This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/C37A8D80DC9411F0B18EF655406F56BC.roa File: C37A8D80DC9411F0B18EF655406F56BC.roa (raw, json) Hash identifier: qnCZU7C59oQWFeEtmfxzdPCrAt6hK/fzPVfYtt26rIg= Subject key identifier: 16:E0:30:9A:F7:20:E8:7C:DB:33:E8:B0:D5:E3:CC:3C:46:98:4C:4D Certificate issuer: /CN=A91356BA/serialNumber=AECFA48252DCB55C5F1EB381288CEDC3E6F86274 Certificate serial: F8 Authority key identifier: AE:CF:A4:82:52:DC:B5:5C:5F:1E:B3:81:28:8C:ED:C3:E6:F8:62:74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/C37A8D80DC9411F0B18EF655406F56BC.roa Signing time: Fri 19 Dec 2025 04:39:54 +0000 ROA not before: Fri 19 Dec 2025 04:39:54 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 138643 IP address blocks: 103.135.112.0/24 maxlen: 24 103.135.113.0/24 maxlen: 24 103.135.114.0/24 maxlen: 24 103.135.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.crl rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:14:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91356BA, serialNumber=AECFA48252DCB55C5F1EB381288CEDC3E6F86274 Validity Not Before: Dec 19 04:39:54 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=6944d71a-f3dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:33:7b:34:c0:b0:25:b5:b2:d0:36:62:63:98: 50:76:39:66:8f:14:ca:89:7c:49:03:78:72:49:30: 6e:b9:58:30:1e:1d:51:ac:c4:47:4b:34:1a:2b:f2: 10:f9:f2:b5:be:ef:9f:53:be:24:54:49:8e:7b:53: db:11:91:d2:d5:04:60:22:a7:c4:e5:ee:2d:ac:37: 99:a4:d3:70:f5:e6:17:69:58:e6:ec:37:13:e7:e3: 45:56:d3:35:3a:72:66:b8:36:33:f9:a1:58:f0:ac: 5c:34:ce:d3:1a:00:2b:93:51:51:97:fe:3c:ce:e8: a7:0c:dd:a4:5e:91:30:f3:93:ca:0c:6d:6a:ee:80: ff:7d:d7:e4:bc:6e:d5:8b:9a:e8:aa:81:db:84:95: f8:db:27:33:ed:a3:79:16:20:78:49:b6:74:fa:bc: 34:d5:f3:3d:f8:43:6d:71:b0:9e:7d:de:7c:14:0c: 7f:b4:77:08:e9:49:fb:d1:fa:14:9a:26:cf:6b:4f: ce:c3:0b:ae:1f:88:a8:42:36:44:f7:9a:3b:cb:35: dc:44:59:6c:a0:c8:c4:96:f4:e8:5c:5a:ea:ea:3f: f7:dc:a8:77:37:ff:3f:b3:a1:db:81:5d:27:6a:e8: 41:6a:28:f4:3b:69:d2:5a:99:6c:4b:24:ad:86:67: 80:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:E0:30:9A:F7:20:E8:7C:DB:33:E8:B0:D5:E3:CC:3C:46:98:4C:4D X509v3 Authority Key Identifier: keyid:AE:CF:A4:82:52:DC:B5:5C:5F:1E:B3:81:28:8C:ED:C3:E6:F8:62:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/C37A8D80DC9411F0B18EF655406F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.135.112.0/22 Signature Algorithm: sha256WithRSAEncryption 