This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/53E7583E3D0511EF99169B21C4F9AE02.roa File: 53E7583E3D0511EF99169B21C4F9AE02.roa (raw, json) Hash identifier: XMGvyfsQwK+pnHEVDwFM8GXYoyCJLTHsKywLmoRsvnU= Subject key identifier: 8A:F2:01:C5:A9:AD:A3:AB:00:8D:DE:9F:BA:BA:58:1F:A9:74:78:44 Certificate issuer: /CN=A91317E5/serialNumber=45258841F7F04FB39D91DA3E3FABB529E8528F49 Certificate serial: 0689 Authority key identifier: 45:25:88:41:F7:F0:4F:B3:9D:91:DA:3E:3F:AB:B5:29:E8:52:8F:49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/53E7583E3D0511EF99169B21C4F9AE02.roa Signing time: Tue 16 Dec 2025 22:18:55 +0000 ROA not before: Tue 16 Dec 2025 22:18:55 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 134740 IP address blocks: 103.198.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.crl rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 21:51:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1673 (0x689) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91317E5, serialNumber=45258841F7F04FB39D91DA3E3FABB529E8528F49 Validity Not Before: Dec 16 22:18:55 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6941dacf-781e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:69:92:ec:b3:61:46:17:e7:79:9a:09:f2:eb: d2:04:23:49:4a:84:d8:4e:c7:0b:23:fb:84:e0:8d: 15:ca:30:7c:b5:d6:dc:5f:af:56:0f:c6:50:bd:4b: aa:6e:34:6b:e3:8d:8e:20:7f:85:2a:2a:5f:55:a3: 35:5f:b0:d6:88:61:1c:f4:a3:47:ed:64:73:75:c3: 27:2c:9a:c6:71:6c:6c:9c:c5:6e:a1:b4:4d:bf:0d: c3:33:79:31:7c:5b:02:f7:62:21:f9:8c:79:86:79: e1:6d:00:ac:33:5f:ff:5e:72:92:14:15:3b:96:5a: f7:00:90:f2:fa:a0:78:49:99:94:73:56:cb:86:d2: b5:4f:b5:b0:aa:4d:1a:d5:c7:85:5b:02:e4:ee:9a: c1:0c:89:34:cb:9b:25:75:76:e9:89:7b:53:af:25: 3f:29:7c:77:46:63:54:0e:28:1b:46:3e:ff:8b:e0: 37:52:4d:fb:78:9e:d6:b3:bf:02:3b:66:55:e6:dc: 1d:e0:3e:27:18:86:0b:0f:83:eb:b5:0b:97:3e:50: 4d:7d:ed:bf:7f:b3:a7:3a:4c:07:8d:f6:11:22:c4: 2e:3d:33:00:48:3e:31:59:d5:e4:ec:03:42:e9:95: fc:7f:dd:92:d3:fd:cb:dd:29:ef:fc:37:09:15:0f: 1d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F2:01:C5:A9:AD:A3:AB:00:8D:DE:9F:BA:BA:58:1F:A9:74:78:44 X509v3 Authority Key Identifier: keyid:45:25:88:41:F7:F0:4F:B3:9D:91:DA:3E:3F:AB:B5:29:E8:52:8F:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/53E7583E3D0511EF99169B21C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.198.252.0/23 Signature Algorithm: sha256WithRSAEncryption 