This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/D3ECF4B8E61D11EBB92C167BC4F9AE02.roa File: D3ECF4B8E61D11EBB92C167BC4F9AE02.roa (raw, json) Hash identifier: gtW0T63Z+cyhIr7vbr9l7KyLrM/pqhz2h7OhpzuAs3U= Subject key identifier: 99:CB:94:C0:DF:A3:63:C1:12:EF:06:25:CB:3C:93:7A:7E:26:66:FB Certificate issuer: /CN=A91E89CD/serialNumber=CE580730040908874EB62AF2760529E75C3D5C68 Certificate serial: 0945 Authority key identifier: CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/D3ECF4B8E61D11EBB92C167BC4F9AE02.roa Signing time: Thu 20 Nov 2025 19:40:42 +0000 ROA not before: Thu 20 Nov 2025 19:40:42 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 137184 IP address blocks: 103.104.100.0/22 maxlen: 22 103.104.100.0/24 maxlen: 24 103.104.101.0/24 maxlen: 24 103.104.102.0/24 maxlen: 24 103.104.103.0/24 maxlen: 24 202.43.224.0/24 maxlen: 24 2402:940::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 19:37:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2373 (0x945) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E89CD, serialNumber=CE580730040908874EB62AF2760529E75C3D5C68 Validity Not Before: Nov 20 19:40:42 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=691f6eb9-9807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:bb:c7:21:80:25:97:75:e6:85:37:7c:c5:9c: 5a:8d:58:0f:82:47:09:37:da:c7:1b:9f:e1:c5:4d: de:b4:0d:cc:f2:5b:38:1c:7f:de:0d:b0:8e:1b:a0: ad:d1:40:7c:00:e4:81:96:8a:3e:3b:a0:4b:ab:f1: bd:9e:fe:5c:54:76:f9:d4:4b:c4:b9:cc:df:e6:f1: 7b:60:b8:a1:eb:7c:00:4b:3f:ab:33:c3:30:98:fb: 5f:22:2b:62:77:37:74:52:18:ad:e2:53:51:f7:f0: 4d:fb:41:91:61:3f:a0:3d:3b:96:c5:d8:cf:14:cf: 95:f9:b0:6b:da:f5:e5:40:2c:9a:8c:c0:22:08:bb: 8c:ef:c6:55:40:10:22:88:ef:24:ee:01:72:3f:3e: 8d:0c:87:6a:ad:df:fc:fd:57:8d:91:bb:4f:c5:8e: 90:22:20:8d:ef:bf:c7:d1:15:95:eb:92:56:33:52: 86:dd:d5:0f:95:d5:66:3d:e9:b3:41:61:c3:d8:4a: b2:e3:ac:d6:4f:42:8e:c3:6b:1d:f6:97:ea:9e:2c: 83:21:df:e8:17:f8:49:b2:51:45:f3:93:ff:94:d8: 05:58:58:e5:42:c3:fd:92:45:44:61:6c:b3:8e:30: ac:e5:56:8c:b7:42:59:b3:87:dd:9b:d0:27:b6:67: d1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:CB:94:C0:DF:A3:63:C1:12:EF:06:25:CB:3C:93:7A:7E:26:66:FB X509v3 Authority Key Identifier: keyid:CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/D3ECF4B8E61D11EBB92C167BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.104.100.0/22 202.43.224.0/24 IPv6: 2402:940::/32 Signature Algorithm: sha256WithRSAEncryption 31:5e:bf:66:b2:7c:8a:75:6d:7e:ae:87:18:9f:6e:39:ea:17: