This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/C1A8182646D011EE8BE5AE80C4F9AE02.roa File: C1A8182646D011EE8BE5AE80C4F9AE02.roa (raw, json) Hash identifier: +ZAU+8WW385rm9bRvwCNNyyrrQtRcVOXdwkDCIZKchs= Subject key identifier: 67:08:00:4E:A2:37:91:D9:03:4D:A1:36:B6:14:B3:CD:16:80:C9:5E Certificate issuer: /CN=A91316E5/serialNumber=73987ECCE77E44EB36651E098D33750FA864E676 Certificate serial: 01B5 Authority key identifier: 73:98:7E:CC:E7:7E:44:EB:36:65:1E:09:8D:33:75:0F:A8:64:E6:76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/C1A8182646D011EE8BE5AE80C4F9AE02.roa Signing time: Sun 21 Dec 2025 02:24:00 +0000 ROA not before: Sun 21 Dec 2025 02:24:00 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 150403 IP address blocks: 103.89.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.crl rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:08:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 437 (0x1b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91316E5, serialNumber=73987ECCE77E44EB36651E098D33750FA864E676 Validity Not Before: Dec 21 02:24:00 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69475a40-2fcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:bf:53:5d:09:2a:da:48:83:d6:6c:b4:63:c5: 87:71:26:d9:a6:e9:a4:e0:54:33:50:ed:9d:0b:b1: 66:79:02:0e:b4:d2:6f:24:a4:e6:1d:09:b0:99:3f: 15:60:1d:2a:22:06:d2:d3:b6:3e:96:e1:81:eb:58: 17:00:cf:27:64:df:53:0f:0b:10:bb:71:c6:54:42: a3:70:05:3e:d2:f2:d1:bf:1f:90:e1:42:63:7c:49: a1:5f:35:03:40:39:9c:fb:4c:30:0a:31:dd:b7:cb: 6e:a6:7f:ab:61:1d:8d:69:30:00:3a:d3:5b:02:35: 5d:46:0a:b3:1d:e8:95:eb:b4:00:a9:a4:2b:7b:73: 8c:81:d6:04:64:56:08:12:85:fb:ff:b6:4e:39:00: fd:66:7b:78:f2:69:55:6b:3c:44:21:92:14:82:fa: e5:6c:ec:42:2f:be:f8:a2:a2:84:b8:51:a8:02:aa: 28:89:ad:ef:4a:1d:ff:73:3d:7f:f8:c1:2e:ea:38: 8b:21:e2:73:15:58:42:fd:a9:43:f2:35:28:a9:1a: 01:67:3f:79:60:f8:64:bf:91:46:28:d7:4f:f7:d9: c0:88:82:06:f9:e2:c1:1b:a1:0c:57:b1:43:b4:11: af:70:8b:51:38:7c:3c:2d:4d:d9:21:43:35:32:38: cf:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:08:00:4E:A2:37:91:D9:03:4D:A1:36:B6:14:B3:CD:16:80:C9:5E X509v3 Authority Key Identifier: keyid:73:98:7E:CC:E7:7E:44:EB:36:65:1E:09:8D:33:75:0F:A8:64:E6:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/C1A8182646D011EE8BE5AE80C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.89.36.0/24 Signature Algorithm: sha256WithRSAEncryption 