This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/D55D2990561F11E7B9B5FB2CC4F9AE02.roa File: D55D2990561F11E7B9B5FB2CC4F9AE02.roa (raw, json) Hash identifier: TYegsm2VjJ4yGqZpokQnrUVAvOStwaW2yQvtqa0ccQA= Subject key identifier: FA:9D:39:93:92:A1:10:7C:38:9A:BB:CF:DF:74:0A:E8:99:97:AA:29 Certificate issuer: /CN=A91DC866/serialNumber=EB680B7DE4C4A1B443ABD799BAF5249DD4B0EA90 Certificate serial: 3509 Authority key identifier: EB:68:0B:7D:E4:C4:A1:B4:43:AB:D7:99:BA:F5:24:9D:D4:B0:EA:90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62gLfeTEobRDq9eZuvUkndSw6pA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/D55D2990561F11E7B9B5FB2CC4F9AE02.roa Signing time: Wed 26 Nov 2025 15:00:54 +0000 ROA not before: Wed 26 Nov 2025 15:00:54 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 38896 IP address blocks: 103.2.144.0/22 maxlen: 24 121.58.184.0/21 maxlen: 24 122.129.96.0/20 maxlen: 24 122.129.112.0/21 maxlen: 24 2402:8600::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.crl rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62gLfeTEobRDq9eZuvUkndSw6pA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 14:46:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13577 (0x3509) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC866, serialNumber=EB680B7DE4C4A1B443ABD799BAF5249DD4B0EA90 Validity Not Before: Nov 26 15:00:54 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69271626-05e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:28:6f:b3:d7:24:3b:82:24:4d:c1:49:16:91: 53:95:91:ad:7f:1b:9f:31:f6:7a:1d:e6:da:fb:ff: 91:a7:de:c9:bb:4a:b7:3c:58:b8:87:b4:7d:ef:78: 4d:fe:de:84:be:3e:89:6b:ca:f0:ad:dc:92:f2:09: ae:dd:67:fd:f5:14:e3:c5:53:fd:30:f2:77:25:c3: 7b:f7:6e:87:68:6e:f6:f3:35:d4:18:d3:72:e7:d0: 0f:8b:a1:1f:44:04:47:14:57:54:7a:17:09:04:20: e2:72:8b:97:d6:0f:c3:f0:86:1f:2b:ce:70:00:43: 00:43:3d:59:d5:4c:f9:fd:05:de:ba:d7:0b:76:b6: 5e:53:f7:6c:ec:43:4e:50:cf:30:5a:2b:2c:39:90: f0:b2:a2:4a:83:d1:9c:1d:ec:04:66:79:71:4c:25: 5b:3e:d5:17:88:d4:85:50:59:94:cd:79:9a:73:4d: ca:5d:9b:ec:3a:30:dc:7b:87:fa:da:53:ed:4e:70: a6:ec:e4:79:d5:ce:cf:8b:c9:91:a3:cf:c2:14:a2: e3:21:da:c7:65:15:97:c9:26:e1:23:26:0e:6b:d0: fa:87:85:dc:a0:eb:1b:0b:15:dc:a4:2e:41:58:d1: 08:06:e8:0b:2f:63:75:33:07:91:7d:31:00:4f:79: 3a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:9D:39:93:92:A1:10:7C:38:9A:BB:CF:DF:74:0A:E8:99:97:AA:29 X509v3 Authority Key Identifier: keyid:EB:68:0B:7D:E4:C4:A1:B4:43:AB:D7:99:BA:F5:24:9D:D4:B0:EA:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62gLfeTEobRDq9eZuvUkndSw6pA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/D55D2990561F11E7B9B5FB2CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.2.144.0/22 