This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/988741FEDB8111F0B008B5AB60D3641D.roa File: 988741FEDB8111F0B008B5AB60D3641D.roa (raw, json) Hash identifier: +cWhXgmvXqt9a6ZqEZBrdto9E96GIgUY7aVDt14B1Zw= Subject key identifier: 33:4F:3A:B3:51:E1:D2:A5:45:EA:71:33:EF:D9:B8:AD:38:E1:46:6E Certificate issuer: /CN=A91CBDC8/serialNumber=9B67C87214ED99654071190BEBCF0B8D9FA1AF4E Certificate serial: 0C78 Authority key identifier: 9B:67:C8:72:14:ED:99:65:40:71:19:0B:EB:CF:0B:8D:9F:A1:AF:4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m2fIchTtmWVAcRkL688LjZ-hr04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/988741FEDB8111F0B008B5AB60D3641D.roa Signing time: Wed 17 Dec 2025 19:56:07 +0000 ROA not before: Wed 17 Dec 2025 19:56:07 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 134552 IP address blocks: 103.57.120.0/22 maxlen: 22 103.57.120.0/23 maxlen: 23 103.57.120.0/24 maxlen: 24 103.57.121.0/24 maxlen: 24 103.57.122.0/23 maxlen: 23 103.57.122.0/24 maxlen: 24 103.57.123.0/24 maxlen: 24 2404:4680::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.crl rsync://rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m2fIchTtmWVAcRkL688LjZ-hr04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:13:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3192 (0xc78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBDC8, serialNumber=9B67C87214ED99654071190BEBCF0B8D9FA1AF4E Validity Not Before: Dec 17 19:56:07 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69430ad7-24bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cf:07:43:3f:86:45:15:0e:eb:90:21:6d:32: d7:cb:91:34:a4:ab:ee:79:13:1e:17:c6:a0:84:04: 33:98:09:ee:3e:cf:8b:03:ad:03:f1:08:cc:21:88: a1:f2:18:60:a1:f6:07:00:8a:4b:e9:f4:12:1b:a7: c3:28:ae:5a:d8:7e:e2:3b:59:ea:7a:df:6c:7c:cd: 92:2e:76:a2:a6:8f:2b:0a:6d:a2:d2:63:02:87:f9: 12:c8:dc:6b:e4:f8:3f:c4:5e:bc:cf:d6:82:26:fb: c2:a4:b5:77:c4:2e:f9:0f:21:ca:e9:16:cb:e4:b6: e1:41:a2:ff:cb:22:4f:63:e4:74:ee:9d:a9:f5:cf: 9b:c2:6e:13:0e:6e:b5:41:d4:e4:30:1c:7e:f0:3d: 81:68:cc:de:66:fa:27:83:09:17:cd:f5:ea:53:a0: 40:f3:7f:39:8e:56:aa:cc:0d:bb:66:0e:9d:e7:42: ab:66:4e:d3:25:87:72:14:4d:2a:fc:9f:9f:26:f7: 6d:c0:59:64:9e:12:a0:bf:89:bf:70:ec:71:e5:53: 6a:38:9e:8f:dc:3c:ab:85:60:8f:5d:16:f2:1a:64: 19:25:47:16:8c:3d:d8:d7:af:c3:54:45:70:c9:b2: cf:42:2d:05:d1:2e:0d:12:d6:94:11:00:78:d7:e3: cf:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:4F:3A:B3:51:E1:D2:A5:45:EA:71:33:EF:D9:B8:AD:38:E1:46:6E X509v3 Authority Key Identifier: keyid:9B:67:C8:72:14:ED:99:65:40:71:19:0B:EB:CF:0B:8D:9F:A1:AF:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m2fIchTtmWVAcRkL688LjZ-hr04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/988741FEDB8111F0B008B5AB60D3641D.