This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/43DCAEE0BBE811F092C97714C4F9AE02.roa File: 43DCAEE0BBE811F092C97714C4F9AE02.roa (raw, json) Hash identifier: GPd1Se4gbRceNXLw6AhW9GYylFZu/+0nZs9MUUzr2H4= Subject key identifier: 8A:AA:B7:C2:47:0C:1A:0B:EF:20:E5:EB:9B:10:B4:97:E9:8E:13:19 Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Certificate serial: 0C99 Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/43DCAEE0BBE811F092C97714C4F9AE02.roa Signing time: Tue 11 Nov 2025 15:14:49 +0000 ROA not before: Tue 11 Nov 2025 15:14:49 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 202736 IP address blocks: 103.244.211.0/24 maxlen: 24 160.20.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 01 Dec 2025 18:26:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3225 (0xc99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Validity Not Before: Nov 11 15:14:49 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=691352e9-f20a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7e:fa:17:bd:16:fa:d3:b9:f7:0e:81:5f:fb: 93:d4:a9:c2:5f:07:4e:98:51:75:c0:7c:88:40:f0: 24:e3:2f:2a:10:4a:b3:29:53:2e:65:7d:80:55:6a: 4c:de:01:b1:3f:a8:39:ad:f3:7d:cf:3f:7f:c5:4e: bb:99:66:66:95:51:f9:ca:7e:44:6a:ef:d7:49:f6: a4:ca:6e:04:41:3f:3b:7d:b6:10:90:45:c8:be:3e: 2d:f5:ca:3d:85:d3:f1:fd:e9:09:7d:b2:54:12:d6: de:0c:67:4a:5e:59:20:48:dc:20:d2:e7:b3:dc:a5: 64:6c:2c:c4:44:80:50:5d:84:7a:49:91:79:5b:4c: 4f:9b:51:63:e4:da:b0:56:cc:91:2d:4f:fb:31:fb: 29:8e:b3:3c:49:6a:3c:df:de:aa:e4:bc:2f:91:e7: f7:73:fc:00:79:3d:92:e5:57:9f:98:34:a3:c4:a9: c9:94:20:b3:4b:ea:36:e6:62:c2:7b:08:cd:4b:82: 66:ad:70:58:4f:41:04:70:39:b1:1f:65:17:92:30: f6:fb:f9:9f:9f:b4:0d:63:1e:c5:13:ad:f4:ea:92: e5:fd:b6:67:bb:fb:c4:e7:07:31:f4:a9:03:fa:ed: 4b:8d:3a:30:fd:cc:0a:85:3a:9b:b7:6b:4f:7b:72: ee:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:AA:B7:C2:47:0C:1A:0B:EF:20:E5:EB:9B:10:B4:97:E9:8E:13:19 X509v3 Authority Key Identifier: keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/43DCAEE0BBE811F092C97714C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.244.211.0/24 160.20.45.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:7a:d4:ba:64:50:87:06:98:89:06:df:ec:17:e8:0d:cf:1c: fd:7a:95:99:32:ff:d8:02:03:25:f9:e9:46:c4:82:32:c4:e9: 18:74:b2:16:b4:d5:71:5a:42:a7:e1:57:63:a1:d5:77:19:9d: 81:08:14:c1:a4:4c:bc:14:35:b9:d1:28:c5:50:de:61:a4:9b: a9:74:f6:df:24:9f:69:ca:d3:c7:6e:8b:49:42:3d:f8:2a:6e: 8d:e5:c9:92:46:f1:75:6b:fb:fd:6c:8f:b2:50:79:a8:32:31: cf:57:03:50:e6:97:b0:cb:d4:6e:bf:2d:1b:db:c6:c8:0a:c3: e9:f7:7c:57:ba:69:b1:7a:39:b7:96:80:0c:71:29:4e:dd:7a: cd:64:f2:ac:42:e4:a4:9b:7a:51:e9:9e:eb:26:2b:59:d0:18: d7:39:d7:b8:18:b1:76:dc:d2:49:49:c9:a1:40:93:15:ba:29: 2c:06:e7:ba:f5:6a:77:a4:75:41:ab:a9:38:6d:db:10:01:70: 22:d6:a5:35:4b:8e:2d:4b:75:a8:0b:84:b5:cf:bd:ba:24:05: 76:d4:43:30:48:54:2b:34:95:7e:5f:e2:a2:f6:6d:40:2f:e0: f8:9e:54:f2:a6:59:fb:d6:24:ae:75:cf:b7:6f:1e:f0:25:e8: aa:03:dc:5c -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICDJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG NjlDQkE4NDYwHhcNMjUxMTExMTUxNDQ5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OTEzNTJlOS1mMjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx376F70W+tO59w6BX/uT1KnCXwdOmFF1wHyIQPAk4y8qEEqzKVMuZX2AVWpM 3gGxP6g5rfN9zz9/xU67mWZmlVH5yn5Eau/XSfakym4EQT87fbYQkEXIvj4t9co9 hdPx/ekJfbJUEtbeDGdKXlkgSNwg0uez3KVkbCzERIBQXYR6SZF5W0xPm1Fj5Nqw VsyRLU/7MfspjrM8SWo8396q5Lwvkef3c/wAeT2S5VefmDSjxKnJlCCzS+o25mLC ewjNS4JmrXBYT0EEcDmxH2UXkjD2+/mfn7QNYx7FE6306pLl/bZnu/vE5wcx9KkD +u1LjTow/cwKhTqbt2tPe3Lu+wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFIqqt8JH DBoL7yDl65sQtJfpjhMZMB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ0MDIvRkRCRkQwMjAzRDk2MTFFQThFQTA3MDJGQzRGOUFFMDIvNDNEQ0FFRTBC QkU4MTFGMDkyQzk3NzE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABn9NMDBACgFC0wDQYJKoZIhvcNAQELBQADggEBAI561Lpk UIcGmIkG3+wX6A3PHP16lZky/9gCAyX56UbEgjLE6Rh0sha01XFaQqfhV2Oh1XcZ nYEIFMGkTLwUNbnRKMVQ3mGkm6l09t8kn2nK08dui0lCPfgqbo3lyZJG8XVr+/1s j7JQeagyMc9XA1Dml7DL1G6/LRvbxsgKw+n3fFe6abF6ObeWgAxxKU7des1k8qxC 5KSbelHpnusmK1nQGNc517gYsXbc0klJyaFAkxW6KSwG57r1anekdUGrqTht2xAB cCLWpTVLji1LdagLhLXPvbokBXbUQzBIVCs0lX5f4qL2bUAv4PieVPKmWfvWJK51 z7dvHvAl6KoD3Fw= -----END CERTIFICATE-----Generated at Tue Nov 25 17:41:11 2025 by rpki-client