This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/2106E428992111EC99E0095AC4F9AE02.roa File: 2106E428992111EC99E0095AC4F9AE02.roa (raw, json) Hash identifier: WwA/rBGjBDEpiOexD1IjCU08QUDY8G7l57/ipRDGA8M= Subject key identifier: 97:66:40:1A:AB:51:C3:89:B4:60:89:66:DA:66:97:1B:6E:8F:DD:56 Certificate issuer: /CN=A91251AD/serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D Certificate serial: 0407 Authority key identifier: 15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/2106E428992111EC99E0095AC4F9AE02.roa Signing time: Mon 17 Nov 2025 09:09:31 +0000 ROA not before: Mon 17 Nov 2025 09:09:31 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 140227 IP address blocks: 103.127.240.0/22 maxlen: 24 103.148.218.0/24 maxlen: 24 103.148.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:54:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1031 (0x407) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91251AD, serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D Validity Not Before: Nov 17 09:09:31 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=691ae64b-5cd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fd:8d:f2:72:d6:e7:6c:11:95:0d:97:b9:e3: bd:72:48:91:12:f8:aa:69:15:c6:ba:09:db:c4:43: b2:51:40:48:df:5c:bc:d9:d3:b8:60:9a:02:40:d9: 3c:80:88:cf:5b:f8:68:8e:05:b7:d7:90:b0:7d:fd: b6:9b:49:e4:d2:6c:3c:72:b2:94:b3:54:65:d3:26: fe:12:2e:e4:f9:20:0a:f7:57:db:a9:14:51:62:f8: 3d:38:41:47:30:a3:72:f3:9f:2d:45:f3:b5:e3:b8: 56:51:5e:70:45:25:82:eb:00:b1:2a:d3:7d:31:54: c7:ec:42:42:d6:d7:ee:5f:c0:61:04:06:e0:46:d8: 05:7d:45:8b:06:05:16:f3:b5:cc:c6:e9:3f:04:ec: 82:f6:71:cd:19:3f:be:0b:bb:8c:ba:14:89:de:14: d3:1f:56:91:4d:77:da:64:4f:2e:14:ad:7e:20:cc: c4:b8:d9:f4:81:5c:6c:68:02:bd:db:bc:b2:f8:aa: b4:90:67:7d:9e:2c:bd:96:29:bb:f5:41:cc:45:46: e1:ae:6c:2a:13:61:44:3f:c2:ce:36:b4:58:87:b4: 4f:0b:0f:6e:fb:1d:3d:d2:99:98:3a:47:44:95:e3: f9:18:4c:9b:f0:3f:5f:06:22:ff:29:75:97:e3:86: 14:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:66:40:1A:AB:51:C3:89:B4:60:89:66:DA:66:97:1B:6E:8F:DD:56 X509v3 Authority Key Identifier: keyid:15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/2106E428992111EC99E0095AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.127.240.0/22 103.148.218.0/23 Signature Algorithm: sha256WithRSAEncryption 52:96:a3:d3:d2:1b:b3:6e:11:4c:ae:b0:3e:c5:66:c5:ce:43: db:d6:e9:81:1e:a3:04:0e:47:c4:7f:ec:d7:e4:da:d2:8c:7b: 19:05:15:c8:c2:ab:04:e9:1c:ae:e7:e1:40:8c:0e:56:42:2e: da:25:fb:f6:06:bd:0a:7e:f2:09:d8:8e:83:38:92:50:e2:73: 07:c5:09:27:ac:c4:04:50:36:0a:c0:42:41:82:55:e2:69:ed: 7e:36:d3:74:22:7a:4a:4d:26:60:73:9b:7d:4a:7b:55:79:b1: 71:b3:98:db:61:86:10:c6:1b:11:c6:8b:1c:3a:53:3e:d8:0b: f6:4a:e7:06:82:c5:97:b2:14:c8:23:70:08:38:91:fc:88:6e: 41:76:b1:33:fd:9f:f7:a7:58:89:4a:5e:3a:9d:7e:e4:50:af: b8:b0:7c:08:7a:92:44:af:e8:50:d8:06:f1:19:21:5c:bc:30: 1e:92:7c:1f:32:b7:b1:8d:06:0f:02:75:bf:c0:f9:a9:8f:4d: c3:24:03:74:e5:33:9c:22:3a:54:21:d1:12:20:2d:56:2d:4e: 02:a5:62:16:70:03:7d:98:07:a6:70:59:70:3c:ff:a4:ee:09: 4b:f8:54:32:0d:2f:e6:34:65:92:58:31:be:8e:93:81:c0:82: 47:59:ce:b5 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBAcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUxQUQxMTAvBgNVBAUTKDE1NjU3NzJCN0I0RUJFODUwNDlEMkFGOUIzMkFDQzg3 ODAzMTFBNUQwHhcNMjUxMTE3MDkwOTMxWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OTFhZTY0Yi01Y2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp/2N8nLW52wRlQ2XueO9ckiREviqaRXGugnbxEOyUUBI31y82dO4YJoCQNk8 gIjPW/hojgW315Cwff22m0nk0mw8crKUs1Rl0yb+Ei7k+SAK91fbqRRRYvg9OEFH MKNy858tRfO147hWUV5wRSWC6wCxKtN9MVTH7EJC1tfuX8BhBAbgRtgFfUWLBgUW 87XMxuk/BOyC9nHNGT++C7uMuhSJ3hTTH1aRTXfaZE8uFK1+IMzEuNn0gVxsaAK9 27yy+Kq0kGd9niy9lim79UHMRUbhrmwqE2FEP8LONrRYh7RPCw9u+x090pmYOkdE leP5GEyb8D9fBiL/KXWX44YUuwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJdmQBqr UcOJtGCJZtpmlxtuj91WMB8GA1UdIwQYMBaAFBVldyt7Tr6FBJ0q+bMqzIeAMRpd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTFBRC84RkRERjVFODk5 MUQxMUVDODA5MzlBNTRDNEY5QUUwMi9GV1YzSzN0T3ZvVUVuU3I1c3lyTWg0QXhH bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZXVjNLM3RPdm9VRW5TcjVzeXJNaDRBeEdsMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjUxQUQvOEZEREY1RTg5OTFEMTFFQzgwOTM5QTU0QzRGOUFFMDIvMjEwNkU0Mjg5 OTIxMTFFQzk5RTAwOTVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnf/ADBAFnlNowDQYJKoZIhvcNAQELBQADggEBAFKWo9PS G7NuEUyusD7FZsXOQ9vW6YEeowQOR8R/7Nfk2tKMexkFFcjCqwTpHK7n4UCMDlZC Ltol+/YGvQp+8gnYjoM4klDicwfFCSesxARQNgrAQkGCVeJp7X4203QiekpNJmBz m31Ke1V5sXGzmNthhhDGGxHGixw6Uz7YC/ZK5waCxZeyFMgjcAg4kfyIbkF2sTP9 n/enWIlKXjqdfuRQr7iwfAh6kkSv6FDYBvEZIVy8MB6SfB8yt7GNBg8Cdb/A+amP TcMkA3TlM5wiOlQh0RIgLVYtTgKlYhZwA32YB6ZwWXA8/6TuCUv4VDINL+Y0ZZJY Mb6Ok4HAgkdZzrU= -----END CERTIFICATE-----Generated at Sat Dec 6 10:20:55 2025 by rpki-client