This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/AD7A378C334411EB901EBB81C4F9AE02.roa File: AD7A378C334411EB901EBB81C4F9AE02.roa (raw, json) Hash identifier: fAeWrwprG7VOM279Y/8oithgtqvoI+DtUiT3hlYQPU8= Subject key identifier: 4A:82:77:3A:21:EC:6D:67:67:89:0F:F3:93:63:85:36:54:24:DD:F3 Certificate issuer: /CN=A91AA053/serialNumber=F92A750B524794D4FBBF21885BDAF6D078F1E881 Certificate serial: 0794 Authority key identifier: F9:2A:75:0B:52:47:94:D4:FB:BF:21:88:5B:DA:F6:D0:78:F1:E8:81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/AD7A378C334411EB901EBB81C4F9AE02.roa Signing time: Tue 02 Dec 2025 20:53:53 +0000 ROA not before: Tue 02 Dec 2025 20:53:53 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 141413 IP address blocks: 103.158.176.0/24 maxlen: 24 2001:df5:5e80::/48 maxlen: 48 2001:df5:5e81::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.crl rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 20:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1940 (0x794) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA053, serialNumber=F92A750B524794D4FBBF21885BDAF6D078F1E881 Validity Not Before: Dec 2 20:53:53 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=692f51e0-8c52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:c6:d1:79:15:21:ba:57:10:99:13:d9:b1:17: 0d:f7:e8:25:10:9e:7e:30:0f:ea:28:f6:d6:27:28: 55:5e:40:b8:db:79:5d:2f:da:f0:26:80:a5:54:d3: ea:37:05:7d:7c:0e:fb:57:51:92:c6:be:55:01:33: 80:24:18:9a:8e:6d:ad:3f:6a:3a:75:26:cb:24:c9: ed:22:63:14:f2:df:08:ca:0b:3e:53:2a:7e:fa:24: 4c:09:de:13:dd:6b:5d:35:06:65:44:d8:bd:b4:6d: 98:25:3d:9a:0b:99:af:c1:b3:f2:78:cb:90:82:a5: 00:6d:d3:b4:a6:d4:4e:c9:e3:a1:0d:29:0b:67:00: 8c:b0:d3:a8:cc:3f:bc:c0:d4:8c:7e:97:50:35:a6: fb:f6:f5:9c:d6:56:cf:b5:ef:0e:aa:c1:05:bc:e6: 26:20:22:9f:a5:c7:48:74:e6:ea:bd:f5:b0:0e:19: be:18:83:7c:24:a7:b7:f9:9c:5c:9e:70:06:e2:06: 0b:4d:d1:db:a4:7d:a0:78:cc:96:31:7d:cc:bf:e5: cd:2a:36:3e:c2:3b:75:92:4d:8a:10:0d:f9:6f:6d: af:fc:a5:18:13:1c:7c:f4:55:ba:bf:9f:ba:7d:b5: 50:e8:4f:f4:eb:94:72:60:c5:62:59:18:12:e2:5a: dc:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:82:77:3A:21:EC:6D:67:67:89:0F:F3:93:63:85:36:54:24:DD:F3 X509v3 Authority Key Identifier: keyid:F9:2A:75:0B:52:47:94:D4:FB:BF:21:88:5B:DA:F6:D0:78:F1:E8:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/AD7A378C334411EB901EBB81C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.158.176.0/24 IPv6: 2001:df5:5e80::/47 Signature Algorithm: sha256WithRSAEncryption 