This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/AF8386E29EEF11EC8450760EC4F9AE02.roa File: AF8386E29EEF11EC8450760EC4F9AE02.roa (raw, json) Hash identifier: DozQJ1dHmAg3g97IuJSuIhOMEdC6MQhv4ugGVIX2pIk= Subject key identifier: E2:CD:25:7E:27:14:74:E1:15:22:76:14:5F:50:71:06:22:06:D6:9C Certificate issuer: /CN=A91D06FC/serialNumber=3E5B3CAB9F141A06EB832E63F586CB0E66760402 Certificate serial: 03FF Authority key identifier: 3E:5B:3C:AB:9F:14:1A:06:EB:83:2E:63:F5:86:CB:0E:66:76:04:02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/AF8386E29EEF11EC8450760EC4F9AE02.roa Signing time: Tue 23 Dec 2025 00:20:29 +0000 ROA not before: Tue 23 Dec 2025 00:20:29 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 149011 IP address blocks: 103.176.88.0/23 maxlen: 24 2001:df0:c40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:20:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1023 (0x3ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D06FC, serialNumber=3E5B3CAB9F141A06EB832E63F586CB0E66760402 Validity Not Before: Dec 23 00:20:29 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6949e04c-e051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cf:ed:20:33:cd:fa:6e:1e:32:9a:aa:a8:b8: 4a:9a:75:88:84:13:da:b3:d1:7b:a0:de:3f:e3:a5: b9:05:92:b5:a4:89:51:c0:aa:5e:50:d8:62:03:71: 37:24:83:62:cc:2a:91:6d:8e:8e:4f:ba:7a:9c:b7: b9:37:1c:f5:44:71:07:49:63:25:81:13:b2:5d:69: b1:a3:52:b0:47:ba:1f:b4:ad:e9:0d:d7:3c:68:d2: 48:b8:c3:37:c5:8c:2f:2a:7e:14:09:a0:38:ad:bc: 83:06:d2:67:3e:26:eb:d3:28:5b:07:7e:31:a6:f3: 97:16:4c:aa:c0:64:40:1d:12:00:f3:66:ee:c5:d6: 98:e5:92:30:3d:a2:b3:26:ff:ed:36:db:c0:05:7f: a0:9f:d8:c8:aa:30:5e:cd:cb:30:1c:3f:c4:34:27: dc:bc:72:44:72:8f:fa:4b:16:9b:aa:d4:92:28:a4: 63:fc:b4:4d:fd:4a:65:0c:26:9f:d9:7c:b0:ac:f2: 42:e0:c8:93:3f:78:31:ff:43:9c:38:32:4a:8b:49: 1a:4d:ca:64:49:23:fe:e3:90:da:66:17:e4:33:fa: 9d:27:b5:bb:e8:52:0a:65:c9:d4:04:00:10:2e:22: 9e:3c:91:4d:4e:29:d4:a5:59:13:99:59:ac:36:ab: c2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:CD:25:7E:27:14:74:E1:15:22:76:14:5F:50:71:06:22:06:D6:9C X509v3 Authority Key Identifier: keyid:3E:5B:3C:AB:9F:14:1A:06:EB:83:2E:63:F5:86:CB:0E:66:76:04:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/AF8386E29EEF11EC8450760EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.176.88.0/23 IPv6: 2001:df0:c40::/48 Signature Algorithm: sha256WithRSAEncryption 72:c1:ce:d5:91:a2:a1:d9:9e:29:48:07:46:69:55:d9:09:c8: 