This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/290732FC79A211E79F34D81FC4F9AE02.roa File: 290732FC79A211E79F34D81FC4F9AE02.roa (raw, json) Hash identifier: d78EOg29cwgkjlEj00wB6o7RFgtgzraFnnChE0DBg6g= Subject key identifier: AC:66:D2:9F:8B:78:75:8D:14:B8:7C:8B:85:55:3E:A5:27:0F:B1:59 Certificate issuer: /CN=A91CE533/serialNumber=09A3ECC49F83A798AE139F1DCBC536EE6F67CE7E Certificate serial: 19B8 Authority key identifier: 09:A3:EC:C4:9F:83:A7:98:AE:13:9F:1D:CB:C5:36:EE:6F:67:CE:7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CaPsxJ-Dp5iuE58dy8U27m9nzn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/290732FC79A211E79F34D81FC4F9AE02.roa Signing time: Wed 24 Dec 2025 16:14:11 +0000 ROA not before: Wed 24 Dec 2025 16:14:11 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 136134 IP address blocks: 103.81.68.0/22 maxlen: 22 103.81.68.0/24 maxlen: 24 103.81.69.0/24 maxlen: 24 103.81.70.0/24 maxlen: 24 103.81.71.0/24 maxlen: 24 2402:bc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.crl rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CaPsxJ-Dp5iuE58dy8U27m9nzn4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 15:19:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6584 (0x19b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE533, serialNumber=09A3ECC49F83A798AE139F1DCBC536EE6F67CE7E Validity Not Before: Dec 24 16:14:11 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=694c1152-f0e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3e:0c:69:8f:a3:e5:d3:3b:78:e1:f6:fc:a1: 0b:c7:43:85:21:1e:13:78:e4:82:aa:39:e5:1c:8c: ca:e9:0a:d5:eb:5f:e9:c3:27:82:03:3e:b4:02:b0: a4:65:3d:93:e2:99:5c:b6:d7:32:40:cf:5b:1a:5d: 01:2b:d7:ef:8a:9e:48:87:a1:6b:27:75:9d:81:84: f3:1a:93:6f:e8:ff:67:95:ad:a6:44:9a:14:a6:a2: 13:7a:89:f4:ef:59:2a:9e:35:66:c7:67:21:cc:eb: f4:d7:83:68:ee:ee:11:07:1b:63:86:96:4c:07:e0: 62:4f:92:44:9a:72:fa:08:a8:2c:69:e5:2e:24:00: cf:e7:de:fd:3d:69:2f:25:ec:42:71:08:ef:2a:d1: 64:9a:fe:66:ac:28:37:9a:55:63:bb:a4:51:44:c5: b5:13:5c:f1:2b:d3:0b:c9:92:82:12:72:97:a5:88: 6f:44:7f:13:0d:77:2d:7d:33:92:b2:86:71:ee:9e: 19:fb:78:dc:7d:b6:6c:f9:af:e0:46:85:90:eb:ea: 94:33:53:34:18:21:e8:14:4e:68:5f:4b:ad:98:7d: 67:40:a5:c7:e7:c4:c7:b6:09:1e:b0:cc:52:35:c5: 55:ec:af:3a:71:d9:f7:04:51:64:6d:49:6f:30:4e: c5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:66:D2:9F:8B:78:75:8D:14:B8:7C:8B:85:55:3E:A5:27:0F:B1:59 X509v3 Authority Key Identifier: keyid:09:A3:EC:C4:9F:83:A7:98:AE:13:9F:1D:CB:C5:36:EE:6F:67:CE:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CaPsxJ-Dp5iuE58dy8U27m9nzn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/290732FC79A211E79F34D81FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.81.68.0/22 