This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/695CA6D414BF11EEB8B95B7FC4F9AE02.roa File: 695CA6D414BF11EEB8B95B7FC4F9AE02.roa (raw, json) Hash identifier: UfOYe6RywBqkEJraeZHWTOUfrLHgXDOJgx5fH4IP4aM= Subject key identifier: 98:39:FD:35:F2:3C:79:4C:B2:4C:8C:67:CB:2D:EF:E5:34:10:C1:0F Certificate issuer: /CN=A91306B2/serialNumber=10CA62C2A749BF91F5622ADEC0F19618493CBBA9 Certificate serial: 024A Authority key identifier: 10:CA:62:C2:A7:49:BF:91:F5:62:2A:DE:C0:F1:96:18:49:3C:BB:A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/695CA6D414BF11EEB8B95B7FC4F9AE02.roa Signing time: Tue 25 Nov 2025 00:17:41 +0000 ROA not before: Tue 25 Nov 2025 00:17:41 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 150341 IP address blocks: 103.157.246.0/23 maxlen: 23 103.157.246.0/24 maxlen: 24 103.157.247.0/24 maxlen: 24 2001:df1:5a40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.crl rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 00:15:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 586 (0x24a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91306B2, serialNumber=10CA62C2A749BF91F5622ADEC0F19618493CBBA9 Validity Not Before: Nov 25 00:17:41 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6924f5a4-a64d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:01:5b:16:7e:f0:3f:4d:5d:85:a2:a2:7b:5e: 82:2d:c9:f2:ce:4a:a1:b9:54:fb:e7:f6:46:61:7f: 2c:9f:d4:85:1b:29:6d:f9:97:fb:4e:c0:b2:30:e0: ba:d7:4a:af:d7:c8:2b:5b:37:de:fd:0d:60:58:27: 2a:bc:15:ae:3d:93:33:ad:65:3e:6a:63:b8:08:f0: 8a:47:75:29:03:28:d8:73:d4:29:0d:92:36:62:9c: e2:74:69:2c:df:b6:54:da:4d:1d:50:47:e7:4e:5c: 13:1f:cd:97:6f:5f:4c:55:90:7e:43:db:af:ff:04: 5d:28:79:53:c1:a4:09:07:a0:ed:0c:a5:52:09:b4: 3e:72:45:67:ef:7e:00:64:4a:d7:73:9a:7c:08:95: d5:0b:08:c2:ca:df:c8:8a:8a:69:a3:93:61:53:01: 11:8b:c2:24:49:70:ab:e9:73:5e:43:0a:2f:59:97: 26:4c:36:5e:e0:30:c8:d6:bc:08:19:00:88:ad:ca: c7:b6:95:38:f8:ce:62:29:d4:21:36:de:d5:fd:bb: 89:ef:19:86:4c:79:5e:e3:cd:65:7f:33:79:6b:a0: 7a:2e:b0:fb:ab:06:17:5f:70:e3:c0:4b:a5:18:8a: 95:3e:28:2f:32:79:78:b6:54:cd:f9:01:40:b5:b8: 38:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:39:FD:35:F2:3C:79:4C:B2:4C:8C:67:CB:2D:EF:E5:34:10:C1:0F X509v3 Authority Key Identifier: keyid:10:CA:62:C2:A7:49:BF:91:F5:62:2A:DE:C0:F1:96:18:49:3C:BB:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/695CA6D414BF11EEB8B95B7FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.157.246.0/23 IPv6: 2001:df1:5a40::/48 