This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/A2A7584ACA7F11EAB343722AC4F9AE02.roa File: A2A7584ACA7F11EAB343722AC4F9AE02.roa (raw, json) Hash identifier: fAbemN+lwz0SU1+ivydeiDA0TzR3+7XHqo4CZ/rRSIw= Subject key identifier: 85:C0:6F:C5:FA:A1:91:22:FF:EA:C5:95:F3:AD:82:60:C3:B0:55:AF Certificate issuer: /CN=A91149C8/serialNumber=D2F6B7A5865856C3F2C4461636031FB05B60606A Certificate serial: 0CC0 Authority key identifier: D2:F6:B7:A5:86:58:56:C3:F2:C4:46:16:36:03:1F:B0:5B:60:60:6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0va3pYZYVsPyxEYWNgMfsFtgYGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/A2A7584ACA7F11EAB343722AC4F9AE02.roa Signing time: Sun 02 Nov 2025 18:36:45 +0000 ROA not before: Sun 02 Nov 2025 18:36:45 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 134750 IP address blocks: 103.106.201.0/24 maxlen: 24 103.199.168.0/23 maxlen: 23 103.199.168.0/24 maxlen: 24 103.199.169.0/24 maxlen: 24 2001:df1:3b00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.crl rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0va3pYZYVsPyxEYWNgMfsFtgYGo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3264 (0xcc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91149C8, serialNumber=D2F6B7A5865856C3F2C4461636031FB05B60606A Validity Not Before: Nov 2 18:36:45 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6907a4bd-3a72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:47:4a:90:fc:ad:3d:a6:a6:89:87:53:61:1e: fc:e2:83:cd:9c:b0:66:e5:66:22:a7:fd:b2:0e:2e: 1d:5d:dc:cd:5f:9d:6c:9a:88:0c:6c:91:6b:1d:52: 35:32:fc:ca:32:7e:8b:6f:db:0b:a1:a7:87:b4:17: 4b:8f:ef:1c:57:d5:90:0c:43:74:9d:2b:5c:ee:15: 96:06:13:da:f5:7a:fa:44:dc:32:d7:09:b1:d6:5a: b1:c7:38:3e:74:c2:6a:75:28:d9:f7:ce:b6:c0:c7: 33:82:f8:77:7e:a0:64:ae:b6:83:e4:f4:70:25:ec: 03:3b:7e:1c:c8:e2:e6:71:4c:0e:7a:59:c9:0e:6b: df:2f:e3:c0:64:3b:d3:a5:39:11:46:30:ca:7b:50: c0:af:03:c2:84:03:53:e0:a6:be:a0:fd:b7:a7:b5: da:b0:17:d1:86:c1:3d:67:bf:81:76:92:dd:14:93: e8:88:7f:6c:1f:3f:88:3a:44:6a:e3:7b:89:5b:f0: 2d:d6:18:f9:46:6b:41:ce:9f:50:c3:57:df:80:56: c3:33:8c:1b:ba:2f:c1:48:ef:7e:99:ec:f3:5f:25: 82:11:ed:f6:a5:8b:dc:03:25:ba:8b:35:30:ed:fb: fc:e9:91:d9:de:2f:a2:9a:e9:70:97:ba:32:96:fc: 28:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:C0:6F:C5:FA:A1:91:22:FF:EA:C5:95:F3:AD:82:60:C3:B0:55:AF X509v3 Authority Key Identifier: keyid:D2:F6:B7:A5:86:58:56:C3:F2:C4:46:16:36:03:1F:B0:5B:60:60:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0va3pYZYVsPyxEYWNgMfsFtgYGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/A2A7584ACA7F11EAB343722AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.106.201.0/24 