This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/FA9BD5C2C5DC11F0A5504261C4F9AE02.roa File: FA9BD5C2C5DC11F0A5504261C4F9AE02.roa (raw, json) Hash identifier: Di/FPli/H94/ouV7bZupMh2vMaUiKG0iftivuRpBy64= Subject key identifier: 70:83:66:B2:B8:B1:5D:DB:0F:D1:C4:3F:A9:57:3F:AA:DE:74:54:18 Certificate issuer: /CN=A91991D3/serialNumber=6B53F80F8E881B3731972663BA1897B74A92D44D Certificate serial: 0245 Authority key identifier: 6B:53:F8:0F:8E:88:1B:37:31:97:26:63:BA:18:97:B7:4A:92:D4:4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/FA9BD5C2C5DC11F0A5504261C4F9AE02.roa Signing time: Thu 20 Nov 2025 06:48:54 +0000 ROA not before: Thu 20 Nov 2025 06:48:54 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 152475 IP address blocks: 103.96.1.0/24 maxlen: 24 113.212.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.crl rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 00:37:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 581 (0x245) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91991D3, serialNumber=6B53F80F8E881B3731972663BA1897B74A92D44D Validity Not Before: Nov 20 06:48:54 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=691eb9d5-ecc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e0:69:8c:a9:2b:d9:2e:f7:52:97:93:1a:0a: b2:18:8c:b4:55:4a:e5:68:94:5b:c5:67:ed:6d:43: bb:4a:da:04:e5:5a:84:7f:17:c6:a8:1e:3f:bd:d3: 2d:e2:ba:01:d3:1f:0d:d9:ad:cb:be:8f:56:5f:7f: 92:66:f2:9a:f6:f3:5f:ae:53:8c:60:37:da:3e:87: 02:bd:7c:b1:3b:70:42:ff:b7:83:ad:9b:c9:92:e2: c0:85:7d:f0:35:25:f6:3c:49:b1:ba:83:f2:49:bb: 67:e2:88:7c:48:7a:68:49:ec:7b:ac:de:b6:7a:93: b8:f8:db:7c:88:b2:50:72:4b:b7:ea:aa:42:08:3d: 46:d5:c2:31:a4:62:7c:d4:0d:26:a7:a5:58:20:be: f7:e3:15:91:1c:25:e0:65:f1:0a:26:32:2c:15:b0: 81:55:af:0c:00:96:ca:6e:eb:89:1c:a1:32:39:6c: 93:be:58:43:8f:50:c7:bf:00:12:69:ee:1f:64:4f: 2d:89:b8:a2:47:46:c4:f1:6f:ee:f4:02:f9:8a:2a: 73:8f:29:66:a7:d8:7a:a6:22:d7:7d:f6:35:37:cf: 0c:2d:33:37:72:d1:42:6e:8a:df:ca:16:8f:69:a5: 25:d1:06:57:90:9c:d5:e8:be:17:be:98:99:d9:49: 3a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:83:66:B2:B8:B1:5D:DB:0F:D1:C4:3F:A9:57:3F:AA:DE:74:54:18 X509v3 Authority Key Identifier: keyid:6B:53:F8:0F:8E:88:1B:37:31:97:26:63:BA:18:97:B7:4A:92:D4:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/FA9BD5C2C5DC11F0A5504261C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.96.1.0/24 113.212.88.