This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/C97A1A3EB41C11F0AFF91911C4F9AE02.roa File: C97A1A3EB41C11F0AFF91911C4F9AE02.roa (raw, json) Hash identifier: cqtY0ShTT1xdXCPGQO1DOV0lJ95llaKYIyswBm3l/N8= Subject key identifier: BB:E0:78:28:5F:C1:BD:B4:A5:F1:31:C0:A2:42:F1:40:7F:82:EE:18 Certificate issuer: /CN=A91D17F2/serialNumber=5486376B05B8A2552329E361BD725C77E1F8D0C9 Certificate serial: 0DC0 Authority key identifier: 54:86:37:6B:05:B8:A2:55:23:29:E3:61:BD:72:5C:77:E1:F8:D0:C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/C97A1A3EB41C11F0AFF91911C4F9AE02.roa Signing time: Tue 06 Jan 2026 18:14:56 +0000 ROA not before: Tue 06 Jan 2026 18:14:56 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 197450 IP address blocks: 59.152.60.0/24 maxlen: 24 59.152.61.0/24 maxlen: 24 59.152.62.0/24 maxlen: 24 59.152.63.0/24 maxlen: 24 103.205.180.0/24 maxlen: 24 103.205.181.0/24 maxlen: 24 103.205.182.0/24 maxlen: 24 103.205.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.crl rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 17:46:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3520 (0xdc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D17F2, serialNumber=5486376B05B8A2552329E361BD725C77E1F8D0C9 Validity Not Before: Jan 6 18:14:56 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=695d511f-ab6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:46:41:d4:b1:93:b4:9d:29:d6:1c:80:7a:a2: 62:fd:3d:cc:92:54:f5:6c:12:33:d2:d7:de:02:6e: cb:38:fc:29:82:a5:23:3c:68:86:78:b9:1b:6f:30: 94:20:a4:08:cf:07:73:6f:7a:6e:99:8f:ed:3b:71: aa:e0:7d:96:23:a2:fd:54:a5:46:e7:de:92:20:a8: a0:76:f8:61:03:68:5e:9b:12:d0:44:99:b6:fe:5e: ba:0e:52:f8:db:45:c9:7b:0c:5b:a0:e6:c4:a0:ef: 5c:69:8b:21:d8:a1:bf:1a:36:88:1c:90:ab:af:0e: be:cd:c6:29:61:1a:7d:b0:d6:7e:91:ef:95:79:e8: 6c:03:1e:ae:20:f8:b4:50:13:b4:a3:dd:d9:9e:fb: 8a:97:12:0c:aa:aa:a0:a9:18:35:aa:92:03:40:8e: 54:7f:0f:36:a0:76:6e:02:73:70:ac:6c:62:10:2a: ed:16:b6:f6:d2:6e:fa:fa:95:83:76:f5:87:6d:02: f6:d0:d1:63:82:ce:14:4a:0a:16:af:17:78:af:70: 66:f0:f3:06:5c:bb:01:6f:3b:04:e4:01:fc:b8:64: ea:60:09:e8:64:c2:c7:2e:f7:0e:0d:cf:e8:a8:ac: 42:ac:65:a8:fd:93:ba:2e:2d:5a:04:33:a5:af:1b: 09:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E0:78:28:5F:C1:BD:B4:A5:F1:31:C0:A2:42:F1:40:7F:82:EE:18 X509v3 Authority Key Identifier: keyid:54:86:37:6B:05:B8:A2:55:23:29:E3:61:BD:72:5C:77:E1:F8:D0:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/C97A1A3EB41C11F0AFF91911C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 59.152.60.0/22 