This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/C673BB1AD0EB11F088F8F063C4F9AE02.roa File: C673BB1AD0EB11F088F8F063C4F9AE02.roa (raw, json) Hash identifier: diqgpUQTbZfPnisy8N8gpRTy+mMN5Jc9y1vSbe6yr1U= Subject key identifier: 2D:68:65:51:B1:DB:9C:68:8F:9A:6B:A8:1A:93:E2:63:C9:2C:96:CB Certificate issuer: /CN=A91F3805/serialNumber=1E530FA9F660A8DC1738C7AA0C8AFC77F4F0BBB3 Certificate serial: 0C Authority key identifier: 1E:53:0F:A9:F6:60:A8:DC:17:38:C7:AA:0C:8A:FC:77:F4:F0:BB:B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/C673BB1AD0EB11F088F8F063C4F9AE02.roa Signing time: Thu 04 Dec 2025 08:32:32 +0000 ROA not before: Thu 04 Dec 2025 08:32:32 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 150706 IP address blocks: 103.99.23.0/24 maxlen: 24 103.108.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.crl rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:57:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3805, serialNumber=1E530FA9F660A8DC1738C7AA0C8AFC77F4F0BBB3 Validity Not Before: Dec 4 08:32:32 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6931471f-15de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0e:14:ca:94:1b:05:65:5c:42:cb:92:8d:fa: 17:45:84:7a:87:83:c5:7c:bb:59:9b:18:10:64:82: 62:af:7e:ad:a2:a5:da:2e:e8:a1:d4:4f:50:ce:c0: fb:34:33:97:20:de:4c:2a:d8:b5:07:22:03:14:06: fc:b2:60:ca:11:ad:35:98:b3:c2:fb:2d:c9:64:8d: 70:38:c4:fe:46:49:c1:b8:10:b0:c7:ff:37:59:8e: c2:83:0e:1f:4f:fb:4d:5d:48:7c:f7:57:b2:fe:40: a9:a6:32:07:47:1b:50:33:57:16:f8:d5:cc:78:a4: f3:7b:a6:60:3c:1e:bc:59:95:ca:2c:98:1d:96:52: 43:58:53:68:46:ba:da:6e:b6:5e:9e:da:ef:a5:65: 50:96:f6:e0:64:28:a7:f1:e4:b4:5e:49:a5:2e:65: b1:53:4c:8e:2f:d6:03:17:8e:ae:17:ac:7d:43:98: f7:10:c4:77:d0:fe:6b:9d:6d:a1:06:02:5f:6b:d5: 2f:d1:ee:bc:67:10:b0:8e:01:90:c6:33:11:67:ad: 79:5d:28:5a:9a:dc:47:94:62:a7:8f:ef:4b:38:a0: b7:fc:ac:98:64:56:2b:26:41:d9:5b:1e:12:d0:1c: fd:69:ce:f9:16:4d:b7:39:85:d2:cb:46:40:01:d0: fb:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:68:65:51:B1:DB:9C:68:8F:9A:6B:A8:1A:93:E2:63:C9:2C:96:CB X509v3 Authority Key Identifier: keyid:1E:53:0F:A9:F6:60:A8:DC:17:38:C7:AA:0C:8A:FC:77:F4:F0:BB:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/C673BB1AD0EB11F088F8F063C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.99.23.0/24 103.108.2.0/23 Signature Algorithm: sha256WithRSAEncryption 