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:4d:f2:f1:b1:24:e1:90:df:46:a3:75:86:85:01:73:8a:85: fc:21:2d:1f:a4:58:e3:9e:38:ae:c1:2f:7d:6b:30:a1:af:cc: 49:12:52:8b:14:5a:ab:d0:15:21:89:30:9d:74:b7:0e:08:53: 1b:70:3b:f5:7b:db:63:6d:c0:fc:86:42:a3:56:f2:62:7d:cc: 63:de:19:1a:29:e5:13:cd:c8:ca:9d:e4:a2:21:4d:e5:f1:54: 02:37:8c:ac:8b:06:d0:84:2e:93:ed:d5:cf:da:0a:46:cc:d4: be:6f:c1:4a:66:d9:73:1e:a6:28:2d:74:2a:f7:39:d1:4e:5c: ce:91:4f:db:9e:7c:79:87:9e:5c:2f:07:7e:15:83:40:3c:6c: 0f:d6:cd:1c:9a:5b:58:42:1f:92:0e:00:39:1a:02:c4:fd:82: ef:0e:0d:a5:5e:f1:9b:dd:4b:14:ba:e1:d2:e3:4a:3b:b3:00: 83:93:55:c0:af:61:56:b4:ae:19:e8:cf:ad:dd:d7:a8:cc:86: 0a:3a:54:02:7f:0d:ee:e6:71:0d:57:dc:1f:76:f4:02:2e:44: b4:8a:b6:0d:de:c8:34:00:57:36:05:ef:15:6d:b7:65:66:c3: ad:47:ca:f4:a8:87:80:d3:f9:5b:40:6b:a7:ef:f2:53:ee:e0: f0:cb:35:20 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkxRDMxMTAvBgNVBAUTKDZCNTNGODBGOEU4ODFCMzczMTk3MjY2M0JBMTg5N0I3 NEE5MkQ0NEQwHhcNMjUxMTIwMDY0ODU0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTFlYjlkNS1lY2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxuBpjKkr2S73UpeTGgqyGIy0VUrlaJRbxWftbUO7StoE5VqEfxfGqB4/vdMt 4roB0x8N2a3Lvo9WX3+SZvKa9vNfrlOMYDfaPocCvXyxO3BC/7eDrZvJkuLAhX3w NSX2PEmxuoPySbtn4oh8SHpoSex7rN62epO4+Nt8iLJQcku36qpCCD1G1cIxpGJ8 1A0mp6VYIL734xWRHCXgZfEKJjIsFbCBVa8MAJbKbuuJHKEyOWyTvlhDj1DHvwAS ae4fZE8tibiiR0bE8W/u9AL5iipzjylmp9h6piLXffY1N88MLTM3ctFCborfyhaP aaUl0QZXkJzV6L4XvpiZ2Uk6GQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHCDZrK4 sV3bD9HEP6lXP6redFQYMB8GA1UdIwQYMBaAFGtT+A+OiBs3MZcmY7oYl7dKktRN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTFEMy81RkEzNkUzNDg5 MjMxMUVEQkNBMjk2MTNDNEY5QUUwMi9hMVA0RDQ2SUd6Y3hseVpqdWhpWHQwcVMx RTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ExUDRENDZJR3pjeGx5Wmp1aGlYdDBxUzFFMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTkxRDMvNUZBMzZFMzQ4OTIzMTFFREJDQTI5NjEzQzRGOUFFMDIvRkE5QkQ1QzJD NURDMTFGMEE1NTA0MjYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABnYAEDBABx1FgwDQYJKoZIhvcNAQELBQADggEBAD9N8vGx JOGQ30ajdYaFAXOKhfwhLR+kWOOeOK7BL31rMKGvzEkSUosUWqvQFSGJMJ10tw4I UxtwO/V722NtwPyGQqNW8mJ9zGPeGRop5RPNyMqd5KIhTeXxVAI3jKyLBtCELpPt 1c/aCkbM1L5vwUpm2XMepigtdCr3OdFOXM6RT9uefHmHnlwvB34Vg0A8bA/WzRya W1hCH5IOADkaAsT9gu8ODaVe8ZvdSxS64dLjSjuzAIOTVcCvYVa0rhnoz63d16jM hgo6VAJ/De7mcQ1X3B929AIuRLSKtg3eyDQAVzYF7xVtt2Vmw61HyvSoh4DT+VtA a6fv8lPu4PDLNSA= -----END CERTIFICATE-----Generated at Mon Dec 8 06:55:59 2025 by rpki-client