This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/CDA06D9C3D2A11EC8ECCEB1FC4F9AE02.roa File: CDA06D9C3D2A11EC8ECCEB1FC4F9AE02.roa (raw, json) Hash identifier: oHL6ti12eyX47I0qE1+++7CHglREGkhqT+871Fjovks= Subject key identifier: 54:AA:18:7E:7A:23:C8:86:2F:03:44:8D:0D:CA:2A:8E:F5:F7:FC:4F Certificate issuer: /CN=A91A5C90/serialNumber=2F77F7ED34F66A6FC67080FB9B61BB26792F85A1 Certificate serial: 04F7 Authority key identifier: 2F:77:F7:ED:34:F6:6A:6F:C6:70:80:FB:9B:61:BB:26:79:2F:85:A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/CDA06D9C3D2A11EC8ECCEB1FC4F9AE02.roa Signing time: Sun 14 Dec 2025 23:19:36 +0000 ROA not before: Sun 14 Dec 2025 23:19:36 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 14618 IP address blocks: 103.175.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.crl rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Jan 2026 22:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1271 (0x4f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5C90, serialNumber=2F77F7ED34F66A6FC67080FB9B61BB26792F85A1 Validity Not Before: Dec 14 23:19:36 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=693f4607-1750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:cb:38:96:ef:45:42:19:d8:ea:b0:53:a6:22: 92:af:0e:95:14:1a:66:ba:65:b1:d0:d9:64:02:24: 8e:b4:62:81:e2:70:b9:4c:25:52:e3:0a:4c:2f:78: ce:0b:9b:66:bf:cf:e7:65:1f:1e:c9:5c:e5:5e:cb: 4c:b1:aa:e3:33:86:5f:0e:58:f6:84:e9:75:48:3c: cd:84:af:86:97:aa:5a:af:8f:5e:b5:b3:c5:24:33: d1:71:68:f2:62:3d:da:c4:24:1f:2a:21:ea:85:01: 18:5f:9d:85:a4:7d:19:2b:18:22:2c:07:09:b0:94: 83:c6:9d:d2:43:f2:85:22:9f:be:71:49:d2:12:09: 93:3c:50:15:51:83:54:b6:0d:df:02:1e:3e:b4:65: 88:3d:68:09:6c:74:4f:d2:85:b4:3c:29:5c:49:7a: 24:0d:e7:1c:b6:16:5c:8a:61:da:30:ae:2c:4f:e9: 35:a4:52:86:d7:52:37:c2:d8:bd:e8:09:ec:27:18: 08:72:c2:16:b8:b1:43:10:56:1a:01:02:40:8e:4b: 78:95:39:a4:27:27:69:58:48:52:e6:f4:dd:cc:ef: 91:27:bf:2a:6e:86:66:be:a8:f7:f7:37:cf:e0:15: a5:ef:c5:07:09:86:6f:74:f0:b4:61:95:7d:de:67: 21:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:AA:18:7E:7A:23:C8:86:2F:03:44:8D:0D:CA:2A:8E:F5:F7:FC:4F X509v3 Authority Key Identifier: keyid:2F:77:F7:ED:34:F6:6A:6F:C6:70:80:FB:9B:61:BB:26:79:2F:85:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/CDA06D9C3D2A11EC8ECCEB1FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.175.120.0/23 Signature Algorithm: sha256WithRSAEncryption 