This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/51635E7E32B011EE89DFF774C4F9AE02.roa File: 51635E7E32B011EE89DFF774C4F9AE02.roa (raw, json) Hash identifier: yGKvF3UBsgJ6VKreN5e6xc+PrZFaa4A/B9g4uCEjRgk= Subject key identifier: F1:CB:B6:34:B2:19:A6:02:E2:1B:00:EF:E9:E4:1C:96:92:D6:2C:CC Certificate issuer: /CN=A91478E2/serialNumber=C14853D9BD3F78F6480C63352076943BC79B9FC2 Certificate serial: 17EA Authority key identifier: C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/51635E7E32B011EE89DFF774C4F9AE02.roa Signing time: Sat 22 Nov 2025 16:34:51 +0000 ROA not before: Sat 22 Nov 2025 16:34:51 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 17557 IP address blocks: 103.103.42.0/24 maxlen: 24 103.103.43.0/24 maxlen: 24 103.120.70.0/24 maxlen: 24 103.120.71.0/24 maxlen: 24 2402:2ec0::/34 maxlen: 34 2402:2ec0:4000::/34 maxlen: 34 2402:2ec0:8000::/34 maxlen: 34 2402:2ec0:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6122 (0x17ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91478E2, serialNumber=C14853D9BD3F78F6480C63352076943BC79B9FC2 Validity Not Before: Nov 22 16:34:51 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6921e62a-4340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:69:49:e0:6a:38:d5:a3:8a:cb:57:ef:25:72: 99:32:ef:e7:dd:b2:a0:db:92:99:26:37:d0:a7:6c: de:fe:0e:49:d2:38:02:6b:fb:c3:a6:5f:c4:f9:22: 49:0e:1c:25:f4:10:b9:7b:5f:a8:24:fa:0e:21:5b: 9d:d0:70:e3:08:49:30:80:a1:08:bd:fe:3a:b5:2c: 16:d4:c1:bb:12:09:58:bc:44:db:0d:b8:c1:cb:74: 18:09:9c:de:90:ed:32:8a:b1:d7:a4:bb:b5:25:1a: b4:55:63:ca:fa:8f:0d:84:f5:59:a7:e7:95:cf:78: e9:18:85:dd:66:94:db:3b:b9:94:8b:98:99:f6:05: c5:25:f5:56:7f:19:68:aa:c7:3f:ef:d4:c2:3a:42: 7e:28:6c:88:58:b7:07:1d:b4:e8:96:77:57:a3:68: 34:59:0b:4e:aa:14:c9:73:d5:cd:0d:b0:08:92:05: 25:15:66:76:4a:4d:5f:49:d9:94:19:3c:e4:3e:4c: 01:88:ab:ee:7a:6a:e8:35:f1:79:66:c2:a8:ed:0e: e0:1d:63:42:6a:29:1c:25:fe:70:61:43:2e:b9:98: 6d:93:a6:b8:3a:9e:6a:38:01:c0:9e:a0:9f:cd:8f: 52:c4:de:e2:69:08:28:c3:1c:d6:2d:47:4e:bd:dc: 7b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:CB:B6:34:B2:19:A6:02:E2:1B:00:EF:E9:E4:1C:96:92:D6:2C:CC X509v3 Authority Key Identifier: keyid:C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/51635E7E32B011EE89DFF774C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.103.42.0/23 103.120.70.0/23 IPv6: 2402:2ec0::/32 Signature Algorithm: sha256WithRSAEncryption 9a:56:04:30:78:90:bc:6a:79:62:fb:bb:9f:d1:55:a6:c0:f7: 