This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/F8846850D90D11F0AF9B1D207DD3641D.roa File: F8846850D90D11F0AF9B1D207DD3641D.roa (raw, json) Hash identifier: C8bVTV94pOOCxrg4kh5f59qcGeBnKrcTHRFtNag76kw= Subject key identifier: 11:88:C1:1F:D1:16:54:7F:91:3E:4A:73:D8:C3:DC:35:F4:24:9E:2C Certificate issuer: /CN=A91DBAA3/serialNumber=F9AE5E2A9DC80B51EAA7577278C3DE061A80AB63 Certificate serial: 02 Authority key identifier: F9:AE:5E:2A:9D:C8:0B:51:EA:A7:57:72:78:C3:DE:06:1A:80:AB:63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/F8846850D90D11F0AF9B1D207DD3641D.roa Signing time: Sun 14 Dec 2025 16:57:28 +0000 ROA not before: Sun 14 Dec 2025 16:57:28 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 152194 IP address blocks: 43.240.36.0/22 maxlen: 22 43.240.36.0/24 maxlen: 24 43.240.37.0/24 maxlen: 24 43.240.38.0/24 maxlen: 24 43.240.39.0/24 maxlen: 24 103.19.188.0/24 maxlen: 24 103.19.189.0/24 maxlen: 24 103.19.190.0/24 maxlen: 24 103.19.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.crl rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 16:57:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBAA3, serialNumber=F9AE5E2A9DC80B51EAA7577278C3DE061A80AB63 Validity Not Before: Dec 14 16:57:28 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=693eec78-185a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9d:cf:71:d4:60:1b:de:33:96:90:fa:54:93: 6c:fc:3a:cb:c2:96:99:44:d6:34:94:6c:10:f7:d1: 86:26:df:78:26:a2:87:e4:a2:49:85:e7:80:cd:cc: c1:69:6c:0a:7f:5b:03:bd:04:40:36:dc:f9:cc:a3: 51:5b:00:f7:fd:69:97:b8:28:0d:5f:eb:59:db:5d: a2:1e:32:6a:db:20:ff:b8:ff:9b:2b:9d:32:c7:7a: 31:93:19:18:6a:1a:90:aa:23:ed:64:4b:63:3a:6b: 1f:33:3c:a0:a0:20:39:d7:5f:02:ef:24:55:c2:59: 64:65:83:e8:4e:28:22:80:32:84:9e:2a:d6:ac:32: 7d:6e:61:0c:f5:2b:e9:d4:72:b3:26:ed:d4:a1:e0: f4:e1:3b:47:ae:1b:85:ad:86:ad:89:59:4f:e6:29: 3c:2c:d1:ce:d8:fb:78:49:c9:8a:52:46:1d:3a:2f: f9:f4:43:16:6a:22:51:26:2c:e3:29:52:0a:8c:0f: da:97:bc:f8:e3:59:dd:12:77:28:4d:91:e6:09:e2: b2:f2:28:25:64:09:3a:95:a5:cc:0b:97:f0:59:80: b2:bc:a5:5c:e5:62:1c:16:57:72:6d:6b:ad:f8:a2: ab:92:ef:58:ae:82:2c:16:99:9f:66:5c:5f:78:94: 6b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:88:C1:1F:D1:16:54:7F:91:3E:4A:73:D8:C3:DC:35:F4:24:9E:2C X509v3 Authority Key Identifier: keyid:F9:AE:5E:2A:9D:C8:0B:51:EA:A7:57:72:78:C3:DE:06:1A:80:AB:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/F8846850D90D11F0AF9B1D207DD3641D.