This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/8F14EDAA70B911EDB6E1F81BC4F9AE02.roa File: 8F14EDAA70B911EDB6E1F81BC4F9AE02.roa (raw, json) Hash identifier: N4N6z+ShNHdfv2TpH8m+QzYFlSHMZaSqRN2n0a3q4so= Subject key identifier: 7F:3E:B1:0D:08:95:7A:B6:99:A2:BF:41:AA:61:6C:E9:99:0F:FA:3E Certificate issuer: /CN=A91A8A52/serialNumber=712EB5A2D7069F18EE9C65F3B013271ADBF1F540 Certificate serial: 0260 Authority key identifier: 71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/8F14EDAA70B911EDB6E1F81BC4F9AE02.roa Signing time: Wed 21 Jan 2026 01:21:37 +0000 ROA not before: Wed 21 Jan 2026 01:21:37 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 137449 IP address blocks: 103.42.228.0/23 maxlen: 24 103.42.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.crl rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 00:58:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 608 (0x260) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8A52, serialNumber=712EB5A2D7069F18EE9C65F3B013271ADBF1F540 Validity Not Before: Jan 21 01:21:37 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69702a21-1abf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2f:cd:35:ec:30:3d:45:d5:b3:a4:3e:b5:08: c6:cd:8d:ff:a0:2f:26:99:a8:8c:db:c7:50:86:6e: 4a:5d:05:58:4a:6d:69:ed:d1:23:be:73:9e:32:f5: 33:63:f7:00:4e:c4:2d:15:9a:16:9c:43:0b:78:63: c2:5c:bf:28:4e:fe:60:d5:d6:dd:94:81:7a:95:84: 5a:fe:a6:21:0b:77:ee:f8:d6:50:0d:ff:ef:72:0a: 61:9c:53:64:9d:64:c6:98:0d:2a:79:69:03:81:29: 32:51:c7:e3:7c:ea:15:a0:d0:ba:f0:29:dc:5b:41: 0b:af:58:db:8e:0c:46:87:28:b8:19:95:1d:04:2f: cd:7c:1e:af:79:f2:fa:2f:67:46:87:72:8c:29:d9: 15:7d:58:ce:3a:7a:9b:b7:97:50:bc:99:5f:5f:9a: 86:b1:9a:a5:2d:e4:b4:a1:08:c1:28:53:f7:ff:d8: 8e:fd:b0:0f:2b:ce:f9:8b:09:33:dd:8a:f8:00:ab: 57:21:e6:98:ee:af:8f:a3:ad:7a:07:b8:cd:9f:30: 86:35:0c:2e:dd:0d:ae:01:29:8d:7b:76:79:87:52: c8:7e:09:85:ad:f8:d6:0a:85:7c:5a:f8:b0:21:eb: cc:3e:ef:d5:36:92:56:bb:9d:1b:5d:dc:0d:b1:ee: 83:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:3E:B1:0D:08:95:7A:B6:99:A2:BF:41:AA:61:6C:E9:99:0F:FA:3E X509v3 Authority Key Identifier: keyid:71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/8F14EDAA70B911EDB6E1F81BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.42.228.0/23 Signature Algorithm: sha256WithRSAEncryption 50:93:11:82:84:2b:60:ac:1a:db:7c:03:4b:d6:06:b5:6f:46: 