This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/1DB45B20C8ED11F0B740F848C4F9AE02.roa File: 1DB45B20C8ED11F0B740F848C4F9AE02.roa (raw, json) Hash identifier: ibYzYu8RH8C02kfa+CuxIWX8fTb9oHtMSxPb31nALF8= Subject key identifier: 80:8D:CC:60:0A:DF:48:1A:76:B9:53:4F:34:8A:61:59:45:E2:A0:F5 Certificate issuer: /CN=A91B886F/serialNumber=3253219CB60C7D9CFA6E633DBB4CA94D683992E0 Certificate serial: 03 Authority key identifier: 32:53:21:9C:B6:0C:7D:9C:FA:6E:63:3D:BB:4C:A9:4D:68:39:92:E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlMhnLYMfZz6bmM9u0ypTWg5kuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/1DB45B20C8ED11F0B740F848C4F9AE02.roa Signing time: Mon 24 Nov 2025 04:21:58 +0000 ROA not before: Mon 24 Nov 2025 04:21:58 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 1221 IP address blocks: 203.20.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.crl rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlMhnLYMfZz6bmM9u0ypTWg5kuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:52:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B886F, serialNumber=3253219CB60C7D9CFA6E633DBB4CA94D683992E0 Validity Not Before: Nov 24 04:21:58 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6923dd66-c4ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:35:8d:43:43:64:1a:b5:00:14:d7:bd:09:14: 9d:dd:ad:53:94:04:f8:47:a9:e0:70:3a:dc:e2:af: 00:c1:cb:ac:34:af:f5:79:2f:98:a0:68:0e:f9:b3: f6:17:35:ad:46:3b:ad:73:a1:f9:13:92:2f:72:4e: 0e:ec:74:c8:42:b5:62:19:9a:98:b9:25:91:59:6b: f3:9a:2d:41:30:2f:bc:04:96:db:ac:97:2b:f9:88: 18:46:df:8b:85:9c:eb:07:0c:a5:39:6b:11:92:d3: 9f:91:e4:13:90:36:aa:36:6e:7f:76:c9:04:48:d9: 7b:81:00:17:b0:47:9b:d9:b9:f0:78:f5:2c:ce:37: d9:eb:a3:7b:06:c1:26:35:3d:c4:84:3f:4a:49:8a: 3e:23:e1:da:1d:f3:6d:9e:cd:6f:ec:2a:db:7d:b3: 61:8c:5a:c4:02:95:bf:b8:dc:ce:c7:8b:51:9b:d6: dc:97:3d:77:91:94:8e:02:43:b5:87:4c:0a:06:ee: d1:0b:c4:7a:26:35:d7:be:37:25:fe:a6:26:e0:ae: 6f:64:36:9b:b8:c6:07:00:bc:7d:0e:a3:3c:44:06: 31:6b:f7:76:5a:35:d5:51:42:a3:59:60:cb:15:ef: 2c:28:26:fc:b5:42:45:f7:f4:86:86:7c:15:d9:fe: 9d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:8D:CC:60:0A:DF:48:1A:76:B9:53:4F:34:8A:61:59:45:E2:A0:F5 X509v3 Authority Key Identifier: keyid:32:53:21:9C:B6:0C:7D:9C:FA:6E:63:3D:BB:4C:A9:4D:68:39:92:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlMhnLYMfZz6bmM9u0ypTWg5kuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/1DB45B20C8ED11F0B740F848C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.20.43.