This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FC90C520213411EA8D675645C4F9AE02.roa File: FC90C520213411EA8D675645C4F9AE02.roa (raw, json) Hash identifier: ioWxXkHuwgM2086xjsQFXghAivhpj/YnVGLVGuciV/A= Subject key identifier: 54:69:C3:FB:67:7A:4E:D2:15:98:13:E6:98:BC:35:DC:1F:5E:88:FF Certificate issuer: /CN=A91503BB/serialNumber=15F07FEFCA05E846D45385125E8BB427758300F9 Certificate serial: 0C17 Authority key identifier: 15:F0:7F:EF:CA:05:E8:46:D4:53:85:12:5E:8B:B4:27:75:83:00:F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FC90C520213411EA8D675645C4F9AE02.roa Signing time: Fri 28 Nov 2025 18:22:53 +0000 ROA not before: Fri 28 Nov 2025 18:22:53 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 58910 IP address blocks: 43.241.96.0/22 maxlen: 24 103.18.88.0/22 maxlen: 24 2400:5380::/32 maxlen: 32 2400:5380::/33 maxlen: 33 2400:5380:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.crl rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 18:06:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3095 (0xc17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91503BB, serialNumber=15F07FEFCA05E846D45385125E8BB427758300F9 Validity Not Before: Nov 28 18:22:53 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6929e87d-022f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:35:60:f3:00:57:31:99:a6:dc:a5:22:64:4e: dd:94:11:14:07:52:ef:d1:aa:83:33:4a:ae:13:6a: 71:0b:68:fe:62:e7:80:9a:99:f9:f0:cd:9d:7b:99: dc:39:38:a8:73:cb:76:e8:e7:0b:dc:64:6e:c7:07: a2:6f:18:9b:16:ab:c7:bb:ad:1c:6e:89:17:71:e8: 35:51:99:58:d5:22:de:24:7e:ae:5f:2f:e6:8f:84: 45:88:ee:a1:ca:78:87:86:af:ab:d2:ab:54:8b:f8: ae:6b:7d:a4:38:e5:cb:32:45:ed:cd:99:e3:24:98: 42:a0:0c:47:e4:45:c3:fb:48:85:31:af:44:a4:8c: 50:55:73:89:d7:fe:e0:7e:e9:97:31:81:19:25:33: 5b:1e:ef:2e:8e:e7:3b:b9:d4:3b:7d:d9:d1:00:ab: d4:a1:34:c0:bd:84:60:80:08:83:12:5b:8d:e0:eb: 68:68:24:62:1a:1e:84:17:3e:60:43:5e:5b:a1:88: 81:5c:b1:62:75:bb:c5:97:56:b7:bd:11:2f:18:76: 49:28:c2:24:84:81:d8:8f:6a:57:05:a9:9e:b3:24: 0a:5b:ee:3e:1b:77:ea:de:ed:af:3d:51:48:eb:87: 51:9e:99:eb:5d:4d:52:fc:3d:ad:0e:10:32:25:a0: ee:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:69:C3:FB:67:7A:4E:D2:15:98:13:E6:98:BC:35:DC:1F:5E:88:FF X509v3 Authority Key Identifier: keyid:15:F0:7F:EF:CA:05:E8:46:D4:53:85:12:5E:8B:B4:27:75:83:00:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FC90C520213411EA8D675645C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.241.96.0/22 103.18.88.0/22 IPv6: 2400:5380::/32 Signature Algorithm: sha256WithRSAEncryption 7d:b0:f1:39:cd:d5:e5:a6:c7:f1:d9:ac:34:ad:f0:4c:c8:ff: b1:49:97:14:99:25:12:3b:51:b8:34:db:86:f7:21:3c:59:4a: 7c:16:51:64:6b:16:94:c9:22:e7:02:fa:a6:f0:fc:bb:d3:93: fc:48:2c:c1:a7:22:b2:08:e4:fa:bc:f8:b6:e5:b9:69:9a:e1: d6:6e:b9:3f:d7:7e:a5:14:cd:94:46:62:e8:18:3c:a4:a0:b5: 4f:57:ed:1f:2f:ce:03:1e:91:77:aa:f1:02:9c:da:db:9c:fa: 9e:af:35:f0:58:56:97:98:5c:e7:74:3b:33:0c:08:35:68:50: c8:0c:02:27:db:30:de:b6:14:d2:8d:84:5e:85:04:29:4f:f1: 56:2a:6c:79:cf:8e:73:43:01:17:2e:1d:b4:31:58:08:95:4c: d4:fa:e2:21:84:37:4b:9a:84:27:ba:27:2f:98:70:11:3f:8a: ec:b2:2b:03:3b:eb:70:f6:ea:41:f5:e9:a4:af:0a:05:2b:b3: 64:03:04:83:f9:6f:e9:27:b6:47:c4:89:5f:25:78:08:79:fe: ad:0b:39:f7:5f:f5:5f:84:7f:03:a6:c1:6e:cd:d4:0b:cd:3d: 5b:2f:74:fa:65:97:ef:30:37:d6:de:55:53:2a:8a:bb:df:2e: 09:83:f4:1e -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICDBcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAzQkIxMTAvBgNVBAUTKDE1RjA3RkVGQ0EwNUU4NDZENDUzODUxMjVFOEJCNDI3 NzU4MzAwRjkwHhcNMjUxMTI4MTgyMjUzWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTI5ZTg3ZC0wMjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzjVg8wBXMZmm3KUiZE7dlBEUB1Lv0aqDM0quE2pxC2j+YueAmpn58M2de5nc OTioc8t26OcL3GRuxweibxibFqvHu60cbokXceg1UZlY1SLeJH6uXy/mj4RFiO6h yniHhq+r0qtUi/iua32kOOXLMkXtzZnjJJhCoAxH5EXD+0iFMa9EpIxQVXOJ1/7g fumXMYEZJTNbHu8ujuc7udQ7fdnRAKvUoTTAvYRggAiDEluN4OtoaCRiGh6EFz5g Q15boYiBXLFidbvFl1a3vREvGHZJKMIkhIHYj2pXBamesyQKW+4+G3fq3u2vPVFI 64dRnpnrXU1S/D2tDhAyJaDuSQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFFRpw/tn ek7SFZgT5pi8NdwfXoj/MB8GA1UdIwQYMBaAFBXwf+/KBehG1FOFEl6LtCd1gwD5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDNCQi80NzI1RkM3ODIx MkYxMUVBODMwRTBBMzVDNEY5QUUwMi9GZkJfNzhvRjZFYlVVNFVTWG91MEozV0RB UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZmQl83OG9GNkViVVU0VVNYb3UwSjNXREFQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTAzQkIvNDcyNUZDNzgyMTJGMTFFQTgzMEUwQTM1QzRGOUFFMDIvRkM5MEM1MjAy MTM0MTFFQThENjc1NjQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAIr8WADBAJnElgwDQQCAAIwBwMFACQAU4AwDQYJKoZIhvcN AQELBQADggEBAH2w8TnN1eWmx/HZrDSt8EzI/7FJlxSZJRI7Ubg024b3ITxZSnwW UWRrFpTJIucC+qbw/LvTk/xILMGnIrII5Pq8+LbluWma4dZuuT/XfqUUzZRGYugY PKSgtU9X7R8vzgMekXeq8QKc2tuc+p6vNfBYVpeYXOd0OzMMCDVoUMgMAifbMN62 FNKNhF6FBClP8VYqbHnPjnNDARcuHbQxWAiVTNT64iGEN0uahCe6Jy+YcBE/iuyy KwM763D26kH16aSvCgUrs2QDBIP5b+kntkfEiV8leAh5/q0LOfdf9V+EfwOmwW7N 1AvNPVsvdPpll+8wN9beVVMqirvfLgmD9B4= -----END CERTIFICATE-----Generated at Sun Dec 7 02:09:20 2025 by rpki-client