This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/388802BC067711EDA1DEB529C4F9AE02.roa File: 388802BC067711EDA1DEB529C4F9AE02.roa (raw, json) Hash identifier: jv+C3MRRv1S8VzgzhjdRwbO8r25GoT/B3n+TeYBfeTU= Subject key identifier: 61:CE:DA:75:8A:FF:89:3B:D0:68:5E:FB:C8:26:55:10:3D:B5:BE:06 Certificate issuer: /CN=A91194E9/serialNumber=5D4A1FCF5301C02759C84EEA55915E25C171A73F Certificate serial: 02BB Authority key identifier: 5D:4A:1F:CF:53:01:C0:27:59:C8:4E:EA:55:91:5E:25:C1:71:A7:3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUofz1MBwCdZyE7qVZFeJcFxpz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/388802BC067711EDA1DEB529C4F9AE02.roa Signing time: Sun 17 Aug 2025 02:08:24 +0000 ROA not before: Sun 17 Aug 2025 02:08:24 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 134403 IP address blocks: 103.63.234.0/23 maxlen: 24 2001:df4:f400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.crl rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUofz1MBwCdZyE7qVZFeJcFxpz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 23:49:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 699 (0x2bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91194E9, serialNumber=5D4A1FCF5301C02759C84EEA55915E25C171A73F Validity Not Before: Aug 17 02:08:24 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68a13998-7415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a7:a9:02:3f:cb:96:9d:64:07:90:32:46:6b: 26:02:e9:f4:27:3e:e0:8c:96:b8:d2:3e:bb:4d:29: 97:04:34:4e:c9:6a:01:e0:fc:c6:e3:f5:11:da:37: 20:0d:03:ca:9a:f6:0b:c0:d8:d0:44:64:a7:ed:fc: b4:f0:48:fc:f5:f9:7f:cb:c7:6f:7e:1c:ac:d9:d5: 31:50:62:04:8d:c8:02:01:3d:88:82:17:59:1e:59: 5c:36:6c:e8:2d:e7:13:43:52:b8:c8:76:f5:56:48: b5:ea:9f:19:ee:d6:ad:00:88:9d:b7:99:4b:80:cf: 1f:cc:df:9c:f7:63:95:e1:53:0b:65:8a:78:f8:77: 86:c8:2f:40:db:d5:2a:2b:17:5e:73:1b:ec:fa:0c: 95:30:56:2d:7d:9d:88:32:5e:74:0d:22:6e:8b:0e: 31:53:d4:a8:61:59:7a:d2:6c:6a:31:7b:2d:b9:28: 1f:2f:1d:f9:ea:5c:d8:ad:19:2c:f1:5e:34:3d:85: 9b:89:05:51:1d:93:5c:ba:24:58:e7:90:cd:5b:aa: 92:13:62:be:b6:e2:fc:e1:ca:da:00:19:54:18:98: b6:ee:2a:ea:66:e2:6f:57:66:14:fa:db:66:cd:00: fe:36:63:92:fe:7a:b8:40:fb:05:68:1f:36:af:47: e3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:CE:DA:75:8A:FF:89:3B:D0:68:5E:FB:C8:26:55:10:3D:B5:BE:06 X509v3 Authority Key Identifier: keyid:5D:4A:1F:CF:53:01:C0:27:59:C8:4E:EA:55:91:5E:25:C1:71:A7:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUofz1MBwCdZyE7qVZFeJcFxpz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/388802BC067711EDA1DEB529C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.63.234.0/23 