This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/35D4363E330711EB9D3AA60BC4F9AE02.roa File: 35D4363E330711EB9D3AA60BC4F9AE02.roa (raw, json) Hash identifier: Yh0VpmL2xaNSLKeY9uwOAgkPswKvx9eEvHJvYdloAEg= Subject key identifier: 6E:6F:A1:02:B9:56:CF:F3:12:4D:0D:EB:22:68:D0:92:A3:8B:41:F7 Certificate issuer: /CN=A91D2706/serialNumber=639239063917EE92C099E46AD3696C2ECA7C510A Certificate serial: 0797 Authority key identifier: 63:92:39:06:39:17:EE:92:C0:99:E4:6A:D3:69:6C:2E:CA:7C:51:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y5I5BjkX7pLAmeRq02lsLsp8UQo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/35D4363E330711EB9D3AA60BC4F9AE02.roa Signing time: Fri 12 Dec 2025 20:57:50 +0000 ROA not before: Fri 12 Dec 2025 20:57:50 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 134797 IP address blocks: 103.199.216.0/22 maxlen: 22 103.199.216.0/24 maxlen: 24 103.199.217.0/24 maxlen: 24 103.199.218.0/24 maxlen: 24 103.199.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.crl rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y5I5BjkX7pLAmeRq02lsLsp8UQo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 20:57:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1943 (0x797) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2706, serialNumber=639239063917EE92C099E46AD3696C2ECA7C510A Validity Not Before: Dec 12 20:57:50 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=693c81ce-b599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ae:67:bc:34:4e:cb:62:48:c2:c8:21:4b:20: 72:01:f8:0a:fb:99:48:90:27:56:78:26:2f:da:d0: 46:fe:34:4f:6b:11:60:5e:99:67:0a:ae:8e:50:46: 0a:0b:18:61:e4:b7:f1:62:7c:43:91:4d:d7:af:82: 48:55:5a:7f:e7:ef:25:1c:92:8d:76:88:76:b6:4f: 63:67:30:63:e4:df:e1:2a:d1:bd:32:91:a3:d1:89: 56:22:43:da:46:d3:d3:9e:ef:d0:b7:48:06:36:a1: f5:ae:c2:4f:41:8a:c2:ff:8b:90:67:3d:74:01:1f: 8d:7b:af:88:42:6b:9c:ce:73:41:a9:40:d5:25:b2: 25:01:fb:06:7f:96:67:e3:5f:6b:cc:ee:43:a7:ec: c1:e0:dc:de:a9:69:a2:70:36:12:91:8c:eb:c6:db: df:ff:d9:79:f1:8e:0a:d1:94:5a:65:1f:0e:7f:7d: c2:af:ea:81:59:66:46:f1:75:c8:82:f3:7b:c1:8f: fa:e1:16:9c:1e:5d:c2:0e:09:6f:8e:7e:30:a8:84: ee:93:13:2d:fd:f4:0b:5c:dc:59:e7:df:4f:68:a1: ef:9d:ac:85:f9:da:48:28:3f:7f:a6:56:96:23:d7: 9c:4e:47:29:cb:c2:5d:5d:e3:c1:86:f3:8c:61:7b: 5d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:6F:A1:02:B9:56:CF:F3:12:4D:0D:EB:22:68:D0:92:A3:8B:41:F7 X509v3 Authority Key Identifier: keyid:63:92:39:06:39:17:EE:92:C0:99:E4:6A:D3:69:6C:2E:CA:7C:51:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y5I5BjkX7pLAmeRq02lsLsp8UQo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/35D4363E330711EB9D3AA60BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.199.216.0/22 