This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/A8086732B6DA11EBB7B67954C4F9AE02.roa File: A8086732B6DA11EBB7B67954C4F9AE02.roa (raw, json) Hash identifier: Hu3KJZGMFU1oSrjsFOXx/j+TH9Vy+Garohr2Zg0l2Z0= Subject key identifier: AD:37:BF:D9:4B:60:8D:F4:3A:55:86:3E:6C:4D:8D:D1:C4:60:0D:A9 Certificate issuer: /CN=A91E9DF8/serialNumber=95068BB30ABC7E007FD8387E4DE0A83EFAADD472 Certificate serial: 0639 Authority key identifier: 95:06:8B:B3:0A:BC:7E:00:7F:D8:38:7E:4D:E0:A8:3E:FA:AD:D4:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQaLswq8fgB_2Dh-TeCoPvqt1HI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/A8086732B6DA11EBB7B67954C4F9AE02.roa Signing time: Mon 10 Nov 2025 21:42:49 +0000 ROA not before: Mon 10 Nov 2025 21:42:49 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 136975 IP address blocks: 103.101.16.0/22 maxlen: 22 103.101.16.0/24 maxlen: 24 103.101.17.0/24 maxlen: 24 103.101.18.0/24 maxlen: 24 103.101.19.0/24 maxlen: 24 2403:3240::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.crl rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQaLswq8fgB_2Dh-TeCoPvqt1HI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:33:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1593 (0x639) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9DF8, serialNumber=95068BB30ABC7E007FD8387E4DE0A83EFAADD472 Validity Not Before: Nov 10 21:42:49 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69125c58-2485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fa:0a:3d:ba:f6:01:fa:a8:cb:e0:81:cd:98: 7d:8d:0a:66:51:b0:63:c2:85:88:d5:19:05:8c:a1: 18:25:6a:df:c5:f5:97:51:f9:14:d9:4e:32:20:be: 5d:8e:9f:4b:03:91:52:c3:08:a3:6b:5b:e9:c2:25: ce:8f:36:13:1f:4f:59:cf:35:a0:0e:8d:40:ca:02: e8:99:b0:41:98:7a:2c:fa:ca:ac:4c:1b:ef:f9:9a: 96:4f:2d:ec:c3:5f:8e:92:b0:77:e3:bd:d0:04:98: 77:77:bd:01:a7:ac:7d:db:a0:33:69:c3:bc:f7:70: e1:fa:c2:03:6c:46:8b:de:78:b8:cf:d6:4b:be:41: b4:59:c4:8d:4d:87:6c:60:1c:fc:d3:30:91:8c:e9: 9f:1e:8f:d4:fa:e3:06:90:14:48:f9:bb:6e:b5:e0: 3b:98:60:ce:75:b9:2d:1f:5a:39:6c:3f:fe:ad:1a: 0e:ea:11:6f:fe:75:52:7f:7c:c7:44:08:70:3a:cc: c3:55:41:4d:91:4f:6d:6b:99:44:33:78:40:c1:fd: f4:72:2e:39:3a:e2:b8:7b:95:13:d4:bf:2f:8d:44: 10:09:06:d9:2d:a9:a6:e1:20:6f:e3:99:81:62:be: 08:17:1e:9e:24:18:03:3b:79:1c:93:f8:9f:a3:7b: 0e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:37:BF:D9:4B:60:8D:F4:3A:55:86:3E:6C:4D:8D:D1:C4:60:0D:A9 X509v3 Authority Key Identifier: keyid:95:06:8B:B3:0A:BC:7E:00:7F:D8:38:7E:4D:E0:A8:3E:FA:AD:D4:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQaLswq8fgB_2Dh-TeCoPvqt1HI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/A8086732B6DA11EBB7B67954C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.101.16.0/22 