:96:70:6f: 61:81:90:aa:b4:c5:27:95:cb:8c:f8:88:41:c6:25:01:6e:06: f6:9d:01:83 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICO1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG OURGN0M1NEIwHhcNMjUxMjI5MDAyMDAwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTUxYzkzMC1kNDAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqW5UiUH0SfXRwTYnx+Pk2Dk+nSCLDs4X9sWPdt92qEFLyola/qEmeVry51YE IVnRib3d3ZIXf53ia1tcgxohLL0M+fp1C1B/b2Ym8cFXiXzfVQdxk3mrhYClKv1Y GbDAWi474U0m+ESdEiXnLHRJkGsb+5VI5vi5IRCLJ0s2j8VmUZyasDqkTlsdP68P XyNx5QL7vZrcLEZ7KmRVagJhjTORodmBUv79MutpKVD1UngAA9IcNPHPtUgd6G83 Pe+aDIrPmzlqt2WaTys9zugqCEyZ3dOHJgDrOcyWdZJ08MDdOhKq3GNPXSSzOT1E YnUdNlKl906A7cRFni7seSo2swIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFD9mLbfy BKfnuVe+0gcCOR3JsJY4MB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4 VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvMUNBNzBGMzJF NDRDMTFGMEI5ODVCMDgxNzQ2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBABnaFYDBAJn/fADBAKQMCgDBADTLGcwDQYJKoZIhvcNAQEL BQADggEBAMqPYXsGLPm56XW9ilzI57eG4Ddz3cimV0wXRnbJO43H/4s+/ZqidOjo QMAjaZrnSPNVwZI87HvxhfuCsVYkYGhXLyxUIqgcCDFEF8EzMStPB1BIcQe+r++U LRNN/poSd+VduNK+kl+WhMTV1q+rfsDpzfO23GRfv1Lte3OMKCR8PHHNgmEDKYC9 WIJcktE95RQ83E5kKtmRjep0tHJ7b4esoaBMdzfF9EVe/zQq59/NusXifnWyrgOu O+goki87zMAscM6HVy/D4o5L8X2Y37sz5fu7d8YCWGEu24n9xE+LJ7jHckIkW5Zw b2GBkKq0xSeVy4z4iEHGJQFuBvadAYM= -----END CERTIFICATE-----Generated at Fri Jan 9 17:04:37 2026 by rpki-client