This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/9B3123BEC38C11F0A8D49A37C4F9AE02.roa File: 9B3123BEC38C11F0A8D49A37C4F9AE02.roa (raw, json) Hash identifier: Lzk2R03/ZF2ufkOlf+mVkfGkNvSjsS669eniiKj8mTU= Subject key identifier: 2D:BB:98:F7:B8:82:4E:CE:F4:A0:64:7A:7F:F4:4A:EB:8A:BA:E9:4C Certificate issuer: /CN=A91B3B4C/serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Certificate serial: E5 Authority key identifier: B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/9B3123BEC38C11F0A8D49A37C4F9AE02.roa Signing time: Mon 17 Nov 2025 08:08:32 +0000 ROA not before: Mon 17 Nov 2025 08:08:32 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 140227 IP address blocks: 103.110.220.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 03:52:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 229 (0xe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3B4C, serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Validity Not Before: Nov 17 08:08:32 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=691ad7ff-def3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:09:d0:f5:c3:5c:5d:19:95:df:2a:70:6c:50: 21:fd:59:98:a3:d4:e7:ff:3b:e0:9a:6b:16:da:fa: fa:d0:57:c2:63:19:6d:f5:fd:f6:76:7c:4a:dd:82: b1:ff:5a:ca:07:ac:cf:33:69:b5:03:30:84:b2:33: b7:d8:bf:6f:84:53:eb:ad:35:ce:53:94:7d:98:37: 3f:7e:e2:74:98:93:32:50:9d:25:3a:7b:43:63:6f: 42:5d:36:f3:19:62:12:7e:43:a1:8a:a6:1a:8a:ae: 90:b5:6b:ec:54:50:46:6b:d9:c1:27:79:05:b0:71: 63:56:ee:c8:32:fb:b0:fd:b2:81:1d:61:6f:eb:fc: 5f:4f:57:d8:8b:6b:50:b9:37:af:c0:a7:58:fe:68: 01:b4:4b:8f:2a:32:4b:9c:34:e5:da:59:d9:eb:29: 0a:6e:9d:b8:5b:06:01:20:fa:7c:aa:1d:29:49:58: 73:fc:1c:12:d2:a0:90:c0:1f:80:35:0b:e2:23:e4: 73:05:27:c3:b7:f8:2b:dc:1d:fa:f2:fa:81:69:14: 38:61:cf:bf:50:94:2f:fc:ec:74:18:96:a9:b8:36: 89:63:45:29:8d:25:af:93:6e:5a:92:4e:0b:38:21: a1:8e:a4:60:19:64:4c:79:f0:bb:5c:a1:84:d9:04: db:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:BB:98:F7:B8:82:4E:CE:F4:A0:64:7A:7F:F4:4A:EB:8A:BA:E9:4C X509v3 Authority Key Identifier: keyid:B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/9B3123BEC38C11F0A8D49A37C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.110.220.0/23 Signature Algorithm: sha256WithRSAEncryption 59:ee:6f:c2:bd:42:18:d8:77:e5:66:93:5b:ea:77:a4:07:af: 98:0f:2f:90:91:40:f2:a4:c2:18:58:58:89:50:d7:14:a3:6c: b3:72:1d:f0:38:38:dd:18:50:86:8f:91:3d:5c:6b:79:f6:74: 28:e1:e3:f6:ee:f4:00:ca:50:96:88:c6:27:26:00:5c:8f:ea: c0:4a:03:2f:69:d8:ff:a1:ba:fb:b2:c9:84:15:f7:78:40:e2: 53:f1:fa:7d:ee:31:b3:d2:e5:9a:1d:f2:c8:76:63:8a:03:32: 84:f4:51:80:1f:02:79:9f:22:9e:f7:b5:b4:fa:21:ba:93:a5: 46:f9:7f:d3:59:08:88:85:ad:9a:6b:38:fd:0c:90:61:cd:d5: 90:d6:fa:d7:f8:e6:85:a5:62:d0:9f:c4:f6:95:bd:00:a9:69: fa:36:34:f1:20:12:cd:81:dd:8b:f9:2c:a3:33:69:7d:e7:62: 05:30:8d:b7:53:ab:20:ef:9e:6f:c0:b0:97:c8:c7:d4:89:88: a6:b3:22:95:07:c0:16:67:3d:b3:2f:7d:0f:f3:23:80:8f:72: a0:23:2f:84:8e:8f:98:1d:f4:d2:3f:b7:61:a9:c2:21:a8:6e: 92:b6:b8:ec:81:d2:ed:9f:af:5c:f6:d5:e4:49:30:50:32:01: 6f:46:2d:30 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNCNEMxMTAvBgNVBAUTKEI2M0RGRDY4NkNFMEE5MDA3NkU0RjVGRjQyODY4NUY2 M0ZCMDhFREQwHhcNMjUxMTE3MDgwODMyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTFhZDdmZi1kZWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvAnQ9cNcXRmV3ypwbFAh/VmYo9Tn/zvgmmsW2vr60FfCYxlt9f32dnxK3YKx /1rKB6zPM2m1AzCEsjO32L9vhFPrrTXOU5R9mDc/fuJ0mJMyUJ0lOntDY29CXTbz GWISfkOhiqYaiq6QtWvsVFBGa9nBJ3kFsHFjVu7IMvuw/bKBHWFv6/xfT1fYi2tQ uTevwKdY/mgBtEuPKjJLnDTl2lnZ6ykKbp24WwYBIPp8qh0pSVhz/BwS0qCQwB+A NQviI+RzBSfDt/gr3B368vqBaRQ4Yc+/UJQv/Ox0GJapuDaJY0UpjSWvk25akk4L OCGhjqRgGWRMefC7XKGE2QTb0wIDAQABo4IClTCCApEwHQYDVR0OBBYEFC27mPe4 gk7O9KBken/0SuuKuulMMB8GA1UdIwQYMBaAFLY9/Whs4KkAduT1/0KGhfY/sI7d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0I0Qy9EQzlERTI4RThD NTAxMUVGQTA2N0M4MTVDNEY5QUUwMi90ajM5YUd6Z3FRQjI1UFhfUW9hRjlqLXdq dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqMzlhR3pncVFCMjVQWF9Rb2FGOWotd2p0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjNCNEMvREM5REUyOEU4QzUwMTFFRkEwNjdDODE1QzRGOUFFMDIvOUIzMTIzQkVD MzhDMTFGMEE4RDQ5QTM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnbtwwDQYJKoZIhvcNAQELBQADggEBAFnub8K9QhjYd+Vm k1vqd6QHr5gPL5CRQPKkwhhYWIlQ1xSjbLNyHfA4ON0YUIaPkT1ca3n2dCjh4/bu 9ADKUJaIxicmAFyP6sBKAy9p2P+huvuyyYQV93hA4lPx+n3uMbPS5Zod8sh2Y4oD MoT0UYAfAnmfIp73tbT6IbqTpUb5f9NZCIiFrZprOP0MkGHN1ZDW+tf45oWlYtCf xPaVvQCpafo2NPEgEs2B3Yv5LKMzaX3nYgUwjbdTqyDvnm/AsJfIx9SJiKazIpUH wBZnPbMvfQ/zI4CPcqAjL4SOj5gd9NI/t2GpwiGobpK2uOyB0u2fr1z21eRJMFAy AW9GLTA= -----END CERTIFICATE-----Generated at Sun Dec 7 14:37:35 2025 by rpki-client