This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/4C8BB01CF0A511F0AE903042706F56BC.roa File: 4C8BB01CF0A511F0AE903042706F56BC.roa (raw, json) Hash identifier: CUJNIZSv4N5Ll3Zzd5lExHQpuZvQPWmWLHnAd5iQB6Q= Subject key identifier: D9:05:D2:D7:33:A2:5B:EF:33:33:9B:59:23:09:2A:78:77:86:6E:AE Certificate issuer: /CN=A91B25F2/serialNumber=B6C87BB58728F76F6F90A09DFD6BAA1AD4E73BCA Certificate serial: 0D0C Authority key identifier: B6:C8:7B:B5:87:28:F7:6F:6F:90:A0:9D:FD:6B:AA:1A:D4:E7:3B:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/4C8BB01CF0A511F0AE903042706F56BC.roa Signing time: Tue 13 Jan 2026 17:28:39 +0000 ROA not before: Tue 13 Jan 2026 17:28:39 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 154377 IP address blocks: 43.230.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.crl rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 17:52:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3340 (0xd0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B25F2, serialNumber=B6C87BB58728F76F6F90A09DFD6BAA1AD4E73BCA Validity Not Before: Jan 13 17:28:39 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=696680c7-777e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b1:7c:a1:4c:5e:8e:43:e7:57:34:0f:48:73: 6c:50:32:c4:a1:7d:75:b3:bf:59:4e:94:3e:54:4a: 2e:ea:4b:60:1b:67:7d:99:7a:1e:ee:96:66:61:a3: 25:dd:21:20:10:54:fc:d7:19:bf:f3:51:d5:86:0f: 68:0a:b4:7b:c3:05:d7:64:68:fc:2e:0d:a0:ba:be: 0b:82:72:6f:c9:08:40:b3:af:82:7d:e5:bd:c4:4d: 83:cb:36:a2:94:65:f6:d3:17:86:f1:4f:cd:eb:d2: 7e:fe:90:f9:54:74:7c:d7:d8:66:32:d8:c9:11:b4: 9f:b5:7b:bc:1d:f8:06:72:86:7e:48:d8:5d:ca:0f: e1:09:c2:60:2b:9d:29:67:14:e7:ad:a8:93:f5:ab: 11:f5:7d:44:04:5f:48:c8:48:5c:5a:fa:45:3b:c0: b5:30:45:86:18:97:66:72:87:51:5a:02:b2:a6:8a: 55:16:1d:0a:30:c6:21:bd:1f:41:44:76:ab:4a:fe: 5d:1e:ab:64:f7:ab:bb:ae:4c:61:9c:03:12:af:5a: c1:99:6d:75:23:f3:a6:02:bb:54:d8:48:08:fe:27: 4b:d3:dc:b7:0c:44:a9:55:68:a9:d1:19:24:97:05: 40:95:19:6c:76:d8:63:d2:1b:4f:d5:f9:1b:65:f2: 35:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:05:D2:D7:33:A2:5B:EF:33:33:9B:59:23:09:2A:78:77:86:6E:AE X509v3 Authority Key Identifier: keyid:B6:C8:7B:B5:87:28:F7:6F:6F:90:A0:9D:FD:6B:AA:1A:D4:E7:3B:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/4C8BB01CF0A511F0AE903042706F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.230.211.0/24 Signature Algorithm: sha256WithRSAEncryption 