IPv6: 2402:bc0::/32 Signature Algorithm: sha256WithRSAEncryption c7:40:f6:ed:55:27:1a:06:21:37:2b:f0:a9:ee:7e:3d:70:60: 76:71:f4:b2:e2:0c:b9:78:e9:6a:74:d6:ac:cf:be:98:97:64: f8:79:56:00:82:28:19:8d:0b:b3:6a:bc:da:33:ed:f3:80:36: 45:60:30:00:98:df:04:82:55:58:73:17:60:64:17:ff:04:97: f5:fd:ca:b5:af:58:31:06:e6:08:4f:54:81:94:5a:d3:f6:2b: d5:c7:47:f3:d9:54:0f:55:ed:4a:bc:7d:96:b3:f0:db:3b:53: f1:30:cb:4c:11:c0:a3:df:36:a5:b3:00:06:37:bf:ff:4c:08: ec:1d:59:d3:6b:61:71:8e:8b:60:cf:f8:5a:cf:94:6d:14:c0: 8a:c0:02:4a:19:23:94:e9:aa:50:66:d5:a6:4e:46:a4:74:c8: 5f:70:e2:a6:71:7e:c2:34:2f:6c:5d:58:53:41:c5:c4:6b:77: 9e:db:2b:65:ee:a5:ce:c9:d0:73:bb:82:5f:d0:fa:dd:fe:64: 96:ba:1b:10:96:c6:e8:f9:87:de:35:dc:17:fd:26:4b:83:17: 6b:dc:dc:0e:4c:e0:7a:51:8e:ab:96:5c:08:11:bb:65:1d:e8: 6b:be:0a:e8:63:a9:60:cf:3e:43:e0:5a:e7:80:f7:b6:2c:f6: b8:2d:5d:dd -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICGbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx Q0U1MzMxMTAvBgNVBAUTKDA5QTNFQ0M0OUY4M0E3OThBRTEzOUYxRENCQzUzNkVF NkY2N0NFN0UwHhcNMjUxMjI0MTYxNDExWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTRjMTE1Mi1mMGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0D4MaY+j5dM7eOH2/KELx0OFIR4TeOSCqjnlHIzK6QrV61/pwyeCAz60ArCk ZT2T4plcttcyQM9bGl0BK9fvip5Ih6FrJ3WdgYTzGpNv6P9nla2mRJoUpqITeon0 71kqnjVmx2chzOv014No7u4RBxtjhpZMB+BiT5JEmnL6CKgsaeUuJADP5979PWkv JexCcQjvKtFkmv5mrCg3mlVju6RRRMW1E1zxK9MLyZKCEnKXpYhvRH8TDXctfTOS soZx7p4Z+3jcfbZs+a/gRoWQ6+qUM1M0GCHoFE5oX0utmH1nQKXH58THtgkesMxS NcVV7K86cdn3BFFkbUlvME7FcwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFKxm0p+L eHWNFLh8i4VVPqUnD7FZMB8GA1UdIwQYMBaAFAmj7MSfg6eYrhOfHcvFNu5vZ85+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTUzMy9FOEZENEZBNDc5 OUYxMUU3Qjg3OTEwMURDNEY5QUUwMi9DYVBzeEotRHA1aXVFNThkeThVMjdtOW56 bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NhUHN4Si1EcDVpdUU1OGR5OFUyN205bnpuNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0U1MzMvRThGRDRGQTQ3OTlGMTFFN0I4NzkxMDFEQzRGOUFFMDIvMjkwNzMyRkM3 OUEyMTFFNzlGMzREODFGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnUUQwDQQCAAIwBwMFACQCC8AwDQYJKoZIhvcNAQELBQAD ggEBAMdA9u1VJxoGITcr8Knufj1wYHZx9LLiDLl46Wp01qzPvpiXZPh5VgCCKBmN C7NqvNoz7fOANkVgMACY3wSCVVhzF2BkF/8El/X9yrWvWDEG5ghPVIGUWtP2K9XH R/PZVA9V7Uq8fZaz8Ns7U/Ewy0wRwKPfNqWzAAY3v/9MCOwdWdNrYXGOi2DP+FrP lG0UwIrAAkoZI5TpqlBm1aZORqR0yF9w4qZxfsI0L2xdWFNBxcRrd57bK2Xupc7J 0HO7gl/Q+t3+ZJa6GxCWxuj5h9413Bf9JkuDF2vc3A5M4HpRjquWXAgRu2Ud6Gu+ CuhjqWDPPkPgWueA97Ys9rgtXd0= -----END CERTIFICATE-----Generated at Wed Dec 24 17:40:01 2025 by rpki-client