28:79:11:46:05:23:e6:5e:99:6e:ea:f3:70:ac:5a:ee:75:28: 15:91:ad:7a:fb:10:52:de:99:37:8c:b1:7f:29:4e:73:6e:4e: 40:7d:bf:38:26:97:cb:f9:6a:f3:a3:07:de:c0:0f:5b:73:76: a0:5d:98:ec:9e:91:0f:6b:0b:42:af:43:e4:e4:af:da:47:11: 4e:da:85:9b:19:cc:28:61:c9:3a:36:33:9f:e2:46:da:9a:ca: ee:91:6c:80:dc:b7:9f:84:dc:eb:e7:ec:30:58:cf:d2:13:5f: 4c:bd:d7:30:19:30:f4:25:8a:15:1e:3a:1b:3e:3f:6c:81:a6: 2b:ed:7c:0b:41:99:7a:e2:90:f9:3f:3c:d2:c4:a1:d8:96:82: 3a:6c:76:4c:27:58:f2:ff:bc:9e:20:2b:61:45:2b:6a:9e:eb: 6a:57:67:93:1d:0d:34:4b:e0:51:4b:8c:e7:88:4a:3b:1d:62: 24:37:0c:dd:b7:37:d0:c2:0e:b5:3c:17:df:16:b7:63:c9:68: b8:1d:5c:85:f2:d4:d9:a5:32:a3:6d:fd:2e:63:a5:d0:40:5a: 1e:4d:cc:88:43:ca:45:7c:00:2e:76:43:13:c6:64:6a:d3:69: b8:f9:88:05:65:90:97:dc:ad:a0:e5:9a:63:39:3d:ea:a5:84: c4:a3:d4:13 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE3RTUxMTAvBgNVBAUTKDQ1MjU4ODQxRjdGMDRGQjM5RDkxREEzRTNGQUJCNTI5 RTg1MjhGNDkwHhcNMjUxMjE2MjIxODU1WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTQxZGFjZi03ODFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp2mS7LNhRhfneZoJ8uvSBCNJSoTYTscLI/uE4I0VyjB8tdbcX69WD8ZQvUuq bjRr442OIH+FKipfVaM1X7DWiGEc9KNH7WRzdcMnLJrGcWxsnMVuobRNvw3DM3kx fFsC92Ih+Yx5hnnhbQCsM1//XnKSFBU7llr3AJDy+qB4SZmUc1bLhtK1T7Wwqk0a 1ceFWwLk7prBDIk0y5sldXbpiXtTryU/KXx3RmNUDigbRj7/i+A3Uk37eJ7Ws78C O2ZV5twd4D4nGIYLD4PrtQuXPlBNfe2/f7OnOkwHjfYRIsQuPTMASD4xWdXk7ANC 6ZX8f92S0/3L3Snv/DcJFQ8duwIDAQABo4IClTCCApEwHQYDVR0OBBYEFIryAcWp raOrAI3en7q6WB+pdHhEMB8GA1UdIwQYMBaAFEUliEH38E+znZHaPj+rtSnoUo9J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTdFNS9EQjAwRjgwMkEw RkExMUVCQkMwOTk0M0FDNEY5QUUwMi9SU1dJUWZmd1Q3T2RrZG8tUDZ1MUtlaFNq MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JTV0lRZmZ3VDdPZGtkby1QNnUxS2VoU2oway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzE3RTUvREIwMEY4MDJBMEZBMTFFQkJDMDk5NDNBQzRGOUFFMDIvNTNFNzU4M0Uz RDA1MTFFRjk5MTY5QjIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnxvwwDQYJKoZIhvcNAQELBQADggEBACh5EUYFI+ZemW7q 83CsWu51KBWRrXr7EFLemTeMsX8pTnNuTkB9vzgml8v5avOjB97AD1tzdqBdmOye kQ9rC0KvQ+Tkr9pHEU7ahZsZzChhyTo2M5/iRtqayu6RbIDct5+E3Ovn7DBYz9IT X0y91zAZMPQlihUeOhs+P2yBpivtfAtBmXrikPk/PNLEodiWgjpsdkwnWPL/vJ4g K2FFK2qe62pXZ5MdDTRL4FFLjOeISjsdYiQ3DN23N9DCDrU8F98Wt2PJaLgdXIXy 1NmlMqNt/S5jpdBAWh5NzIhDykV8AC52QxPGZGrTabj5iAVlkJfcraDlmmM5Peql hMSj1BM= -----END CERTIFICATE-----Generated at Sun Dec 21 21:48:40 2025 by rpki-client