This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/1FFD728CD7A611F0A479DB368AD3641D.roa File: 1FFD728CD7A611F0A479DB368AD3641D.roa (raw, json) Hash identifier: EBAvVPqSbmJwjsVWf0SQZcWuVCe/aOaPtRDcIKfL/fE= Subject key identifier: C6:98:AB:DC:AC:DC:7A:0D:02:D1:9B:29:DD:4A:B3:7B:62:2F:35:C5 Certificate issuer: /CN=A91C882A/serialNumber=6FA62BE0AD79A1B4C3869BA1990F214DF6B3CE27 Certificate serial: 012B Authority key identifier: 6F:A6:2B:E0:AD:79:A1:B4:C3:86:9B:A1:99:0F:21:4D:F6:B3:CE:27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6Yr4K15obTDhpuhmQ8hTfazzic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/1FFD728CD7A611F0A479DB368AD3641D.roa Signing time: Fri 12 Dec 2025 22:01:51 +0000 ROA not before: Fri 12 Dec 2025 22:01:51 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 141347 IP address blocks: 103.157.88.0/24 maxlen: 24 103.157.89.0/24 maxlen: 24 2401:a460::/34 maxlen: 34 2401:a460:4000::/34 maxlen: 34 2401:a460:8000::/34 maxlen: 34 2401:a460:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/b6Yr4K15obTDhpuhmQ8hTfazzic.crl rsync://rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/b6Yr4K15obTDhpuhmQ8hTfazzic.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6Yr4K15obTDhpuhmQ8hTfazzic.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 04:14:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C882A, serialNumber=6FA62BE0AD79A1B4C3869BA1990F214DF6B3CE27 Validity Not Before: Dec 12 22:01:51 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=693c90cf-a81a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:52:ce:ed:54:63:d5:30:c7:de:e5:ff:27:75: 20:7d:b7:ec:b9:4f:c6:c9:c5:f0:e4:f0:0e:a1:39: a8:6c:ee:00:24:ad:e1:06:09:c0:dc:8d:50:c4:df: bd:48:d2:08:09:f9:75:6a:b6:1b:a2:2a:2c:a4:7c: 57:c5:fa:93:f5:0d:b0:2a:f7:7a:2e:db:93:37:77: 7c:9f:7f:2e:ee:56:76:71:2a:7a:6d:b0:1b:2a:dc: 07:d7:e0:d2:38:c2:67:eb:f6:68:40:54:6b:18:97: 1e:f1:b1:67:f2:5e:b6:dc:b5:95:1d:bc:b5:89:56: 80:6f:06:e5:bc:b3:35:7c:a7:dd:a5:31:88:83:7e: 38:e8:e2:48:2a:e3:b7:c0:fa:ba:91:f5:a4:70:98: 7e:bf:5f:71:97:2c:7d:29:98:df:ad:25:27:f9:3b: 12:d1:23:4e:a0:9e:98:1f:54:bd:a2:3b:15:5c:a4: 3a:20:02:81:9e:10:ec:8b:d9:72:df:c6:f2:27:7c: 54:d9:e1:c7:6c:97:93:2d:b9:58:6b:23:81:81:c4: 19:14:cc:0c:53:31:eb:10:39:87:1f:3b:f5:64:4e: e4:09:ea:13:5e:10:10:a7:9a:c0:51:61:39:91:d4: f2:30:06:20:26:89:05:e0:84:41:88:93:43:06:26: a5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:98:AB:DC:AC:DC:7A:0D:02:D1:9B:29:DD:4A:B3:7B:62:2F:35:C5 X509v3 Authority Key Identifier: keyid:6F:A6:2B:E0:AD:79:A1:B4:C3:86:9B:A1:99:0F:21:4D:F6:B3:CE:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/b6Yr4K15obTDhpuhmQ8hTfazzic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6Yr4K15obTDhpuhmQ8hTfazzic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/1FFD728CD7A611F0A479DB368AD3641D.