This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4700/42CC0D50B3BB11F0A931BA6FC4F9AE02/6A797774BDDF11F0B524BD85C4F9AE02.roa File: 6A797774BDDF11F0B524BD85C4F9AE02.roa (raw, json) Hash identifier: XLt77ymX3IfxJDGE2bQhR8BqSs0c0er1rbpdz6nyrjM= Subject key identifier: E4:25:F3:55:9F:0F:A2:E5:EF:0C:7F:85:A1:83:87:F7:C6:55:10:7D Certificate issuer: /CN=A91E4700/serialNumber=4063941F29A47179EE8FF51F301DF1EA411FBD38 Certificate serial: 1A Authority key identifier: 40:63:94:1F:29:A4:71:79:EE:8F:F5:1F:30:1D:F1:EA:41:1F:BD:38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGOUHymkcXnuj_UfMB3x6kEfvTg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4700/42CC0D50B3BB11F0A931BA6FC4F9AE02/6A797774BDDF11F0B524BD85C4F9AE02.roa Signing time: Mon 10 Nov 2025 02:53:35 +0000 ROA not before: Mon 10 Nov 2025 02:53:35 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 63850 IP address blocks: 103.234.14.0/23 maxlen: 23 103.234.14.0/24 maxlen: 24 103.234.15.0/24 maxlen: 24 203.91.66.0/24 maxlen: 24 210.0.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4700/42CC0D50B3BB11F0A931BA6FC4F9AE02/QGOUHymkcXnuj_UfMB3x6kEfvTg.crl rsync://rpki.apnic.net/member_repository/A91E4700/42CC0D50B3BB11F0A931BA6FC4F9AE02/QGOUHymkcXnuj_UfMB3x6kEfvTg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGOUHymkcXnuj_UfMB3x6kEfvTg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 06:03:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4700, serialNumber=4063941F29A47179EE8FF51F301DF1EA411FBD38 Validity Not Before: Nov 10 02:53:35 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=691153af-83e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b7:1c:6a:f8:b3:71:d0:60:eb:97:c5:1f:c3: 7b:f6:fa:94:c7:ae:c9:91:2b:1f:e6:5b:21:1a:ad: fc:6a:bc:88:a9:2d:7c:ce:3e:81:e4:68:4c:22:88: 40:3c:49:12:5a:7f:22:ff:eb:3d:bb:46:f8:78:ac: 37:7d:4e:75:18:2a:31:67:dd:fd:99:f2:1e:0e:15: 0f:ba:6c:0d:8d:79:e3:a2:db:af:42:88:d0:64:a9: 2d:17:fc:6d:01:82:70:8d:af:31:39:56:61:29:b2: 92:a1:bc:7d:bf:5d:de:5f:11:89:a8:56:92:12:d4: 9e:29:11:29:6c:41:cc:c8:a4:19:58:e0:23:28:ff: 47:d5:e7:75:f4:18:4e:3d:94:43:ad:a4:79:83:19: 6c:4f:05:6e:08:d8:c5:98:ad:c7:24:ca:11:c1:9e: 1c:7b:f8:c3:94:e8:1e:a1:34:b1:20:c4:ad:e2:37: ff:44:c2:a8:70:63:07:fb:6d:c8:c1:a8:41:e0:85: e4:7d:03:37:f1:b5:5e:4d:24:9f:10:21:31:e3:d5: 49:66:00:80:45:5a:15:1a:bb:eb:c7:4f:6d:78:ae: 80:f4:9b:e1:c1:a0:12:5e:47:c1:63:2b:cf:e1:cc: e4:9d:65:4b:25:3b:e7:6d:a6:d9:7a:27:ff:d8:a1: 1f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:25:F3:55:9F:0F:A2:E5:EF:0C:7F:85:A1:83:87:F7:C6:55:10:7D X509v3 Authority Key Identifier: keyid:40:63:94:1F:29:A4:71:79:EE:8F:F5:1F:30:1D:F1:EA:41:1F:BD:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4700/42CC0D50B3BB11F0A931BA6FC4F9AE02/QGOUHymkcXnuj_UfMB3x6kEfvTg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGOUHymkcXnuj_UfMB3x6kEfvTg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4700/42CC0D50B3BB11F0A931BA6FC4F9AE02/6A797774BDDF11F0B524BD85C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.234.14.0/23 203.91.66.0/24 210.0.119.