This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/B5A58DFAA1DB11EDA7229653C4F9AE02.roa File: B5A58DFAA1DB11EDA7229653C4F9AE02.roa (raw, json) Hash identifier: wpxndu3e3JLlbyaAJc8xMGR8CKGxyBNouBJsOCWSNis= Subject key identifier: 88:5B:7A:CA:E8:24:ED:0A:C2:FA:04:A7:5F:E6:10:8C:89:2B:4C:0D Certificate issuer: /CN=A91C9324/serialNumber=772841A26326314EA2E4383475DE31B6DCE7DBA5 Certificate serial: 03AF Authority key identifier: 77:28:41:A2:63:26:31:4E:A2:E4:38:34:75:DE:31:B6:DC:E7:DB:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyhBomMmMU6i5Dg0dd4xttzn26U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/B5A58DFAA1DB11EDA7229653C4F9AE02.roa Signing time: Mon 08 Dec 2025 23:37:23 +0000 ROA not before: Mon 08 Dec 2025 23:37:23 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 40747 IP address blocks: 103.68.200.0/24 maxlen: 24 103.68.201.0/24 maxlen: 24 103.163.77.0/24 maxlen: 30 2001:df1:c081::/48 maxlen: 49 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.crl rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyhBomMmMU6i5Dg0dd4xttzn26U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 943 (0x3af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9324, serialNumber=772841A26326314EA2E4383475DE31B6DCE7DBA5 Validity Not Before: Dec 8 23:37:23 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69376133-f020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:62:af:f4:a9:fb:00:12:93:65:9e:42:be:bf: 31:13:ab:a9:44:fc:30:91:dd:2a:23:d1:c3:fe:2f: fb:fc:d8:e9:90:6d:c3:f4:d7:46:69:6a:68:cc:e4: ca:84:b0:4a:a8:f6:c6:cf:34:97:b6:19:7c:b4:89: 95:91:f4:21:36:b4:1f:7c:6f:80:d3:68:ba:4c:f0: b7:a0:a3:2f:98:68:35:5e:a2:6d:85:23:81:27:7a: 0f:69:f2:a6:7f:bf:e8:56:64:0e:2b:b9:9c:d7:92: a1:5b:0e:3e:ae:0f:5d:66:15:49:aa:18:da:f1:c0: 02:77:0c:72:bf:8f:03:46:eb:5a:ab:c0:d6:d1:b4: 4d:ef:c8:15:f3:7e:08:80:95:7b:d7:b3:5b:35:2d: 81:15:e7:02:b1:ce:f3:76:31:03:7f:eb:df:62:b2: 3a:13:d8:f9:ee:8c:86:a6:71:d8:73:4d:de:d6:a3: e1:aa:96:f3:98:f2:2e:f5:bf:e2:c4:42:33:e3:6c: 40:b4:9d:c4:0f:a8:59:4d:c5:40:29:16:41:38:ff: c6:46:d3:f0:ce:e2:68:65:d7:80:12:96:3a:25:3d: 6b:d0:81:26:99:3f:42:b6:3b:2c:d7:bf:ab:6a:36: 19:28:98:09:da:5d:09:51:11:8a:0c:2c:dd:57:d0: 1d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:5B:7A:CA:E8:24:ED:0A:C2:FA:04:A7:5F:E6:10:8C:89:2B:4C:0D X509v3 Authority Key Identifier: keyid:77:28:41:A2:63:26:31:4E:A2:E4:38:34:75:DE:31:B6:DC:E7:DB:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyhBomMmMU6i5Dg0dd4xttzn26U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/B5A58DFAA1DB11EDA7229653C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.68.200.0/23 