This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4700/42CC0D50B3BB11F0A931BA6FC4F9AE02/6A797774BDDF11F0B524BD85C4F9AE02.roa File: 6A797774BDDF11F0B524BD85C4F9AE02.roa (raw, json) Hash identifier: fkrUDO8dvp7/gMykfgeZdLIatrIca9zWFvYBGE7rp8w= Subject key identifier: AE:31:A5:60:4C:75:D2:58:46:8D:AB:A6:5C:F1:FC:C0:B2:3B:49:3C Certificate issuer: /CN=A91E4700/serialNumber=4063941F29A47179EE8FF51F301DF1EA411FBD38 Certificate serial: 41 Authority key identifier: 40:63:94:1F:29:A4:71:79:EE:8F:F5:1F:30:1D:F1:EA:41:1F:BD:38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGOUHymkcXnuj_UfMB3x6kEfvTg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4700/42CC0D50B3BB11F0A931BA6FC4F9AE02/6A797774BDDF11F0B524BD85C4F9AE02.roa Signing time: Wed 14 Jan 2026 22:01:31 +0000 ROA not before: Wed 14 Jan 2026 22:01:31 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 63850 IP address blocks: 103.234.14.0/23 maxlen: 23 103.234.14.0/24 maxlen: 24 103.234.15.0/24 maxlen: 24 124.246.0.0/21 maxlen: 21 124.246.4.0/24 maxlen: 24 124.246.7.0/24 maxlen: 24 124.246.16.0/21 maxlen: 21 124.246.16.0/24 maxlen: 24 124.246.17.0/24 maxlen: 24 124.246.18.0/24 maxlen: 24 124.246.19.0/24 maxlen: 24 124.246.20.0/24 maxlen: 24 124.246.21.0/24 maxlen: 24 124.246.22.0/24 maxlen: 24 124.246.23.0/24 maxlen: 24 202.44.170.0/24 maxlen: 24 203.91.64.0/23 maxlen: 24 203.91.66.0/24 maxlen: 24 203.91.67.0/24 maxlen: 24 203.91.68.0/22 maxlen: 22 203.91.68.0/24 maxlen: 24 203.91.69.0/24 maxlen: 24 203.91.70.0/24 maxlen: 24 203.91.71.0/24 maxlen: 24 210.0.112.0/22 maxlen: 22 210.0.112.0/24 maxlen: 24 210.0.113.0/24 maxlen: 24 210.0.114.0/24 maxlen: 24 210.0.115.0/24 maxlen: 24 210.0.116.0/23 maxlen: 23 210.0.116.0/24 maxlen: 24 210.0.118.0/24 maxlen: 24 210.0.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4700/42CC0D50B3BB11F0A931BA6FC4F9AE02/QGOUHymkcXnuj_UfMB3x6kEfvTg.crl rsync://rpki.apnic.net/member_repository/A91E4700/42CC0D50B3BB11F0A931BA6FC4F9AE02/QGOUHymkcXnuj_UfMB3x6kEfvTg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGOUHymkcXnuj_UfMB3x6kEfvTg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 06:38:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4700, serialNumber=4063941F29A47179EE8FF51F301DF1EA411FBD38 Validity Not Before: Jan 14 22:01:31 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6968123a-e133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8a:ec:dd:c8:bb:7b:88:66:fd:2e:93:1b:72: 1f:00:57:cb:25:b7:2e:47:b7:43:1e:54:7b:f9:fb: ea:6e:7c:b4:f7:a5:50:35:05:b2:94:de:11:4b:44: 0a:63:09:83:db:f9:ae:8d:1e:42:68:f2:7b:3c:dc: 9f:06:c5:d8:e9:69:74:39:7a:6b:d0:1a:83:a3:ff: 68:04:c7:c9:a3:f2:0d:d9:d9:1e:db:f6:2a:0b:71: 64:e4:1f:8f:3b:b8:64:b9:41:2f:00:fd:5d:1a:54: 9b:c5:d3:f4:95:05:2d:64:9f:16:b7:d5:bf:08:61: 3b:0a:a3:37:d5:2f:3a:78:ef:58:4c:3d:d5:5b:d3: bd:c0:48:a6:86:ce:79:02:87:d1:93:bc:86:7b:78: 8f:65:19:54:09:3a:9d:c1:4c:03:6e:d6:e5:db:a6: ae:31:5e:65:fe:e0:7b:0a:3f:e0:fd:6b:ca:ad:86: 8a:a9:2b:dc:cc:58:78:e5:fc:03:0e:7f:b8:a2:22: 87:27:cf:60:c1:90:6d:11:9f:ef:2b:93:c5:14:85: 86:27:17:2a:78:c6:71:d6:ef:6c:bf:d6:d1:72:8c: 56:b1:15:e8:bb:42:fe:1e:fc:03:06:90:63:8f:0e: 05:5e:d8:09:54:f2:20:16:f3:01:4a:50:cd:1a:98: 59:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:31:A5:60:4C:75:D2:58:46:8D:AB:A6:5C:F1:FC:C0:B2:3B:49:3C X509v3 Authority Key Identifier: keyid:40:63:94:1F:29:A4:71:79:EE:8F:F5:1F:30:1D:F1:EA:41:1F:BD:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4700/42CC0D50B3BB11F0A931BA6FC4F9AE02/QGOUHymkcXnuj_UfMB3x6kEfvTg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGOUHymkcXnuj_UfMB3x6kEfvTg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4700/42CC0D50B3BB11F0A931BA6FC4F9AE02/6A797774BDDF11F0B524BD85C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.234.14.0/23 124.246.0.0/21 124.246.16.0/21 202.44.170.0/24 203.91.64.0/21 210.0.112.0/21 Signature Algorithm: sha256WithRSAEncryption 7b:b5:6d:73:c2:28:aa:b9:12:e3:5c:7b:d1:85:96:48:3e:c6: d5:3b:72:8a:2c:35:b0:a0:d5:ac:b8:23:4b:b2:74:06:57:19: df:86:fd:f1:90:5d:ad:a3:30:18:e3:bd:e8:b3:5d:2d:8e:dd: 4a:74:49:0d:fa:4e:33:9c:da:a3:b7:cf:b0:b2:39:6c:47:b5: 09:0f:24:c4:b4:6c:0f:30:dd:36:02:64:e3:e2:22:f5:95:11: df:d2:37:95:9b:fd:8b:35:05:1a:98:81:4f:3f:3a:20:c5:d3: 2a:37:1d:22:d1:7a:1f:15:24:dd:e1:bf:8f:40:57:9c:50:14: fa:c5:dd:86:c3:53:06:15:6f:77:99:f3:7e:b4:ea:10:f0:9d: e8:ec:ff:e9:7c:b8:fc:b4:a2:d6:2b:09:8c:d3:45:3c:09:6b: 07:f4:02:62:23:c4:31:05:b4:71:12:18:c5:36:14:68:64:c3: b7:f2:ce:cf:02:9e:4b:e7:5b:94:a9:11:3c:a3:33:ff:2e:b0: 24:76:09:3c:1e:eb:4e:fa:6e:46:36:f5:a8:20:1a:bc:3d:35: 3b:d3:1a:ba:46:5c:30:d6:a7:32:ca:55:31:4d:1a:6e:81:b4: ce:e5:b9:93:a2:6d:0c:56:a0:2a:28:03:f3:a7:f9:6b:69:2f: 5b:77:58:87 -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFF NDcwMDExMC8GA1UEBRMoNDA2Mzk0MUYyOUE0NzE3OUVFOEZGNTFGMzAxREYxRUE0 MTFGQkQzODAeFw0yNjAxMTQyMjAxMzFaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV BAMMDTY5NjgxMjNhLWUxMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsiuzdyLt7iGb9LpMbch8AV8slty5Ht0MeVHv5++pufLT3pVA1BbKU3hFLRApj CYPb+a6NHkJo8ns83J8GxdjpaXQ5emvQGoOj/2gEx8mj8g3Z2R7b9ioLcWTkH487 uGS5QS8A/V0aVJvF0/SVBS1knxa31b8IYTsKozfVLzp471hMPdVb073ASKaGznkC h9GTvIZ7eI9lGVQJOp3BTANu1uXbpq4xXmX+4HsKP+D9a8qthoqpK9zMWHjl/AMO f7iiIocnz2DBkG0Rn+8rk8UUhYYnFyp4xnHW72y/1tFyjFaxFei7Qv4e/AMGkGOP DgVe2AlU8iAW8wFKUM0amFkJAgMBAAGjggKzMIICrzAdBgNVHQ4EFgQUrjGlYEx1 0lhGjaumXPH8wLI7STwwHwYDVR0jBBgwFoAUQGOUHymkcXnuj/UfMB3x6kEfvTgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0NzAwLzQyQ0MwRDUwQjNC QjExRjBBOTMxQkE2RkM0RjlBRTAyL1FHT1VIeW1rY1hudWpfVWZNQjN4NmtFZnZU Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUUdPVUh5bWtjWG51al9VZk1CM3g2a0VmdlRnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDcwMC80MkNDMEQ1MEIzQkIxMUYwQTkzMUJBNkZDNEY5QUUwMi82QTc5Nzc3NEJE REYxMUYwQjUyNEJEODVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDA9BggrBgEFBQcBBwEB/wQu MCwwKgQCAAEwJAMEAWfqDgMEA3z2AAMEA3z2EAMEAMosqgMEA8tbQAMEA9IAcDAN BgkqhkiG9w0BAQsFAAOCAQEAe7Vtc8IoqrkS41x70YWWSD7G1Ttyiiw1sKDVrLgj S7J0BlcZ34b98ZBdraMwGOO96LNdLY7dSnRJDfpOM5zao7fPsLI5bEe1CQ8kxLRs DzDdNgJk4+Ii9ZUR39I3lZv9izUFGpiBTz86IMXTKjcdItF6HxUk3eG/j0BXnFAU +sXdhsNTBhVvd5nzfrTqEPCd6Oz/6Xy4/LSi1isJjNNFPAlrB/QCYiPEMQW0cRIY xTYUaGTDt/LOzwKeS+dblKkRPKMz/y6wJHYJPB7rTvpuRjb1qCAavD01O9MaukZc MNanMspVMU0aboG0zuW5k6JtDFagKigD86f5a2kvW3dYhw== -----END CERTIFICATE-----Generated at Sun Jan 18 07:08:06 2026 by rpki-client