This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/B972C58C8FA611EAB095C928C4F9AE02.roa File: B972C58C8FA611EAB095C928C4F9AE02.roa (raw, json) Hash identifier: gMtU3MzW02al3Gh0j23aNflFmlRjSH1qerzT6jm40lA= Subject key identifier: 4E:3A:90:B8:EC:45:38:9F:43:4D:0D:DA:0F:77:A5:11:08:8E:FB:67 Certificate issuer: /CN=A919A3CA/serialNumber=8A9B3B92399396E8FC6B86309ED57330C94E117D Certificate serial: 0A0A Authority key identifier: 8A:9B:3B:92:39:93:96:E8:FC:6B:86:30:9E:D5:73:30:C9:4E:11:7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/B972C58C8FA611EAB095C928C4F9AE02.roa Signing time: Wed 28 Jan 2026 20:16:46 +0000 ROA not before: Wed 28 Jan 2026 20:16:46 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 394434 IP address blocks: 103.36.108.0/22 maxlen: 22 103.36.110.0/24 maxlen: 24 103.36.111.0/24 maxlen: 24 103.146.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.crl rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Feb 2026 19:33:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2570 (0xa0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A3CA, serialNumber=8A9B3B92399396E8FC6B86309ED57330C94E117D Validity Not Before: Jan 28 20:16:46 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=697a6eae-25b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:bb:21:dd:a0:f7:b2:7b:0d:64:29:26:99:36: 51:57:86:5d:08:b6:de:16:4a:e9:56:dd:bb:92:c0: 45:0c:b1:36:7a:b7:b9:b0:c8:06:80:dd:30:ff:39: d9:90:a6:04:4b:f6:a3:97:93:a0:54:71:7d:71:d5: e7:08:38:36:95:4a:a0:0c:58:c1:1d:da:ce:5a:d4: 22:c8:35:39:7f:54:37:93:b0:f6:c2:82:d0:95:c2: 19:03:36:fb:ee:f5:d2:b6:d8:3d:f6:fe:5a:8e:74: 16:f8:5b:c5:86:ff:50:af:29:51:09:9c:af:34:90: c8:18:bc:57:87:33:1a:d6:18:4f:90:0e:61:5b:c1: be:5c:53:1a:6d:2a:c9:7b:8b:73:80:0c:e1:e6:ed: 6b:67:aa:d3:57:11:23:87:32:f1:e1:85:50:4e:4d: ca:c9:2e:c2:c6:87:f0:45:80:ab:95:30:fd:99:f1: 7c:de:97:73:99:7e:9d:be:bc:d5:b8:ae:e0:43:41: c0:41:09:72:95:58:32:8b:46:81:e1:ef:1d:21:ab: 93:ed:6b:aa:54:0e:71:4d:68:b3:f7:b3:70:aa:2a: 1b:dc:62:d1:45:eb:62:27:0b:56:eb:5a:ff:fc:88: 74:61:51:bb:cb:58:f3:8a:a9:53:89:56:20:04:a5: 24:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:3A:90:B8:EC:45:38:9F:43:4D:0D:DA:0F:77:A5:11:08:8E:FB:67 X509v3 Authority Key Identifier: keyid:8A:9B:3B:92:39:93:96:E8:FC:6B:86:30:9E:D5:73:30:C9:4E:11:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/B972C58C8FA611EAB095C928C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.36.108.0/22 103.146.214.0/24 Signature Algorithm: sha256WithRSAEncryption 24:15:62:08:8c:23:55:bb:cc:74:0d:18:11:7f:ee:61:4a:17: 80:80:04:39:40:d6:7d:7e:ec:9f:30:a2:bf:d3:e5:32:07:52: 42:a6:90:ab:f9:87:0e:86:f3:99:de:cb:0c:18:bf:f1:55:4d: 15:8c:7e:74:aa:7a:2f:ba:ee:b1:3b:85:49:a9:a1:e2:9e:0e: ad:f5:34:85:e0:59:39:c1:02:a8:55:72:2c:f9:75:4e:52:ab: 36:77:0e:df:05:f9:fa:eb:95:52:fa:ad:f5:28:36:d6:95:5b: da:61:94:ca:88:b1:cf:63:80:0a:2b:a3:cd:e6:53:65:2b:29: 01:0c:7f:8b:4a:90:6d:51:8f:f0:53:9b:1b:3e:83:49:99:72: cd:c5:7b:90:27:4e:b0:10:40:ed:c8:40:02:f9:9c:7f:2f:17: 5a:56:8b:d3:35:43:4e:ed:12:b2:a7:17:ce:25:82:7d:94:c5: 05:75:cd:55:33:b8:6a:c3:c4:e7:ca:e5:e5:d6:8a:d6:75:c6: b2:61:40:48:9b:b8:35:e8:12:5f:a5:88:45:91:8f:c6:65:61: c5:87:e9:44:df:04:97:62:b9:4e:22:58:4d:2d:b3:dc:c7:b3: 1f:ee:44:30:75:82:02:eb:d5:6a:ba:e4:8e:78:17:eb:ef:1b: 58:f7:e8:22 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICCgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx OUEzQ0ExMTAvBgNVBAUTKDhBOUIzQjkyMzk5Mzk2RThGQzZCODYzMDlFRDU3MzMw Qzk0RTExN0QwHhcNMjYwMTI4MjAxNjQ2WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTdhNmVhZS0yNWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAirsh3aD3snsNZCkmmTZRV4ZdCLbeFkrpVt27ksBFDLE2ere5sMgGgN0w/znZ kKYES/ajl5OgVHF9cdXnCDg2lUqgDFjBHdrOWtQiyDU5f1Q3k7D2woLQlcIZAzb7 7vXSttg99v5ajnQW+FvFhv9QrylRCZyvNJDIGLxXhzMa1hhPkA5hW8G+XFMabSrJ e4tzgAzh5u1rZ6rTVxEjhzLx4YVQTk3KyS7CxofwRYCrlTD9mfF83pdzmX6dvrzV uK7gQ0HAQQlylVgyi0aB4e8dIauT7WuqVA5xTWiz97Nwqiob3GLRRetiJwtW61r/ /Ih0YVG7y1jziqlTiVYgBKUk8wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFE46kLjs RTifQ00N2g93pREIjvtnMB8GA1UdIwQYMBaAFIqbO5I5k5bo/GuGMJ7VczDJThF9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTNDQS81N0QyMzgwMjhG QTIxMUVBOEVDMDZFMUNDNEY5QUUwMi9pcHM3a2ptVGx1ajhhNFl3bnRWek1NbE9F WDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lwczdram1UbHVqOGE0WXdudFZ6TU1sT0VYMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUEzQ0EvNTdEMjM4MDI4RkEyMTFFQThFQzA2RTFDQzRGOUFFMDIvQjk3MkM1OEM4 RkE2MTFFQUIwOTVDOTI4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnJGwDBABnktYwDQYJKoZIhvcNAQELBQADggEBACQVYgiM I1W7zHQNGBF/7mFKF4CABDlA1n1+7J8wor/T5TIHUkKmkKv5hw6G85neywwYv/FV TRWMfnSqei+67rE7hUmpoeKeDq31NIXgWTnBAqhVciz5dU5SqzZ3Dt8F+frrlVL6 rfUoNtaVW9phlMqIsc9jgAoro83mU2UrKQEMf4tKkG1Rj/BTmxs+g0mZcs3Fe5An TrAQQO3IQAL5nH8vF1pWi9M1Q07tErKnF84lgn2UxQV1zVUzuGrDxOfK5eXWitZ1 xrJhQEibuDXoEl+liEWRj8ZlYcWH6UTfBJdiuU4iWE0ts9zHsx/uRDB1ggLr1Wq6 5I54F+vvG1j36CI= -----END CERTIFICATE-----Generated at Mon Feb 9 23:53:34 2026 by rpki-client