This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/86D7DAE6D1C211EF9AA9410EC4F9AE02.roa File: 86D7DAE6D1C211EF9AA9410EC4F9AE02.roa (raw, json) Hash identifier: 8qXcxCRSjyOP/oKs9vNyiIBs05KSJRouDgmhdgT6x8M= Subject key identifier: 23:17:74:DF:E0:4B:55:23:4D:91:02:97:F2:8F:43:79:A8:D8:A6:38 Certificate issuer: /CN=A91B8D33/serialNumber=08D68CF4500745375FF2CC584BA5FBE577BEE33F Certificate serial: 01B6 Authority key identifier: 08:D6:8C:F4:50:07:45:37:5F:F2:CC:58:4B:A5:FB:E5:77:BE:E3:3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/86D7DAE6D1C211EF9AA9410EC4F9AE02.roa Signing time: Tue 25 Nov 2025 01:49:03 +0000 ROA not before: Tue 25 Nov 2025 01:49:03 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 14618 IP address blocks: 103.190.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 01:48:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 438 (0x1b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8D33, serialNumber=08D68CF4500745375FF2CC584BA5FBE577BEE33F Validity Not Before: Nov 25 01:49:03 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69250b0f-af92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e0:37:ac:27:8d:ce:42:f8:4c:20:a9:5e:ae: 4b:0e:f6:75:6b:eb:12:17:5e:17:8a:86:d0:9c:ec: 19:4a:cd:6c:df:53:38:4f:b0:cb:e7:dc:b6:67:90: 8c:d9:ca:10:53:ca:6d:88:b9:08:e7:31:92:69:cb: a3:ad:2b:d6:5c:32:1d:93:c4:a4:78:27:f4:40:29: 74:35:7b:0d:ae:7f:08:16:a9:89:f3:18:19:bb:55: f3:62:da:78:90:3d:a9:0d:8e:94:c3:3b:8b:75:65: 19:21:c9:c8:0f:8d:c5:a7:55:69:ba:4d:b0:70:2e: e9:db:43:9a:b5:2a:4a:46:47:d3:f0:1f:88:4a:d0: 9b:9a:42:6e:93:dd:9f:a5:22:69:0b:75:88:50:0c: e3:4b:f5:65:f5:77:82:f6:19:b2:27:bb:c8:f2:7a: 83:e8:ad:1d:cf:ec:e4:bf:cb:f3:86:04:2c:48:62: 81:90:f7:9b:9c:49:7c:a3:e8:10:20:c1:f8:65:47: f1:df:cf:3c:af:ce:d9:5b:b9:fa:f7:12:d4:04:50: b4:74:e9:bf:07:7b:6a:60:8e:57:59:11:3a:df:7d: 65:60:d2:24:95:73:84:a9:b2:b3:0f:80:5b:85:04: a8:aa:1b:e2:76:05:a9:79:13:e7:2d:2b:d6:5d:6e: 14:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:17:74:DF:E0:4B:55:23:4D:91:02:97:F2:8F:43:79:A8:D8:A6:38 X509v3 Authority Key Identifier: keyid:08:D6:8C:F4:50:07:45:37:5F:F2:CC:58:4B:A5:FB:E5:77:BE:E3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/86D7DAE6D1C211EF9AA9410EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.190.70.0/24 Signature Algorithm: sha256WithRSAEncryption 