This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/27616F5ECEAC11F0B2B83021C4F9AE02.roa File: 27616F5ECEAC11F0B2B83021C4F9AE02.roa (raw, json) Hash identifier: Ng85rts7TuJ4suxeTKyV+2xKEOP3HO20US2v4nbeH94= Subject key identifier: 30:68:47:79:56:18:D6:04:62:50:AB:5D:A5:E4:BB:FC:D3:62:B3:AD Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34 Certificate serial: 3686 Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/27616F5ECEAC11F0B2B83021C4F9AE02.roa Signing time: Mon 01 Dec 2025 11:52:04 +0000 ROA not before: Mon 01 Dec 2025 11:52:04 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 152605 IP address blocks: 103.207.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Dec 2025 14:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13958 (0x3686) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5D7E, serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34 Validity Not Before: Dec 1 11:52:04 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=692d8164-1a3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:35:ca:c1:6b:20:6e:f4:0c:1b:0a:6e:38:51: 5d:cf:97:c5:2f:52:5e:3b:d4:db:9d:fe:66:69:fa: 42:2f:f6:87:5d:cb:42:03:bf:dd:cd:9f:78:58:0b: a9:bc:ed:3b:84:ad:c5:48:96:be:8f:43:b3:ed:4e: a0:f7:82:f6:1f:31:5b:68:32:e6:8d:42:57:d1:f1: 49:36:49:a2:9d:0e:51:ee:d1:a4:a5:f3:4c:1d:73: 9d:d7:83:3b:d9:39:ed:81:e3:bd:70:44:3c:97:e7: a2:f7:c2:be:4c:e3:ba:00:14:3a:6a:e6:50:8a:98: 6e:e5:8a:65:cd:46:a5:e4:ab:f3:b1:8d:81:82:f3: 04:5d:c4:1a:80:68:3e:bc:0b:a5:e7:ae:b3:b3:c8: 26:d6:83:d1:2f:dc:4f:72:1a:72:95:13:e5:cd:bd: 8d:5f:92:6c:f5:6d:c7:05:8a:6e:8a:9c:ae:66:92: 5a:7b:ed:f4:de:aa:13:ba:1e:fc:49:93:3a:4f:3e: 49:8f:2c:f3:f7:d8:7a:bf:75:aa:d1:8e:a0:e1:d9: 02:e6:70:67:8d:7c:e7:88:ae:c1:d8:a6:ab:e4:cf: 36:7e:03:ed:1a:80:ed:de:48:5a:26:1d:33:7b:7f: 8c:25:41:6a:4e:2e:1a:b2:ae:c6:cb:83:63:0e:5e: 29:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:68:47:79:56:18:D6:04:62:50:AB:5D:A5:E4:BB:FC:D3:62:B3:AD X509v3 Authority Key Identifier: keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/27616F5ECEAC11F0B2B83021C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.207.84.0/24 Signature Algorithm: sha256WithRSAEncryption 72:9f:ab:bf:06:2a:d1:b8:be:2f:2f:35:99:b3:1b:31:9b:0f: c2:33:ac:b4:43:5e:c1:b4:78:4f:69:ac:fd:26:71:b4:18:4f: 1b:7e:8b:dc:f5:2e:fc:2d:4d:4f:b8:15:71:cb:2e:a1:22:bc: ea:ee:37:37:06:25:1a:17:6c:97:ad:e9:74:13:62:0d:83:9d: e2:e9:74:70:c4:1a:7b:7a:41:e4:e1:07:ff:bd:10:25:46:b3: 24:0f:7e:54:c9:85:94:70:86:e8:f5:7c:53:ff:cc:9d:ed:8d: ee:dc:34:70:7a:8c:e5:cf:ea:5a:c8:82:1c:49:69:31:3a:38: 8c:84:fa:41:fe:9a:db:35:eb:58:01:a6:a4:bf:fb:b6:35:bf: 36:cd:fe:b2:5c:d6:a1:e7:51:46:7a:f9:93:9b:18:9b:d6:d9: c8:eb:f6:81:5a:ca:c4:f6:9c:0f:e4:6d:88:1a:b1:97:9d:23: 74:e5:a6:d9:ce:d7:31:f3:41:be:87:ed:c9:a9:2e:5b:2c:4e: e8:51:3d:8a:27:81:41:5e:bd:28:dd:55:f1:2b:f2:8e:61:19: b6:f2:d5:99:23:43:e2:f8:84:36:57:e0:e4:e8:86:63:8e:c4: 08:12:dc:82:a3:b3:8b:19:fd:17:85:fd:e4:bc:2d:aa:82:aa: c7:e5:75:59 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVEN0UxMTAvBgNVBAUTKDRDQUUzQUVGQjFBQzhBQkREQjk5QkNDRUU0RkE1QTkx NkQxNTdCMzQwHhcNMjUxMjAxMTE1MjA0WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJkODE2NC0xYTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqjXKwWsgbvQMGwpuOFFdz5fFL1JeO9Tbnf5mafpCL/aHXctCA7/dzZ94WAup vO07hK3FSJa+j0Oz7U6g94L2HzFbaDLmjUJX0fFJNkminQ5R7tGkpfNMHXOd14M7 2TntgeO9cEQ8l+ei98K+TOO6ABQ6auZQiphu5YplzUal5KvzsY2BgvMEXcQagGg+ vAul566zs8gm1oPRL9xPchpylRPlzb2NX5Js9W3HBYpuipyuZpJae+303qoTuh78 SZM6Tz5Jjyzz99h6v3Wq0Y6g4dkC5nBnjXzniK7B2Kar5M82fgPtGoDt3khaJh0z e3+MJUFqTi4asq7Gy4NjDl4pRQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDBoR3lW GNYEYlCrXaXku/zTYrOtMB8GA1UdIwQYMBaAFEyuOu+xrIq925m8zuT6WpFtFXs0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUQ3RS9FQ0E2ODIzNDFE ODcxMUUyOTgzMjJERTAwOEIwMkNEMi9USzQ2NzdHc2lyM2JtYnpPNVBwYWtXMFZl elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLNDY3N0dzaXIzYm1iek81UHBha1cwVmV6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjVEN0UvRUNBNjgyMzQxRDg3MTFFMjk4MzIyREUwMDhCMDJDRDIvMjc2MTZGNUVD RUFDMTFGMEIyQjgzMDIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnz1QwDQYJKoZIhvcNAQELBQADggEBAHKfq78GKtG4vi8v NZmzGzGbD8IzrLRDXsG0eE9prP0mcbQYTxt+i9z1LvwtTU+4FXHLLqEivOruNzcG JRoXbJet6XQTYg2DneLpdHDEGnt6QeThB/+9ECVGsyQPflTJhZRwhuj1fFP/zJ3t je7cNHB6jOXP6lrIghxJaTE6OIyE+kH+mts161gBpqS/+7Y1vzbN/rJc1qHnUUZ6 +ZObGJvW2cjr9oFaysT2nA/kbYgasZedI3TlptnO1zHzQb6H7cmpLlssTuhRPYon gUFevSjdVfEr8o5hGbby1ZkjQ+L4hDZX4OTohmOOxAgS3IKjs4sZ/ReF/eS8LaqC qsfldVk= -----END CERTIFICATE-----Generated at Mon Dec 8 20:52:21 2025 by rpki-client