22:d9:17:f0:2e:54:fb:4a:12:28:8a:b2:08:05:b7:32:bf:c3: 73:66:30:66:04:42:ee:f3:e1:c5:8c:9e:50:ae:32:45:52:b3: 68:a5:a2:23:4b:54:5b:bf:93:f8:aa:f7:92:f5:7b:a5:0a:39: 02:02:4b:f7:5a:f9:f1:6b:50:bc:58:da:57:2f:50:32:65:05: a4:b3:82:2e:12:aa:a6:ef:bd:e7:3c:75:7e:33:8c:86:b1:53: 81:a0:4a:ab:13:ca:00:43:64:47:7b:c1:c6:4b:69:42:9e:de: fd:d7:fd:30:5b:22:91:a0:f9:fb:02:6b:38:3d:c7:85:1a:35: 95:90:94:b6:fe:cd:ed:5e:9f:16:3f:d7:e1:fb:38:cb:e6:5a: d2:ff:3c:55:e1:a6:ad:0f:18:65:b0:a8:14:2b:8d:3a:19:3a: 79:68:a9:df:9e:3d:90:a4:47:75:a4:1f:00:34:7e:1b:87:fc: 1e:61:ba:47:1a:1b:80:41:91:f8:f6:1c:7d:d1:fc:37:3a:75: 2f:d7:99:12:c8:91:6b:d3:aa:95:f6:c7:a4:a5:91:a7:a6:b2: 90:6f:aa:6b:8f:c2:64:24:7d:71:27:84:0a:f5:23:59:11:23: a6:01:0b:76:d5:0f:09:52:09:1e:e5:af:f6:d8:f1:0b:a4:3d: b3:78:a8:1e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU2QkExMTAvBgNVBAUTKEFFQ0ZBNDgyNTJEQ0I1NUM1RjFFQjM4MTI4OENFREMz RTZGODYyNzQwHhcNMjUxMjE5MDQzOTU0WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDDA02OTQ0ZDcxYS1mM2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsTN7NMCwJbWy0DZiY5hQdjlmjxTKiXxJA3hySTBuuVgwHh1RrMRHSzQaK/IQ +fK1vu+fU74kVEmOe1PbEZHS1QRgIqfE5e4trDeZpNNw9eYXaVjm7DcT5+NFVtM1 OnJmuDYz+aFY8KxcNM7TGgArk1FRl/48zuinDN2kXpEw85PKDG1q7oD/fdfkvG7V i5roqoHbhJX42ycz7aN5FiB4SbZ0+rw01fM9+ENtcbCefd58FAx/tHcI6Un70foU mibPa0/OwwuuH4ioQjZE95o7yzXcRFlsoMjElvToXFrq6j/33Kh3N/8/s6HbgV0n auhBaij0O2nSWplsSySthmeAbwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBbgMJr3 IOh82zPosNXjzDxGmExNMB8GA1UdIwQYMBaAFK7PpIJS3LVcXx6zgSiM7cPm+GJ0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTZCQS8yNjQ1MjFEMjY5 MDUxMUVGQUQyMzA0NjRDNEY5QUUwMi9ycy1rZ2xMY3RWeGZIck9CS0l6dHctYjRZ blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JzLWtnbExjdFZ4ZkhyT0JLSXp0dy1iNFluUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzU2QkEvMjY0NTIxRDI2OTA1MTFFRkFEMjMwNDY0QzRGOUFFMDIvQzM3QThEODBE Qzk0MTFGMEIxOEVGNjU1NDA2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnh3AwDQYJKoZIhvcNAQELBQADggEBACLZF/AuVPtKEiiK sggFtzK/w3NmMGYEQu7z4cWMnlCuMkVSs2iloiNLVFu/k/iq95L1e6UKOQICS/da +fFrULxY2lcvUDJlBaSzgi4Sqqbvvec8dX4zjIaxU4GgSqsTygBDZEd7wcZLaUKe 3v3X/TBbIpGg+fsCazg9x4UaNZWQlLb+ze1enxY/1+H7OMvmWtL/PFXhpq0PGGWw qBQrjToZOnloqd+ePZCkR3WkHwA0fhuH/B5hukcaG4BBkfj2HH3R/Dc6dS/XmRLI kWvTqpX2x6SlkaemspBvqmuPwmQkfXEnhAr1I1kRI6YBC3bVDwlSCR7lr/bY8Quk PbN4qB4= -----END CERTIFICATE-----Generated at Wed Dec 24 17:32:48 2025 by rpki-client