This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/ACD87DA66C4811EBB9A7CF73C4F9AE02.roa File: ACD87DA66C4811EBB9A7CF73C4F9AE02.roa (raw, json) Hash identifier: 4SDVk60SWQl2vTJ1K6rzs+mQCqAItGWRRGu4kfUeRwQ= Subject key identifier: 75:0E:26:87:D1:FA:13:50:EA:5F:83:B6:E1:79:28:13:06:B7:7A:23 Certificate issuer: /CN=A91376D4/serialNumber=590D2785F306E8914A1DFE9B27D57C6B89FCDA93 Certificate serial: 06B6 Authority key identifier: 59:0D:27:85:F3:06:E8:91:4A:1D:FE:9B:27:D5:7C:6B:89:FC:DA:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/ACD87DA66C4811EBB9A7CF73C4F9AE02.roa Signing time: Mon 10 Feb 2025 22:10:40 +0000 ROA not before: Mon 10 Feb 2025 22:10:40 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 134499 IP address blocks: 103.161.66.0/24 maxlen: 24 103.161.67.0/24 maxlen: 24 2001:df5:bb80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.crl rsync://rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 20:42:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1718 (0x6b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91376D4, serialNumber=590D2785F306E8914A1DFE9B27D57C6B89FCDA93 Validity Not Before: Feb 10 22:10:40 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67aa7960-8709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:68:33:a7:c0:6d:a7:7f:e6:9b:0f:b9:5d:23: f9:5a:28:90:28:27:6c:db:0b:b7:71:f4:97:21:df: c7:13:e6:05:f4:d0:b8:8e:3a:33:09:67:e3:72:e1: 0c:b9:1f:58:f2:42:ad:52:2c:55:cd:85:66:57:87: 8b:e8:e3:9f:4c:c5:c2:05:d2:06:56:f9:17:34:9a: 62:d1:b7:61:23:1d:48:c3:6d:d9:0d:64:7e:8b:35: b3:4b:2d:ec:49:53:27:53:b4:43:c3:9a:ea:9d:da: 39:e2:df:2d:a0:5b:30:b0:6a:b7:54:e1:f9:ab:52: a1:8d:40:3a:ee:7a:b7:5d:75:5f:92:38:8f:41:24: f3:a0:09:f1:e8:1a:1c:ff:9a:01:1e:94:99:85:9e: 3b:f9:65:ba:fe:86:57:d6:72:e7:7c:ef:86:10:5c: 20:85:7e:1d:40:d4:06:93:cc:32:68:ad:4d:f2:1a: f8:98:75:f7:4d:16:66:10:ee:a9:b3:bb:a8:dd:0e: f6:7f:a6:d5:fb:9e:70:a6:d2:8a:32:3e:ed:31:59: 4c:f7:b6:ef:c0:76:16:fa:e5:1c:da:36:cb:ea:92: 9d:74:bc:19:5c:c6:9c:c8:34:68:e9:f1:cf:28:ec: df:ad:ee:d6:a2:1f:34:af:56:02:95:f3:5d:22:67: 3b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:0E:26:87:D1:FA:13:50:EA:5F:83:B6:E1:79:28:13:06:B7:7A:23 X509v3 Authority Key Identifier: keyid:59:0D:27:85:F3:06:E8:91:4A:1D:FE:9B:27:D5:7C:6B:89:FC:DA:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/ACD87DA66C4811EBB9A7CF73C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.161.66.0/23 IPv6: 2001:df5:bb80::/48 Signature Algorithm: sha256WithRSAEncryption 