This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/BFBA7E0ECC1C11F081ABD12EC4F9AE02.roa File: BFBA7E0ECC1C11F081ABD12EC4F9AE02.roa (raw, json) Hash identifier: gpIhFKpXduF2CA0ZrD84omrJjlhpDXGZWRKDumLvbBc= Subject key identifier: 56:50:DF:8E:F8:A7:AC:01:5B:95:FA:2F:FA:D1:B0:23:13:7F:5A:F7 Certificate issuer: /CN=A91A4CC3/serialNumber=51FE61DC65336DA8FDD9BC497BFA5F9E232E0CC6 Certificate serial: 09 Authority key identifier: 51:FE:61:DC:65:33:6D:A8:FD:D9:BC:49:7B:FA:5F:9E:23:2E:0C:C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uf5h3GUzbaj92bxJe_pfniMuDMY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/BFBA7E0ECC1C11F081ABD12EC4F9AE02.roa Signing time: Fri 28 Nov 2025 05:40:30 +0000 ROA not before: Fri 28 Nov 2025 05:40:30 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 17436 IP address blocks: 103.83.12.0/23 maxlen: 24 103.147.155.0/24 maxlen: 24 103.217.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.crl rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uf5h3GUzbaj92bxJe_pfniMuDMY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:54:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4CC3, serialNumber=51FE61DC65336DA8FDD9BC497BFA5F9E232E0CC6 Validity Not Before: Nov 28 05:40:30 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=692935cd-68f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:14:75:57:fb:e7:82:2d:b6:6a:cb:67:ec:d2: b9:af:3a:b5:c7:75:ea:e0:96:14:54:18:77:c0:69: a9:83:57:5a:8f:fa:1d:49:d2:13:53:cd:e8:59:17: c5:9c:6e:c6:8f:c8:d8:70:a5:c3:44:1f:18:6a:68: a4:82:8b:fd:0b:ed:4b:ed:35:87:fb:cb:1c:02:59: d5:67:a8:d7:73:0e:98:ba:c7:59:32:0a:7c:6d:ab: 64:98:45:ec:c8:00:54:dd:48:d1:66:a9:2f:78:bb: 83:f4:8e:78:8a:73:a6:a4:e4:17:a7:96:e0:63:37: 07:e1:56:ef:21:19:a1:2a:7f:12:c1:79:12:58:9f: 35:27:2d:87:82:4c:d0:17:12:0f:86:62:62:76:da: 84:b4:7f:1b:d0:59:b1:22:38:86:bf:5e:6e:df:ea: 11:cc:4b:9b:8e:99:5c:03:8a:15:f9:8e:52:68:1b: f5:fa:2c:2f:01:46:cf:fd:a4:62:b4:dc:8c:74:84: bb:77:83:95:71:3f:70:fd:e0:dd:a7:46:23:99:87: 96:75:be:8b:8c:65:c2:93:31:ff:3f:b2:c4:fd:c1: 41:fc:e5:4d:fb:a4:3b:4d:c9:6e:9f:94:75:fd:4f: 72:e6:26:95:7d:58:0b:50:23:52:a3:af:51:88:96: 92:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:50:DF:8E:F8:A7:AC:01:5B:95:FA:2F:FA:D1:B0:23:13:7F:5A:F7 X509v3 Authority Key Identifier: keyid:51:FE:61:DC:65:33:6D:A8:FD:D9:BC:49:7B:FA:5F:9E:23:2E:0C:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uf5h3GUzbaj92bxJe_pfniMuDMY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/BFBA7E0ECC1C11F081ABD12EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.83.12.0/23 