23:b4:0f:7f:ea:be:2a:73:3f:1f:e0:c7:dd:ed:10:64:a2:ff: 76:80:1e:0a:bb:7d:f4:fd:47:33:e6:13:ad:74:6c:dc:3a:3f: b2:50:88:b8:a9:82:01:72:3b:d2:03:62:00:45:e2:9f:e7:2e: 7b:46:c7:a5:70:e0:31:3f:c9:a5:c5:fb:b0:a7:ff:c2:dd:7f: 96:f0:1e:36:b9:01:11:89:cc:2d:d1:06:3a:e1:1b:8c:bd:33: 21:2e:11:50:4c:d5:ba:37:98:9a:b5:6e:ec:f2:c3:11:89:69: 9a:a2:83:55:18:74:21:16:b2:db:e1:4b:da:06:8b:13:d1:b4: b3:ab:5c:34:e1:f0:5b:47:6a:9b:af:5a:d4:43:0c:5e:41:cf: db:51:85:1f:54:04:2d:11:3e:2e:bd:74:1b:37:cb:1b:04:72: fa:be:04:94:cf:80:62:95:7b:c4:45:5e:01:14:ed:75:bd:e9: 4d:eb:bf:aa:43:52:61:1e:b3:98:9d:51:8b:7a:a7:ad:c5:fc: e4:57:47:ad:9d:bd:ec:7f:f3:25:7e:fe:a8:17:07:85:6a:f0: 77:89:ef:9d:0f:79:0b:6b:14:3f:c8:db:86:5a:07:ce:38:a2: bd:ad:e7:31 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICA/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx RDA2RkMxMTAvBgNVBAUTKDNFNUIzQ0FCOUYxNDFBMDZFQjgzMkU2M0Y1ODZDQjBF NjY3NjA0MDIwHhcNMjUxMjIzMDAyMDI5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTQ5ZTA0Yy1lMDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA08/tIDPN+m4eMpqqqLhKmnWIhBPas9F7oN4/46W5BZK1pIlRwKpeUNhiA3E3 JINizCqRbY6OT7p6nLe5Nxz1RHEHSWMlgROyXWmxo1KwR7oftK3pDdc8aNJIuMM3 xYwvKn4UCaA4rbyDBtJnPibr0yhbB34xpvOXFkyqwGRAHRIA82buxdaY5ZIwPaKz Jv/tNtvABX+gn9jIqjBezcswHD/ENCfcvHJEco/6SxabqtSSKKRj/LRN/UplDCaf 2XywrPJC4MiTP3gx/0OcODJKi0kaTcpkSSP+45DaZhfkM/qdJ7W76FIKZcnUBAAQ LiKePJFNTinUpVkTmVmsNqvCxwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFOLNJX4n FHThFSJ2FF9QcQYiBtacMB8GA1UdIwQYMBaAFD5bPKufFBoG64MuY/WGyw5mdgQC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDZGQy9BRUYyMzBFMjlF RUIxMUVDODA0OUEyN0ZDNEY5QUUwMi9QbHM4cTU4VUdnYnJneTVqOVliTERtWjJC QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BsczhxNThVR2dicmd5NWo5WWJMRG1aMkJBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDA2RkMvQUVGMjMwRTI5RUVCMTFFQzgwNDlBMjdGQzRGOUFFMDIvQUY4Mzg2RTI5 RUVGMTFFQzg0NTA3NjBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnsFgwDwQCAAIwCQMHACABDfAMQDANBgkqhkiG9w0BAQsF AAOCAQEAcsHO1ZGiodmeKUgHRmlV2QnII7QPf+q+KnM/H+DH3e0QZKL/doAeCrt9 9P1HM+YTrXRs3Do/slCIuKmCAXI70gNiAEXin+cue0bHpXDgMT/JpcX7sKf/wt1/ lvAeNrkBEYnMLdEGOuEbjL0zIS4RUEzVujeYmrVu7PLDEYlpmqKDVRh0IRay2+FL 2gaLE9G0s6tcNOHwW0dqm69a1EMMXkHP21GFH1QELRE+Lr10GzfLGwRy+r4ElM+A YpV7xEVeARTtdb3pTeu/qkNSYR6zmJ1Ri3qnrcX85FdHrZ297H/zJX7+qBcHhWrw d4nvnQ95C2sUP8jbhloHzjiiva3nMQ== -----END CERTIFICATE-----Generated at Wed Dec 24 15:48:39 2025 by rpki-client