This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/02FB1DCAEF6A11E69A4AD551C4F9AE02.roa File: 02FB1DCAEF6A11E69A4AD551C4F9AE02.roa (raw, json) Hash identifier: o3z6BRLTnD7CnNxQl2rygbilFIo9W6Al6sOGDkj+Zio= Subject key identifier: 9C:85:4D:0C:45:E5:D1:E9:73:A8:6B:A0:28:4D:AC:D1:E0:8F:D1:FB Certificate issuer: /CN=A91DAFA2/serialNumber=18B1C88CEE68F63C21CD6A0CB1B831D5D6F5D6CF Certificate serial: 1C72 Authority key identifier: 18:B1:C8:8C:EE:68:F6:3C:21:CD:6A:0C:B1:B8:31:D5:D6:F5:D6:CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLHIjO5o9jwhzWoMsbgx1db11s8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/02FB1DCAEF6A11E69A4AD551C4F9AE02.roa Signing time: Wed 24 Dec 2025 16:13:51 +0000 ROA not before: Wed 24 Dec 2025 16:13:51 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 136179 IP address blocks: 103.83.59.0/24 maxlen: 24 2001:df7:d200::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.crl rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLHIjO5o9jwhzWoMsbgx1db11s8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 15:19:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7282 (0x1c72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DAFA2, serialNumber=18B1C88CEE68F63C21CD6A0CB1B831D5D6F5D6CF Validity Not Before: Dec 24 16:13:51 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=694c113f-6fd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:19:61:2a:b1:fb:47:d1:4a:d8:9d:2f:e0:ec: 22:68:7b:46:63:22:bd:61:2d:de:3f:e5:2a:d2:18: bd:a1:36:e1:96:b7:de:97:2b:1a:4e:19:92:c6:b6: 5c:41:98:6b:a6:c9:15:ea:22:3b:f4:91:a1:6d:54: ab:7a:94:61:e9:42:71:fd:9a:87:c3:52:5c:ad:90: e9:d4:90:32:75:ca:ed:05:bf:b9:8c:75:83:ab:fd: 92:21:0a:cf:a8:65:9b:71:b6:b9:6d:c0:7e:4a:09: 2b:27:fc:32:bf:80:06:8e:41:2a:98:62:e3:a1:09: 08:5d:bb:1c:1f:4f:d0:30:43:3f:a3:11:82:bb:9f: b4:6b:94:50:d9:8d:17:27:3a:da:eb:6e:99:e9:2b: 93:0c:eb:f1:34:7c:3f:d4:a5:15:66:2b:4f:49:bc: c7:a2:8b:d5:71:e1:7a:6f:3a:0f:29:3c:86:ba:6d: 05:9a:72:50:69:da:ae:a0:fd:79:69:0d:d2:3d:8d: 4f:f5:91:fa:b8:11:b7:c2:dc:ab:04:08:66:f8:97: 98:83:c2:17:3f:64:b3:3b:02:06:a3:29:f2:74:87: 53:c0:17:87:fb:76:d6:ba:a8:1b:94:43:54:a8:d1: 63:c3:9d:f6:94:89:af:60:64:9b:43:1c:bf:3e:8e: 7c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:85:4D:0C:45:E5:D1:E9:73:A8:6B:A0:28:4D:AC:D1:E0:8F:D1:FB X509v3 Authority Key Identifier: keyid:18:B1:C8:8C:EE:68:F6:3C:21:CD:6A:0C:B1:B8:31:D5:D6:F5:D6:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLHIjO5o9jwhzWoMsbgx1db11s8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/02FB1DCAEF6A11E69A4AD551C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.83.59.0/24 