This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/07EF6C98C45711F0A1027D38C4F9AE02.roa File: 07EF6C98C45711F0A1027D38C4F9AE02.roa (raw, json) Hash identifier: O7z3m4YVM0wU21WTponLx+IqwFDb7IX9H8f56v/43dA= Subject key identifier: 99:11:E3:9D:84:C3:04:99:D7:DC:48:77:7C:B9:54:07:AF:6A:B9:52 Certificate issuer: /CN=A91EEE79/serialNumber=71A3DBE2F0FFD0B107CA6B5713B15C97A8E3E1D1 Certificate serial: 04 Authority key identifier: 71:A3:DB:E2:F0:FF:D0:B1:07:CA:6B:57:13:B1:5C:97:A8:E3:E1:D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/caPb4vD_0LEHymtXE7Fcl6jj4dE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/07EF6C98C45711F0A1027D38C4F9AE02.roa Signing time: Tue 18 Nov 2025 08:17:32 +0000 ROA not before: Tue 18 Nov 2025 08:17:32 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 14618 IP address blocks: 103.139.114.0/24 maxlen: 24 103.139.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.crl rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/caPb4vD_0LEHymtXE7Fcl6jj4dE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 28 Nov 2025 05:58:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEE79, serialNumber=71A3DBE2F0FFD0B107CA6B5713B15C97A8E3E1D1 Validity Not Before: Nov 18 08:17:32 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=691c2b9c-af1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5a:32:c0:c4:fe:63:59:a9:db:32:34:5a:bb: a8:32:4e:47:10:75:b5:df:30:23:75:cc:63:d5:ba: f4:8e:70:dd:17:a8:c8:bb:04:c1:d2:7e:fe:4e:4c: c1:49:36:a0:3a:24:7c:58:95:46:ae:86:c2:28:fe: 41:f9:c2:76:22:b3:5c:66:d4:9a:dc:e9:ce:fa:47: 3d:90:bb:bb:1f:9f:ad:a6:aa:04:e8:4a:da:70:5b: 68:12:97:d1:62:6b:af:e0:28:c2:be:b4:e4:3c:4e: b1:84:2e:65:a3:04:a5:b9:5b:92:be:54:00:08:9f: 29:72:27:a9:a2:c1:b7:c0:d1:9a:85:ac:b0:72:c5: f7:92:05:d6:a6:eb:26:ad:6d:8a:ba:be:aa:87:3d: 80:5c:26:ca:69:28:4f:17:4b:76:38:00:e0:c4:cc: f7:60:a1:e8:f4:2e:56:1d:3e:1a:5b:40:39:cb:a2: a4:83:35:3f:16:5a:9c:62:3c:9a:76:a8:f0:b2:0f: 1a:33:b8:84:ea:15:85:e9:f2:bc:43:d3:66:a7:1c: 5f:17:9d:3c:f5:a1:8d:b5:9f:56:89:d0:4a:ce:50: d2:4d:0b:13:4d:d0:8b:dc:26:d6:64:8b:8d:ee:aa: fd:f7:b5:25:6c:b3:3a:99:cc:d3:68:0f:d3:70:23: 74:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:11:E3:9D:84:C3:04:99:D7:DC:48:77:7C:B9:54:07:AF:6A:B9:52 X509v3 Authority Key Identifier: keyid:71:A3:DB:E2:F0:FF:D0:B1:07:CA:6B:57:13:B1:5C:97:A8:E3:E1:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/caPb4vD_0LEHymtXE7Fcl6jj4dE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/07EF6C98C45711F0A1027D38C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.139.114.0/23 