This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/23E61408678A11F08A94B35AC4F9AE02.roa File: 23E61408678A11F08A94B35AC4F9AE02.roa (raw, json) Hash identifier: thFUqhHrmHYgv6ZqJbGeY1F5KeOm2z66/0T74t00o1I= Subject key identifier: 97:85:8B:AB:80:5C:13:71:AD:C3:DD:82:CB:98:8D:56:CE:A8:B8:27 Certificate issuer: /CN=A91BE1BC/serialNumber=429E9BDDA296620003CEC5EFABB823D303FE4F71 Certificate serial: 10A5 Authority key identifier: 42:9E:9B:DD:A2:96:62:00:03:CE:C5:EF:AB:B8:23:D3:03:FE:4F:71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/23E61408678A11F08A94B35AC4F9AE02.roa Signing time: Mon 12 Jan 2026 17:14:57 +0000 ROA not before: Mon 12 Jan 2026 17:14:57 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 7470 IP address blocks: 103.26.20.0/22 maxlen: 24 124.40.224.0/20 maxlen: 24 2407:ed00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 17:04:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4261 (0x10a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE1BC, serialNumber=429E9BDDA296620003CEC5EFABB823D303FE4F71 Validity Not Before: Jan 12 17:14:57 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69652c11-30cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:59:2e:38:70:f8:5b:63:1a:40:1f:fd:10:23: d0:41:86:42:41:1f:bd:5f:21:5e:02:79:c7:53:b4: f9:64:62:a6:9f:e4:57:e1:1b:dc:d5:e2:ff:bf:ab: 44:57:a4:ac:8d:28:04:ae:58:a2:c1:83:6a:98:d5: 31:d4:a4:70:c0:aa:7d:41:c6:11:cc:ab:b9:73:a1: 80:e7:26:21:91:3c:11:13:46:dc:7b:83:82:fd:e7: d8:ea:ac:6c:9c:32:4b:00:6c:17:40:aa:17:28:8d: bf:8f:f6:b8:ae:bd:ff:0a:f2:7d:23:31:1b:06:b5: 6f:e4:1e:0b:4d:85:47:27:20:23:2b:94:f0:f4:d2: a2:c7:51:f5:09:1c:72:60:ce:17:6c:bc:27:28:2d: ae:5a:a2:1a:b9:dd:76:92:8d:a6:3d:03:f7:d3:80: f8:91:67:dc:6e:64:c2:64:1e:85:65:f4:ba:3c:a8: 82:68:ad:71:96:44:b1:85:fc:47:89:07:4e:35:73: 70:cf:37:23:78:9a:c3:59:89:9d:8b:62:9d:e2:e0: 27:cb:15:df:52:1d:20:0f:a2:6d:7c:74:8c:8a:f8: 1c:a9:b2:83:79:3f:b9:c8:db:6d:7c:e4:7b:f8:b4: 06:3a:18:4e:24:77:88:0c:00:61:18:eb:ff:83:e0: 1c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:85:8B:AB:80:5C:13:71:AD:C3:DD:82:CB:98:8D:56:CE:A8:B8:27 X509v3 Authority Key Identifier: keyid:42:9E:9B:DD:A2:96:62:00:03:CE:C5:EF:AB:B8:23:D3:03:FE:4F:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/23E61408678A11F08A94B35AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.26.20.0/22 124.40.224.0/20 IPv6: 2407:ed00::/32 Signature Algorithm: sha256WithRSAEncryption 1c:27:42:4a:b5:07:5a:c3:7f:97:5e:ec:02:da:da:0a:6d:30: 