47:ea:60:31:52:00:95:47:f5:b5:4e:2a:4e:a6:9e:ff:87:d4: a8:ee:e0:3f:ca:da:aa:a4:f9:7a:8c:ea:06:1c:3d:ba:f3:7a: 7b:02:48:2f:67:ae:a1:6a:8f:be:d1:fc:d2:7e:33:16:01:03: 99:4e:0c:7b:02:2c:1c:c6:0a:16:9c:b7:c2:4b:fb:14:1a:1c: d9:f7:e4:3e:b6:9a:2c:8d:84:9b:da:e4:ba:dc:70:05:b5:99: aa:a2:cc:6d:87:82:b6:1f:0f:48:8b:f3:f8:64:83:7f:ed:31: 64:33:26:0d:97:e3:50:10:b7:e4:d0:e8:5c:62:1b:c4:0c:52: 4c:7c:04:6e:04:a0:61:3f:2e:5d:9a:2c:1c:32:c9:1b:1b:27: aa:26:76:ff:f0:7f:48:09:61:df:31:75:62:e7:fe:79:7b:33: 1d:5d:16:f8:f4:e4:5d:22:a0:e3:c7:01:de:8c:ec:bd:de:39: db:66:b6:95:6b:76:78:4f:85:3a:b8:f4:43:15:3c:ac:4f:d0: 8e:f3:13:84:e7:0e:29:9b:e4:ac:4c:62:f3:e7:65:10:b8:a4: 1f:c1:4b:69:25:f0:ca:71:e9:0d:18:41:4b:51:58:72:27:e7: e5:3c:5d:cd:bf:14:c9:8c:8f:d7:a8:74:e1:de:f3:a4:e0:20: 0a:3a:29:e6 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QjI1RjIxMTAvBgNVBAUTKEI2Qzg3QkI1ODcyOEY3NkY2RjkwQTA5REZENkJBQTFB RDRFNzNCQ0EwHhcNMjYwMTEzMTcyODM5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTY2ODBjNy03NzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxrF8oUxejkPnVzQPSHNsUDLEoX11s79ZTpQ+VEou6ktgG2d9mXoe7pZmYaMl 3SEgEFT81xm/81HVhg9oCrR7wwXXZGj8Lg2gur4LgnJvyQhAs6+CfeW9xE2Dyzai lGX20xeG8U/N69J+/pD5VHR819hmMtjJEbSftXu8HfgGcoZ+SNhdyg/hCcJgK50p ZxTnraiT9asR9X1EBF9IyEhcWvpFO8C1MEWGGJdmcodRWgKypopVFh0KMMYhvR9B RHarSv5dHqtk96u7rkxhnAMSr1rBmW11I/OmArtU2EgI/idL09y3DESpVWip0Rkk lwVAlRlsdthj0htP1fkbZfI1lwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNkF0tcz olvvMzObWSMJKnh3hm6uMB8GA1UdIwQYMBaAFLbIe7WHKPdvb5Cgnf1rqhrU5zvK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjVGMi9FRjkwQ0Q0RTAz QjAxMUVBODVGMDI5MzRDNEY5QUUwMi90c2g3dFljbzkyOXZrS0NkX1d1cUd0VG5P OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RzaDd0WWNvOTI5dmtLQ2RfV3VxR3RUbk84by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjI1RjIvRUY5MENENEUwM0IwMTFFQTg1RjAyOTM0QzRGOUFFMDIvNEM4QkIwMUNG MEE1MTFGMEFFOTAzMDQyNzA2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAr5tMwDQYJKoZIhvcNAQELBQADggEBAEfqYDFSAJVH9bVO Kk6mnv+H1Kju4D/K2qqk+XqM6gYcPbrzensCSC9nrqFqj77R/NJ+MxYBA5lODHsC LBzGChact8JL+xQaHNn35D62miyNhJva5LrccAW1maqizG2HgrYfD0iL8/hkg3/t MWQzJg2X41AQt+TQ6FxiG8QMUkx8BG4EoGE/Ll2aLBwyyRsbJ6omdv/wf0gJYd8x dWLn/nl7Mx1dFvj05F0ioOPHAd6M7L3eOdtmtpVrdnhPhTq49EMVPKxP0I7zE4Tn Dimb5KxMYvPnZRC4pB/BS2kl8Mpx6Q0YQUtRWHIn5+U8Xc2/FMmMj9eodOHe86Tg IAo6KeY= -----END CERTIFICATE-----Generated at Sun Jan 18 06:40:56 2026 by rpki-client