This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/75775B8A5E3C11F094FDCD71C4F9AE02.roa File: 75775B8A5E3C11F094FDCD71C4F9AE02.roa (raw, json) Hash identifier: FlA8+p87RbQ6mn+Uy7n2/3i41zgTeNGWUbO12H/DP9M= Subject key identifier: 35:54:4E:8B:1C:5C:F9:F0:C3:48:9D:20:0A:B0:87:8C:91:2B:D2:DB Certificate issuer: /CN=A91298DA/serialNumber=FCAA086226DF02AF8394FAB22D1FB96E0B7D65DD Certificate serial: 0C61 Authority key identifier: FC:AA:08:62:26:DF:02:AF:83:94:FA:B2:2D:1F:B9:6E:0B:7D:65:DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/75775B8A5E3C11F094FDCD71C4F9AE02.roa Signing time: Wed 19 Nov 2025 12:12:33 +0000 ROA not before: Wed 19 Nov 2025 12:12:33 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 153844 IP address blocks: 103.35.212.0/24 maxlen: 24 103.35.213.0/24 maxlen: 24 103.117.160.0/24 maxlen: 24 103.117.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.crl rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3169 (0xc61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91298DA, serialNumber=FCAA086226DF02AF8394FAB22D1FB96E0B7D65DD Validity Not Before: Nov 19 12:12:33 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=691db431-4c73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:48:7f:13:fd:ab:f1:12:bf:d2:74:46:41:4a: 8e:3f:fb:9a:1e:cc:fa:00:b3:86:99:e5:4b:c0:6e: 82:11:7b:7f:bc:0d:9e:cd:d1:2c:f2:a3:2f:03:57: 68:e7:95:68:5e:a6:50:aa:25:8b:ac:78:ef:90:d2: 76:5d:cd:27:e7:7a:a8:dc:47:37:4a:9f:96:97:05: b4:04:fc:2c:30:ee:3a:80:42:2f:74:5c:55:e0:3d: a0:f0:f6:f1:4b:f7:92:db:2d:c0:96:16:df:12:a6: b5:f2:65:f9:9b:a8:b5:e0:b0:93:7b:95:43:f2:61: b1:3a:be:45:17:f3:3c:05:29:25:b7:42:85:03:f4: a7:74:01:36:74:82:4a:9e:35:e6:51:dc:f0:96:e0: 93:8e:60:2d:df:38:b4:7e:7f:0e:c1:a9:b6:af:a4: 7d:1d:90:b8:75:56:11:c4:8e:25:3f:a9:35:4b:b3: 2c:2a:6a:d6:0f:da:5b:48:07:86:9a:63:c7:0c:13: 2c:71:fe:fe:71:54:07:32:88:bc:c5:06:30:55:8f: 6f:2f:8a:7c:62:6c:0d:50:f2:ea:6b:bc:4d:3a:33: 8a:68:d2:5d:4e:83:5c:e1:bd:91:d5:e9:81:ea:78: 9f:24:58:35:51:b8:16:76:4c:3a:94:99:d9:a1:12: f5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:54:4E:8B:1C:5C:F9:F0:C3:48:9D:20:0A:B0:87:8C:91:2B:D2:DB X509v3 Authority Key Identifier: keyid:FC:AA:08:62:26:DF:02:AF:83:94:FA:B2:2D:1F:B9:6E:0B:7D:65:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/75775B8A5E3C11F094FDCD71C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.35.212.0/23 103.117.160.0/23 Signature Algorithm: sha256WithRSAEncryption 