103.163.77.0/24 IPv6: 2001:df1:c081::/48 Signature Algorithm: sha256WithRSAEncryption 8d:7d:0e:94:92:2c:e5:c1:1c:f2:44:2c:cc:d1:4b:65:f7:e9: 0a:88:7e:3a:a4:06:a5:c2:9e:a0:88:7e:32:c4:d4:93:89:64: a3:7c:8a:ba:f7:35:28:ae:9a:96:5b:39:45:bd:d4:a8:93:42: ce:e5:71:0e:3f:47:da:eb:fe:8f:e7:91:68:4b:a0:29:46:63: d6:6d:9d:8f:72:9f:e0:5f:f0:ab:8a:73:40:19:3d:31:94:4c: 77:9b:08:b7:c4:db:bc:0c:85:ac:71:cf:65:89:46:c0:fb:d6: 88:6e:42:a6:95:b9:5b:b3:c8:b9:d1:4e:6b:5f:8f:d5:63:72: 3b:65:bb:f7:a3:c0:63:8f:5e:12:2e:7d:f9:e3:6d:04:e5:33: ea:1a:cb:49:3d:08:0a:0c:22:c3:20:62:7b:f1:be:ba:c1:3a: e8:72:61:6e:2b:6c:01:6f:98:ce:2e:19:23:8f:92:93:74:40: 5f:8d:2c:7d:53:02:6a:07:4e:4f:16:da:41:fb:fc:d9:ec:18: 9c:cb:8d:71:1d:6b:71:36:5d:33:f3:b7:1e:e1:d0:76:21:39: 88:fa:72:49:a1:26:0a:e1:63:95:e3:70:bf:ef:a4:cd:42:e9: 44:e1:94:58:2d:3c:06:16:12:26:63:08:b6:f8:ce:f0:e4:e3: 01:b2:68:96 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICA68wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzMjQxMTAvBgNVBAUTKDc3Mjg0MUEyNjMyNjMxNEVBMkU0MzgzNDc1REUzMUI2 RENFN0RCQTUwHhcNMjUxMjA4MjMzNzIzWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTM3NjEzMy1mMDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv2Kv9Kn7ABKTZZ5Cvr8xE6upRPwwkd0qI9HD/i/7/NjpkG3D9NdGaWpozOTK hLBKqPbGzzSXthl8tImVkfQhNrQffG+A02i6TPC3oKMvmGg1XqJthSOBJ3oPafKm f7/oVmQOK7mc15KhWw4+rg9dZhVJqhja8cACdwxyv48DRutaq8DW0bRN78gV834I gJV717NbNS2BFecCsc7zdjEDf+vfYrI6E9j57oyGpnHYc03e1qPhqpbzmPIu9b/i xEIz42xAtJ3ED6hZTcVAKRZBOP/GRtPwzuJoZdeAEpY6JT1r0IEmmT9Ctjss17+r ajYZKJgJ2l0JURGKDCzdV9AdjQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFIhbesro JO0KwvoEp1/mEIyJK0wNMB8GA1UdIwQYMBaAFHcoQaJjJjFOouQ4NHXeMbbc59ul MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTMyNC9FRjgzRTMwRUQw MDkxMUVDOTJBMTZBM0NDNEY5QUUwMi9keWhCb21NbU1VNmk1RGcwZGQ0eHR0em4y NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R5aEJvbU1tTVU2aTVEZzBkZDR4dHR6bjI2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzkzMjQvRUY4M0UzMEVEMDA5MTFFQzkyQTE2QTNDQzRGOUFFMDIvQjVBNThERkFB MURCMTFFREE3MjI5NjUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBAFnRMgDBABno00wDwQCAAIwCQMHACABDfHAgTANBgkqhkiG 9w0BAQsFAAOCAQEAjX0OlJIs5cEc8kQszNFLZffpCoh+OqQGpcKeoIh+MsTUk4lk o3yKuvc1KK6alls5Rb3UqJNCzuVxDj9H2uv+j+eRaEugKUZj1m2dj3Kf4F/wq4pz QBk9MZRMd5sIt8TbvAyFrHHPZYlGwPvWiG5CppW5W7PIudFOa1+P1WNyO2W796PA Y49eEi59+eNtBOUz6hrLST0ICgwiwyBie/G+usE66HJhbitsAW+Yzi4ZI4+Sk3RA X40sfVMCagdOTxbaQfv82ewYnMuNcR1rcTZdM/O3HuHQdiE5iPpySaEmCuFjleNw v++kzULpROGUWC08BhYSJmMItvjO8OTjAbJolg== -----END CERTIFICATE-----Generated at Tue Dec 23 13:03:52 2025 by rpki-client