This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/68DA14E65BB211E9BF474F16C4F9AE02.roa File: 68DA14E65BB211E9BF474F16C4F9AE02.roa (raw, json) Hash identifier: luc4+0BZTvO2yKZi0hsHSg65VjoagywQzhEkdHNbejY= Subject key identifier: C4:F2:68:52:89:1C:D2:51:F3:71:C7:F7:57:01:AD:CC:39:FE:A3:08 Certificate issuer: /CN=A91AAE16/serialNumber=394EA086895C6F17D936548A32238B82CF79294D Certificate serial: 103D Authority key identifier: 39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/68DA14E65BB211E9BF474F16C4F9AE02.roa Signing time: Wed 04 Feb 2026 23:30:29 +0000 ROA not before: Wed 04 Feb 2026 23:30:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 1828 IP address blocks: 103.38.152.0/24 maxlen: 24 103.38.153.0/24 maxlen: 24 103.38.154.0/24 maxlen: 24 103.38.155.0/24 maxlen: 24 111.221.56.0/22 maxlen: 22 111.221.56.0/24 maxlen: 24 111.221.57.0/24 maxlen: 24 111.221.58.0/23 maxlen: 24 202.58.136.0/21 maxlen: 21 2401:5dc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Feb 2026 03:35:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4157 (0x103d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAE16, serialNumber=394EA086895C6F17D936548A32238B82CF79294D Validity Not Before: Feb 4 23:30:29 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6983d695-7e26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:79:81:ef:ec:06:f2:e8:da:ac:90:59:dc:18: bf:c3:d1:50:6b:4d:5b:c7:a1:03:1a:dc:89:68:6c: c2:c3:9c:34:d5:83:2f:96:2a:75:07:16:8e:62:82: ff:8c:7f:37:4d:66:f4:95:48:8a:14:57:95:38:97: d6:fb:6f:e8:81:1f:05:67:c6:f0:0e:2b:a5:f4:29: e6:19:cc:73:7f:25:01:4c:47:f3:db:56:2b:24:e8: 77:e3:5a:49:ff:ab:fb:03:58:51:ef:dc:4d:e3:6d: d0:2b:b3:96:02:8c:8c:29:3d:d6:51:65:83:05:3c: 89:ec:a6:38:65:e2:e7:a6:04:4f:30:65:c5:c2:a4: 14:fd:d7:76:22:65:31:f0:6e:f9:78:1d:0f:b2:14: 67:14:55:54:14:67:b9:aa:52:45:6c:d4:19:81:c1: bd:01:f9:9e:14:7d:9a:cd:e4:f1:44:04:3e:bd:c7: d4:f9:5f:c6:39:2e:9a:73:a5:40:2f:48:be:53:eb: 78:f3:67:f2:98:f1:ce:bc:1f:bb:65:db:3a:c8:8f: 0d:ff:58:8b:a5:22:ce:e4:9b:56:de:3b:72:c0:4d: d6:5e:8c:e7:df:f8:f0:82:02:bb:e0:ed:70:4e:ea: ec:25:c9:0e:83:d0:2a:f7:6d:11:05:9d:88:c3:bd: fa:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:F2:68:52:89:1C:D2:51:F3:71:C7:F7:57:01:AD:CC:39:FE:A3:08 X509v3 Authority Key Identifier: keyid:39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/68DA14E65BB211E9BF474F16C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.38.152.0/22 111.221.56.0/22 202.58.136.0/21 IPv6: 2401:5dc0::/32 Signature Algorithm: