This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/DDCD4C168EC611EBAB7F3476C4F9AE02.roa File: DDCD4C168EC611EBAB7F3476C4F9AE02.roa (raw, json) Hash identifier: Y2ugT7F/Nq9bo4RxO3pzLxKsvKtinv0AiQJTvZ2Vh+g= Subject key identifier: 66:62:1F:B5:84:58:2A:06:50:8F:E2:7C:7E:B8:EA:52:FA:6D:95:C2 Certificate issuer: /CN=A91431A6/serialNumber=69661A9F063557CE2B5437B018893D7D9FDDBED0 Certificate serial: 06A9 Authority key identifier: 69:66:1A:9F:06:35:57:CE:2B:54:37:B0:18:89:3D:7D:9F:DD:BE:D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWYanwY1V84rVDewGIk9fZ_dvtA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/DDCD4C168EC611EBAB7F3476C4F9AE02.roa Signing time: Fri 28 Nov 2025 21:22:57 +0000 ROA not before: Fri 28 Nov 2025 21:22:57 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 138476 IP address blocks: 103.126.184.0/23 maxlen: 23 103.126.184.0/24 maxlen: 24 103.126.185.0/24 maxlen: 24 2001:df6:6780::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.crl rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWYanwY1V84rVDewGIk9fZ_dvtA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:14:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1705 (0x6a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91431A6, serialNumber=69661A9F063557CE2B5437B018893D7D9FDDBED0 Validity Not Before: Nov 28 21:22:57 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=692a12b1-3057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:91:8f:4a:75:56:ac:f3:47:d0:04:1d:a5:d1: e6:c8:0d:fc:c4:d5:8d:b6:9d:91:f6:11:bc:d6:c8: dd:ff:f5:e3:a1:f2:be:e0:78:98:cd:3c:bc:d4:28: 17:df:75:d6:ff:d6:b0:58:d9:59:37:55:22:75:18: 66:d7:02:ce:5b:cd:96:80:aa:db:5b:8f:c2:b8:df: 5e:36:f8:2b:d5:85:eb:a3:8a:04:b3:f6:93:d4:3e: 22:c5:39:36:3f:77:e9:7e:97:28:36:f2:43:d9:d2: dc:be:95:3d:14:25:f0:4e:a9:14:09:c0:79:3d:f8: d9:78:99:79:3f:85:1b:ad:48:49:c9:72:e1:d9:8f: 56:33:0d:82:3f:25:f8:6a:8d:9e:eb:d8:24:1c:06: c8:93:8d:01:d7:b0:38:15:ee:4b:f1:c6:a6:1e:94: 6f:1a:e3:d5:50:45:f8:d7:0e:2f:36:be:35:2d:c5: f3:ef:4f:e7:71:e1:8f:df:a0:53:9f:3b:28:55:3f: 6d:3b:c0:6a:f6:5b:20:ad:8c:e7:0d:ed:fd:11:09: c3:d0:3b:21:bf:60:8d:b7:10:74:6b:e3:d6:d0:5c: a2:b5:c0:6e:80:1d:ba:14:e3:28:cd:16:48:30:b3: 43:09:61:a3:55:79:c8:b5:e3:79:3d:75:13:65:5d: e0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:62:1F:B5:84:58:2A:06:50:8F:E2:7C:7E:B8:EA:52:FA:6D:95:C2 X509v3 Authority Key Identifier: keyid:69:66:1A:9F:06:35:57:CE:2B:54:37:B0:18:89:3D:7D:9F:DD:BE:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWYanwY1V84rVDewGIk9fZ_dvtA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/DDCD4C168EC611EBAB7F3476C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.126.184.0/23 