This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/B688C61E2A7411F09C50DF45C4F9AE02.roa File: B688C61E2A7411F09C50DF45C4F9AE02.roa (raw, json) Hash identifier: ewGnN7hc9g0hE2viXLZFCs+BCr01/VYOfqNiGnRW5q8= Subject key identifier: 2F:84:04:8D:FB:3F:F4:6C:5F:46:D7:C1:07:3F:90:5B:DB:C1:52:71 Certificate issuer: /CN=A914CBF3/serialNumber=E2449E312220131E2E76C42C7CCC6DD193510707 Certificate serial: 0CA2 Authority key identifier: E2:44:9E:31:22:20:13:1E:2E:76:C4:2C:7C:CC:6D:D1:93:51:07:07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/B688C61E2A7411F09C50DF45C4F9AE02.roa Signing time: Wed 24 Dec 2025 18:16:03 +0000 ROA not before: Wed 24 Dec 2025 18:16:03 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 137453 IP address blocks: 103.126.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Feb 2026 18:08:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3234 (0xca2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CBF3, serialNumber=E2449E312220131E2E76C42C7CCC6DD193510707 Validity Not Before: Dec 24 18:16:03 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=694c2de3-7621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7b:78:1a:47:7b:1c:d2:4c:60:b3:18:b3:84: 43:ab:c4:04:81:b5:65:9a:66:16:66:c1:ed:37:53: 10:53:73:78:3b:09:9e:19:9d:a1:63:33:32:6c:fb: 8c:d7:a7:61:04:78:b9:1c:1c:2d:b8:39:02:9c:f7: 9c:cc:b5:81:5f:3e:00:bf:81:e1:19:a5:3d:ab:9c: 90:6e:4d:7b:ee:cf:93:26:3e:5f:e0:ba:87:70:31: 8d:d5:30:e9:58:80:c6:16:27:99:f5:5a:b8:30:cb: 9a:92:8c:f5:4c:bc:37:0e:b1:2e:dc:c2:ec:17:53: d1:8b:4d:ae:f9:c8:88:0c:1a:ff:58:11:5a:c6:ff: 62:37:73:22:8b:18:7b:d4:f5:e0:09:b2:4f:e9:f1: de:aa:0d:4f:bf:30:54:b1:1a:77:61:c6:43:8c:be: ba:0f:7a:dd:5d:ef:09:06:37:ca:c0:ba:32:b7:c2: ca:33:bd:f3:e6:77:bd:e1:a8:ae:7c:cc:a9:ac:b8: 9d:f9:0a:b8:17:78:5e:41:ff:f5:63:e4:82:dc:1a: a5:cc:bb:d4:a8:03:82:ee:ee:fd:1c:6c:bf:f2:80: 27:af:70:b6:37:9c:8a:c3:93:a0:30:d2:dc:f9:b6: ae:df:f0:9e:b3:cc:c5:5a:f4:1c:57:9f:72:81:34: 6b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:84:04:8D:FB:3F:F4:6C:5F:46:D7:C1:07:3F:90:5B:DB:C1:52:71 X509v3 Authority Key Identifier: keyid:E2:44:9E:31:22:20:13:1E:2E:76:C4:2C:7C:CC:6D:D1:93:51:07:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/B688C61E2A7411F09C50DF45C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.126.20.0/24 Signature Algorithm: sha256WithRSAEncryption 