103.147.155.0/24 103.217.73.0/24 Signature Algorithm: sha256WithRSAEncryption 69:7f:ad:88:65:16:84:fa:7e:f9:98:5e:43:0b:3a:78:1f:6b: 6d:14:de:60:c2:6c:9a:03:14:7f:56:2b:12:42:69:7e:9f:44: 5a:a9:ed:f0:b7:99:23:11:7b:23:86:d5:b0:04:9c:5b:09:09: c9:0c:49:a5:1b:c3:c4:b2:37:1b:88:67:9b:e9:ba:54:64:e3: 9f:68:40:7f:02:d2:0d:03:ab:ee:4d:e7:11:72:1b:de:06:89: fd:eb:40:02:39:b4:34:17:72:4c:0d:10:1b:50:c7:b7:6e:47: d9:a3:ce:f5:c7:a8:7c:d1:aa:18:b4:3d:ab:11:6d:1d:f7:16: 8e:af:01:38:5c:e9:ad:3f:43:9c:9c:60:20:e3:86:3f:bc:2a: aa:63:7d:96:b2:f7:96:83:25:1f:a9:6a:0c:33:5e:a1:ac:c4: 65:67:0a:bd:2c:71:0b:06:5d:a6:6e:ef:2b:63:49:92:bc:cc: 7e:1f:2f:1a:84:61:50:a3:ef:46:89:a3:d2:f0:1c:9b:a2:a5: a1:dd:93:1f:f3:5c:37:f7:a6:f3:55:42:f7:29:4f:9e:07:eb: 60:d9:e7:36:6b:13:00:ca:77:95:ff:5f:1f:97:08:88:07:cb: e7:1e:bb:93:fd:1e:b1:00:2b:13:80:b8:0a:a6:d0:06:cc:8a: 8e:e8:f8:2f -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NENDMzExMC8GA1UEBRMoNTFGRTYxREM2NTMzNkRBOEZERDlCQzQ5N0JGQTVGOUUy MzJFMENDNjAeFw0yNTExMjgwNTQwMzBaFw0yNjA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MjkzNWNkLTY4ZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMFHVX++eCLbZqy2fs0rmvOrXHderglhRUGHfAaamDV1qP+h1J0hNTzehZF8Wc bsaPyNhwpcNEHxhqaKSCi/0L7UvtNYf7yxwCWdVnqNdzDpi6x1kyCnxtq2SYRezI AFTdSNFmqS94u4P0jniKc6ak5BenluBjNwfhVu8hGaEqfxLBeRJYnzUnLYeCTNAX Eg+GYmJ22oS0fxvQWbEiOIa/Xm7f6hHMS5uOmVwDihX5jlJoG/X6LC8BRs/9pGK0 3Ix0hLt3g5VxP3D94N2nRiOZh5Z1vouMZcKTMf8/ssT9wUH85U37pDtNyW6flHX9 T3LmJpV9WAtQI1Kjr1GIlpJzAgMBAAGjggKhMIICnTAdBgNVHQ4EFgQUVlDfjvin rAFblfov+tGwIxN/WvcwHwYDVR0jBBgwFoAUUf5h3GUzbaj92bxJe/pfniMuDMYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0Q0MzLzg5ODk5QjlDQ0I2 MDExRjA5RjlFRUYwRkM0RjlBRTAyL1VmNWgzR1V6YmFqOTJieEplX3BmbmlNdURN WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVWY1aDNHVXpiYWo5MmJ4SmVfcGZuaU11RE1ZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NENDMy84OTg5OUI5Q0NCNjAxMUYwOUY5RUVGMEZDNEY5QUUwMi9CRkJBN0UwRUND MUMxMUYwODFBQkQxMkVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDArBggrBgEFBQcBBwEB/wQc MBowGAQCAAEwEgMEAWdTDAMEAGeTmwMEAGfZSTANBgkqhkiG9w0BAQsFAAOCAQEA aX+tiGUWhPp++ZheQws6eB9rbRTeYMJsmgMUf1YrEkJpfp9EWqnt8LeZIxF7I4bV sAScWwkJyQxJpRvDxLI3G4hnm+m6VGTjn2hAfwLSDQOr7k3nEXIb3gaJ/etAAjm0 NBdyTA0QG1DHt25H2aPO9ceofNGqGLQ9qxFtHfcWjq8BOFzprT9DnJxgIOOGP7wq qmN9lrL3loMlH6lqDDNeoazEZWcKvSxxCwZdpm7vK2NJkrzMfh8vGoRhUKPvRomj 0vAcm6Klod2TH/NcN/em81VC9ylPngfrYNnnNmsTAMp3lf9fH5cIiAfL5x67k/0e sQArE4C4CqbQBsyKjuj4Lw== -----END CERTIFICATE-----Generated at Fri Dec 5 18:54:20 2025 by rpki-client