103.199.168.0/23 IPv6: 2001:df1:3b00::/48 Signature Algorithm: sha256WithRSAEncryption b8:bd:70:f9:ae:94:7f:30:b5:e5:46:42:f6:91:ee:16:57:c3: 32:46:56:49:fb:a3:cd:13:ea:07:26:95:18:2a:98:56:c8:dd: e8:19:2e:af:48:60:2a:38:1e:9c:69:3b:c6:36:b4:37:23:63: 8f:fb:83:fe:27:50:01:67:6b:1e:49:ee:64:8c:27:d1:97:a2: f5:d4:48:63:a6:6b:4c:e9:af:b0:c7:f1:0f:7c:fd:76:9c:89: ac:42:60:81:d0:e1:21:f1:fa:24:67:1e:e3:28:02:98:75:0b: 69:33:c4:c0:0f:2d:0a:7e:a7:52:d1:78:11:d9:9e:2f:7c:f5: b1:af:34:34:3f:d7:5d:76:fa:88:2f:d2:bd:33:21:ac:6c:5c: 16:11:c7:89:c3:7d:a8:73:5e:fa:6c:fa:bb:89:6c:a8:38:cc: a3:85:c4:d5:e3:99:89:21:f5:a4:43:59:1c:ba:8f:a8:fd:86: cc:e7:4e:52:34:1c:23:14:58:42:a4:99:56:7f:87:1a:36:f4: 05:ae:9a:98:81:27:0e:3c:d3:ea:45:0e:57:6e:6d:62:9b:bd: c1:bf:5c:fa:9e:41:c5:cc:e5:74:ec:bc:29:a6:f3:13:e9:c2: 27:c3:3f:ca:0e:68:5e:1b:b6:20:a4:1e:4f:07:ff:17:2d:4b: cb:af:5a:01 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICDMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ5QzgxMTAvBgNVBAUTKEQyRjZCN0E1ODY1ODU2QzNGMkM0NDYxNjM2MDMxRkIw NUI2MDYwNkEwHhcNMjUxMTAyMTgzNjQ1WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA3YTRiZC0zYTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6EdKkPytPaamiYdTYR784oPNnLBm5WYip/2yDi4dXdzNX51smogMbJFrHVI1 MvzKMn6Lb9sLoaeHtBdLj+8cV9WQDEN0nStc7hWWBhPa9Xr6RNwy1wmx1lqxxzg+ dMJqdSjZ9862wMczgvh3fqBkrraD5PRwJewDO34cyOLmcUwOelnJDmvfL+PAZDvT pTkRRjDKe1DArwPChANT4Ka+oP23p7XasBfRhsE9Z7+BdpLdFJPoiH9sHz+IOkRq 43uJW/At1hj5RmtBzp9Qw1ffgFbDM4wbui/BSO9+mezzXyWCEe32pYvcAyW6izUw 7fv86ZHZ3i+imulwl7oylvwopQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFIXAb8X6 oZEi/+rFlfOtgmDDsFWvMB8GA1UdIwQYMBaAFNL2t6WGWFbD8sRGFjYDH7BbYGBq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDlDOC8yRkM0NjU5MEZG MkIxMUU5QkYyMEJGMURDNEY5QUUwMi8wdmEzcFlaWVZzUHl4RVlXTmdNZnNGdGdZ R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB2YTNwWVpZVnNQeXhFWVdOZ01mc0Z0Z1lHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTQ5QzgvMkZDNDY1OTBGRjJCMTFFOUJGMjBCRjFEQzRGOUFFMDIvQTJBNzU4NEFD QTdGMTFFQUIzNDM3MjJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABnaskDBAFnx6gwDwQCAAIwCQMHACABDfE7ADANBgkqhkiG 9w0BAQsFAAOCAQEAuL1w+a6UfzC15UZC9pHuFlfDMkZWSfujzRPqByaVGCqYVsjd 6Bkur0hgKjgenGk7xja0NyNjj/uD/idQAWdrHknuZIwn0Zei9dRIY6ZrTOmvsMfx D3z9dpyJrEJggdDhIfH6JGce4ygCmHULaTPEwA8tCn6nUtF4EdmeL3z1sa80ND/X XXb6iC/SvTMhrGxcFhHHicN9qHNe+mz6u4lsqDjMo4XE1eOZiSH1pENZHLqPqP2G zOdOUjQcIxRYQqSZVn+HGjb0Ba6amIEnDjzT6kUOV25tYpu9wb9c+p5BxczldOy8 KabzE+nCJ8M/yg5oXhu2IKQeTwf/Fy1Ly69aAQ== -----END CERTIFICATE-----Generated at Sun Dec 7 09:39:23 2025 by rpki-client