5a:f6:33:71:5e:c6:de:89:00:d9:1d:0e:a7:50:1a:62:19:fc: 08:66:39:26:26:2a:5b:af:76:1f:c7:e4:5f:3e:d3:bb:d3:f2: 04:94:04:91:1f:cc:72:e9:a7:47:72:97:2f:55:c2:68:de:84: d6:f4:6f:17:5c:c4:75:74:0e:d6:66:d4:8d:0c:3c:3c:f3:70: ea:15:6c:68:12:dd:e4:da:fd:9f:3e:93:57:ec:0e:80:91:79: 2a:73:e7:48:fa:e6:39:a8:a1:c1:32:e6:d1:9a:a5:7f:ef:dd: b7:52:ad:81:fd:4b:ee:c7:32:14:57:6d:63:96:0f:20:98:cc: 9c:4d:4c:46:a3:b2:a8:4c:bb:35:7d:c7:05:e4:40:9b:9a:ca: 02:d2:c9:c4:83:32:23:a5:dc:84:f4:a8:20:a7:de:f2:d2:34: a2:db:b4:ab:89:7d:a0:cd:27:b1:b4:25:e5:3e:c8:34:c4:46: 19:b3:3c:22:d1:36:39:a3:0d:82:4f:cb:a4:ca:2e:65:4f:c3: bb:39:2f:bf:75:f9:22:32:27:6e:64:5f:5e:08:7b:ad:a9:a5: fd:ce:f8:9f:68:f2:d5:82:8a:13:5c:37:07:a1:14:b6:9f:5c: b9:d5:05:da -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICEKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QkUxQkMxMTAvBgNVBAUTKDQyOUU5QkREQTI5NjYyMDAwM0NFQzVFRkFCQjgyM0Qz MDNGRTRGNzEwHhcNMjYwMTEyMTcxNDU3WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTY1MmMxMS0zMGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtFkuOHD4W2MaQB/9ECPQQYZCQR+9XyFeAnnHU7T5ZGKmn+RX4Rvc1eL/v6tE V6SsjSgErliiwYNqmNUx1KRwwKp9QcYRzKu5c6GA5yYhkTwRE0bce4OC/efY6qxs nDJLAGwXQKoXKI2/j/a4rr3/CvJ9IzEbBrVv5B4LTYVHJyAjK5Tw9NKix1H1CRxy YM4XbLwnKC2uWqIaud12ko2mPQP304D4kWfcbmTCZB6FZfS6PKiCaK1xlkSxhfxH iQdONXNwzzcjeJrDWYmdi2Kd4uAnyxXfUh0gD6JtfHSMivgcqbKDeT+5yNttfOR7 +LQGOhhOJHeIDABhGOv/g+AcsQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFJeFi6uA XBNxrcPdgsuYjVbOqLgnMB8GA1UdIwQYMBaAFEKem92ilmIAA87F76u4I9MD/k9x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTFCQy84OTZDNkM0ODQ2 Q0UxMUU5OTI4NTBBM0NDNEY5QUUwMi9RcDZiM2FLV1lnQUR6c1h2cTdnajB3UC1U M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FwNmIzYUtXWWdBRHpzWHZxN2dqMHdQLVQzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkUxQkMvODk2QzZDNDg0NkNFMTFFOTkyODUwQTNDQzRGOUFFMDIvMjNFNjE0MDg2 NzhBMTFGMDhBOTRCMzVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJnGhQDBAR8KOAwDQQCAAIwBwMFACQH7QAwDQYJKoZIhvcN AQELBQADggEBABwnQkq1B1rDf5de7ALa2gptMFr2M3Fext6JANkdDqdQGmIZ/Ahm OSYmKluvdh/H5F8+07vT8gSUBJEfzHLpp0dyly9VwmjehNb0bxdcxHV0DtZm1I0M PDzzcOoVbGgS3eTa/Z8+k1fsDoCReSpz50j65jmoocEy5tGapX/v3bdSrYH9S+7H MhRXbWOWDyCYzJxNTEajsqhMuzV9xwXkQJuaygLSycSDMiOl3IT0qCCn3vLSNKLb tKuJfaDNJ7G0JeU+yDTERhmzPCLRNjmjDYJPy6TKLmVPw7s5L791+SIyJ25kX14I e62ppf3O+J9o8tWCihNcNwehFLafXLnVBdo= -----END CERTIFICATE-----Generated at Wed Jan 21 19:19:06 2026 by rpki-client