This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/49484A22DDBE11F0A59AB1524A6F56BC.roa File: 49484A22DDBE11F0A59AB1524A6F56BC.roa (raw, json) Hash identifier: MTPFNjVRIFfamyxT5rxM+L/QRwsJoQt0tdhl/bAA/SY= Subject key identifier: A3:A3:6D:7B:7B:A8:06:65:34:7E:F4:5A:E4:87:D9:BB:9B:A5:43:8A Certificate issuer: /CN=A91E5642/serialNumber=803079BAB2F1F6B3B9AAC411DF4A82C3F06A6571 Certificate serial: 0A17 Authority key identifier: 80:30:79:BA:B2:F1:F6:B3:B9:AA:C4:11:DF:4A:82:C3:F0:6A:65:71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDB5urLx9rO5qsQR30qCw_BqZXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/49484A22DDBE11F0A59AB1524A6F56BC.roa Signing time: Sat 20 Dec 2025 16:14:52 +0000 ROA not before: Sat 20 Dec 2025 16:14:52 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 139879 IP address blocks: 103.146.136.0/23 maxlen: 23 103.146.136.0/24 maxlen: 24 103.146.137.0/24 maxlen: 24 2407:11c0::/32 maxlen: 32 2407:11c0::/48 maxlen: 48 2407:11c0:1::/48 maxlen: 48 2407:11c0:2::/48 maxlen: 48 2407:11c0:3::/48 maxlen: 48 2407:11c0:4::/48 maxlen: 48 2407:11c0:5::/48 maxlen: 48 2407:11c0:6::/48 maxlen: 48 2407:11c0:7::/48 maxlen: 48 2407:11c0:8::/48 maxlen: 48 2407:11c0:9::/48 maxlen: 48 2407:11c0:a::/48 maxlen: 48 2407:11c0:b::/48 maxlen: 48 2407:11c0:c::/48 maxlen: 48 2407:11c0:d::/48 maxlen: 48 2407:11c0:e::/48 maxlen: 48 2407:11c0:f::/48 maxlen: 48 2407:11c0:10::/48 maxlen: 48 2407:11c0:11::/48 maxlen: 48 2407:11c0:12::/48 maxlen: 48 2407:11c0:13::/48 maxlen: 48 2407:11c0:14::/48 maxlen: 48 2407:11c0:15::/48 maxlen: 48 2407:11c0:16::/48 maxlen: 48 2407:11c0:17::/48 maxlen: 48 2407:11c0:18::/48 maxlen: 48 2407:11c0:19::/48 maxlen: 48 2407:11c0:1a::/48 maxlen: 48 2407:11c0:1b::/48 maxlen: 48 2407:11c0:1c::/48 maxlen: 48 2407:11c0:1d::/48 maxlen: 48 2407:11c0:1e::/48 maxlen: 48 2407:11c0:1f::/48 maxlen: 48 2407:11c0:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.crl rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDB5urLx9rO5qsQR30qCw_BqZXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:16:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2583 (0xa17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5642, serialNumber=803079BAB2F1F6B3B9AAC411DF4A82C3F06A6571 Validity Not Before: Dec 20 16:14:52 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=6946cb7c-1147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c2:23:c8:f1:94:b8:f4:bb:08:b8:24:32:57: 97:12:f9:ca:ab:c1:cd:d6:1a:80:9a:45:ac:d7:8d: 7f:62:09:aa:41:01:0b:ad:ec:9f:0c:13:87:7d:17: 91:4c:b8:e6:23:5e:00:c0:ac:61:6e:af:eb:01:5f: a0:af:8e:23:34:a8:12:92:f0:27:0e:26:80:f3:2e: b2:1f:4d:80:64:e0:57:6a:47:2d:6b:38:89:e1:31: 3d:b1:14:29:44:fd:ee:83:19:f8:43:1c:91:6a:a5: 8c:ac:f0:a8:be:37:61:7d:2c:ee:87:8f:68:44:3b: 25:ec:c7:f8:d9:ce:59:bd:30:3f:cb:dd:43:de:fa: 67:65:88:3a:ae:2c:b4:37:e4:58:34:63:cc:9e:62: ce:be:75:7a:06:4a:7f:20:a8:4b:00:53:b9:31:15: 30:d5:d4:32:84:4e:56:c2:2c:52:2a:18:9b:bd:b7: 35:c0:16:10:c0:e0:83:fa:3a:a6:56:58:07:e6:6c: 4f:73:d7:4d:a6:08:01:df:8d:fa:2a:12:5d:ba:82: f7:97:1d:cc:56:44:9c:20:04:21:a2:e9:93:f5:82: 