This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9E5EBF7EEAD811F08BD56799656F56BC.roa File: 9E5EBF7EEAD811F08BD56799656F56BC.roa (raw, json) Hash identifier: EtjN5lV1tqSu2ntUFQ3r/aeFEF9PVtmGFwQ4vN3kXNY= Subject key identifier: 9C:C3:60:5A:F3:27:FD:55:AF:40:32:C2:51:FE:DE:48:26:A7:3E:32 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: CC9B Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9E5EBF7EEAD811F08BD56799656F56BC.roa Signing time: Tue 06 Jan 2026 08:20:54 +0000 ROA not before: Tue 06 Jan 2026 08:20:54 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 142527 IP address blocks: 103.161.10.0/23 maxlen: 24 103.171.46.0/23 maxlen: 24 103.203.208.0/23 maxlen: 24 103.203.210.0/23 maxlen: 24 2400:b560::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 11:06:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52379 (0xcc9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jan 6 08:20:54 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=695cc5e6-2758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:18:4d:91:82:95:c0:23:b3:7d:57:12:0b:e4: 4b:e3:16:5b:86:5b:9c:85:e1:7b:ef:02:55:61:45: 5a:a9:36:01:8f:ff:de:7b:1a:96:8c:1a:93:7a:71: 2b:20:d8:ab:09:f7:d2:3c:59:a3:41:4d:b9:02:c0: 95:5e:9d:39:70:cb:95:88:76:b0:45:84:3c:65:5a: 04:74:e0:17:6e:49:0a:8a:08:6d:01:38:92:ff:b1: fe:3b:8c:ac:3e:e4:a5:41:48:af:4b:68:f6:05:d0: 7c:8b:cf:9e:88:ed:48:ad:cd:0c:29:ea:fa:d0:66: c1:68:86:e8:73:5b:24:db:46:e2:be:2f:55:87:8a: 8b:79:fb:76:ac:50:66:6b:cb:56:0a:cb:65:17:05: 17:d2:24:8f:c7:1f:93:7b:76:c1:b7:88:10:8a:c6: 03:48:c9:32:04:bd:f7:06:69:44:30:c8:c1:99:2e: 9b:02:cb:a4:f5:5f:c6:88:0a:ba:a1:39:17:e6:15: 33:55:07:a6:e8:be:e1:b8:e8:91:4d:db:87:d9:37: b4:f6:86:b2:d2:a9:e0:2d:62:da:4d:ef:69:af:cd: 97:c0:00:4b:4d:03:f4:fe:9f:55:9a:d6:37:b9:93: 3a:23:6a:2d:75:82:3f:45:e6:36:27:eb:1f:04:07: d8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C3:60:5A:F3:27:FD:55:AF:40:32:C2:51:FE:DE:48:26:A7:3E:32 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9E5EBF7EEAD811F08BD56799656F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.161.10.0/23 103.171.46.0/23 103.203.208.0/22 IPv6: 2400:b560::/32 Signature Algorithm: sha256WithRSAEncryption 37:22:02:13:6a:45:21:77:94:51:54:1e:a1:8b:61:de:29:ce: df:aa:33:3b:a5:20:c0:15:bc:37:bf:d3:7d:34:fd:34:e8:d7: fe:0b:f0:7a:cf:71:1e:f3:34:89:5f:34:8b:fa:a3:ae:92:a9: 71:b1:13:c8:df:7b:90:83:3c:b6:71:42:3e:ae:6b:79:14:b8: 68:a7:e6:ce:13:0d:bd:56:60:05:87:62:e9:4f:76:18:3c:70: 24:7a:83:bd:0e:30:24:12:59:fb:fc:5a:c6:75:43:6a:f2:00: 68:4d:b5:dd:70:b4:88:69:4a:bc:5a:c2:ab:e1:19:ab:c4:88: 70:0a:e1:55:f8:fb:8d:0e:ef:6f:bf:46:61:dc:6f:04:00:ef: 54:fd:c7:36:af:b2:d2:b3:eb:34:3f:2f:f7:7e:d2:de:bb:0f: 28:a2:9d:4e:d3:e4:a8:a3:b2:52:5e:0f:21:1d:ba:c2:99:ee: 78:6e:06:7c:06:11:d9:ca:9c:00:68:34:e8:ea:2c:73:a4:59: d5:c6:70:07:c2:23:f6:b2:a4:8d:3a:7d:9a:7d:d8:71:b7:d7: 62:a4:c6:b4:d0:d2:e8:53:01:a3:fd:a1:9c:91:60:ea:79:7f: cb:14:c9:9a:9f:44:f8:24:f0:c4:00:b0:93:dd:0f:50:fe:98: 7e:7c:98:75 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgIDAMybMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMMCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDEwNjA4MjA1NFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAwwNNjk1Y2M1ZTYtMjc1ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKgYTZGClcAjs31XEgvkS+MWW4ZbnIXhe+8CVWFFWqk2AY//3nsalowak3px KyDYqwn30jxZo0FNuQLAlV6dOXDLlYh2sEWEPGVaBHTgF25JCooIbQE4kv+x/juM rD7kpUFIr0to9gXQfIvPnojtSK3NDCnq+tBmwWiG6HNbJNtG4r4vVYeKi3n7dqxQ ZmvLVgrLZRcFF9Ikj8cfk3t2wbeIEIrGA0jJMgS99wZpRDDIwZkumwLLpPVfxogK uqE5F+YVM1UHpui+4bjokU3bh9k3tPaGstKp4C1i2k3vaa/Nl8AAS00D9P6fVZrW N7mTOiNqLXWCP0XmNifrHwQH2EcCAwEAAaOCArAwggKsMB0GA1UdDgQWBBScw2Ba 8yf9Va9AMsJR/t5IJqc+MjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzlFNUVCRjdF RUFEODExRjA4QkQ1Njc5OTY1NkY1NkJDLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDoGCCsGAQUFBwEHAQH/ BCswKTAYBAIAATASAwQBZ6EKAwQBZ6suAwQCZ8vQMA0EAgACMAcDBQAkALVgMA0G CSqGSIb3DQEBCwUAA4IBAQA3IgITakUhd5RRVB6hi2HeKc7fqjM7pSDAFbw3v9N9 NP006Nf+C/B6z3Ee8zSJXzSL+qOukqlxsRPI33uQgzy2cUI+rmt5FLhop+bOEw29 VmAFh2LpT3YYPHAkeoO9DjAkEln7/FrGdUNq8gBoTbXdcLSIaUq8WsKr4RmrxIhw CuFV+PuNDu9vv0Zh3G8EAO9U/cc2r7LSs+s0Py/3ftLeuw8oop1O0+Soo7JSXg8h HbrCme54bgZ8BhHZypwAaDTo6ixzpFnVxnAHwiP2sqSNOn2afdhxt9dipMa00NLo UwGj/aGckWDqeX/LFMman0T4JPDEALCT3Q9Q/ph+fJh1 -----END CERTIFICATE-----Generated at Mon Jan 19 21:44:08 2026 by rpki-client