Signature Algorithm: sha256WithRSAEncryption 02:fb:eb:12:df:79:32:26:29:f6:a9:19:31:f4:04:50:34:0a: 30:af:56:4f:61:a9:c4:61:55:a0:88:6c:cf:76:57:08:8a:63: dd:4c:50:01:6d:c4:06:68:74:2e:62:e4:13:62:dd:0d:2a:ea: 74:dd:93:1b:5e:05:a1:5d:f1:b9:95:72:6a:e4:8f:35:0b:c3: 48:a9:5b:f5:62:95:3a:98:a1:85:f7:9a:ef:68:c3:d6:b1:9b: 94:38:c4:22:ae:e9:1b:9a:5a:79:bc:bb:d8:99:ec:c2:09:22: 5b:a2:26:83:a1:8b:0f:11:96:17:2d:55:dc:7f:23:cf:9e:cf: 47:92:51:07:49:38:9b:5d:28:bc:f8:d1:3b:ba:21:84:5e:78: 23:6c:0e:1f:93:6e:5f:94:d0:22:8d:78:a3:b3:32:a2:9e:65: f9:f9:32:4a:8d:22:57:b9:9e:20:29:78:6d:4c:c6:58:47:10: ab:1f:fc:a7:65:cc:57:a1:b5:28:f9:bc:e4:c4:c3:b3:1d:fc: 03:78:52:b5:5b:e0:51:c0:5e:ca:b4:3b:5e:96:2a:92:95:16: 8c:8f:f4:12:f5:64:41:07:bc:cd:a1:48:0b:b5:f9:30:a3:da: d3:60:5f:ab:52:f4:be:6b:25:f7:bc:e6:d4:8a:27:3a:c4:70: ee:b0:16:27 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RUU3OTExMC8GA1UEBRMoNzFBM0RCRTJGMEZGRDBCMTA3Q0E2QjU3MTNCMTVDOTdB OEUzRTFEMTAeFw0yNTExMTgwODE3MzJaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MWMyYjljLWFmMWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6WjLAxP5jWanbMjRau6gyTkcQdbXfMCN1zGPVuvSOcN0XqMi7BMHSfv5OTMFJ NqA6JHxYlUauhsIo/kH5wnYis1xm1Jrc6c76Rz2Qu7sfn62mqgToStpwW2gSl9Fi a6/gKMK+tOQ8TrGELmWjBKW5W5K+VAAInylyJ6miwbfA0ZqFrLByxfeSBdam6yat bYq6vqqHPYBcJsppKE8XS3Y4AODEzPdgoej0LlYdPhpbQDnLoqSDNT8WWpxiPJp2 qPCyDxozuITqFYXp8rxD02anHF8XnTz1oY21n1aJ0ErOUNJNCxNN0IvcJtZki43u qv33tSVsszqZzNNoD9NwI3RNAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUmRHjnYTD BJnX3Eh3fLlUB69quVIwHwYDVR0jBBgwFoAUcaPb4vD/0LEHymtXE7Fcl6jj4dEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVFRTc5Lzk1MUUyOEY4QzQ1 NjExRjA4RTUzOTIwQkM0RjlBRTAyL2NhUGI0dkRfMExFSHltdFhFN0ZjbDZqajRk RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY2FQYjR2RF8wTEVIeW10WEU3RmNsNmpqNGRFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUU3OS85NTFFMjhGOEM0NTYxMUYwOEU1MzkyMEJDNEY5QUUwMi8wN0VGNkM5OEM0 NTcxMUYwQTEwMjdEMzhDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWeLcjANBgkqhkiG9w0BAQsFAAOCAQEAAvvrEt95MiYp9qkZ MfQEUDQKMK9WT2GpxGFVoIhsz3ZXCIpj3UxQAW3EBmh0LmLkE2LdDSrqdN2TG14F oV3xuZVyauSPNQvDSKlb9WKVOpihhfea72jD1rGblDjEIq7pG5paeby72Jnswgki W6Img6GLDxGWFy1V3H8jz57PR5JRB0k4m10ovPjRO7ohhF54I2wOH5NuX5TQIo14 o7Myop5l+fkySo0iV7meICl4bUzGWEcQqx/8p2XMV6G1KPm85MTDsx38A3hStVvg UcBeyrQ7XpYqkpUWjI/0EvVkQQe8zaFIC7X5MKPa02Bfq1L0vmsl97zm1IonOsRw 7rAWJw== -----END CERTIFICATE-----Generated at Sat Nov 22 21:29:48 2025 by rpki-client