29:7e:af:3e:4b:71:5b:ff:72:07:94:3a:04:93:16: 65:f4:6b:2a:f6:bb:e5:e2:19:5b:f0:c0:f9:99:89: a6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A3:6D:7B:7B:A8:06:65:34:7E:F4:5A:E4:87:D9:BB:9B:A5:43:8A X509v3 Authority Key Identifier: keyid:80:30:79:BA:B2:F1:F6:B3:B9:AA:C4:11:DF:4A:82:C3:F0:6A:65:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDB5urLx9rO5qsQR30qCw_BqZXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/49484A22DDBE11F0A59AB1524A6F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.146.136.0/23 IPv6: 2407:11c0::/32 Signature Algorithm: sha256WithRSAEncryption 2e:4a:5d:a7:82:5e:5f:3a:be:ec:7d:b4:99:89:03:2f:d7:3f: da:2b:9a:18:22:d3:ce:89:40:96:77:5f:b4:a1:c3:74:6c:fe: d0:61:09:b9:0b:6f:7e:f2:24:ab:7c:77:74:68:b1:28:6f:9d: 42:32:b9:3b:ed:00:ca:14:d7:78:90:6f:5e:41:6b:ab:2a:f6: 42:3f:03:41:da:b5:c5:f2:91:e5:e5:c1:58:50:16:d6:9e:6f: 02:e7:a7:03:8b:c2:ca:d6:fa:1a:9e:7a:23:da:90:a4:98:33: 71:87:77:98:b8:ff:a7:70:8d:da:dd:68:c9:5b:07:b0:a6:75: 38:54:81:5b:c7:62:ae:f0:b0:5d:4f:08:da:44:70:eb:d0:24: 71:c8:51:d0:05:f0:ec:7b:dc:65:7a:dd:6f:38:d2:69:21:f8: 66:e7:66:70:dc:a2:05:1a:46:82:e4:8a:d3:ec:d3:8c:e5:ce: 00:3c:7f:59:1e:d0:f6:57:17:ba:a8:ab:aa:2f:d9:2a:30:0c: 31:a1:ba:46:77:b7:a7:7d:2e:03:67:b9:43:27:3e:2e:37:4f: 6a:29:40:23:27:a1:46:24:6b:b5:79:27:72:04:49:51:2e:4f: 9d:5a:70:01:62:c2:47:bf:00:20:84:a1:e4:97:ed:3b:e1:27: 02:e6:4f:56 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICChcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU2NDIxMTAvBgNVBAUTKDgwMzA3OUJBQjJGMUY2QjNCOUFBQzQxMURGNEE4MkMz RjA2QTY1NzEwHhcNMjUxMjIwMTYxNDUyWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTQ2Y2I3Yy0xMTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAycIjyPGUuPS7CLgkMleXEvnKq8HN1hqAmkWs141/YgmqQQELreyfDBOHfReR TLjmI14AwKxhbq/rAV+gr44jNKgSkvAnDiaA8y6yH02AZOBXakctaziJ4TE9sRQp RP3ugxn4QxyRaqWMrPCovjdhfSzuh49oRDsl7Mf42c5ZvTA/y91D3vpnZYg6riy0 N+RYNGPMnmLOvnV6Bkp/IKhLAFO5MRUw1dQyhE5WwixSKhibvbc1wBYQwOCD+jqm VlgH5mxPc9dNpggB3436KhJduoL3lx3MVkScIAQhoumT9YIpfq8+S3Fb/3IHlDoE kxZl9Gsq9rvl4hlb8MD5mYmmLwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFKOjbXt7 qAZlNH70WuSH2bubpUOKMB8GA1UdIwQYMBaAFIAwebqy8fazuarEEd9KgsPwamVx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTY0Mi8xMDQwRjMyQzhB RkExMUVBOUIyOEE5MjlDNEY5QUUwMi9nREI1dXJMeDlyTzVxc1FSMzBxQ3dfQnFa WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dEQjV1ckx4OXJPNXFzUVIzMHFDd19CcVpYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTU2NDIvMTA0MEYzMkM4QUZBMTFFQTlCMjhBOTI5QzRGOUFFMDIvNDk0ODRBMjJE REJFMTFGMEE1OUFCMTUyNEE2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnkogwDQQCAAIwBwMFACQHEcAwDQYJKoZIhvcNAQELBQAD ggEBAC5KXaeCXl86vux9tJmJAy/XP9ormhgi086JQJZ3X7Shw3Rs/tBhCbkLb37y JKt8d3RosShvnUIyuTvtAMoU13iQb15Ba6sq9kI/A0HatcXykeXlwVhQFtaebwLn pwOLwsrW+hqeeiPakKSYM3GHd5i4/6dwjdrdaMlbB7CmdThUgVvHYq7wsF1PCNpE cOvQJHHIUdAF8Ox73GV63W840mkh+GbnZnDcogUaRoLkitPs04zlzgA8f1ke0PZX F7qoq6ov2SowDDGhukZ3t6d9LgNnuUMnPi43T2opQCMnoUYka7V5J3IESVEuT51a cAFiwke/ACCEoeSX7TvhJwLmT1Y= -----END CERTIFICATE-----Generated at Wed Dec 24 16:37:52 2025 by rpki-client