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.57.120.0/22 IPv6: 2404:4680::/32 Signature Algorithm: sha256WithRSAEncryption c9:8d:9f:b8:33:c0:67:9d:de:f8:8b:54:19:a4:07:80:b7:d3: 6a:34:ba:82:18:9c:69:93:c3:18:99:01:60:27:73:c5:b9:d1: a9:55:71:c1:c2:fb:8e:c7:00:9d:7c:da:8c:69:3a:93:cc:7d: 23:8e:74:b4:67:12:93:75:83:fb:36:c9:16:a8:0f:a3:c1:08: 86:85:35:67:3a:4e:d6:71:37:ab:60:92:40:6a:b3:e6:a4:9b: fb:26:c1:4f:86:b6:c0:ac:f0:cd:d6:d3:af:2c:a1:c5:bf:50: 4b:32:21:dc:ff:86:fd:14:50:da:97:a8:fc:d4:8f:1a:6e:d2: 54:6b:2d:f2:13:86:df:b6:76:7c:62:94:9e:17:44:8a:63:d4: 79:73:22:14:5c:5a:fa:22:9e:3a:08:87:76:de:6c:43:44:bf: f1:72:6e:d0:b2:63:e2:c5:ab:cc:32:7c:8c:8a:64:fa:f6:19: 75:26:f2:47:ea:c6:97:e2:b2:78:14:a2:eb:c1:9a:ed:16:cd: 62:50:9c:1d:f8:f8:0f:0a:08:a9:87:19:1c:21:55:0d:f7:94: dd:95:c3:8e:ac:1f:9d:9c:7c:44:4f:01:17:bb:ce:60:dc:d4: 37:83:d2:7a:07:e8:25:8f:88:7a:ca:73:e9:e6:fa:24:50:c6: e4:4d:19:cd -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICDHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JEQzgxMTAvBgNVBAUTKDlCNjdDODcyMTRFRDk5NjU0MDcxMTkwQkVCQ0YwQjhE OUZBMUFGNEUwHhcNMjUxMjE3MTk1NjA3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTQzMGFkNy0yNGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq88HQz+GRRUO65AhbTLXy5E0pKvueRMeF8aghAQzmAnuPs+LA60D8QjMIYih 8hhgofYHAIpL6fQSG6fDKK5a2H7iO1nqet9sfM2SLnaipo8rCm2i0mMCh/kSyNxr 5Pg/xF68z9aCJvvCpLV3xC75DyHK6RbL5LbhQaL/yyJPY+R07p2p9c+bwm4TDm61 QdTkMBx+8D2BaMzeZvongwkXzfXqU6BA8385jlaqzA27Zg6d50KrZk7TJYdyFE0q /J+fJvdtwFlknhKgv4m/cOxx5VNqOJ6P3DyrhWCPXRbyGmQZJUcWjD3Y16/DVEVw ybLPQi0F0S4NEtaUEQB41+PP8wIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFDNPOrNR 4dKlRepxM+/ZuK044UZuMB8GA1UdIwQYMBaAFJtnyHIU7ZllQHEZC+vPC42foa9O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkRDOC82Njk3NjNGMDE4 RTAxMUVBQTBDMzhFN0JDNEY5QUUwMi9tMmZJY2hUdG1XVkFjUmtMNjg4TGpaLWhy MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL20yZkljaFR0bVdWQWNSa0w2ODhMalotaHIwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0JEQzgvNjY5NzYzRjAxOEUwMTFFQUEwQzM4RTdCQzRGOUFFMDIvOTg4NzQxRkVE QjgxMTFGMEIwMDhCNUFCNjBEMzY0MUQucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnOXgwDQQCAAIwBwMFACQERoAwDQYJKoZIhvcNAQELBQAD ggEBAMmNn7gzwGed3viLVBmkB4C302o0uoIYnGmTwxiZAWAnc8W50alVccHC+47H AJ182oxpOpPMfSOOdLRnEpN1g/s2yRaoD6PBCIaFNWc6TtZxN6tgkkBqs+akm/sm wU+GtsCs8M3W068socW/UEsyIdz/hv0UUNqXqPzUjxpu0lRrLfITht+2dnxilJ4X RIpj1HlzIhRcWvoinjoIh3bebENEv/FybtCyY+LFq8wyfIyKZPr2GXUm8kfqxpfi sngUouvBmu0WzWJQnB34+A8KCKmHGRwhVQ33lN2Vw46sH52cfERPARe7zmDc1DeD 0noH6CWPiHrKc+nm+iRQxuRNGc0= -----END CERTIFICATE-----Generated at Wed Dec 24 10:28:44 2025 by rpki-client