09:b8:60:0c:3e:0c:e5:b1:15:be:57:81:21:3b:45:77:0e:ac: 7d:33:e3:47:95:de:06:aa:71:50:01:1b:99:00:df:e8:35:e2: 53:45:85:c7:d4:65:e8:13:30:eb:4b:45:bd:c0:ff:39:1d:75: 35:7b:0f:cd:a5:87:77:b0:b7:6b:75:d8:c7:c3:b9:33:91:a9: 20:92:0b:d3:2b:c8:cc:9f:b7:34:b7:e4:ce:85:13:cb:c0:50: d7:75:b6:60:1d:60:68:19:5f:3a:a2:5f:e7:b3:b8:29:8a:db: 55:d1:02:89:c2:b2:4f:0b:b6:42:5e:a8:c8:bb:c8:50:4a:5a: 98:7a:d0:14:d1:bf:ba:ad:53:cd:3d:88:72:34:37:f0:69:0a: 89:6b:f7:00:a7:54:bb:5c:9b:9a:68:57:c3:68:59:89:cd:f1: c1:07:39:2b:5a:b0:b2:db:28:2f:34:44:ec:07:9d:01:92:ea: bd:0b:06:49:6f:69:0e:71:22:45:34:c8:0c:7c:3d:7e:4e:d6: 8b:37:67:d1:fc:b9:87:b9:44:90:c4:d4:92:e0:d5:cb:08:48: 93:3d:f3:aa:a4:fb:3f:89:8d:f0:ad:96:5d:60:1e:a2:1f:7b: 9e:68:20:ed:82:de:78:fe:aa:2f:b2:58:3e:cc:6a:14:93:dc: 4b:08:1d:80 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBrYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc2RDQxMTAvBgNVBAUTKDU5MEQyNzg1RjMwNkU4OTE0QTFERkU5QjI3RDU3QzZC ODlGQ0RBOTMwHhcNMjUwMjEwMjIxMDQwWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2FhNzk2MC04NzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmWgzp8Btp3/mmw+5XSP5WiiQKCds2wu3cfSXId/HE+YF9NC4jjozCWfjcuEM uR9Y8kKtUixVzYVmV4eL6OOfTMXCBdIGVvkXNJpi0bdhIx1Iw23ZDWR+izWzSy3s SVMnU7RDw5rqndo54t8toFswsGq3VOH5q1KhjUA67nq3XXVfkjiPQSTzoAnx6Boc /5oBHpSZhZ47+WW6/oZX1nLnfO+GEFwghX4dQNQGk8wyaK1N8hr4mHX3TRZmEO6p s7uo3Q72f6bV+55wptKKMj7tMVlM97bvwHYW+uUc2jbL6pKddLwZXMacyDRo6fHP KOzfre7Woh80r1YClfNdImc7uwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFHUOJofR +hNQ6l+DtuF5KBMGt3ojMB8GA1UdIwQYMBaAFFkNJ4XzBuiRSh3+myfVfGuJ/NqT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzZENC84RTMyNjgzQTRG MzMxMUVCQkY0OUUzNTdDNEY5QUUwMi9XUTBuaGZNRzZKRktIZjZiSjlWOGE0bjgy cE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dRMG5oZk1HNkpGS0hmNmJKOVY4YTRuODJwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mzc2RDQvOEUzMjY4M0E0RjMzMTFFQkJGNDlFMzU3QzRGOUFFMDIvQUNEODdEQTY2 QzQ4MTFFQkI5QTdDRjczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnoUIwDwQCAAIwCQMHACABDfW7gDANBgkqhkiG9w0BAQsF AAOCAQEACbhgDD4M5bEVvleBITtFdw6sfTPjR5XeBqpxUAEbmQDf6DXiU0WFx9Rl 6BMw60tFvcD/OR11NXsPzaWHd7C3a3XYx8O5M5GpIJIL0yvIzJ+3NLfkzoUTy8BQ 13W2YB1gaBlfOqJf57O4KYrbVdECicKyTwu2Ql6oyLvIUEpamHrQFNG/uq1TzT2I cjQ38GkKiWv3AKdUu1ybmmhXw2hZic3xwQc5K1qwstsoLzRE7AedAZLqvQsGSW9p DnEiRTTIDHw9fk7Wizdn0fy5h7lEkMTUkuDVywhIkz3zqqT7P4mN8K2WXWAeoh97 nmgg7YLeeP6qL7JYPsxqFJPcSwgdgA== -----END CERTIFICATE-----Generated at Sun Dec 7 01:15:37 2025 by rpki-client