67:00:7c:bf:2e:1b:98:46:de:7e:50:f6:24:8c:58:73:dd:1d: 54:1b:4d:8e:f7:1a:3d:d4:80:8a:63:ff:53:7d:06:04:7e:5e: 56:61:c7:14:8a:14:3b:f9:70:67:90:8d:8d:cd:30:fd:8a:ff: c9:08:76:fd:b2:3e:ea:9c:9f:6b:b8:a0:b7:2b:4c:03:43:1d: eb:a5:97:2a:b6:64:c5:56:75:95:1e:ae:f9:c4:2b:ac:a6:43: 43:e5:38:68:a6:45:55:87:6b:58:5b:b7:d7:ab:ff:dc:86:97: 66:44:43:29:02:09:0b:7a:38:f4:dd:7a:a9:59:00:80:8a:5d: 37:dc:9b:44:c7:32:05:47:78:8f:f3:bf:fb:c8:d1:43:fd:07: e0:99:bf:c3:a1:e6:2c:ee:d3:0a:5c:2a:d4:89:fd:33:fe:26: e3:cf:7b:fb:93:df:3d:c1:d2:5d:c9:82:48:a8:1a:8b:a7:3b: 32:37:fb:9a:ab:d8:96:9e:c1:c5:26:bb:7d:1a:fa:c1:b4:7b: 90:71:56:cf:11:6f:b5:7f:93:a3:eb:70:1e:65:7e:17:90:c2: 47:6f:54:84:42:49:96:e3:4f:53:3a:07:40:c8:ed:14:89:ae: f2:43:eb:68:a6:88:00:77:f9:e8:5b:94:bf:43:b0:19:90:73: 6a:37:d4:82 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICB5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUEwNTMxMTAvBgNVBAUTKEY5MkE3NTBCNTI0Nzk0RDRGQkJGMjE4ODVCREFGNkQw NzhGMUU4ODEwHhcNMjUxMjAyMjA1MzUzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJmNTFlMC04YzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9cbReRUhulcQmRPZsRcN9+glEJ5+MA/qKPbWJyhVXkC423ldL9rwJoClVNPq NwV9fA77V1GSxr5VATOAJBiajm2tP2o6dSbLJMntImMU8t8Iygs+Uyp++iRMCd4T 3WtdNQZlRNi9tG2YJT2aC5mvwbPyeMuQgqUAbdO0ptROyeOhDSkLZwCMsNOozD+8 wNSMfpdQNab79vWc1lbPte8OqsEFvOYmICKfpcdIdObqvfWwDhm+GIN8JKe3+Zxc nnAG4gYLTdHbpH2geMyWMX3Mv+XNKjY+wjt1kk2KEA35b22v/KUYExx89FW6v5+6 fbVQ6E/065RyYMViWRgS4lrcHwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFEqCdzoh 7G1nZ4kP85NjhTZUJN3zMB8GA1UdIwQYMBaAFPkqdQtSR5TU+78hiFva9tB48eiB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTA1My9BRkI2QkY3NjMz NDMxMUVCQjUzNjVFODFDNEY5QUUwMi8tU3AxQzFKSGxOVDd2eUdJVzlyMjBIang2 SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1TcDFDMUpIbE5UN3Z5R0lXOXIyMEhqeDZJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUEwNTMvQUZCNkJGNzYzMzQzMTFFQkI1MzY1RTgxQzRGOUFFMDIvQUQ3QTM3OEMz MzQ0MTFFQjkwMUVCQjgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnnrAwDwQCAAIwCQMHASABDfVegDANBgkqhkiG9w0BAQsF AAOCAQEAZwB8vy4bmEbeflD2JIxYc90dVBtNjvcaPdSAimP/U30GBH5eVmHHFIoU O/lwZ5CNjc0w/Yr/yQh2/bI+6pyfa7igtytMA0Md66WXKrZkxVZ1lR6u+cQrrKZD Q+U4aKZFVYdrWFu316v/3IaXZkRDKQIJC3o49N16qVkAgIpdN9ybRMcyBUd4j/O/ +8jRQ/0H4Jm/w6HmLO7TClwq1In9M/4m4897+5PfPcHSXcmCSKgai6c7Mjf7mqvY lp7BxSa7fRr6wbR7kHFWzxFvtX+To+twHmV+F5DCR29UhEJJluNPUzoHQMjtFImu 8kPraKaIAHf56FuUv0OwGZBzajfUgg== -----END CERTIFICATE-----Generated at Wed Dec 3 17:16:43 2025 by rpki-client