Signature Algorithm: sha256WithRSAEncryption 8e:64:eb:ec:4e:d9:43:7a:47:9c:fb:b6:e3:b7:41:22:38:56: 50:9e:3e:8e:2a:da:61:1e:6a:50:1b:6a:0f:f3:c6:d3:ac:e3: 9c:3f:f8:51:09:b8:fc:3a:11:21:0b:88:14:c7:83:c1:74:ec: f6:1e:ff:bb:4d:62:12:d8:67:8c:ae:3a:13:65:0f:97:e9:8e: 44:58:8d:04:05:9f:f9:a6:cb:67:7b:16:50:f5:b7:10:68:f5: cd:48:d3:11:b3:69:f2:ff:3a:39:8b:39:f7:ff:df:3d:0f:a3: 96:bf:d5:cc:11:01:17:e5:72:58:b5:d4:7b:59:8a:14:1d:1b: d7:65:17:be:0a:13:ea:2d:6f:b2:b6:14:d5:35:0c:0a:84:fd: 06:90:08:48:43:75:dc:4c:cc:1a:47:b3:f7:a9:28:bb:a9:e3: 94:e4:78:f8:0e:ba:75:63:46:ed:d3:be:65:41:ae:7b:62:50: 86:71:4f:56:f5:ec:dc:b4:cd:c3:2d:c0:5f:d6:31:0c:6a:37: 9b:75:5e:7b:59:a6:c8:5d:9c:92:63:48:da:a0:a1:94:f4:aa: 15:e8:8e:79:5e:ee:60:b4:07:0c:e3:fc:7b:5c:46:7b:6f:14: e4:50:b6:97:e8:26:46:02:82:45:78:72:15:fd:2f:e5:87:5e: fc:3b:81:26 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA2QjIxMTAvBgNVBAUTKDEwQ0E2MkMyQTc0OUJGOTFGNTYyMkFERUMwRjE5NjE4 NDkzQ0JCQTkwHhcNMjUxMTI1MDAxNzQxWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTI0ZjVhNC1hNjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywFbFn7wP01dhaKie16CLcnyzkqhuVT75/ZGYX8sn9SFGylt+Zf7TsCyMOC6 10qv18grWzfe/Q1gWCcqvBWuPZMzrWU+amO4CPCKR3UpAyjYc9QpDZI2YpzidGks 37ZU2k0dUEfnTlwTH82Xb19MVZB+Q9uv/wRdKHlTwaQJB6DtDKVSCbQ+ckVn734A ZErXc5p8CJXVCwjCyt/Iioppo5NhUwERi8IkSXCr6XNeQwovWZcmTDZe4DDI1rwI GQCIrcrHtpU4+M5iKdQhNt7V/buJ7xmGTHle481lfzN5a6B6LrD7qwYXX3DjwEul GIqVPigvMnl4tlTN+QFAtbg4oQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFJg5/TXy PHlMskyMZ8st7+U0EMEPMB8GA1UdIwQYMBaAFBDKYsKnSb+R9WIq3sDxlhhJPLup MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDZCMi8zMjFGREQzRTRE ODMxMUVEODdGQjFFNkZDNEY5QUUwMi9FTXBpd3FkSnY1SDFZaXJld1BHV0dFazh1 NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VNcGl3cWRKdjVIMVlpcmV3UEdXR0VrOHU2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzA2QjIvMzIxRkREM0U0RDgzMTFFRDg3RkIxRTZGQzRGOUFFMDIvNjk1Q0E2RDQx NEJGMTFFRUI4Qjk1QjdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnnfYwDwQCAAIwCQMHACABDfFaQDANBgkqhkiG9w0BAQsF AAOCAQEAjmTr7E7ZQ3pHnPu247dBIjhWUJ4+jiraYR5qUBtqD/PG06zjnD/4UQm4 /DoRIQuIFMeDwXTs9h7/u01iEthnjK46E2UPl+mORFiNBAWf+abLZ3sWUPW3EGj1 zUjTEbNp8v86OYs59//fPQ+jlr/VzBEBF+VyWLXUe1mKFB0b12UXvgoT6i1vsrYU 1TUMCoT9BpAISEN13EzMGkez96kou6njlOR4+A66dWNG7dO+ZUGue2JQhnFPVvXs 3LTNwy3AX9YxDGo3m3Vee1mmyF2ckmNI2qChlPSqFeiOeV7uYLQHDOP8e1xGe28U 5FC2l+gmRgKCRXhyFf0v5Yde/DuBJg== -----END CERTIFICATE-----Generated at Sun Dec 7 07:25:07 2025 by rpki-client