This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/1DDBD99AE1F211EEA360BE22C4F9AE02.roa File: 1DDBD99AE1F211EEA360BE22C4F9AE02.roa (raw, json) Hash identifier: qn4Fpxt7PWA/6hWMWYVeaGljIqcp672ouf6S4bONl/4= Subject key identifier: BF:02:94:D6:AE:36:5E:21:73:3A:36:C6:5F:05:83:3B:F2:95:5F:B0 Certificate issuer: /CN=A91F8CAA/serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62 Certificate serial: 014C Authority key identifier: 37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/1DDBD99AE1F211EEA360BE22C4F9AE02.roa Signing time: Tue 09 Dec 2025 02:41:52 +0000 ROA not before: Tue 09 Dec 2025 02:41:52 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 139794 IP address blocks: 103.145.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 03:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 332 (0x14c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8CAA, serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62 Validity Not Before: Dec 9 02:41:52 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69378c6f-e677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a0:e0:76:79:1c:dc:5d:e8:31:f1:9a:16:0a: c7:37:37:a9:21:7b:44:37:e5:13:a7:8c:f1:1b:5e: bd:6e:2d:fc:94:a5:0e:c8:f4:e9:6c:78:8c:4e:11: 3e:d3:75:c3:cc:4e:6a:9a:19:89:9f:b3:cd:d1:97: 50:b6:4e:59:3b:ea:34:98:48:13:bf:a7:c6:07:a1: bf:99:aa:fb:64:f0:1d:4a:7c:5d:21:14:3d:68:b2: 5b:20:8a:ed:45:5c:a4:5d:9a:db:ae:22:2c:60:28: b9:19:b0:76:46:ef:d1:8e:44:93:d9:2d:83:09:7d: cc:4e:c0:33:0f:3c:7b:7d:ec:50:62:61:08:48:49: 0d:15:b2:82:e3:d6:f5:c0:fd:57:34:9b:3c:4e:f8: 50:68:af:30:62:8f:03:cd:ab:7d:ac:fd:ef:f0:b2: 15:2f:42:ec:e3:f0:a7:9f:52:c2:c7:2b:5f:b8:9b: c0:ae:ec:3e:04:3b:4f:69:8e:25:a5:cd:95:ee:bc: d1:0f:ee:6e:af:ef:c2:c8:0d:a2:c4:92:f9:43:1b: cf:0e:b4:f4:2b:8f:ea:81:e2:dd:99:16:e7:88:14: ea:4b:7a:c2:47:cc:85:83:4c:5e:0d:df:c3:d0:54: a4:bb:bb:a9:92:3d:05:1f:4b:ed:bf:ab:0f:12:3c: 42:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:02:94:D6:AE:36:5E:21:73:3A:36:C6:5F:05:83:3B:F2:95:5F:B0 X509v3 Authority Key Identifier: keyid:37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/1DDBD99AE1F211EEA360BE22C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.145.88.0/24 Signature Algorithm: sha256WithRSAEncryption bb:88:91:5c:1f:9b:7a:11:29:91:10:db:b2:62:7e:98:c3:79: 48:46:bd:92:d4:e7:92:72:1c:8c:db:94:22:1a:e9:7a:11:e6: 4c:04:96:33:af:2f:05:c6:eb:c3:69:04:d9:c9:5d:39:64:05: e0:a1:88:35:43:15:82:59:b5:6a:58:dd:50:bd:8e:c5:44:4d: 1c:f5:9f:f0:90:71:4f:9b:0b:c7:5f:28:34:c3:38:80:1a:bd: 3c:10:30:8b:f9:35:3b:6c:d3:38:6f:7d:c7:e1:d4:b2:c2:3e: 44:e4:48:5a:84:42:5b:b0:67:0c:c3:9f:cd:79:49:e5:75:8d: 6d:69:af:47:27:51:c7:3b:b9:c4:c3:8d:4d:db:a9:d6:92:4c: 5f:da:ff:e8:47:f3:ff:58:37:07:99:d3:c8:98:f0:6e:71:1e: de:bd:1b:25:9f:d3:81:24:12:96:34:d3:91:fb:69:ab:bc:c2: 4b:06:40:7b:97:47:47:53:ae:64:b6:c3:ea:53:6f:3d:a7:6e: f6:bc:b1:6f:db:e2:aa:91:71:33:97:d4:88:ba:c5:db:28:f6: 95:5e:5b:f8:f0:c2:2f:e8:7e:59:ac:e5:6d:9b:7c:0e:ce:b3: 77:bf:70:df:b8:d1:a4:df:1b:b5:f7:6d:f9:1c:fa:02:95:c3: f7:51:51:d6 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhDQUExMTAvBgNVBAUTKDM3Nzg1NDRFMjQ2OTU0OEJGMDlCNTREREQ4MDNEN0Q3 RDkwRjdFNjIwHhcNMjUxMjA5MDI0MTUyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTM3OGM2Zi1lNjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwaDgdnkc3F3oMfGaFgrHNzepIXtEN+UTp4zxG169bi38lKUOyPTpbHiMThE+ 03XDzE5qmhmJn7PN0ZdQtk5ZO+o0mEgTv6fGB6G/mar7ZPAdSnxdIRQ9aLJbIIrt RVykXZrbriIsYCi5GbB2Ru/RjkST2S2DCX3MTsAzDzx7fexQYmEISEkNFbKC49b1 wP1XNJs8TvhQaK8wYo8Dzat9rP3v8LIVL0Ls4/Cnn1LCxytfuJvAruw+BDtPaY4l pc2V7rzRD+5ur+/CyA2ixJL5QxvPDrT0K4/qgeLdmRbniBTqS3rCR8yFg0xeDd/D 0FSku7upkj0FH0vtv6sPEjxCzwIDAQABo4IClTCCApEwHQYDVR0OBBYEFL8ClNau Nl4hczo2xl8FgzvylV+wMB8GA1UdIwQYMBaAFDd4VE4kaVSL8JtU3dgD19fZD35i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOENBQS9EQ0QwMkEyMEUx RUExMUVFOTk5QzcwMkFDNEY5QUUwMi9OM2hVVGlScFZJdndtMVRkMkFQWDE5a1Bm bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04zaFVUaVJwVkl2d20xVGQyQVBYMTlrUGZtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjhDQUEvRENEMDJBMjBFMUVBMTFFRTk5OUM3MDJBQzRGOUFFMDIvMUREQkQ5OUFF MUYyMTFFRUEzNjBCRTIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnkVgwDQYJKoZIhvcNAQELBQADggEBALuIkVwfm3oRKZEQ 27JifpjDeUhGvZLU55JyHIzblCIa6XoR5kwEljOvLwXG68NpBNnJXTlkBeChiDVD FYJZtWpY3VC9jsVETRz1n/CQcU+bC8dfKDTDOIAavTwQMIv5NTts0zhvfcfh1LLC PkTkSFqEQluwZwzDn815SeV1jW1pr0cnUcc7ucTDjU3bqdaSTF/a/+hH8/9YNweZ 08iY8G5xHt69GyWf04EkEpY005H7aau8wksGQHuXR0dTrmS2w+pTbz2nbva8sW/b 4qqRcTOX1Ii6xdso9pVeW/jwwi/oflms5W2bfA7Os3e/cN+40aTfG7X3bfkc+gKV w/dRUdY= -----END CERTIFICATE-----Generated at Tue Dec 16 00:12:05 2025 by rpki-client