5f:14:c7:90:a9:14:42:23:48:13:9f:e2:f2:6a:0c:56:bb:08: 04:1c:95:e8:cc:85:9d:d6:b6:13:83:bd:4a:86:15:cb:11:d3: 09:42:63:21:4a:d5:cb:fa:58:52:0a:64:d1:21:f8:ac:d2:67: 0a:d9:f7:80:91:4a:ed:b2:69:62:30:0d:9b:e0:7f:fd:25:ab: 6a:76:e7:3c:90:88:4b:bd:fc:d1:8d:75:3c:9d:61:a4:26:25: 87:76:af:91:0e:62:5e:74:79:b2:7c:27:30:45:52:96:9b:93: b3:55:ea:fc:1a:d2:cc:31:3b:f2:5c:3e:4d:de:e8:0f:d0:d4: 94:8b:8a:6b:0f:3a:a8:5d:86:a3:97:cd:5c:d8:12:c7:0f:90: b7:9a:56:92:6d:16:3e:c2:5b:d8:c6:2e:89:f8:4f:bf:2f:76: 3e:cb:1b:b6:41:90:dd:ca:3b:d5:b4:bc:70:26:77:4b:e6:e6: 47:9b:ed:66:09:49:00:c1:a7:2f:a7:67:24:67:72:b9:2d:36: e0:b0:d1:d5:93:f4:3a:dd:5d:c1:1a:4d:9d:f1:06:8f:8b:c6: f5:84:e8:a8:8f:61:4c:3a:fb:48:ca:4b:c2:1b:9c:ad:af:15: b8:b5:96:07:70:d8:ca:d9:54:66:64:69:26:cf:69:fd:84:2f: 94:b0:4c:ff -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICDGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk4REExMTAvBgNVBAUTKEZDQUEwODYyMjZERjAyQUY4Mzk0RkFCMjJEMUZCOTZF MEI3RDY1REQwHhcNMjUxMTE5MTIxMjMzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTFkYjQzMS00YzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn0h/E/2r8RK/0nRGQUqOP/uaHsz6ALOGmeVLwG6CEXt/vA2ezdEs8qMvA1do 55VoXqZQqiWLrHjvkNJ2Xc0n53qo3Ec3Sp+WlwW0BPwsMO46gEIvdFxV4D2g8Pbx S/eS2y3AlhbfEqa18mX5m6i14LCTe5VD8mGxOr5FF/M8BSklt0KFA/SndAE2dIJK njXmUdzwluCTjmAt3zi0fn8Owam2r6R9HZC4dVYRxI4lP6k1S7MsKmrWD9pbSAeG mmPHDBMscf7+cVQHMoi8xQYwVY9vL4p8YmwNUPLqa7xNOjOKaNJdToNc4b2R1emB 6nifJFg1UbgWdkw6lJnZoRL1EwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFDVUTosc XPnww0idIAqwh4yRK9LbMB8GA1UdIwQYMBaAFPyqCGIm3wKvg5T6si0fuW4LfWXd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOThEQS8zNEYzNjEyRTI2 ODExMUVBOTAzRDcwNThDNEY5QUUwMi9fS29JWWliZkFxLURsUHF5TFItNWJndDla ZDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19Lb0lZaWJmQXEtRGxQcXlMUi01Ymd0OVpkMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mjk4REEvMzRGMzYxMkUyNjgxMTFFQTkwM0Q3MDU4QzRGOUFFMDIvNzU3NzVCOEE1 RTNDMTFGMDk0RkRDRDcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnI9QDBAFndaAwDQYJKoZIhvcNAQELBQADggEBAF8Ux5Cp FEIjSBOf4vJqDFa7CAQclejMhZ3WthODvUqGFcsR0wlCYyFK1cv6WFIKZNEh+KzS ZwrZ94CRSu2yaWIwDZvgf/0lq2p25zyQiEu9/NGNdTydYaQmJYd2r5EOYl50ebJ8 JzBFUpabk7NV6vwa0swxO/JcPk3e6A/Q1JSLimsPOqhdhqOXzVzYEscPkLeaVpJt Fj7CW9jGLon4T78vdj7LG7ZBkN3KO9W0vHAmd0vm5keb7WYJSQDBpy+nZyRncrkt NuCw0dWT9DrdXcEaTZ3xBo+LxvWE6KiPYUw6+0jKS8IbnK2vFbi1lgdw2MrZVGZk aSbPaf2EL5SwTP8= -----END CERTIFICATE-----Generated at Sat Dec 6 21:01:16 2025 by rpki-client