IPv6: 2001:df6:6780::/48 Signature Algorithm: sha256WithRSAEncryption b6:1a:99:26:29:eb:c2:dd:c0:37:50:2c:f9:3e:dd:48:96:7d: 59:e9:89:c3:6e:a9:f5:e9:19:3a:43:19:45:a3:db:b4:d4:54: a7:22:b6:d6:36:6c:37:f0:f5:c6:5b:9e:ee:a7:d5:f6:9c:92: 81:ea:e4:65:58:93:38:ef:ff:89:5d:f8:25:c7:bd:5d:78:c6: 37:ec:41:55:ec:3c:98:54:0b:b7:c5:ba:a6:32:b9:7c:c4:0a: 08:a9:19:9a:8c:12:48:bc:12:d7:7f:94:75:c9:69:c5:44:a3: be:3c:84:e1:f0:5a:7a:80:0d:cf:d0:9c:3c:75:9f:1d:ce:e1: 2e:9e:72:9e:70:3a:9b:7d:76:06:3b:2d:55:28:07:5c:16:69: f3:f7:8c:a1:48:b4:75:9c:2c:44:f4:ea:ab:fe:80:43:f0:ae: 78:b8:fb:a4:c5:39:30:36:c7:8f:99:fe:82:90:6b:89:cd:96: c1:10:dc:8b:ab:6d:d7:0d:01:e0:29:8f:af:69:de:68:74:d9: b4:92:20:57:e7:d9:59:4d:68:55:54:1e:d0:f7:cd:86:79:18: a7:e5:6c:dd:88:25:f5:de:87:04:f9:fd:e1:da:4e:30:7b:4d: fc:7f:02:af:de:be:57:60:11:85:9e:c0:2b:e5:23:d8:0f:8a: a8:43:4b:5f -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMxQTYxMTAvBgNVBAUTKDY5NjYxQTlGMDYzNTU3Q0UyQjU0MzdCMDE4ODkzRDdE OUZEREJFRDAwHhcNMjUxMTI4MjEyMjU3WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJhMTJiMS0zMDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArZGPSnVWrPNH0AQdpdHmyA38xNWNtp2R9hG81sjd//XjofK+4HiYzTy81CgX 33XW/9awWNlZN1UidRhm1wLOW82WgKrbW4/CuN9eNvgr1YXro4oEs/aT1D4ixTk2 P3fpfpcoNvJD2dLcvpU9FCXwTqkUCcB5PfjZeJl5P4UbrUhJyXLh2Y9WMw2CPyX4 ao2e69gkHAbIk40B17A4Fe5L8camHpRvGuPVUEX41w4vNr41LcXz70/nceGP36BT nzsoVT9tO8Bq9lsgrYznDe39EQnD0Dshv2CNtxB0a+PW0FyitcBugB26FOMozRZI MLNDCWGjVXnIteN5PXUTZV3gBQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFGZiH7WE WCoGUI/ifH646lL6bZXCMB8GA1UdIwQYMBaAFGlmGp8GNVfOK1Q3sBiJPX2f3b7Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzFBNi80NEQ4OTBDQThF QzUxMUVCOTdCMTIwNzRDNEY5QUUwMi9hV1lhbndZMVY4NHJWRGV3R0lrOWZaX2R2 dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FXWWFud1kxVjg0clZEZXdHSWs5ZlpfZHZ0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDMxQTYvNDREODkwQ0E4RUM1MTFFQjk3QjEyMDc0QzRGOUFFMDIvRERDRDRDMTY4 RUM2MTFFQkFCN0YzNDc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnfrgwDwQCAAIwCQMHACABDfZngDANBgkqhkiG9w0BAQsF AAOCAQEAthqZJinrwt3AN1As+T7dSJZ9WemJw26p9ekZOkMZRaPbtNRUpyK21jZs N/D1xlue7qfV9pySgerkZViTOO//iV34Jce9XXjGN+xBVew8mFQLt8W6pjK5fMQK CKkZmowSSLwS13+UdclpxUSjvjyE4fBaeoANz9CcPHWfHc7hLp5ynnA6m312Bjst VSgHXBZp8/eMoUi0dZwsRPTqq/6AQ/CueLj7pMU5MDbHj5n+gpBric2WwRDci6tt 1w0B4CmPr2neaHTZtJIgV+fZWU1oVVQe0PfNhnkYp+Vs3Ygl9d6HBPn94dpOMHtN /H8Cr96+V2ARhZ7AK+Uj2A+KqENLXw== -----END CERTIFICATE-----Generated at Sun Dec 7 08:19:28 2025 by rpki-client