This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/E16E7E38BB8211F0B31D1B65C4F9AE02.roa File: E16E7E38BB8211F0B31D1B65C4F9AE02.roa (raw, json) Hash identifier: YeBUDIUWZEw6KNF9ASetz2sLWKE1XOGn5uZS6H0oXrI= Subject key identifier: C7:C2:90:5A:79:6D:E9:33:74:D5:52:BC:EE:17:5B:F0:C2:25:4B:E5 Certificate issuer: /CN=A91B88CA/serialNumber=F625E6CC039026FF5BC9D6BDC42D8D1C18ABF33B Certificate serial: 0157 Authority key identifier: F6:25:E6:CC:03:90:26:FF:5B:C9:D6:BD:C4:2D:8D:1C:18:AB:F3:3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/E16E7E38BB8211F0B31D1B65C4F9AE02.roa Signing time: Tue 25 Nov 2025 03:20:53 +0000 ROA not before: Tue 25 Nov 2025 03:20:53 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 154309 IP address blocks: 103.67.52.0/23 maxlen: 23 103.67.52.0/24 maxlen: 24 103.67.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.crl rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 03:21:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 343 (0x157) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B88CA, serialNumber=F625E6CC039026FF5BC9D6BDC42D8D1C18ABF33B Validity Not Before: Nov 25 03:20:53 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69252095-56a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9f:db:e9:de:6c:0e:0f:17:29:ee:45:d7:96: 40:6e:84:f9:72:1c:62:37:32:a6:38:1e:4b:e2:98: 2a:6d:2e:3f:e4:9b:8b:58:34:a8:3f:d7:fd:da:22: 63:a4:bd:a6:05:53:1f:c8:f1:ef:1b:a5:98:07:b4: 40:90:36:7e:7f:32:97:5c:1e:79:bd:4d:2b:4e:d9: d9:71:de:1e:b4:69:b7:33:47:b4:78:fc:bb:4f:7a: 64:50:0b:af:be:ea:eb:2e:75:94:20:06:ac:21:97: 3a:94:90:b3:b3:8a:17:31:31:4b:56:14:8c:ae:de: c6:77:99:a9:f9:a7:0b:da:26:f1:ed:21:4a:1d:8e: d3:55:a8:bd:d0:8a:eb:96:5f:69:16:2c:fa:e8:e7: 5f:f0:0d:e6:5d:a3:ab:fb:e2:18:b5:df:79:45:6e: 89:22:de:ea:7f:a4:b2:49:9f:fe:a6:03:c4:7f:ca: 7f:4b:73:32:77:df:04:e7:5e:ff:aa:33:a3:ea:9a: b2:19:98:81:e8:8c:c1:85:2c:8b:da:a0:0d:88:1d: fd:a2:1c:54:6d:78:a7:c3:3b:c4:34:c7:c8:c3:5b: b4:0b:97:9d:01:b7:50:53:ab:d5:83:a8:1d:de:92: 85:d5:70:28:38:d3:24:47:09:a7:10:d2:ec:89:72: c9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:C2:90:5A:79:6D:E9:33:74:D5:52:BC:EE:17:5B:F0:C2:25:4B:E5 X509v3 Authority Key Identifier: keyid:F6:25:E6:CC:03:90:26:FF:5B:C9:D6:BD:C4:2D:8D:1C:18:AB:F3:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/E16E7E38BB8211F0B31D1B65C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.67.52.0/23 Signature Algorithm: sha256WithRSAEncryption 4f:7d:c2:f2:40:4a:da:6f:c2:ff:2f:f0:1a:a9:8e:32:0e:11: 03:b7:dd:cd:23:22:99:47:e3:eb:d7:79:f5:2c:02:67:99:82: e8:4c:90:41:b7:1c:39:18:e8:3a:cb:ec:b9:37:9d:f5:38:42: f3:df:dd:29:4f:07:03:c3:8b:8f:27:5d:99:81:c1:e1:6d:16: 5e:fd:b0:32:09:26:87:3b:c1:1d:7f:91:89:b6:b8:62:7f:a7: f6:8a:b8:17:7f:ba:3d:9f:cc:f3:49:05:d0:e7:c6:15:da:cf: 7f:1d:d8:2e:6f:60:fb:a3:49:a6:98:66:5d:d0:ac:4a:f7:d1: dc:b7:7a:7d:f4:0d:1b:e6:70:e9:e5:2d:35:12:0e:61:17:bd: 29:d8:7f:a3:d7:1c:04:39:4e:9d:06:0d:55:e5:ec:2e:bc:1b: 11:aa:9c:36:63:0b:1f:3d:51:20:88:f0:44:73:17:0a:a0:b4: 4b:cf:df:cd:21:60:63:73:ee:c4:7f:aa:ca:1a:92:81:d2:63: ef:f3:e9:6a:f0:4b:42:d2:97:a9:8e:fd:61:0d:15:c0:3d:a8: 40:cb:a1:93:6c:dd:8f:d4:a9:a4:77:24:6b:e9:9a:f0:47:cc: a9:bb:5e:0f:6f:63:ab:ad:d2:66:58:2a:56:e3:2b:6d:ca:1e: e8:45:ac:0d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg4Q0ExMTAvBgNVBAUTKEY2MjVFNkNDMDM5MDI2RkY1QkM5RDZCREM0MkQ4RDFD MThBQkYzM0IwHhcNMjUxMTI1MDMyMDUzWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTI1MjA5NS01NmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvp/b6d5sDg8XKe5F15ZAboT5chxiNzKmOB5L4pgqbS4/5JuLWDSoP9f92iJj pL2mBVMfyPHvG6WYB7RAkDZ+fzKXXB55vU0rTtnZcd4etGm3M0e0ePy7T3pkUAuv vurrLnWUIAasIZc6lJCzs4oXMTFLVhSMrt7Gd5mp+acL2ibx7SFKHY7TVai90Irr ll9pFiz66Odf8A3mXaOr++IYtd95RW6JIt7qf6SySZ/+pgPEf8p/S3Myd98E517/ qjOj6pqyGZiB6IzBhSyL2qANiB39ohxUbXinwzvENMfIw1u0C5edAbdQU6vVg6gd 3pKF1XAoONMkRwmnENLsiXLJFQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMfCkFp5 bekzdNVSvO4XW/DCJUvlMB8GA1UdIwQYMBaAFPYl5swDkCb/W8nWvcQtjRwYq/M7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODhDQS81Njk2RTc0NjM0 NjUxMUVGQUY2REVCNEVDNEY5QUUwMi85aVhtekFPUUp2OWJ5ZGE5eEMyTkhCaXI4 enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlpWG16QU9RSnY5YnlkYTl4QzJOSEJpcjh6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qjg4Q0EvNTY5NkU3NDYzNDY1MTFFRkFGNkRFQjRFQzRGOUFFMDIvRTE2RTdFMzhC QjgyMTFGMEIzMUQxQjY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnQzQwDQYJKoZIhvcNAQELBQADggEBAE99wvJAStpvwv8v 8BqpjjIOEQO33c0jIplH4+vXefUsAmeZguhMkEG3HDkY6DrL7Lk3nfU4QvPf3SlP BwPDi48nXZmBweFtFl79sDIJJoc7wR1/kYm2uGJ/p/aKuBd/uj2fzPNJBdDnxhXa z38d2C5vYPujSaaYZl3QrEr30dy3en30DRvmcOnlLTUSDmEXvSnYf6PXHAQ5Tp0G DVXl7C68GxGqnDZjCx89USCI8ERzFwqgtEvP380hYGNz7sR/qsoakoHSY+/z6Wrw S0LSl6mO/WENFcA9qEDLoZNs3Y/UqaR3JGvpmvBHzKm7Xg9vY6ut0mZYKlbjK23K HuhFrA0= -----END CERTIFICATE-----Generated at Wed Dec 3 16:19:42 2025 by rpki-client