This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/4214F694D4CF11F0822D643BC4F9AE02.roa File: 4214F694D4CF11F0822D643BC4F9AE02.roa (raw, json) Hash identifier: xrPMTyxZfW4JtLoXbO3lxa5rJuoLn0DNA6PUd1wUBGc= Subject key identifier: 75:5B:C8:EA:A3:9B:98:43:4B:B6:FE:92:F6:C8:52:7B:E2:08:FC:5B Certificate issuer: /CN=A91CF4FE/serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8 Certificate serial: 359C Authority key identifier: 16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/4214F694D4CF11F0822D643BC4F9AE02.roa Signing time: Tue 09 Dec 2025 07:18:28 +0000 ROA not before: Tue 09 Dec 2025 07:18:28 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 139753 IP address blocks: 101.108.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 03:11:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13724 (0x359c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF4FE, serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8 Validity Not Before: Dec 9 07:18:28 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=6937cd44-c16e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:04:32:5e:91:58:19:9e:09:3f:9a:92:30:0c: cd:ee:46:f3:11:52:a6:21:bc:45:e7:6e:1b:2b:c9: b3:3c:05:84:a3:c2:98:cc:3a:62:4e:79:9e:16:95: e7:b1:56:b9:17:6c:c1:98:b7:53:c4:77:23:44:7d: 25:86:24:39:1f:b8:13:84:8f:08:ff:4b:00:a6:72: a3:14:25:aa:d0:3d:a3:a0:b1:c3:ee:78:0c:2a:e0: 2a:c4:5f:98:b4:1f:31:39:09:5e:d0:cc:24:8f:2d: cc:f3:f0:e2:25:40:a5:26:d9:b8:73:2c:db:e3:34: fc:c7:35:ec:aa:32:2f:9a:fd:28:34:eb:33:60:18: 7b:52:0b:96:c2:3a:b4:6c:bd:5a:d1:3e:5b:cb:ca: 99:50:ff:ed:22:31:f5:64:d6:9e:ad:24:f4:77:ff: 94:ad:99:77:af:e2:4c:6c:d5:92:91:3e:e9:71:8f: 07:bb:fb:75:9a:5d:13:1a:e9:64:a6:0e:7c:c6:45: 30:e0:31:b2:bb:26:83:73:93:79:29:ad:3c:b1:fc: 39:87:7c:2b:1e:e1:86:48:c8:32:41:9e:9d:6b:ec: d1:16:99:ae:62:c2:9c:3b:7e:e7:0d:5b:81:11:48: a0:0e:d5:f4:59:07:49:23:9e:6d:aa:57:d3:f6:2b: df:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:5B:C8:EA:A3:9B:98:43:4B:B6:FE:92:F6:C8:52:7B:E2:08:FC:5B X509v3 Authority Key Identifier: keyid:16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/4214F694D4CF11F0822D643BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 101.108.157.0/24 Signature Algorithm: sha256WithRSAEncryption a6:d6:a1:ad:35:4f:5b:79:4a:2e:4f:80:42:c3:9b:e1:c8:1b: 18:92:4e:6d:d0:bd:ec:f2:67:9f:65:a2:1c:ed:5e:2a:91:56: bd:c8:9a:04:c7:d6:7d:e6:2e:4e:df:cf:62:47:eb:e5:60:f6: 01:e3:c4:d6:17:e1:84:21:0f:55:12:2a:b4:4a:aa:3f:5a:4f: fa:f5:3c:90:3a:aa:cc:b2:28:ea:1f:c0:9b:14:06:ef:29:27: bd:cd:68:bf:e0:91:98:1b:3e:f1:ca:cd:ce:35:2f:be:4e:d0: 63:37:3c:96:f4:4a:a4:fb:6d:1c:21:be:93:0c:33:aa:24:13: 0d:5a:51:0f:8b:a8:34:2f:40:c2:ae:f4:de:ad:a6:f9:b4:fa: cf:ad:d3:67:7c:c4:2b:9d:6a:b1:2c:a0:be:28:db:c4:dd:aa: 48:52:a2:1e:f6:d5:25:dc:2b:71:df:3f:9c:36:78:2a:9e:62: 9d:05:96:ca:ee:98:df:69:d0:58:f8:5b:b7:04:19:68:24:84: 28:ac:15:be:35:0f:a3:ca:93:b0:c5:99:91:5d:88:5a:2d:eb: 2e:0f:b3:9f:dd:de:d2:6d:cf:0c:68:37:d1:54:07:4d:88:5f: ff:5c:c3:29:67:0b:4f:3d:8c:c0:3b:6a:de:56:e3:c4:7a:2d: 69:aa:15:3c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y0RkUxMTAvBgNVBAUTKDE2QjU2NEI3NThERkNENTJDNUNFODkxMTkyRTMxQjcx NUIxQ0JGRTgwHhcNMjUxMjA5MDcxODI4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTM3Y2Q0NC1jMTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywQyXpFYGZ4JP5qSMAzN7kbzEVKmIbxF524bK8mzPAWEo8KYzDpiTnmeFpXn sVa5F2zBmLdTxHcjRH0lhiQ5H7gThI8I/0sApnKjFCWq0D2joLHD7ngMKuAqxF+Y tB8xOQle0Mwkjy3M8/DiJUClJtm4cyzb4zT8xzXsqjIvmv0oNOszYBh7UguWwjq0 bL1a0T5by8qZUP/tIjH1ZNaerST0d/+UrZl3r+JMbNWSkT7pcY8Hu/t1ml0TGulk pg58xkUw4DGyuyaDc5N5Ka08sfw5h3wrHuGGSMgyQZ6da+zRFpmuYsKcO37nDVuB EUigDtX0WQdJI55tqlfT9ivfFwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHVbyOqj m5hDS7b+kvbIUnviCPxbMB8GA1UdIwQYMBaAFBa1ZLdY381Sxc6JEZLjG3FbHL/o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjRGRS9CQTEzMTI0RTFE ODUxMUUyQTc3OTk5REMwOEIwMkNEMi9GclZrdDFqZnpWTEZ6b2tSa3VNYmNWc2N2 LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZyVmt0MWpmelZMRnpva1JrdU1iY1ZzY3YtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0Y0RkUvQkExMzEyNEUxRDg1MTFFMkE3Nzk5OURDMDhCMDJDRDIvNDIxNEY2OTRE NENGMTFGMDgyMkQ2NDNCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABlbJ0wDQYJKoZIhvcNAQELBQADggEBAKbWoa01T1t5Si5P gELDm+HIGxiSTm3QvezyZ59lohztXiqRVr3ImgTH1n3mLk7fz2JH6+Vg9gHjxNYX 4YQhD1USKrRKqj9aT/r1PJA6qsyyKOofwJsUBu8pJ73NaL/gkZgbPvHKzc41L75O 0GM3PJb0SqT7bRwhvpMMM6okEw1aUQ+LqDQvQMKu9N6tpvm0+s+t02d8xCudarEs oL4o28TdqkhSoh721SXcK3HfP5w2eCqeYp0FlsrumN9p0Fj4W7cEGWgkhCisFb41 D6PKk7DFmZFdiFot6y4Ps5/d3tJtzwxoN9FUB02IX/9cwylnC089jMA7at5W48R6 LWmqFTw= -----END CERTIFICATE-----Generated at Fri Dec 12 13:04:42 2025 by rpki-client