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:3a:3d:05:0d:95:18:35:64:ae:fb:15:75:0d:d8:21:69:13: 05:5a:f0:bf:1a:e6:09:3d:60:d3:03:f6:1f:8a:2d:d9:35:42: c6:83:7c:9c:ac:66:eb:9d:5d:d8:b0:80:22:bf:e4:30:2c:73: 69:a8:93:39:19:73:86:e9:5a:8c:06:97:74:23:ab:c9:d1:a9: b3:83:15:b2:87:8c:86:61:af:cd:da:1c:bc:62:4d:a9:0f:b2: 5c:06:b9:ab:07:c2:f2:d9:6b:48:12:cc:7b:f7:65:dd:c5:bf: fc:3c:8a:08:a3:00:04:78:fa:6c:ec:60:38:3f:15:09:1f:27: 57:f4:8c:48:a1:4d:ae:c4:2e:52:c5:0d:b1:25:a0:fa:5d:1b: 0f:3b:8a:f7:a3:93:44:70:4f:08:a4:e9:0b:d2:fb:31:67:b2: 20:21:0c:ff:d9:c7:c9:6b:4e:25:0c:19:a8:ec:c4:89:4a:87: 31:5b:3e:e5:b4:31:c8:34:94:1a:8c:c0:c6:5a:87:bd:44:22: eb:71:5c:f8:cf:b5:3a:60:75:10:1a:bf:c9:ca:bd:a5:57:63: 67:c9:f1:62:59:d8:09:84:1c:6d:e0:1a:3d:06:94:bf:71:30: ba:5e:89:55:04:1b:3d:db:c6:e0:3f:78:61:c9:dd:9a:7c:7b: 2d:09:94:7a -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC ODg2RjExMC8GA1UEBRMoMzI1MzIxOUNCNjBDN0Q5Q0ZBNkU2MzNEQkI0Q0E5NEQ2 ODM5OTJFMDAeFw0yNTExMjQwNDIxNThaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MjNkZDY2LWM0ZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPNY1DQ2QatQAU170JFJ3drVOUBPhHqeBwOtzirwDBy6w0r/V5L5igaA75s/YX Na1GO61zofkTki9yTg7sdMhCtWIZmpi5JZFZa/OaLUEwL7wEltuslyv5iBhG34uF nOsHDKU5axGS05+R5BOQNqo2bn92yQRI2XuBABewR5vZufB49SzON9nro3sGwSY1 PcSEP0pJij4j4dod822ezW/sKtt9s2GMWsQClb+43M7Hi1Gb1tyXPXeRlI4CQ7WH TAoG7tELxHomNde+NyX+pibgrm9kNpu4xgcAvH0OozxEBjFr93ZaNdVRQqNZYMsV 7ywoJvy1QkX39IaGfBXZ/p0zAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUgI3MYArf SBp2uVNPNIphWUXioPUwHwYDVR0jBBgwFoAUMlMhnLYMfZz6bmM9u0ypTWg5kuAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4ODZGL0YxRjU2N0QwQzhF ODExRjA4NkMyNzY0RkM0RjlBRTAyL01sTWhuTFlNZlp6NmJtTTl1MHlwVFdnNWt1 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTWxNaG5MWU1mWno2Ym1NOXUweXBUV2c1a3VBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODg2Ri9GMUY1NjdEMEM4RTgxMUYwODZDMjc2NEZDNEY5QUUwMi8xREI0NUIyMEM4 RUQxMUYwQjc0MEY4NDhDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMsUKzANBgkqhkiG9w0BAQsFAAOCAQEAmzo9BQ2VGDVkrvsV dQ3YIWkTBVrwvxrmCT1g0wP2H4ot2TVCxoN8nKxm651d2LCAIr/kMCxzaaiTORlz hulajAaXdCOrydGps4MVsoeMhmGvzdocvGJNqQ+yXAa5qwfC8tlrSBLMe/dl3cW/ /DyKCKMABHj6bOxgOD8VCR8nV/SMSKFNrsQuUsUNsSWg+l0bDzuK96OTRHBPCKTp C9L7MWeyICEM/9nHyWtOJQwZqOzEiUqHMVs+5bQxyDSUGozAxlqHvUQi63Fc+M+1 OmB1EBq/ycq9pVdjZ8nxYlnYCYQcbeAaPQaUv3Ewul6JVQQbPdvG4D94Ycndmnx7 LQmUeg== -----END CERTIFICATE-----Generated at Sun Dec 7 01:43:06 2025 by rpki-client