94:bb:9c:ae:7a:9c:9f:d1:f2:3f:92:42:4c:86:27:2e:f7:7a: ce:45:28:75:b2:c1:07:cc:ef:2a:51:38:7e:e9:7f:67:cf:82: 24:66:2c:49:63:08:27:e4:50:4d:6a:b2:cd:0a:ed:f5:ce:da: 1f:a9:f2:c9:8d:a3:e1:ef:98:12:f6:6f:2e:ef:33:4e:55:1a: ef:98:c1:c8:a4:7f:73:4c:c3:2a:96:aa:4a:a3:0b:5e:c3:c2: 8a:ec:b3:ee:6e:bc:2f:fc:09:07:2a:2d:ce:ae:ac:72:3f:07: 25:17:12:e8:6a:8d:c6:b1:2f:a1:14:d2:df:1e:0a:67:0f:5e: 26:a8:34:8e:05:3c:2c:a5:03:80:c5:08:08:73:c9:3b:83:a3: 91:f9:f8:06:21:24:ee:84:c2:fd:ca:7d:86:e0:e8:d6:5d:81: a4:47:87:76:7e:5d:e3:91:5e:4e:c0:6d:c4:85:3f:35:f3:2c: 9a:e4:e6:10:2c:14:9d:66:0e:eb:ac:53:0d:7b:4d:6b:f4:97: 59:a1:92:35:86:95:7a:ee:7d:11:5a:d2:3a:39:3d:e6:8b:b4: 54:43:ad:e1:4c:26:29:7f:e0:7a:28:be:fa:fe:a0:3e:42:8a: b6:11:8b:34 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QThBNTIxMTAvBgNVBAUTKDcxMkVCNUEyRDcwNjlGMThFRTlDNjVGM0IwMTMyNzFB REJGMUY1NDAwHhcNMjYwMTIxMDEyMTM3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTcwMmEyMS0xYWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxi/NNewwPUXVs6Q+tQjGzY3/oC8mmaiM28dQhm5KXQVYSm1p7dEjvnOeMvUz Y/cATsQtFZoWnEMLeGPCXL8oTv5g1dbdlIF6lYRa/qYhC3fu+NZQDf/vcgphnFNk nWTGmA0qeWkDgSkyUcfjfOoVoNC68CncW0ELr1jbjgxGhyi4GZUdBC/NfB6vefL6 L2dGh3KMKdkVfVjOOnqbt5dQvJlfX5qGsZqlLeS0oQjBKFP3/9iO/bAPK875iwkz 3Yr4AKtXIeaY7q+Po616B7jNnzCGNQwu3Q2uASmNe3Z5h1LIfgmFrfjWCoV8Wviw IevMPu/VNpJWu50bXdwNse6DJwIDAQABo4IClTCCApEwHQYDVR0OBBYEFH8+sQ0I lXq2maK/QaphbOmZD/o+MB8GA1UdIwQYMBaAFHEutaLXBp8Y7pxl87ATJxrb8fVA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEE1Mi9GQjdFNEJERTcw QjUxMUVEOTNGMEREMTZDNEY5QUUwMi9jUzYxb3RjR254anVuR1h6c0JNbkd0dng5 VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NTNjFvdGNHbnhqdW5HWHpzQk1uR3R2eDlVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QThBNTIvRkI3RTRCREU3MEI1MTFFRDkzRjBERDE2QzRGOUFFMDIvOEYxNEVEQUE3 MEI5MTFFREI2RTFGODFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnKuQwDQYJKoZIhvcNAQELBQADggEBAFCTEYKEK2CsGtt8 A0vWBrVvRpS7nK56nJ/R8j+SQkyGJy73es5FKHWywQfM7ypROH7pf2fPgiRmLElj CCfkUE1qss0K7fXO2h+p8smNo+HvmBL2by7vM05VGu+Ywcikf3NMwyqWqkqjC17D worss+5uvC/8CQcqLc6urHI/ByUXEuhqjcaxL6EU0t8eCmcPXiaoNI4FPCylA4DF CAhzyTuDo5H5+AYhJO6Ewv3KfYbg6NZdgaRHh3Z+XeORXk7AbcSFPzXzLJrk5hAs FJ1mDuusUw17TWv0l1mhkjWGlXrufRFa0jo5PeaLtFRDreFMJil/4Hoovvr+oD5C irYRizQ= -----END CERTIFICATE-----Generated at Tue Jan 27 22:06:30 2026 by rpki-client