This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/C598E8DCD0EB11F08228F063C4F9AE02.roa File: C598E8DCD0EB11F08228F063C4F9AE02.roa (raw, json) Hash identifier: Z4quZZ4AjBNcwf+Xgudk1obpLQYlCRMBDjouQM28P8I= Subject key identifier: BE:99:8B:16:5C:0E:BA:4F:4F:DC:10:B4:BE:DD:01:9D:CD:F2:FD:4E Certificate issuer: /CN=A91F3805/serialNumber=1E530FA9F660A8DC1738C7AA0C8AFC77F4F0BBB3 Certificate serial: 0B Authority key identifier: 1E:53:0F:A9:F6:60:A8:DC:17:38:C7:AA:0C:8A:FC:77:F4:F0:BB:B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/C598E8DCD0EB11F08228F063C4F9AE02.roa Signing time: Thu 04 Dec 2025 08:32:30 +0000 ROA not before: Thu 04 Dec 2025 08:32:30 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 149014 IP address blocks: 103.99.23.0/24 maxlen: 24 103.108.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.crl rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:57:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3805, serialNumber=1E530FA9F660A8DC1738C7AA0C8AFC77F4F0BBB3 Validity Not Before: Dec 4 08:32:30 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6931471e-d51f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8e:a4:33:81:18:8b:cd:0e:28:f0:aa:be:be: 76:bb:cc:59:be:15:c6:a4:f8:38:a1:54:8a:5c:7a: 9c:c9:1a:fb:07:fa:bb:fc:d1:16:44:a0:a2:8c:98: 6c:72:57:fc:2b:ef:be:dc:38:f3:90:07:21:11:f6: b2:75:2f:52:76:1b:e5:7c:72:37:9e:0c:8e:e3:43: 32:30:73:50:2f:e7:ef:e7:29:b3:fd:4b:ff:25:64: 6c:b4:0b:b4:49:3c:92:8e:f5:41:fe:b4:ab:7d:42: 4d:a9:11:91:0a:81:23:26:1d:37:4c:7e:2a:e3:4c: 35:11:e3:16:3f:10:9c:df:fc:bf:0b:5d:72:b7:1f: cd:00:a5:49:ae:4a:85:28:ee:29:1f:79:1c:12:d2: 15:38:db:fc:dc:2f:c3:8c:9a:e3:55:b4:46:6b:16: 1d:c2:19:98:18:39:2c:03:bf:55:de:27:0f:6d:2b: 9c:e8:ff:2b:92:ff:98:c0:4b:bf:8b:14:62:15:b6: f2:10:42:0a:b7:26:10:f6:21:4e:54:b5:50:0c:43: a2:4a:0c:93:a8:54:ff:e7:b3:1b:e5:44:bb:8b:97: 32:bf:ab:2c:5e:f1:b7:a8:bc:75:63:dd:e4:94:29: 16:b9:49:81:1c:7a:2c:34:8c:b6:30:fd:78:41:4f: 05:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:99:8B:16:5C:0E:BA:4F:4F:DC:10:B4:BE:DD:01:9D:CD:F2:FD:4E X509v3 Authority Key Identifier: keyid:1E:53:0F:A9:F6:60:A8:DC:17:38:C7:AA:0C:8A:FC:77:F4:F0:BB:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/C598E8DCD0EB11F08228F063C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.99.23.0/24 103.108.2.0/23 Signature Algorithm: sha256WithRSAEncryption 