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.240.36.0/22 103.19.188.0/22 Signature Algorithm: sha256WithRSAEncryption c6:d7:20:da:ac:bb:58:22:9e:69:dc:e4:ae:ab:a5:b2:2a:10: b0:2d:c6:e5:cd:2d:3b:88:91:01:a3:e0:a8:36:e2:dc:eb:81: 4c:9e:07:ae:de:94:65:0d:30:d0:94:db:a1:fd:0a:07:c5:9f: 1d:d9:8e:70:04:6c:cb:48:81:7f:a2:00:ba:24:94:8a:98:39: 24:ac:8f:d0:d5:b2:e2:6c:c3:43:ae:93:21:de:e6:64:36:e1: 19:15:5f:4a:d9:e1:a2:45:2b:60:f0:a5:c4:a2:91:9a:d3:af: 46:07:8a:4d:36:fc:8f:85:14:29:bb:67:58:89:cc:98:52:80: e3:a6:86:a7:09:36:5d:62:13:30:3f:73:6d:c4:ee:b2:ab:b1: 20:c0:cc:82:30:e5:a7:78:7e:44:20:73:c4:74:48:3a:22:68: f3:9f:ca:8e:3f:69:15:66:d4:94:6a:6e:d1:b6:c2:10:43:34: f9:d6:52:54:bf:01:8b:f5:7f:4e:09:67:b3:93:e1:88:7f:1c: 4e:4a:5a:d7:cf:10:3c:d5:a6:fc:81:5e:6c:60:01:2d:5b:21: 3b:06:4c:d4:6f:b2:03:ee:0d:c8:be:ff:ac:c2:8a:2a:15:64: 14:3c:6c:35:05:67:fb:c5:4f:dd:c3:cf:0e:72:6c:3c:9f:a3: 6c:fc:65:a1 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QkFBMzExMC8GA1UEBRMoRjlBRTVFMkE5REM4MEI1MUVBQTc1NzcyNzhDM0RFMDYx QTgwQUI2MzAeFw0yNTEyMTQxNjU3MjhaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV BAMMDTY5M2VlYzc4LTE4NWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5nc9x1GAb3jOWkPpUk2z8OsvClplE1jSUbBD30YYm33gmoofkokmF54DNzMFp bAp/WwO9BEA23PnMo1FbAPf9aZe4KA1f61nbXaIeMmrbIP+4/5srnTLHejGTGRhq GpCqI+1kS2M6ax8zPKCgIDnXXwLvJFXCWWRlg+hOKCKAMoSeKtasMn1uYQz1K+nU crMm7dSh4PThO0euG4Wthq2JWU/mKTws0c7Y+3hJyYpSRh06L/n0QxZqIlEmLOMp UgqMD9qXvPjjWd0SdyhNkeYJ4rLyKCVkCTqVpcwLl/BZgLK8pVzlYhwWV3Jta634 oquS71iugiwWmZ9mXF94lGs5AgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUEYjBH9EW VH+RPkpz2MPcNfQkniwwHwYDVR0jBBgwFoAU+a5eKp3IC1Hqp1dyeMPeBhqAq2Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURCQUEzLzFDMTc5MTNBRDkw RDExRjA4NjgwRDVGMTdDRDM2NDFELy1hNWVLcDNJQzFIcXAxZHllTVBlQmhxQXEy TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLWE1ZUtwM0lDMUhxcDFkeWVNUGVCaHFBcTJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkFBMy8xQzE3OTEzQUQ5MEQxMUYwODY4MEQ1RjE3Q0QzNjQxRC9GODg0Njg1MEQ5 MEQxMUYwQUY5QjFEMjA3REQzNjQxRC5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAivwJAMEAmcTvDANBgkqhkiG9w0BAQsFAAOCAQEAxtcg2qy7 WCKeadzkrqulsioQsC3G5c0tO4iRAaPgqDbi3OuBTJ4Hrt6UZQ0w0JTbof0KB8Wf HdmOcARsy0iBf6IAuiSUipg5JKyP0NWy4mzDQ66TId7mZDbhGRVfStnhokUrYPCl xKKRmtOvRgeKTTb8j4UUKbtnWInMmFKA46aGpwk2XWITMD9zbcTusquxIMDMgjDl p3h+RCBzxHRIOiJo85/Kjj9pFWbUlGpu0bbCEEM0+dZSVL8Bi/V/Tglns5PhiH8c Tkpa188QPNWm/IFebGABLVshOwZM1G+yA+4NyL7/rMKKKhVkFDxsNQVn+8VP3cPP DnJsPJ+jbPxloQ== -----END CERTIFICATE-----Generated at Thu Dec 18 02:09:20 2025 by rpki-client