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.157.88.0/23 IPv6: 2401:a460::/32 Signature Algorithm: sha256WithRSAEncryption 3c:e8:af:be:09:55:11:7c:b3:ef:82:1c:8c:70:63:24:61:30: 86:2e:4a:0f:d6:66:06:95:65:46:94:80:c7:0d:71:51:a4:ce: c8:eb:f0:8d:83:05:ab:ef:9a:4a:10:d4:b9:82:c3:24:db:81: 7f:ae:7d:24:09:af:f5:31:17:d7:1d:22:b8:f8:d9:79:3e:81: 46:76:64:7a:4c:8c:66:5a:4d:e0:ee:3f:62:0c:92:56:eb:62: c9:04:c0:d8:1f:bc:30:32:8a:47:86:4c:4a:31:1d:3f:c9:e8: 3e:c6:74:22:1c:c1:b2:3f:af:50:95:a8:48:a0:bd:1f:47:af: c6:4d:55:26:fb:96:a8:dd:7e:b8:5b:5a:10:be:b4:f7:6a:00: b5:64:a8:8b:06:89:c4:20:14:0f:be:d8:cb:a3:d8:ed:93:a9: ca:33:4b:cd:e2:4b:71:5d:7e:47:13:ad:40:15:04:ee:84:ca: c5:62:85:00:85:2d:47:95:1f:cd:4b:30:43:df:e6:65:6d:72: 87:a2:df:f8:ae:39:e6:67:79:07:c0:5b:88:55:30:55:c2:51: 3d:33:f1:d0:30:09:59:d3:51:10:4b:f7:49:2d:24:5f:b8:4a: 04:c3:ed:6f:c6:bc:27:fb:74:40:e8:83:09:5a:6b:a5:5e:47: a8:5a:19:f1 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg4MkExMTAvBgNVBAUTKDZGQTYyQkUwQUQ3OUExQjRDMzg2OUJBMTk5MEYyMTRE RjZCM0NFMjcwHhcNMjUxMjEyMjIwMTUxWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTNjOTBjZi1hODFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmlLO7VRj1TDH3uX/J3UgfbfsuU/GycXw5PAOoTmobO4AJK3hBgnA3I1QxN+9 SNIICfl1arYboiospHxXxfqT9Q2wKvd6LtuTN3d8n38u7lZ2cSp6bbAbKtwH1+DS OMJn6/ZoQFRrGJce8bFn8l623LWVHby1iVaAbwblvLM1fKfdpTGIg3446OJIKuO3 wPq6kfWkcJh+v19xlyx9KZjfrSUn+TsS0SNOoJ6YH1S9ojsVXKQ6IAKBnhDsi9ly 38byJ3xU2eHHbJeTLblYayOBgcQZFMwMUzHrEDmHHzv1ZE7kCeoTXhAQp5rAUWE5 kdTyMAYgJokF4IRBiJNDBialLwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFMaYq9ys 3HoNAtGbKd1Ks3tiLzXFMB8GA1UdIwQYMBaAFG+mK+CteaG0w4aboZkPIU32s84n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODgyQS9COUMwQzk3QTIx QTIxMUVGQjkwNjlBNkFDNEY5QUUwMi9iNllyNEsxNW9iVERocHVobVE4aFRmYXp6 aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I2WXI0SzE1b2JURGhwdWhtUThoVGZhenppYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qzg4MkEvQjlDMEM5N0EyMUEyMTFFRkI5MDY5QTZBQzRGOUFFMDIvMUZGRDcyOENE N0E2MTFGMEE0NzlEQjM2OEFEMzY0MUQucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnnVgwDQQCAAIwBwMFACQBpGAwDQYJKoZIhvcNAQELBQAD ggEBADzor74JVRF8s++CHIxwYyRhMIYuSg/WZgaVZUaUgMcNcVGkzsjr8I2DBavv mkoQ1LmCwyTbgX+ufSQJr/UxF9cdIrj42Xk+gUZ2ZHpMjGZaTeDuP2IMklbrYskE wNgfvDAyikeGTEoxHT/J6D7GdCIcwbI/r1CVqEigvR9Hr8ZNVSb7lqjdfrhbWhC+ tPdqALVkqIsGicQgFA++2Muj2O2TqcozS83iS3FdfkcTrUAVBO6EysVihQCFLUeV H81LMEPf5mVtcoei3/iuOeZneQfAW4hVMFXCUT0z8dAwCVnTURBL90ktJF+4SgTD 7W/GvCf7dEDogwlaa6VeR6haGfE= -----END CERTIFICATE-----Generated at Wed Dec 17 20:45:22 2025 by rpki-client