96:3b:1c:5e:5c:77:36:40:a5:fa:36:cb:a0:32:c1:dd:4f:f3: 63:e1:9e:0b:44:8e:9d:8a:4a:e7:0d:69:93:f2:7b:8d:21:d2: bc:a8:39:7b:84:be:6a:bc:5f:17:5d:6b:56:e3:e6:50:44:06: f2:0d:62:98:ab:1b:1e:6d:c0:60:9b:24:9c:55:e0:01:7e:71: 8a:ee:60:16:1b:a3:4b:cd:fb:cf:a6:e9:48:8c:3b:c2:4c:40: 13:02:c6:f2:59:39:77:d1:08:b3:48:00:2b:84:14:65:14:0a: aa:57:a0:d7:15:ab:42:0e:a9:38:1c:0f:d5:34:4b:fc:f6:c4: b8:ce:fe:6c:68:b1:8e:40:bd:9e:f3:ac:3f:d6:4c:39:05:7b: 13:30:b8:ad:09:3b:8e:52:0a:1a:5c:49:a9:3a:38:37:dd:4f: 44:70:27:1c:77:64:2c:0e:db:55:b2:c4:a8:d8:67:71:97:e4: ea:a3:4d:9a:1c:03:09:c5:54:f0:6c:41:ea:a2:26:88:06:c5: 7c:30:f2:1a:47:44:bb:4f:72:ae:5a:3e:54:19:9b:0d:67:72: d3:30:af:bf:ec:17:37:7e:ab:05:23:28:bc:a6:d2:3b:f6:6f: fc:e1:02:e3:5c:18:0c:7c:31:cb:e0:c2:10:d2:c4:4c:4f:6c: ad:77:3e:c1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhEMzMxMTAvBgNVBAUTKDA4RDY4Q0Y0NTAwNzQ1Mzc1RkYyQ0M1ODRCQTVGQkU1 NzdCRUUzM0YwHhcNMjUxMTI1MDE0OTAzWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTI1MGIwZi1hZjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3OA3rCeNzkL4TCCpXq5LDvZ1a+sSF14XiobQnOwZSs1s31M4T7DL59y2Z5CM 2coQU8ptiLkI5zGSacujrSvWXDIdk8SkeCf0QCl0NXsNrn8IFqmJ8xgZu1XzYtp4 kD2pDY6UwzuLdWUZIcnID43Fp1Vpuk2wcC7p20OatSpKRkfT8B+IStCbmkJuk92f pSJpC3WIUAzjS/Vl9XeC9hmyJ7vI8nqD6K0dz+zkv8vzhgQsSGKBkPebnEl8o+gQ IMH4ZUfx3888r87ZW7n69xLUBFC0dOm/B3tqYI5XWRE6331lYNIklXOEqbKzD4Bb hQSoqhvidgWpeRPnLSvWXW4UmwIDAQABo4IClTCCApEwHQYDVR0OBBYEFCMXdN/g S1UjTZECl/KPQ3mo2KY4MB8GA1UdIwQYMBaAFAjWjPRQB0U3X/LMWEul++V3vuM/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEQzMy81OTYyNjcxMDQ3 NzcxMUVFQTZCRDUzN0VDNEY5QUUwMi9DTmFNOUZBSFJUZGY4c3hZUzZYNzVYZS00 ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NOYU05RkFIUlRkZjhzeFlTNlg3NVhlLTR6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjhEMzMvNTk2MjY3MTA0Nzc3MTFFRUE2QkQ1MzdFQzRGOUFFMDIvODZEN0RBRTZE MUMyMTFFRjlBQTk0MTBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnvkYwDQYJKoZIhvcNAQELBQADggEBAJY7HF5cdzZApfo2 y6Aywd1P82PhngtEjp2KSucNaZPye40h0ryoOXuEvmq8Xxdda1bj5lBEBvINYpir Gx5twGCbJJxV4AF+cYruYBYbo0vN+8+m6UiMO8JMQBMCxvJZOXfRCLNIACuEFGUU CqpXoNcVq0IOqTgcD9U0S/z2xLjO/mxosY5AvZ7zrD/WTDkFexMwuK0JO45SChpc Sak6ODfdT0RwJxx3ZCwO21WyxKjYZ3GX5OqjTZocAwnFVPBsQeqiJogGxXww8hpH RLtPcq5aPlQZmw1nctMwr7/sFzd+qwUjKLym0jv2b/zhAuNcGAx8McvgwhDSxExP bK13PsE= -----END CERTIFICATE-----Generated at Thu Dec 4 10:34:49 2025 by rpki-client