69:b4:d5:ce:c7:d6:3a:c2:b3:d8:40:ac:82:3d:78:e7:4e:37: df:4b:0c:74:94:06:bf:61:35:26:ba:49:c5:ff:b6:b6:4d:cf: 47:a4:2f:0e:c3:dd:ea:e4:64:a3:45:ac:7d:c7:b8:c3:a3:97: 38:03:fd:68:ec:e2:47:33:8b:ad:e0:1b:52:45:fb:ff:8a:2a: 5d:d5:c0:a4:cb:2a:a7:a0:35:ef:5b:b2:f1:5b:78:38:6a:57: 3e:02:0c:87:bc:e5:6b:8f:6f:33:c1:10:66:8b:47:c6:be:65: 1f:8c:6b:9f:47:c3:09:66:0b:49:35:38:0e:f9:9b:e8:7e:47: 2d:25:16:56:38:c8:61:d3:78:28:77:1f:24:d9:4f:5f:7e:ba: 5f:b2:ae:64:22:de:41:1b:c5:12:3b:04:e8:23:52:b3:12:a7: 5d:0c:6e:e6:44:59:60:3f:5e:bf:3b:55:6b:b5:a2:0d:37:13: bb:3f:87:e7:de:31:92:4c:c3:f9:3d:6c:2c:e3:e3:1d:c4:9d: 8b:54:07:ca:a4:42:6a:7f:92:e6:f9:e5:9c:80:fb:80:5e:47: 7b:df:c0:e9:50:8a:98:8e:1e:42:97:3e:bd:8f:b4:81:25:e8: 17:f3:73:db -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICF+owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc4RTIxMTAvBgNVBAUTKEMxNDg1M0Q5QkQzRjc4RjY0ODBDNjMzNTIwNzY5NDNC Qzc5QjlGQzIwHhcNMjUxMTIyMTYzNDUxWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTIxZTYyYS00MzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz2lJ4Go41aOKy1fvJXKZMu/n3bKg25KZJjfQp2ze/g5J0jgCa/vDpl/E+SJJ Dhwl9BC5e1+oJPoOIVud0HDjCEkwgKEIvf46tSwW1MG7EglYvETbDbjBy3QYCZze kO0yirHXpLu1JRq0VWPK+o8NhPVZp+eVz3jpGIXdZpTbO7mUi5iZ9gXFJfVWfxlo qsc/79TCOkJ+KGyIWLcHHbTolndXo2g0WQtOqhTJc9XNDbAIkgUlFWZ2Sk1fSdmU GTzkPkwBiKvuemroNfF5ZsKo7Q7gHWNCaikcJf5wYUMuuZhtk6a4Op5qOAHAnqCf zY9SxN7iaQgowxzWLUdOvdx7mQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFPHLtjSy GaYC4hsA7+nkHJaS1izMMB8GA1UdIwQYMBaAFMFIU9m9P3j2SAxjNSB2lDvHm5/C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzhFMi80QzkwOEEyMkUw QjYxMUU3QjJEMEZEODBDNEY5QUUwMi93VWhUMmIwX2VQWklER00xSUhhVU84ZWJu OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dVaFQyYjBfZVBaSURHTTFJSGFVTzhlYm44SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDc4RTIvNEM5MDhBMjJFMEI2MTFFN0IyRDBGRDgwQzRGOUFFMDIvNTE2MzVFN0Uz MkIwMTFFRTg5REZGNzc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAFnZyoDBAFneEYwDQQCAAIwBwMFACQCLsAwDQYJKoZIhvcN AQELBQADggEBAJpWBDB4kLxqeWL7u5/RVabA92m01c7H1jrCs9hArII9eOdON99L DHSUBr9hNSa6ScX/trZNz0ekLw7D3erkZKNFrH3HuMOjlzgD/Wjs4kczi63gG1JF +/+KKl3VwKTLKqegNe9bsvFbeDhqVz4CDIe85WuPbzPBEGaLR8a+ZR+Ma59Hwwlm C0k1OA75m+h+Ry0lFlY4yGHTeCh3HyTZT19+ul+yrmQi3kEbxRI7BOgjUrMSp10M buZEWWA/Xr87VWu1og03E7s/h+feMZJMw/k9bCzj4x3EnYtUB8qkQmp/kub55ZyA +4BeR3vfwOlQipiOHkKXPr2PtIEl6Bfzc9s= -----END CERTIFICATE-----Generated at Sat Dec 6 21:46:17 2025 by rpki-client