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:ab:f4:f1:59:f0:ac:65:41:1d:bc:8e:bc:79:80:8c:b3:69: fd:16:cc:9e:67:33:a0:b4:34:cb:a1:04:de:f2:fe:90:fa:8f: e3:a5:f9:93:7f:0d:0c:5c:8d:79:ca:48:8a:da:14:6d:28:f0: ec:e3:a9:e6:ed:66:1d:2a:21:f5:9d:8a:09:29:0b:7e:72:8f: 5c:4b:0e:a8:5a:a3:32:34:95:17:ea:ec:c5:89:b5:5c:a5:05: 02:d0:11:a3:2a:42:c7:07:7a:74:b9:24:61:27:7a:aa:52:78: d6:67:71:ea:86:d1:71:78:f6:72:19:ff:48:ed:b8:21:13:17: fe:0d:75:39:3f:01:9e:ea:b2:ec:d3:f0:77:2c:4b:92:c3:31: 97:30:0d:06:d4:f6:63:56:a8:00:d6:93:ca:76:cb:11:28:c3: 57:90:7c:37:e2:9e:02:9b:ea:b3:e9:1a:a6:d6:3b:ed:ed:65: 2e:d8:8e:c7:af:ff:f5:3d:bd:10:74:c5:44:d5:9b:d4:70:96: 89:9b:92:89:fa:9c:77:78:1f:a4:3c:6d:7b:99:7e:d9:88:f2: 9a:91:b9:e9:75:8c:91:0b:b7:a6:42:1c:2a:fb:4e:89:68:25: d9:0c:85:c0:bd:d9:4a:51:31:b6:6e:20:04:51:61:11:35:60: 2b:a5:21:aa -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NDcwMDExMC8GA1UEBRMoNDA2Mzk0MUYyOUE0NzE3OUVFOEZGNTFGMzAxREYxRUE0 MTFGQkQzODAeFw0yNTExMTAwMjUzMzVaFw0yNjAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MTE1M2FmLTgzZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8txxq+LNx0GDrl8Ufw3v2+pTHrsmRKx/mWyEarfxqvIipLXzOPoHkaEwiiEA8 SRJafyL/6z27Rvh4rDd9TnUYKjFn3f2Z8h4OFQ+6bA2NeeOi269CiNBkqS0X/G0B gnCNrzE5VmEpspKhvH2/Xd5fEYmoVpIS1J4pESlsQczIpBlY4CMo/0fV53X0GE49 lEOtpHmDGWxPBW4I2MWYrcckyhHBnhx7+MOU6B6hNLEgxK3iN/9EwqhwYwf7bcjB qEHgheR9AzfxtV5NJJ8QITHj1UlmAIBFWhUau+vHT214roD0m+HBoBJeR8FjK8/h zOSdZUslO+dtptl6J//YoR9LAgMBAAGjggKhMIICnTAdBgNVHQ4EFgQU5CXzVZ8P ouXvDH+FoYOH98ZVEH0wHwYDVR0jBBgwFoAUQGOUHymkcXnuj/UfMB3x6kEfvTgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0NzAwLzQyQ0MwRDUwQjNC QjExRjBBOTMxQkE2RkM0RjlBRTAyL1FHT1VIeW1rY1hudWpfVWZNQjN4NmtFZnZU Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUUdPVUh5bWtjWG51al9VZk1CM3g2a0VmdlRnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDcwMC80MkNDMEQ1MEIzQkIxMUYwQTkzMUJBNkZDNEY5QUUwMi82QTc5Nzc3NEJE REYxMUYwQjUyNEJEODVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDArBggrBgEFBQcBBwEB/wQc MBowGAQCAAEwEgMEAWfqDgMEAMtbQgMEANIAdzANBgkqhkiG9w0BAQsFAAOCAQEA G6v08VnwrGVBHbyOvHmAjLNp/RbMnmczoLQ0y6EE3vL+kPqP46X5k38NDFyNecpI itoUbSjw7OOp5u1mHSoh9Z2KCSkLfnKPXEsOqFqjMjSVF+rsxYm1XKUFAtARoypC xwd6dLkkYSd6qlJ41mdx6obRcXj2chn/SO24IRMX/g11OT8Bnuqy7NPwdyxLksMx lzANBtT2Y1aoANaTynbLESjDV5B8N+KeApvqs+kaptY77e1lLtiOx6//9T29EHTF RNWb1HCWiZuSifqcd3gfpDxte5l+2YjympG56XWMkQu3pkIcKvtOiWgl2QyFwL3Z SlExtm4gBFFhETVgK6Uhqg== -----END CERTIFICATE-----Generated at Wed Dec 3 16:09:29 2025 by rpki-client