1f:57:cd:fe:aa:01:bf:dd:4b:81:4a:56:e6:af:0c:5b:f0:5a: e7:97:d3:ec:dd:8e:ae:64:7a:01:d5:c3:3f:f2:28:a7:50:61: e2:2c:27:53:ca:cc:c7:89:43:23:f9:49:6f:00:f8:33:69:6a: 35:a8:da:6b:2a:e4:0d:8c:e5:36:2c:b0:db:e1:35:a1:85:26: 0c:81:74:4f:ad:a8:be:6d:00:6c:cd:6a:50:3b:06:3b:d5:d8: c4:f4:fb:cc:73:27:2e:51:44:da:a1:26:a8:66:18:f5:49:05: 57:12:b5:d7:57:a5:45:0e:90:65:00:df:10:3b:e7:f3:11:af: d9:04:9b:d6:68:91:76:89:1e:5a:ba:d1:1f:c4:1e:20:46:99: 35:1b:ad:53:3a:4f:72:a3:80:da:7f:d6:a9:d8:ac:58:af:f5: 46:89:f6:57:5c:ef:5e:e0:a4:d9:ad:09:f6:86:e6:17:6e:8c: c5:75:dd:1f:89:9e:b7:6e:15:d8:38:6a:2e:06:4b:8f:dd:76: a5:bf:f8:61:20:41:8a:d8:fd:5d:e4:25:29:9f:9e:07:59:e2: 3a:36:9a:87:1a:fa:58:5e:04:d7:8d:e1:56:c1:79:29:87:05: 3b:8b:bf:dc:7e:31:79:cb:1a:e6:3a:59:bb:65:f0:34:4e:7b: 92:eb:db:74 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MzgwNTExMC8GA1UEBRMoMUU1MzBGQTlGNjYwQThEQzE3MzhDN0FBMEM4QUZDNzdG NEYwQkJCMzAeFw0yNTEyMDQwODMyMzJaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MzE0NzFmLTE1ZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPDhTKlBsFZVxCy5KN+hdFhHqHg8V8u1mbGBBkgmKvfq2ipdou6KHUT1DOwPs0 M5cg3kwq2LUHIgMUBvyyYMoRrTWYs8L7LclkjXA4xP5GScG4ELDH/zdZjsKDDh9P +01dSHz3V7L+QKmmMgdHG1AzVxb41cx4pPN7pmA8HrxZlcosmB2WUkNYU2hGutpu tl6e2u+lZVCW9uBkKKfx5LReSaUuZbFTTI4v1gMXjq4XrH1DmPcQxHfQ/mudbaEG Al9r1S/R7rxnELCOAZDGMxFnrXldKFqa3EeUYqeP70s4oLf8rJhkVismQdlbHhLQ HP1pzvkWTbc5hdLLRkAB0PtLAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQULWhlUbHb nGiPmmuoGpPiY8kslsswHwYDVR0jBBgwFoAUHlMPqfZgqNwXOMeqDIr8d/Twu7Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzODA1LzQwMEM1REVDRDAx MDExRjA5RjBERDgxQ0M0RjlBRTAyL0hsTVBxZlpncU53WE9NZXFESXI4ZF9Ud3U3 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSGxNUHFmWmdxTndYT01lcURJcjhkX1R3dTdNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzgwNS80MDBDNURFQ0QwMTAxMUYwOUYwREQ4MUNDNEY5QUUwMi9DNjczQkIxQUQw RUIxMUYwODhGOEYwNjNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAGdjFwMEAWdsAjANBgkqhkiG9w0BAQsFAAOCAQEAH1fN/qoB v91LgUpW5q8MW/Ba55fT7N2OrmR6AdXDP/Iop1Bh4iwnU8rMx4lDI/lJbwD4M2lq NajaayrkDYzlNiyw2+E1oYUmDIF0T62ovm0AbM1qUDsGO9XYxPT7zHMnLlFE2qEm qGYY9UkFVxK111elRQ6QZQDfEDvn8xGv2QSb1miRdokeWrrRH8QeIEaZNRutUzpP cqOA2n/WqdisWK/1Ron2V1zvXuCk2a0J9obmF26MxXXdH4met24V2DhqLgZLj912 pb/4YSBBitj9XeQlKZ+eB1niOjaahxr6WF4E143hVsF5KYcFO4u/3H4xecsa5jpZ u2XwNE57kuvbdA== -----END CERTIFICATE-----Generated at Fri Dec 5 19:12:14 2025 by rpki-client