Signature Algorithm: sha256WithRSAEncryption 5d:08:d9:30:36:bf:96:58:04:1a:d0:c5:05:a5:f9:86:f3:8f: 5c:78:e2:c8:45:51:58:99:14:e3:04:6c:c7:15:c5:b1:29:13: 65:8e:b5:04:7a:89:62:63:d0:9b:23:aa:78:04:87:0d:1b:5f: be:88:75:08:ce:e4:1d:82:3c:6d:8a:37:94:b3:06:40:ae:6b: 0e:80:eb:03:55:be:4c:66:a1:3b:61:e7:21:64:40:c4:6b:20: 07:5c:3e:0f:2b:ca:77:0a:8d:1f:c4:58:2a:47:d5:0e:9c:c0: da:12:a2:c7:e3:8a:cf:b5:24:75:a4:ac:48:83:68:3d:a4:43: bd:70:32:d3:cf:42:90:13:96:6d:02:3f:00:09:4b:dc:8f:b8: 91:87:be:e8:79:c5:15:b0:e8:f2:60:49:56:88:e3:b1:70:69: 14:f3:16:b3:b5:f0:1c:86:5c:cc:66:84:83:df:e0:cd:e6:40: f5:0b:3b:f4:2a:4b:18:ef:ab:4c:17:55:70:d9:29:fc:7a:75: b3:4d:e8:70:08:4c:2e:5a:cd:f1:3e:8d:67:d1:e3:d5:30:28: 5f:2f:01:2f:9e:46:4d:92:39:4a:7a:cf:fb:2d:71:4e:0d:88: 6e:1e:78:e1:16:ce:f6:52:a2:3a:06:40:8e:59:be:d4:b3:a0: 99:f1:88:e3 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB5cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI3MDYxMTAvBgNVBAUTKDYzOTIzOTA2MzkxN0VFOTJDMDk5RTQ2QUQzNjk2QzJF Q0E3QzUxMEEwHhcNMjUxMjEyMjA1NzUwWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTNjODFjZS1iNTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsK5nvDROy2JIwsghSyByAfgK+5lIkCdWeCYv2tBG/jRPaxFgXplnCq6OUEYK Cxhh5LfxYnxDkU3Xr4JIVVp/5+8lHJKNdoh2tk9jZzBj5N/hKtG9MpGj0YlWIkPa RtPTnu/Qt0gGNqH1rsJPQYrC/4uQZz10AR+Ne6+IQmucznNBqUDVJbIlAfsGf5Zn 419rzO5Dp+zB4NzeqWmicDYSkYzrxtvf/9l58Y4K0ZRaZR8Of33Cr+qBWWZG8XXI gvN7wY/64RacHl3CDglvjn4wqITukxMt/fQLXNxZ599PaKHvnayF+dpIKD9/plaW I9ecTkcpy8JdXePBhvOMYXtdtwIDAQABo4IClTCCApEwHQYDVR0OBBYEFG5voQK5 Vs/zEk0N6yJo0JKji0H3MB8GA1UdIwQYMBaAFGOSOQY5F+6SwJnkatNpbC7KfFEK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjcwNi8wNEQ0NTdDMjMz MDYxMUVCQTI4MkQzMEFDNEY5QUUwMi9ZNUk1QmprWDdwTEFtZVJxMDJsc0xzcDhV UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k1STVCamtYN3BMQW1lUnEwMmxzTHNwOFVRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDI3MDYvMDRENDU3QzIzMzA2MTFFQkEyODJEMzBBQzRGOUFFMDIvMzVENDM2M0Uz MzA3MTFFQjlEM0FBNjBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnx9gwDQYJKoZIhvcNAQELBQADggEBAF0I2TA2v5ZYBBrQ xQWl+Ybzj1x44shFUViZFOMEbMcVxbEpE2WOtQR6iWJj0JsjqngEhw0bX76IdQjO 5B2CPG2KN5SzBkCuaw6A6wNVvkxmoTth5yFkQMRrIAdcPg8ryncKjR/EWCpH1Q6c wNoSosfjis+1JHWkrEiDaD2kQ71wMtPPQpATlm0CPwAJS9yPuJGHvuh5xRWw6PJg SVaI47FwaRTzFrO18ByGXMxmhIPf4M3mQPULO/QqSxjvq0wXVXDZKfx6dbNN6HAI TC5azfE+jWfR49UwKF8vAS+eRk2SOUp6z/stcU4NiG4eeOEWzvZSojoGQI5ZvtSz oJnxiOM= -----END CERTIFICATE-----Generated at Fri Dec 19 13:45:07 2025 by rpki-client