e1:fb:4a:c2:f5:68:ee:3a:44:af:c2:9b:ed:d0:e7:b2:fd:7a: 44:b6:04:39:6e:f6:78:0c:90:b7:b5:c6:f9:05:bb:3a:6b:01: 12:5e:dc:0b:37:76:0f:27:80:1a:c7:2f:67:96:41:ed:25:01: b0:3e:1f:0e:99:ec:2c:ff:78:15:d6:38:f8:fb:d7:36:c4:ea: 70:99:f7:5b:52:ea:5e:54:a1:05:d9:4a:0b:af:d8:38:7a:3d: 39:15:13:37:98:8f:a5:73:e3:fd:27:e0:ec:c9:81:67:4e:30: b8:6e:16:1c:44:38:af:df:25:db:82:82:5c:2a:ec:7b:88:d0: 1e:38:df:2e:94:d6:39:c3:3f:9f:f8:d3:23:b5:4f:a7:07:63: 08:0e:ca:ff:fe:28:34:ea:2c:f8:7d:c8:8a:d0:14:42:b5:34: 36:fc:21:b7:6f:66:dc:a1:d0:b5:35:7c:35:b1:19:92:5f:7a: 50:c3:05:10:be:39:00:89:8a:1e:3c:ce:75:c7:ab:64:60:bb: 64:89:b9:15:9a:ac:ef:c5:7f:29:8f:ab:aa:8d:1f:98:fb:29: b2:19:27:16:4a:84:cf:aa:3b:07:9e:5a:1c:6a:c6:3c:58:48: b6:d7:c0:2f -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICCUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5Q0QxMTAvBgNVBAUTKENFNTgwNzMwMDQwOTA4ODc0RUI2MkFGMjc2MDUyOUU3 NUMzRDVDNjgwHhcNMjUxMTIwMTk0MDQyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTFmNmViOS05ODA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA57vHIYAll3XmhTd8xZxajVgPgkcJN9rHG5/hxU3etA3M8ls4HH/eDbCOG6Ct 0UB8AOSBloo+O6BLq/G9nv5cVHb51EvEuczf5vF7YLih63wASz+rM8MwmPtfIiti dzd0Uhit4lNR9/BN+0GRYT+gPTuWxdjPFM+V+bBr2vXlQCyajMAiCLuM78ZVQBAi iO8k7gFyPz6NDIdqrd/8/VeNkbtPxY6QIiCN77/H0RWV65JWM1KG3dUPldVmPemz QWHD2Eqy46zWT0KOw2sd9pfqniyDId/oF/hJslFF85P/lNgFWFjlQsP9kkVEYWyz jjCs5VaMt0JZs4fdm9AntmfRBQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFJnLlMDf o2PBEu8GJcs8k3p+Jmb7MB8GA1UdIwQYMBaAFM5YBzAECQiHTrYq8nYFKedcPVxo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODlDRC8zQzBENEExNkIw NTUxMUVBQTA0NUI4MEVDNEY5QUUwMi96bGdITUFRSkNJZE90aXJ5ZGdVcDUxdzlY R2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3psZ0hNQVFKQ0lkT3RpcnlkZ1VwNTF3OVhHZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTg5Q0QvM0MwRDRBMTZCMDU1MTFFQUEwNDVCODBFQzRGOUFFMDIvRDNFQ0Y0QjhF NjFEMTFFQkI5MkMxNjdCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJnaGQDBADKK+AwDQQCAAIwBwMFACQCCUAwDQYJKoZIhvcN AQELBQADggEBADFev2ayfIp1bX6uhxifbjnqF+H7SsL1aO46RK/Cm+3Q57L9ekS2 BDlu9ngMkLe1xvkFuzprARJe3As3dg8ngBrHL2eWQe0lAbA+Hw6Z7Cz/eBXWOPj7 1zbE6nCZ91tS6l5UoQXZSguv2Dh6PTkVEzeYj6Vz4/0n4OzJgWdOMLhuFhxEOK/f JduCglwq7HuI0B443y6U1jnDP5/40yO1T6cHYwgOyv/+KDTqLPh9yIrQFEK1NDb8 IbdvZtyh0LU1fDWxGZJfelDDBRC+OQCJih48znXHq2Rgu2SJuRWarO/FfymPq6qN H5j7KbIZJxZKhM+qOweeWhxqxjxYSLbXwC8= -----END CERTIFICATE-----Generated at Wed Dec 3 11:48:35 2025 by rpki-client