sha256WithRSAEncryption 4c:08:90:5a:1f:db:07:79:cb:a9:4a:a8:89:51:d7:b5:c1:d1: 17:aa:58:f1:3f:ad:f0:b9:e4:f8:02:ca:67:6b:bb:92:12:9f: 4c:3a:a4:76:60:d9:b4:f0:cc:64:c2:90:74:da:9b:14:bd:7c: 3b:41:1b:ef:15:f7:64:91:e5:61:2b:2f:c5:3a:88:23:cd:e6: 4b:ac:cb:8e:b9:b7:82:17:43:96:ed:df:39:5c:47:bf:3f:cc: cc:6f:25:4d:8e:54:68:ae:66:57:f3:86:a7:4e:4b:57:47:e1: 3e:b1:f5:e1:a8:f3:47:51:54:8a:d2:49:b6:af:ce:6c:c9:df: 92:31:5e:de:0d:3c:b3:f5:b3:6f:2f:5d:2b:07:a5:ac:25:f2: d6:4c:59:12:e5:2b:da:67:62:5e:8f:1f:90:0b:cd:3a:14:5e: 15:a9:3f:1c:fb:1b:f8:47:10:62:b1:33:20:aa:c5:70:d1:55: c0:06:0b:c0:b9:15:29:b2:1a:bd:26:fa:55:ca:5f:c7:af:d2: 77:77:2d:6a:15:80:65:ba:e7:4d:24:9d:75:76:3f:c7:dc:33: b9:c0:30:a3:e2:db:08:73:fb:b2:29:c2:22:76:a4:e0:c0:73: 54:5e:84:e0:35:96:d8:85:b1:0b:a3:6a:a5:7a:c7:f3:a6:78: 19:4d:7e:1d -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICED0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFMTYxMTAvBgNVBAUTKDM5NEVBMDg2ODk1QzZGMTdEOTM2NTQ4QTMyMjM4Qjgy Q0Y3OTI5NEQwHhcNMjYwMjA0MjMzMDI5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTgzZDY5NS03ZTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmHmB7+wG8ujarJBZ3Bi/w9FQa01bx6EDGtyJaGzCw5w01YMvlip1BxaOYoL/ jH83TWb0lUiKFFeVOJfW+2/ogR8FZ8bwDiul9CnmGcxzfyUBTEfz21YrJOh341pJ /6v7A1hR79xN423QK7OWAoyMKT3WUWWDBTyJ7KY4ZeLnpgRPMGXFwqQU/dd2ImUx 8G75eB0PshRnFFVUFGe5qlJFbNQZgcG9AfmeFH2azeTxRAQ+vcfU+V/GOS6ac6VA L0i+U+t482fymPHOvB+7Zds6yI8N/1iLpSLO5JtW3jtywE3WXozn3/jwggK74O1w TursJckOg9Aq920RBZ2Iw736MwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFMTyaFKJ HNJR83HH91cBrcw5/qMIMB8GA1UdIwQYMBaAFDlOoIaJXG8X2TZUijIji4LPeSlN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUUxNi8xNzQ4ODU1MDVC QjExMUU5OEIxMDNCMTNDNEY5QUUwMi9PVTZnaG9sY2J4ZlpObFNLTWlPTGdzOTVL VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09VNmdob2xjYnhmWk5sU0tNaU9MZ3M5NUtVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFFMTYvMTc0ODg1NTA1QkIxMTFFOThCMTAzQjEzQzRGOUFFMDIvNjhEQTE0RTY1 QkIyMTFFOUJGNDc0RjE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAJnJpgDBAJv3TgDBAPKOogwDQQCAAIwBwMFACQBXcAwDQYJ KoZIhvcNAQELBQADggEBAEwIkFof2wd5y6lKqIlR17XB0ReqWPE/rfC55PgCymdr u5ISn0w6pHZg2bTwzGTCkHTamxS9fDtBG+8V92SR5WErL8U6iCPN5kusy465t4IX Q5bt3zlcR78/zMxvJU2OVGiuZlfzhqdOS1dH4T6x9eGo80dRVIrSSbavzmzJ35Ix Xt4NPLP1s28vXSsHpawl8tZMWRLlK9pnYl6PH5ALzToUXhWpPxz7G/hHEGKxMyCq xXDRVcAGC8C5FSmyGr0m+lXKX8ev0nd3LWoVgGW6500knXV2P8fcM7nAMKPi2whz +7IpwiJ2pODAc1RehOA1ltiFsQujaqV6x/OmeBlNfh0= -----END CERTIFICATE-----Generated at Thu Feb 5 22:57:45 2026 by rpki-client