45:25:07:89:9c:dd:22:69:37:49:ae:90:8f:ad:e8:d4:31:ba: 21:4e:5f:fc:dc:72:9f:c9:dc:11:64:75:45:f7:75:11:b8:1e: b5:06:71:f6:51:a8:25:e8:31:39:10:da:af:2b:79:47:a5:6d: 69:cf:b6:76:76:1e:ce:d8:b3:27:f8:2a:69:a0:10:c6:6f:23: 07:c8:d3:07:fa:7c:8b:b6:a9:0b:fa:cf:60:97:cf:fe:3e:42: 92:f5:b8:5f:1f:7a:5a:8d:07:18:95:f8:46:b6:5c:ba:e6:eb: 92:02:db:e6:7e:3c:7a:5a:ea:5a:03:57:8e:f7:d9:dc:59:aa: c2:41:3d:c6:85:6c:26:28:04:35:46:cb:92:79:58:61:82:6f: bd:07:13:83:80:46:23:f9:80:82:20:bf:bf:f5:92:8d:c5:63: ad:01:73:24:2b:cd:df:5a:1a:d2:dd:2e:c9:ab:a5:dc:04:e1: cc:33:b3:94:e6:26:91:3e:58:d5:95:27:08:bd:6c:36:d8:5e: 74:78:c8:db:d2:bd:29:6b:59:5d:27:12:f8:c3:b4:07:81:cf: e1:ec:b3:9a:3f:6e:c3:5c:ca:f6:3c:ab:53:f9:3d:82:3b:ab: 2e:32:7e:c6:75:3b:3c:cf:78:23:a6:fb:3f:24:21:32:fe:86: 48:67:ba:a0 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVDOTAxMTAvBgNVBAUTKDJGNzdGN0VEMzRGNjZBNkZDNjcwODBGQjlCNjFCQjI2 NzkyRjg1QTEwHhcNMjUxMjE0MjMxOTM2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTNmNDYwNy0xNzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmMs4lu9FQhnY6rBTpiKSrw6VFBpmumWx0NlkAiSOtGKB4nC5TCVS4wpML3jO C5tmv8/nZR8eyVzlXstMsarjM4ZfDlj2hOl1SDzNhK+Gl6par49etbPFJDPRcWjy Yj3axCQfKiHqhQEYX52FpH0ZKxgiLAcJsJSDxp3SQ/KFIp++cUnSEgmTPFAVUYNU tg3fAh4+tGWIPWgJbHRP0oW0PClcSXokDeccthZcimHaMK4sT+k1pFKG11I3wti9 6AnsJxgIcsIWuLFDEFYaAQJAjkt4lTmkJydpWEhS5vTdzO+RJ78qboZmvqj39zfP 4BWl78UHCYZvdPC0YZV93mchawIDAQABo4IClTCCApEwHQYDVR0OBBYEFFSqGH56 I8iGLwNEjQ3KKo719/xPMB8GA1UdIwQYMBaAFC939+009mpvxnCA+5thuyZ5L4Wh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUM5MC80MkUxRkQyQTNE MjkxMUVDQjBCQ0QyMUZDNEY5QUUwMi9MM2YzN1RUMmFtX0djSUQ3bTJHN0pua3Zo YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzZjM3VFQyYW1fR2NJRDdtMkc3Sm5rdmhhRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTVDOTAvNDJFMUZEMkEzRDI5MTFFQ0IwQkNEMjFGQzRGOUFFMDIvQ0RBMDZEOUMz RDJBMTFFQzhFQ0NFQjFGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnr3gwDQYJKoZIhvcNAQELBQADggEBAEUlB4mc3SJpN0mu kI+t6NQxuiFOX/zccp/J3BFkdUX3dRG4HrUGcfZRqCXoMTkQ2q8reUelbWnPtnZ2 Hs7Ysyf4KmmgEMZvIwfI0wf6fIu2qQv6z2CXz/4+QpL1uF8felqNBxiV+Ea2XLrm 65IC2+Z+PHpa6loDV4732dxZqsJBPcaFbCYoBDVGy5J5WGGCb70HE4OARiP5gIIg v7/1ko3FY60BcyQrzd9aGtLdLsmrpdwE4cwzs5TmJpE+WNWVJwi9bDbYXnR4yNvS vSlrWV0nEvjDtAeBz+Hss5o/bsNcyvY8q1P5PYI7qy4yfsZ1OzzPeCOm+z8kITL+ hkhnuqA= -----END CERTIFICATE-----Generated at Fri Jan 9 00:53:21 2026 by rpki-client