56:39:e0:4c:00:98:0a:33:e9:02:72:f8:fa:41:96:08:aa:e1: 75:80:30:3b:27:a3:fb:90:48:58:6d:76:60:b8:4e:4c:b7:b1: 18:5a:7c:d3:db:8a:8e:fa:49:f9:03:8f:e7:42:b6:4c:a6:a8: 80:4c:e5:ca:5f:d7:44:cb:0b:46:f4:cf:36:b4:2e:55:1c:80: 2a:b7:87:6b:03:37:77:9a:7d:dd:d0:53:06:a6:35:7c:68:ae: 8e:00:70:7c:9f:ff:56:5c:95:f7:c7:fe:3d:a3:ca:df:11:06: f5:e5:d9:be:04:b4:af:e1:45:cd:2f:44:bc:71:55:03:14:26: f8:6d:17:b6:88:17:db:02:94:a4:f4:74:12:97:fd:2d:d9:b0: 30:2e:20:d6:91:11:2c:2a:9c:6b:1c:7f:f8:0e:b2:3a:49:5f: 7e:ac:b6:35:47:a8:a4:d7:08:89:c8:90:66:48:1a:ae:a4:ba: d1:9d:df:19:3c:2f:8e:d5:0d:af:69:7d:0e:0d:c7:7a:31:f0: 67:c9:cf:dd:a5:3f:bb:ff:3d:16:78:7a:a2:a5:12:34:58:09: 95:54:71:fd:dc:6a:50:1a:3c:72:92:34:6d:f9:06:5f:ba:47: 47:8a:8d:f9:ea:b9:74:59:d5:cb:56:67:9c:78:7a:b9:74:48: 98:20:a6:80 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NENCRjMxMTAvBgNVBAUTKEUyNDQ5RTMxMjIyMDEzMUUyRTc2QzQyQzdDQ0M2REQx OTM1MTA3MDcwHhcNMjUxMjI0MTgxNjAzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTRjMmRlMy03NjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtHt4Gkd7HNJMYLMYs4RDq8QEgbVlmmYWZsHtN1MQU3N4OwmeGZ2hYzMybPuM 16dhBHi5HBwtuDkCnPeczLWBXz4Av4HhGaU9q5yQbk177s+TJj5f4LqHcDGN1TDp WIDGFieZ9Vq4MMuakoz1TLw3DrEu3MLsF1PRi02u+ciIDBr/WBFaxv9iN3Miixh7 1PXgCbJP6fHeqg1PvzBUsRp3YcZDjL66D3rdXe8JBjfKwLoyt8LKM73z5ne94aiu fMyprLid+Qq4F3heQf/1Y+SC3BqlzLvUqAOC7u79HGy/8oAnr3C2N5yKw5OgMNLc +bau3/Ces8zFWvQcV59ygTRrGwIDAQABo4IClTCCApEwHQYDVR0OBBYEFC+EBI37 P/RsX0bXwQc/kFvbwVJxMB8GA1UdIwQYMBaAFOJEnjEiIBMeLnbELHzMbdGTUQcH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0JGMy8xQkM2RUIyMDEx RTcxMUVBQjkwM0FBNzlDNEY5QUUwMi80a1NlTVNJZ0V4NHVkc1FzZk14dDBaTlJC d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRrU2VNU0lnRXg0dWRzUXNmTXh0MFpOUkJ3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NENCRjMvMUJDNkVCMjAxMUU3MTFFQUI5MDNBQTc5QzRGOUFFMDIvQjY4OEM2MUUy QTc0MTFGMDlDNTBERjQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnfhQwDQYJKoZIhvcNAQELBQADggEBAFY54EwAmAoz6QJy +PpBlgiq4XWAMDsno/uQSFhtdmC4Tky3sRhafNPbio76SfkDj+dCtkymqIBM5cpf 10TLC0b0zza0LlUcgCq3h2sDN3eafd3QUwamNXxoro4AcHyf/1ZclffH/j2jyt8R BvXl2b4EtK/hRc0vRLxxVQMUJvhtF7aIF9sClKT0dBKX/S3ZsDAuINaRESwqnGsc f/gOsjpJX36stjVHqKTXCInIkGZIGq6kutGd3xk8L47VDa9pfQ4Nx3ox8GfJz92l P7v/PRZ4eqKlEjRYCZVUcf3calAaPHKSNG35Bl+6R0eKjfnquXRZ1ctWZ5x4erl0 SJggpoA= -----END CERTIFICATE-----Generated at Tue Jan 27 22:07:20 2026 by rpki-client