121.58.184.0/21 122.129.96.0-122.129.119.255 IPv6: 2402:8600::/32 Signature Algorithm: sha256WithRSAEncryption 5c:5d:f0:57:70:e8:b3:87:02:00:17:de:44:76:37:ba:de:ab: 44:f1:bf:2b:98:e2:c1:7d:0e:cd:d1:6f:8b:1e:ea:6d:de:75: 89:3d:a3:36:db:24:39:d5:cc:e5:31:a9:12:09:e9:a1:cc:98: 57:40:ea:cd:3b:a5:2b:3f:ec:f4:40:e5:e8:15:57:73:df:fb: af:08:8a:23:2c:51:d1:92:ac:cb:10:32:f2:fe:30:1f:6a:9b: 01:0b:23:8a:fe:85:9e:9c:b8:43:a7:af:41:b1:23:c2:2a:6c: 48:b5:2d:f9:de:f9:e3:15:7b:97:08:2d:38:4c:52:94:93:e4: c6:b1:ad:24:5f:50:36:24:6f:fd:0a:31:b3:e6:bd:47:4f:31: 9f:31:b3:ba:5e:07:4c:c5:2d:dd:36:b6:69:b5:20:dc:0d:4b: c2:70:5d:14:36:88:ef:a9:83:46:e6:3d:e2:26:29:0f:e7:c7: 00:08:7d:de:e2:0c:26:dc:9a:f2:e1:2a:05:04:f4:f7:1c:61: 68:7c:27:01:81:a1:43:90:22:db:e1:17:8e:e3:f1:9e:41:19: 02:3e:94:88:70:50:80:25:32:12:3b:4f:cb:43:28:ad:df:43: 3c:ff:01:88:23:84:45:d4:5c:6a:4d:c2:ef:63:bd:da:6b:dd: d3:f2:e7:70 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgICNQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM4NjYxMTAvBgNVBAUTKEVCNjgwQjdERTRDNEExQjQ0M0FCRDc5OUJBRjUyNDlE RDRCMEVBOTAwHhcNMjUxMTI2MTUwMDU0WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTI3MTYyNi0wNWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvyhvs9ckO4IkTcFJFpFTlZGtfxufMfZ6Heba+/+Rp97Ju0q3PFi4h7R973hN /t6Evj6Ja8rwrdyS8gmu3Wf99RTjxVP9MPJ3JcN7926HaG728zXUGNNy59APi6Ef RARHFFdUehcJBCDicouX1g/D8IYfK85wAEMAQz1Z1Uz5/QXeutcLdrZeU/ds7ENO UM8wWissOZDwsqJKg9GcHewEZnlxTCVbPtUXiNSFUFmUzXmac03KXZvsOjDce4f6 2lPtTnCm7OR51c7Pi8mRo8/CFKLjIdrHZRWXySbhIyYOa9D6h4XcoOsbCxXcpC5B WNEIBugLL2N1MweRfTEAT3k6mwIDAQABo4ICuDCCArQwHQYDVR0OBBYEFPqdOZOS oRB8OJq7z990CuiZl6opMB8GA1UdIwQYMBaAFOtoC33kxKG0Q6vXmbr1JJ3UsOqQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzg2Ni82QTBERjlCQTFE OTYxMUUyQjdCNTA1N0YwOEIwMkNEMi82MmdMZmVURW9iUkRxOWVadXZVa25kU3c2 cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzYyZ0xmZVRFb2JSRHE5ZVp1dlVrbmRTdzZwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REM4NjYvNkEwREY5QkExRDk2MTFFMkI3QjUwNTdGMDhCMDJDRDIvRDU1RDI5OTA1 NjFGMTFFN0I5QjVGQjJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQgYIKwYBBQUHAQcBAf8E MzAxMCAEAgABMBoDBAJnApADBAN5OrgwDAMEBXqBYAMEA3qBcDANBAIAAjAHAwUA JAKGADANBgkqhkiG9w0BAQsFAAOCAQEAXF3wV3Dos4cCABfeRHY3ut6rRPG/K5ji wX0OzdFvix7qbd51iT2jNtskOdXM5TGpEgnpocyYV0DqzTulKz/s9EDl6BVXc9/7 rwiKIyxR0ZKsyxAy8v4wH2qbAQsjiv6Fnpy4Q6evQbEjwipsSLUt+d754xV7lwgt OExSlJPkxrGtJF9QNiRv/Qoxs+a9R08xnzGzul4HTMUt3Ta2abUg3A1LwnBdFDaI 76mDRuY94iYpD+fHAAh93uIMJtya8uEqBQT09xxhaHwnAYGhQ5Ai2+EXjuPxnkEZ Aj6UiHBQgCUyEjtPy0Mord9DPP8BiCOERdRcak3C72O92mvd0/LncA== -----END CERTIFICATE-----Generated at Mon Dec 15 13:32:31 2025 by rpki-client