IPv6: 2001:df4:f400::/48 Signature Algorithm: sha256WithRSAEncryption 66:d8:9e:af:33:a7:41:d5:fd:81:b8:b0:54:6e:ee:91:c1:da: d4:9f:61:10:bb:52:2e:17:a9:2a:ab:51:eb:71:35:9c:1b:45: ca:9b:6b:64:3d:8b:69:ec:2b:fc:dd:27:a9:9d:0f:45:dc:bc: 5e:82:b0:01:49:f2:ed:7a:0b:d1:96:3d:8a:b3:96:c9:f0:d7: 44:5d:0f:60:8d:73:83:c1:18:49:a4:d1:3b:fd:83:a9:84:de: 5f:a3:f3:73:e0:f1:f4:03:8f:82:c7:6c:1a:ee:01:c7:97:89: c7:31:cd:3c:0a:5e:27:6f:89:8d:28:0e:de:95:e5:0d:d6:ac: 07:ce:bc:62:74:b3:b0:92:ff:e8:39:d0:75:c8:95:75:35:f0: 63:db:7e:03:b0:bc:e1:27:ba:ed:0b:e5:34:a1:aa:cb:2b:17: c9:5e:92:3f:f4:1f:c8:e9:d2:0e:84:1f:e6:08:16:9c:eb:eb: 97:c3:91:fd:aa:5a:34:1a:a1:3e:ed:fc:a3:9d:e1:26:d1:8f: 9d:a2:56:ea:e1:87:56:80:66:e4:19:13:be:ff:e6:2d:62:6b: 71:4e:5d:a4:75:a2:64:f9:fc:ab:3f:9d:e6:56:c4:bf:46:d2: 86:b5:8c:46:f6:92:f3:53:36:36:a7:89:f7:3e:a8:58:ee:f4: a3:35:46:77 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICArswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk0RTkxMTAvBgNVBAUTKDVENEExRkNGNTMwMUMwMjc1OUM4NEVFQTU1OTE1RTI1 QzE3MUE3M0YwHhcNMjUwODE3MDIwODI0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGExMzk5OC03NDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxqepAj/Llp1kB5AyRmsmAun0Jz7gjJa40j67TSmXBDROyWoB4PzG4/UR2jcg DQPKmvYLwNjQRGSn7fy08Ej89fl/y8dvfhys2dUxUGIEjcgCAT2IghdZHllcNmzo LecTQ1K4yHb1Vki16p8Z7tatAIidt5lLgM8fzN+c92OV4VMLZYp4+HeGyC9A29Uq Kxdecxvs+gyVMFYtfZ2IMl50DSJuiw4xU9SoYVl60mxqMXstuSgfLx356lzYrRks 8V40PYWbiQVRHZNcuiRY55DNW6qSE2K+tuL84craABlUGJi27irqZuJvV2YU+ttm zQD+NmOS/nq4QPsFaB82r0fjEQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFGHO2nWK /4k70Ghe+8gmVRA9tb4GMB8GA1UdIwQYMBaAFF1KH89TAcAnWchO6lWRXiXBcac/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTRFOS9DNUQ1RTRDQTA2 NzQxMUVEQjFEMjlBMjhDNEY5QUUwMi9YVW9mejFNQndDZFp5RTdxVlpGZUpjRnhw ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hVb2Z6MU1Cd0NkWnlFN3FWWkZlSmNGeHB6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTk0RTkvQzVENUU0Q0EwNjc0MTFFREIxRDI5QTI4QzRGOUFFMDIvMzg4ODAyQkMw Njc3MTFFREExREVCNTI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnP+owDwQCAAIwCQMHACABDfT0ADANBgkqhkiG9w0BAQsF AAOCAQEAZtierzOnQdX9gbiwVG7ukcHa1J9hELtSLhepKqtR63E1nBtFyptrZD2L aewr/N0nqZ0PRdy8XoKwAUny7XoL0ZY9irOWyfDXRF0PYI1zg8EYSaTRO/2DqYTe X6Pzc+Dx9AOPgsdsGu4Bx5eJxzHNPApeJ2+JjSgO3pXlDdasB868YnSzsJL/6DnQ dciVdTXwY9t+A7C84Se67QvlNKGqyysXyV6SP/QfyOnSDoQf5ggWnOvrl8OR/apa NBqhPu38o53hJtGPnaJW6uGHVoBm5BkTvv/mLWJrcU5dpHWiZPn8qz+d5lbEv0bS hrWMRvaS81M2NqeJ9z6oWO70ozVGdw== -----END CERTIFICATE-----Generated at Sun Dec 7 03:26:23 2025 by rpki-client