103.205.180.0/22 Signature Algorithm: sha256WithRSAEncryption 4f:4c:b9:c0:a9:e3:2d:b2:ca:c2:15:81:45:b4:55:3b:61:68: 3f:0b:a6:de:5d:f3:cc:56:54:8a:e8:23:73:47:8d:0e:ad:7d: 28:73:1b:97:e2:c3:e6:eb:07:fc:18:2e:01:1d:07:1a:f5:1b: c1:ab:dd:54:2a:cc:74:b0:96:00:e7:34:a4:02:cb:14:9f:e6: 46:6a:7a:d2:9e:57:fa:f6:b2:cc:aa:a6:68:dd:aa:ac:d7:e8: 47:57:68:79:0a:d3:3b:6b:39:4a:2e:39:60:33:9a:61:7c:01: 19:9f:01:ab:23:19:f1:c8:5a:67:2f:22:7a:7d:b7:b5:2e:4d: fb:b9:30:54:cd:b0:1c:a0:ec:20:9c:75:0d:95:53:7e:8a:d9: 8c:5f:51:91:9d:08:3d:37:f8:7b:c7:c0:8d:4f:a1:33:6d:82: d7:45:97:bc:d2:81:bf:cf:c9:ad:95:53:33:6e:52:a7:45:1d: 35:7d:5b:98:04:4e:29:6d:08:9c:10:4b:f8:18:4c:37:fe:b5: 98:f6:cb:2b:ee:0a:5e:b4:c3:51:f2:27:13:c4:59:a9:3f:6c: 5c:8e:85:68:8f:69:e7:e0:0e:3d:13:48:b2:15:a4:16:bf:95: a8:8f:22:7c:45:13:12:00:d7:42:00:df:35:6d:25:ac:73:35: 7b:0b:5e:aa -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICDcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx RDE3RjIxMTAvBgNVBAUTKDU0ODYzNzZCMDVCOEEyNTUyMzI5RTM2MUJENzI1Qzc3 RTFGOEQwQzkwHhcNMjYwMTA2MTgxNDU2WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTVkNTExZi1hYjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2UZB1LGTtJ0p1hyAeqJi/T3MklT1bBIz0tfeAm7LOPwpgqUjPGiGeLkbbzCU IKQIzwdzb3pumY/tO3Gq4H2WI6L9VKVG596SIKigdvhhA2hemxLQRJm2/l66DlL4 20XJewxboObEoO9caYsh2KG/GjaIHJCrrw6+zcYpYRp9sNZ+ke+VeehsAx6uIPi0 UBO0o93ZnvuKlxIMqqqgqRg1qpIDQI5Ufw82oHZuAnNwrGxiECrtFrb20m76+pWD dvWHbQL20NFjgs4USgoWrxd4r3Bm8PMGXLsBbzsE5AH8uGTqYAnoZMLHLvcODc/o qKxCrGWo/ZO6Li1aBDOlrxsJdQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLvgeChf wb20pfExwKJC8UB/gu4YMB8GA1UdIwQYMBaAFFSGN2sFuKJVIynjYb1yXHfh+NDJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTdGMi80Qzg4QTdBMEZE RkUxMUU5QkQ2NjdEMUZDNEY5QUUwMi9WSVkzYXdXNG9sVWpLZU5odlhKY2QtSDQw TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZJWTNhd1c0b2xVaktlTmh2WEpjZC1INDBNay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDE3RjIvNEM4OEE3QTBGREZFMTFFOUJENjY3RDFGQzRGOUFFMDIvQzk3QTFBM0VC NDFDMTFGMEFGRjkxOTExQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAI7mDwDBAJnzbQwDQYJKoZIhvcNAQELBQADggEBAE9MucCp 4y2yysIVgUW0VTthaD8Lpt5d88xWVIroI3NHjQ6tfShzG5fiw+brB/wYLgEdBxr1 G8Gr3VQqzHSwlgDnNKQCyxSf5kZqetKeV/r2ssyqpmjdqqzX6EdXaHkK0ztrOUou OWAzmmF8ARmfAasjGfHIWmcvInp9t7UuTfu5MFTNsByg7CCcdQ2VU36K2YxfUZGd CD03+HvHwI1PoTNtgtdFl7zSgb/Pya2VUzNuUqdFHTV9W5gETiltCJwQS/gYTDf+ tZj2yyvuCl60w1HyJxPEWak/bFyOhWiPaefgDj0TSLIVpBa/laiPInxFExIA10IA 3zVtJaxzNXsLXqo= -----END CERTIFICATE-----Generated at Wed Jan 21 16:18:07 2026 by rpki-client