IPv6: 2001:df7:d200::/48 Signature Algorithm: sha256WithRSAEncryption 6b:69:65:48:18:84:f1:d3:c2:60:0a:92:d3:fb:62:f0:f1:84: 18:c6:0b:cc:80:82:be:34:e4:f6:72:5e:57:60:a1:2f:6d:10: 2d:dd:85:90:91:69:bf:21:94:4d:47:d3:19:3c:d4:23:3e:a0: 7b:47:9a:78:86:d7:ae:5c:f8:28:f2:15:ac:f3:e0:bc:7b:42: 6f:3d:72:ef:0d:6c:cf:70:a5:67:01:79:f2:6c:6d:ce:75:ae: ff:1e:51:ab:99:1a:5b:26:91:0a:b6:cd:67:b7:b3:c5:50:34: e6:95:1d:70:6b:4f:33:a9:59:86:bc:b6:b9:a1:cf:0f:84:e1: f2:27:99:85:7f:c1:99:3a:cd:76:3e:e5:0b:21:9a:2c:2f:57: bb:d2:28:3f:0c:74:a7:bd:84:b6:05:72:7d:4f:4d:cf:37:2d: c9:be:d6:0a:81:7d:3f:4f:64:76:e5:2d:ef:fb:80:23:97:00: 4b:cc:cc:aa:b6:12:63:d4:de:bf:45:bc:44:df:7b:30:9a:f4: fb:ab:96:11:67:1c:b0:64:0d:e5:6a:48:13:ff:f3:bc:dd:d0: c2:5e:e3:eb:07:6d:1b:b6:c0:c9:5a:2a:02:b4:7d:ff:bd:33: 8d:b6:ce:7a:45:ea:68:72:a5:b7:ce:01:92:e6:18:1d:72:3e: 88:de:00:24 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICHHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx REFGQTIxMTAvBgNVBAUTKDE4QjFDODhDRUU2OEY2M0MyMUNENkEwQ0IxQjgzMUQ1 RDZGNUQ2Q0YwHhcNMjUxMjI0MTYxMzUxWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTRjMTEzZi02ZmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxxlhKrH7R9FK2J0v4OwiaHtGYyK9YS3eP+Uq0hi9oTbhlrfelysaThmSxrZc QZhrpskV6iI79JGhbVSrepRh6UJx/ZqHw1JcrZDp1JAydcrtBb+5jHWDq/2SIQrP qGWbcba5bcB+SgkrJ/wyv4AGjkEqmGLjoQkIXbscH0/QMEM/oxGCu5+0a5RQ2Y0X Jzra626Z6SuTDOvxNHw/1KUVZitPSbzHoovVceF6bzoPKTyGum0FmnJQadquoP15 aQ3SPY1P9ZH6uBG3wtyrBAhm+JeYg8IXP2SzOwIGoynydIdTwBeH+3bWuqgblENU qNFjw532lImvYGSbQxy/Po58YQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFJyFTQxF 5dHpc6hroChNrNHgj9H7MB8GA1UdIwQYMBaAFBixyIzuaPY8Ic1qDLG4MdXW9dbP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQUZBMi9CN0I2Nzc2MEVG NjkxMUU2QkQ3M0M2NTFDNEY5QUUwMi9HTEhJak81bzlqd2h6V29Nc2JneDFkYjEx czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dMSElqTzVvOWp3aHpXb01zYmd4MWRiMTFzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REFGQTIvQjdCNjc3NjBFRjY5MTFFNkJENzNDNjUxQzRGOUFFMDIvMDJGQjFEQ0FF RjZBMTFFNjlBNEFENTUxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnUzswDwQCAAIwCQMHACABDffSADANBgkqhkiG9w0BAQsF AAOCAQEAa2llSBiE8dPCYAqS0/ti8PGEGMYLzICCvjTk9nJeV2ChL20QLd2FkJFp vyGUTUfTGTzUIz6ge0eaeIbXrlz4KPIVrPPgvHtCbz1y7w1sz3ClZwF58mxtznWu /x5Rq5kaWyaRCrbNZ7ezxVA05pUdcGtPM6lZhry2uaHPD4Th8ieZhX/BmTrNdj7l CyGaLC9Xu9IoPwx0p72EtgVyfU9Nzzctyb7WCoF9P09kduUt7/uAI5cAS8zMqrYS Y9Tev0W8RN97MJr0+6uWEWccsGQN5WpIE//zvN3Qwl7j6wdtG7bAyVoqArR9/70z jbbOekXqaHKlt84BkuYYHXI+iN4AJA== -----END CERTIFICATE-----Generated at Wed Dec 24 17:52:03 2025 by rpki-client