This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6814/0967C798B92411F0BFD5A56EC4F9AE02/0BDEA4CCBF9811F088EBC70AC4F9AE02.roa File: 0BDEA4CCBF9811F088EBC70AC4F9AE02.roa (raw, json) Hash identifier: GHPB4r9xKc7sdp4V734Ic0NM3LNtFuiFLLaR6FTO5E8= Subject key identifier: 59:E7:CA:90:A8:54:64:B7:E3:60:14:FB:66:11:5A:65:82:31:53:F3 Certificate issuer: /CN=A91B6814/serialNumber=F63C46422912B45A9186E445C5A9DEA7BBA3428B Certificate serial: 1F Authority key identifier: F6:3C:46:42:29:12:B4:5A:91:86:E4:45:C5:A9:DE:A7:BB:A3:42:8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jxGQikStFqRhuRFxanep7ujQos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6814/0967C798B92411F0BFD5A56EC4F9AE02/0BDEA4CCBF9811F088EBC70AC4F9AE02.roa Signing time: Wed 12 Nov 2025 07:21:30 +0000 ROA not before: Wed 12 Nov 2025 07:21:30 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 30381 IP address blocks: 43.251.100.0/22 maxlen: 22 43.251.100.0/24 maxlen: 24 43.251.101.0/24 maxlen: 24 43.251.102.0/24 maxlen: 24 43.251.103.0/24 maxlen: 24 103.82.52.0/22 maxlen: 22 103.82.52.0/24 maxlen: 24 103.82.53.0/24 maxlen: 24 103.82.54.0/24 maxlen: 24 103.82.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6814/0967C798B92411F0BFD5A56EC4F9AE02/9jxGQikStFqRhuRFxanep7ujQos.crl rsync://rpki.apnic.net/member_repository/A91B6814/0967C798B92411F0BFD5A56EC4F9AE02/9jxGQikStFqRhuRFxanep7ujQos.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jxGQikStFqRhuRFxanep7ujQos.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Dec 2025 05:55:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6814, serialNumber=F63C46422912B45A9186E445C5A9DEA7BBA3428B Validity Not Before: Nov 12 07:21:30 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6914357a-9528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b9:40:b1:8a:0c:06:79:1a:7c:ee:e3:8c:1f: f3:d2:af:de:bb:83:21:59:50:c3:f2:8b:8a:77:c4: ac:6d:0b:67:20:58:04:2a:e0:78:f0:7f:9c:85:37: 6a:53:ab:1e:8f:0d:5a:77:57:7d:b0:fb:77:c9:a1: 07:3a:db:2b:4f:9d:bc:6b:a4:80:16:2b:38:da:de: b4:ea:85:b2:ba:c0:fc:c2:63:80:57:e5:36:1d:4e: 16:ee:7f:d5:e4:9d:3d:7b:37:a3:89:03:8b:f4:c9: 9a:9a:98:2c:eb:7b:2a:03:35:01:4f:c0:88:2b:98: 1a:7f:de:3e:8d:89:ca:2e:f4:0d:4b:b0:90:86:fd: 35:11:9a:e3:fa:5d:4b:a6:aa:73:81:94:ba:c0:8e: c7:a5:99:0a:0c:9e:4c:07:e8:e6:c9:73:3e:a0:90: 67:07:8e:05:a4:cd:87:4c:bd:93:c6:d5:df:0e:b3: c7:69:8b:47:d4:7d:a0:dc:65:a3:40:e4:c9:78:69: 60:a4:d3:b1:0e:a2:f9:00:2a:70:57:ae:13:cf:f5: 42:39:01:f5:14:67:7b:42:81:30:0d:8b:ab:02:d2: b6:22:ac:8b:fd:a9:dd:d3:20:c6:3f:73:c6:29:34: b4:55:07:53:87:26:7e:a7:08:b8:cc:99:85:6a:86: dc:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E7:CA:90:A8:54:64:B7:E3:60:14:FB:66:11:5A:65:82:31:53:F3 X509v3 Authority Key Identifier: keyid:F6:3C:46:42:29:12:B4:5A:91:86:E4:45:C5:A9:DE:A7:BB:A3:42:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6814/0967C798B92411F0BFD5A56EC4F9AE02/9jxGQikStFqRhuRFxanep7ujQos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jxGQikStFqRhuRFxanep7ujQos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6814/0967C798B92411F0BFD5A56EC4F9AE02/0BDEA4CCBF9811F088EBC70AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.251.100.0/22 103.82.52.0/22 Signature Algorithm: sha256WithRSAEncryption 7b:78:4c:b2:c9:f3:30:c8:6e:f1:4c:84:9c:36:9c:40:b9:63: 6c:3f:3c:19:7c:96:af:cb:5e:5b:d7:35:ec:b2:c5:13:61:da: 54:8b:cc:28:a5:81:9a:cd:59:92:a2:28:f3:2e:ca:ee:31:a6: bd:14:ce:33:93:6d:8c:62:0c:a9:2d:38:eb:7a:04:8e:ee:21: a8:b2:73:82:db:22:2c:f6:6a:bb:ff:dd:f9:68:95:06:73:c0: 42:9c:c8:70:4d:98:01:c6:00:a5:ed:18:01:6f:c6:39:44:3c: bd:76:32:c0:df:be:a9:b1:af:54:a4:3c:99:eb:36:06:67:bd: 26:bb:29:a8:af:08:85:74:41:01:6a:8e:11:df:01:55:f6:8c: 82:06:63:a5:b4:31:f6:9d:68:66:81:bd:16:6c:26:94:70:8e: 38:22:9e:11:14:8e:18:f8:c5:21:0c:e7:af:dd:e9:7d:00:b8: 9a:da:b8:63:9b:a8:37:0f:72:b0:d1:35:2b:5b:a8:c6:05:1e: 77:93:46:7e:28:b4:5f:33:0b:7b:da:85:55:24:62:d4:06:a2: 05:b4:06:1c:3b:09:9d:36:b9:b2:87:90:4c:cb:44:6e:45:16: 19:c6:e7:3d:72:31:17:b9:13:5a:6c:d9:45:18:7b:49:c0:91: a2:46:71:25 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NjgxNDExMC8GA1UEBRMoRjYzQzQ2NDIyOTEyQjQ1QTkxODZFNDQ1QzVBOURFQTdC QkEzNDI4QjAeFw0yNTExMTIwNzIxMzBaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MTQzNTdhLTk1MjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwuUCxigwGeRp87uOMH/PSr967gyFZUMPyi4p3xKxtC2cgWAQq4Hjwf5yFN2pT qx6PDVp3V32w+3fJoQc62ytPnbxrpIAWKzja3rTqhbK6wPzCY4BX5TYdThbuf9Xk nT17N6OJA4v0yZqamCzreyoDNQFPwIgrmBp/3j6Nicou9A1LsJCG/TURmuP6XUum qnOBlLrAjselmQoMnkwH6ObJcz6gkGcHjgWkzYdMvZPG1d8Os8dpi0fUfaDcZaNA 5Ml4aWCk07EOovkAKnBXrhPP9UI5AfUUZ3tCgTANi6sC0rYirIv9qd3TIMY/c8Yp NLRVB1OHJn6nCLjMmYVqhtzNAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUWefKkKhU ZLfjYBT7ZhFaZYIxU/MwHwYDVR0jBBgwFoAU9jxGQikStFqRhuRFxanep7ujQosw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2ODE0LzA5NjdDNzk4Qjky NDExRjBCRkQ1QTU2RUM0RjlBRTAyLzlqeEdRaWtTdEZxUmh1UkZ4YW5lcDd1alFv cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOWp4R1Fpa1N0RnFSaHVSRnhhbmVwN3VqUW9zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjgxNC8wOTY3Qzc5OEI5MjQxMUYwQkZENUE1NkVDNEY5QUUwMi8wQkRFQTRDQ0JG OTgxMUYwODhFQkM3MEFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAiv7ZAMEAmdSNDANBgkqhkiG9w0BAQsFAAOCAQEAe3hMssnz MMhu8UyEnDacQLljbD88GXyWr8teW9c17LLFE2HaVIvMKKWBms1ZkqIo8y7K7jGm vRTOM5NtjGIMqS0463oEju4hqLJzgtsiLPZqu//d+WiVBnPAQpzIcE2YAcYApe0Y AW/GOUQ8vXYywN++qbGvVKQ8mes2Bme9JrspqK8IhXRBAWqOEd8BVfaMggZjpbQx 9p1oZoG9FmwmlHCOOCKeERSOGPjFIQznr93pfQC4mtq4Y5uoNw9ysNE1K1uoxgUe d5NGfii0XzMLe9qFVSRi1AaiBbQGHDsJnTa5soeQTMtEbkUWGcbnPXIxF7kTWmzZ RRh7ScCRokZxJQ== -----END CERTIFICATE-----Generated at Tue Nov 25 14:50:31 2025 by rpki-client