IPv6: 2403:3240::/32 Signature Algorithm: sha256WithRSAEncryption 86:21:e3:e9:2b:93:d7:06:06:36:1a:ff:0e:18:c0:44:45:27: 4a:85:6b:03:aa:01:ce:88:8f:01:06:8e:b9:fd:28:91:2f:17: 05:d7:47:8c:c5:7c:06:e1:8e:a9:f8:ec:8e:16:57:2c:aa:76: e9:b2:84:b7:4d:6c:54:e4:6d:02:5a:60:5c:3f:3f:35:c8:8d: da:eb:6f:52:cb:5f:3b:49:c6:c7:9e:08:a5:81:94:32:82:78: d4:77:30:a6:5b:2a:63:e6:6f:e2:14:c9:3e:a0:5e:db:36:32: 98:c1:7c:1a:a0:71:71:69:1a:c2:c4:e4:4f:d9:77:e8:de:d6: cb:41:29:d8:2a:70:6a:8a:a3:76:5e:c1:e7:f3:58:b1:8b:ac: e4:14:b4:9e:b0:c3:f5:a8:6b:95:62:00:ce:7a:10:59:d4:9d: ab:ee:fe:92:83:eb:ac:28:89:ed:5f:09:8f:d7:34:0d:e3:b4: a5:69:b2:8d:4a:28:fc:d8:b2:54:aa:7f:e3:22:7e:b3:63:0e: 9d:3b:52:d4:80:99:93:1d:8e:cd:6c:99:d0:13:67:e3:58:22: 79:5b:7f:cd:d4:79:34:80:ae:97:25:54:7e:69:c4:03:5f:5c: 2e:45:70:ea:6d:4b:f4:da:ca:6e:88:c0:cf:97:e5:30:94:08: 5f:99:1f:c0 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlERjgxMTAvBgNVBAUTKDk1MDY4QkIzMEFCQzdFMDA3RkQ4Mzg3RTRERTBBODNF RkFBREQ0NzIwHhcNMjUxMTEwMjE0MjQ5WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTEyNWM1OC0yNDg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoPoKPbr2Afqoy+CBzZh9jQpmUbBjwoWI1RkFjKEYJWrfxfWXUfkU2U4yIL5d jp9LA5FSwwija1vpwiXOjzYTH09ZzzWgDo1AygLombBBmHos+sqsTBvv+ZqWTy3s w1+OkrB3473QBJh3d70Bp6x926AzacO893Dh+sIDbEaL3ni4z9ZLvkG0WcSNTYds YBz80zCRjOmfHo/U+uMGkBRI+btuteA7mGDOdbktH1o5bD/+rRoO6hFv/nVSf3zH RAhwOszDVUFNkU9ta5lEM3hAwf30ci45OuK4e5UT1L8vjUQQCQbZLamm4SBv45mB Yr4IFx6eJBgDO3kck/ifo3sOgQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFK03v9lL YI30OlWGPmxNjdHEYA2pMB8GA1UdIwQYMBaAFJUGi7MKvH4Af9g4fk3gqD76rdRy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOURGOC80QjNCODgxRUI2 RDkxMUVCOEY4NjU1NTRDNEY5QUUwMi9sUWFMc3dxOGZnQl8yRGgtVGVDb1B2cXQx SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xRYUxzd3E4ZmdCXzJEaC1UZUNvUHZxdDFISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTlERjgvNEIzQjg4MUVCNkQ5MTFFQjhGODY1NTU0QzRGOUFFMDIvQTgwODY3MzJC NkRBMTFFQkI3QjY3OTU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnZRAwDQQCAAIwBwMFACQDMkAwDQYJKoZIhvcNAQELBQAD ggEBAIYh4+krk9cGBjYa/w4YwERFJ0qFawOqAc6IjwEGjrn9KJEvFwXXR4zFfAbh jqn47I4WVyyqdumyhLdNbFTkbQJaYFw/PzXIjdrrb1LLXztJxseeCKWBlDKCeNR3 MKZbKmPmb+IUyT6gXts2MpjBfBqgcXFpGsLE5E/Zd+je1stBKdgqcGqKo3Zewefz WLGLrOQUtJ6ww/Woa5ViAM56EFnUnavu/pKD66woie1fCY/XNA3jtKVpso1KKPzY slSqf+MifrNjDp07UtSAmZMdjs1smdATZ+NYInlbf83UeTSArpclVH5pxANfXC5F cOptS/Taym6IwM+X5TCUCF+ZH8A= -----END CERTIFICATE-----Generated at Mon Dec 8 01:21:02 2025 by rpki-client