1b:25:e2:41:66:ca:f7:31:12:1e:c7:b5:ed:03:0b:03:d1:e8: 41:5b:78:fa:7e:b4:ec:9b:da:67:12:78:ac:a6:59:19:0c:43: 64:1a:fd:8e:d6:17:bd:a4:d4:9b:66:ed:26:ce:e1:20:f8:ee: 08:63:89:9b:bc:c3:e3:a1:24:bc:22:49:d9:d6:65:5c:3e:27: e4:88:b0:2e:37:cb:03:54:13:09:fd:a1:d5:79:9a:cc:7a:35: f6:c6:ab:16:27:05:52:69:ff:10:f7:8e:1e:53:fd:79:6c:d0: b3:9e:37:e1:48:7e:f7:98:c0:09:42:cc:c5:4e:c3:b6:f0:0c: 7e:dc:79:2b:00:a9:85:03:09:5a:bc:a3:2c:6f:1e:2d:0c:9c: 1c:e6:50:4e:30:12:01:b9:3a:3a:3a:32:83:44:4b:d0:84:65: 95:e1:f0:99:0b:de:d5:a2:64:50:69:c4:33:e4:a8:26:32:78: a5:60:d2:d2:08:44:d5:b5:d7:f5:bb:ee:04:f9:8d:fc:bf:41: b0:20:6a:0b:bc:17:d0:71:47:3d:5d:05:7d:4b:a8:aa:90:b5: 7e:51:b6:9a:ff:f2:20:3d:9f:9e:11:a0:30:f7:92:1c:87:8d: 32:cf:c2:67:34:68:40:9e:58:33:09:03:33:ca:41:27:6d:a7: 0b:e4:99:3b -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MzgwNTExMC8GA1UEBRMoMUU1MzBGQTlGNjYwQThEQzE3MzhDN0FBMEM4QUZDNzdG NEYwQkJCMzAeFw0yNTEyMDQwODMyMzBaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MzE0NzFlLWQ1MWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZjqQzgRiLzQ4o8Kq+vna7zFm+Fcak+DihVIpcepzJGvsH+rv80RZEoKKMmGxy V/wr777cOPOQByER9rJ1L1J2G+V8cjeeDI7jQzIwc1Av5+/nKbP9S/8lZGy0C7RJ PJKO9UH+tKt9Qk2pEZEKgSMmHTdMfirjTDUR4xY/EJzf/L8LXXK3H80ApUmuSoUo 7ikfeRwS0hU42/zcL8OMmuNVtEZrFh3CGZgYOSwDv1XeJw9tK5zo/yuS/5jAS7+L FGIVtvIQQgq3JhD2IU5UtVAMQ6JKDJOoVP/nsxvlRLuLlzK/qyxe8beovHVj3eSU KRa5SYEceiw0jLYw/XhBTwUvAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUvpmLFlwO uk9P3BC0vt0Bnc3y/U4wHwYDVR0jBBgwFoAUHlMPqfZgqNwXOMeqDIr8d/Twu7Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzODA1LzQwMEM1REVDRDAx MDExRjA5RjBERDgxQ0M0RjlBRTAyL0hsTVBxZlpncU53WE9NZXFESXI4ZF9Ud3U3 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSGxNUHFmWmdxTndYT01lcURJcjhkX1R3dTdNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzgwNS80MDBDNURFQ0QwMTAxMUYwOUYwREQ4MUNDNEY5QUUwMi9DNTk4RThEQ0Qw RUIxMUYwODIyOEYwNjNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAGdjFwMEAWdsAjANBgkqhkiG9w0BAQsFAAOCAQEAGyXiQWbK 9zESHse17QMLA9HoQVt4+n607JvaZxJ4rKZZGQxDZBr9jtYXvaTUm2btJs7hIPju CGOJm7zD46EkvCJJ2dZlXD4n5IiwLjfLA1QTCf2h1XmazHo19sarFicFUmn/EPeO HlP9eWzQs5434Uh+95jACULMxU7DtvAMftx5KwCphQMJWryjLG8eLQycHOZQTjAS Abk6Ojoyg0RL0IRlleHwmQve1aJkUGnEM+SoJjJ4pWDS0ghE1bXX9bvuBPmN/L9B sCBqC7wX0HFHPV0FfUuoqpC1flG2mv/yID2fnhGgMPeSHIeNMs/CZzRoQJ5YMwkD M8pBJ22nC+SZOw== -----END CERTIFICATE-----Generated at Fri Dec 5 21:03:24 2025 by rpki-client