79:eb:8c:f4:64:58:cd:7f:e6:37:d2:b2:0d:77:3a:a5:d8:05: 3b:3d:5a:2b:70:0a:24:5c:81:da:5e:fe:95:66:2d:ef:52:9d: 14:f1:71:90:58:85:a2:ed:96:c4:ef:85:76:a4:ff:4e:ed:ec: c1:e8:ae:d7:31:b4:0e:43:b1:3d:97:20:ed:4b:20:6b:84:9f: f6:0b:55:a5:51:66:94:51:0a:fd:09:c4:66:b7:40:af:3d:32: 50:1a:8c:9a:91:8c:8a:fc:90:f6:bf:7b:ac:31:d8:d6:85:48: df:b0:e7:9e:7e:20:41:e7:b4:55:38:95:f8:e8:65:19:fe:52: d7:e2:21:83:38:88:f2:40:17:2b:35:d6:a4:e2:ba:c6:d4:e2: 6e:f7:26:f1:0e:4c:d5:a2:77:ab:e3:1c:a4:f8:2a:84:7b:6f: 7f:00:c6:2d:a9:73:5e:df:a4:2b:b5:9b:eb:0a:f4:30:57:c4: e1:fd:0d:a8:d3:af:f9:6f:5d:ce:b2:b0:82:00:54:1c:99:c4: 4e:70:d1:ef:32:04:fa:be:f1:11:50:b6:66:22:f9:3f:f5:e8: 68:3a:d3:20:8c:7e:04:fa:01:9d:d4:0a:93:7c:c9:2a:62:99: e4:22:66:e1:ce:cb:37:aa:de:d4:71:4b:bb:5b:12:f2:f0:b8: b1:93:6d:0c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx MzE2RTUxMTAvBgNVBAUTKDczOTg3RUNDRTc3RTQ0RUIzNjY1MUUwOThEMzM3NTBG QTg2NEU2NzYwHhcNMjUxMjIxMDIyNDAwWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTQ3NWE0MC0yZmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjL9TXQkq2kiD1my0Y8WHcSbZpumk4FQzUO2dC7FmeQIOtNJvJKTmHQmwmT8V YB0qIgbS07Y+luGB61gXAM8nZN9TDwsQu3HGVEKjcAU+0vLRvx+Q4UJjfEmhXzUD QDmc+0wwCjHdt8tupn+rYR2NaTAAOtNbAjVdRgqzHeiV67QAqaQre3OMgdYEZFYI EoX7/7ZOOQD9Znt48mlVazxEIZIUgvrlbOxCL774oqKEuFGoAqooia3vSh3/cz1/ +MEu6jiLIeJzFVhC/alD8jUoqRoBZz95YPhkv5FGKNdP99nAiIIG+eLBG6EMV7FD tBGvcItROHw8LU3ZIUM1MjjPAwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGcIAE6i N5HZA02hNrYUs80WgMleMB8GA1UdIwQYMBaAFHOYfsznfkTrNmUeCY0zdQ+oZOZ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTZFNS81MUY5ODM1QzQ2 RDAxMUVFODFGMjA3M0ZDNEY5QUUwMi9jNWgtek9kLVJPczJaUjRKalROMUQ2aGs1 blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M1aC16T2QtUk9zMlpSNEpqVE4xRDZoazVuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzE2RTUvNTFGOTgzNUM0NkQwMTFFRTgxRjIwNzNGQzRGOUFFMDIvQzFBODE4MjY0 NkQwMTFFRThCRTVBRTgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnWSQwDQYJKoZIhvcNAQELBQADggEBAHnrjPRkWM1/5jfS sg13OqXYBTs9WitwCiRcgdpe/pVmLe9SnRTxcZBYhaLtlsTvhXak/07t7MHortcx tA5DsT2XIO1LIGuEn/YLVaVRZpRRCv0JxGa3QK89MlAajJqRjIr8kPa/e6wx2NaF SN+w555+IEHntFU4lfjoZRn+UtfiIYM4iPJAFys11qTiusbU4m73JvEOTNWid6vj HKT4KoR7b38Axi2pc17fpCu1m+sK9DBXxOH9DajTr/lvXc6ysIIAVByZxE5w0e8y BPq+8RFQtmYi+T/16Gg60yCMfgT6AZ3UCpN8ySpimeQiZuHOyzeq3tRxS7tbEvLw uLGTbQw= -----END CERTIFICATE-----Generated at Wed Dec 24 19:28:33 2025 by rpki-client