This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/A87AAC50C47711EDA3EF8884C4F9AE02.roa File: A87AAC50C47711EDA3EF8884C4F9AE02.roa (raw, json) Hash identifier: l6zkRAHkzlG2p+kMMFQU/QFFwk47WGSalo955oGvUKw= Subject key identifier: 95:5F:53:FE:04:B7:B0:8B:89:F2:0C:51:8E:88:60:95:5F:53:04:84 Certificate issuer: /CN=A91515BC/serialNumber=4CA890367B1EA49EBCF9402C86200DCD7446B6C0 Certificate serial: 01FD Authority key identifier: 4C:A8:90:36:7B:1E:A4:9E:BC:F9:40:2C:86:20:0D:CD:74:46:B6:C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKiQNnsepJ68-UAshiANzXRGtsA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/A87AAC50C47711EDA3EF8884C4F9AE02.roa Signing time: Thu 27 Nov 2025 00:48:12 +0000 ROA not before: Thu 27 Nov 2025 00:48:12 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 133730 IP address blocks: 103.39.55.0/24 maxlen: 24 103.39.84.0/23 maxlen: 24 103.208.155.0/24 maxlen: 24 137.59.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.crl rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKiQNnsepJ68-UAshiANzXRGtsA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:44:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 509 (0x1fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91515BC, serialNumber=4CA890367B1EA49EBCF9402C86200DCD7446B6C0 Validity Not Before: Nov 27 00:48:12 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69279fcc-c091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:74:1c:92:ba:ec:c2:56:b6:fd:12:13:fb:f9: 59:5b:b8:23:01:89:f7:d7:85:50:df:8c:55:b2:61: 41:31:72:3a:6f:60:2d:7a:f8:63:16:d8:9f:ac:b2: c1:fe:35:36:4e:d1:19:80:69:1b:e7:8f:db:63:cb: 4e:76:c1:e8:51:26:f3:65:fb:fc:15:9d:9d:c1:81: 42:75:ad:cc:7c:be:6c:f4:e6:3a:4a:45:a6:72:65: be:6b:9e:62:de:14:3c:35:f8:2c:7a:2a:4d:37:54: de:fd:2c:d0:db:b4:c8:f5:b4:70:23:29:ec:03:d8: 87:7f:49:88:22:75:36:02:48:8e:94:20:b8:a8:7a: 8e:a7:ae:ce:6e:ff:35:6e:ea:86:c8:d4:93:87:0a: bf:3e:ab:56:dc:a5:d8:cf:12:3a:2d:b0:8f:84:16: 49:dd:e6:a1:35:eb:8b:df:01:20:f7:05:0b:b4:8e: 8a:d0:a0:78:56:56:ec:b2:8b:bc:0e:95:b6:e2:28: eb:cf:36:0d:c3:f0:5a:29:82:46:aa:d7:77:30:51: b1:18:52:27:b5:16:5e:71:3d:dc:e4:99:4b:2f:89: a2:2f:39:d3:27:89:a4:e2:4f:29:e1:54:1f:44:58: 10:a9:c6:8c:9f:90:da:99:ef:22:4c:98:a5:e2:0b: 2d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:5F:53:FE:04:B7:B0:8B:89:F2:0C:51:8E:88:60:95:5F:53:04:84 X509v3 Authority Key Identifier: keyid:4C:A8:90:36:7B:1E:A4:9E:BC:F9:40:2C:86:20:0D:CD:74:46:B6:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKiQNnsepJ68-UAshiANzXRGtsA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/A87AAC50C47711EDA3EF8884C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.39.55.0/24 103.39.84.0/23 103.208.155.0/24 137.59.196.0/22 Signature Algorithm: sha256WithRSAEncryption 6f:3e:78:fa:d2:59:f3:39:be:5c:10:01:2f:08:8d:de:53:4d: 10:30:b0:20:ab:da:c2:07:8c:17:aa:62:cb:1e:74:8c:10:5b: cf:68:76:d6:ee:cc:03:fd:89:8e:32:1e:02:75:1d:e4:f2:54: 17:a1:7d:64:d1:1a:c4:a3:ab:80:b8:84:58:d0:37:25:d6:a4: cf:63:79:32:54:17:d4:f9:3f:a3:cd:88:fb:7e:fa:3d:d4:24: e5:bc:3b:0e:84:fa:39:8e:97:e3:83:0f:89:8f:ba:f6:b5:6c: a8:e5:4c:53:a3:bc:50:ab:97:4a:a4:d8:0b:40:e0:e9:f0:4d: 3e:30:9c:13:2e:87:f2:6b:3b:19:de:74:17:4f:b2:ba:8b:c4: 21:bb:ca:45:b1:1b:8c:e7:12:b9:bd:92:6d:d0:6c:83:3f:15: a3:a3:f9:03:c3:e4:36:c4:f9:03:03:e3:65:50:1e:9c:ba:de: 5b:e9:87:1d:77:00:e4:7a:f8:5e:e6:a3:ef:f0:65:40:0a:e8: 9a:8f:07:7e:b1:78:85:3e:43:fd:5e:fa:eb:eb:bb:fb:45:cd: 31:ee:61:c9:f2:e7:c5:e4:e3:0e:68:2d:16:4a:4c:bf:0a:b3: 9b:28:04:96:2f:ad:60:82:b2:c1:89:bc:2a:ad:11:55:a7:c1: 0f:60:86:33 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICAf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE1QkMxMTAvBgNVBAUTKDRDQTg5MDM2N0IxRUE0OUVCQ0Y5NDAyQzg2MjAwRENE NzQ0NkI2QzAwHhcNMjUxMTI3MDA0ODEyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTI3OWZjYy1jMDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA43Qckrrswla2/RIT+/lZW7gjAYn314VQ34xVsmFBMXI6b2AtevhjFtifrLLB /jU2TtEZgGkb54/bY8tOdsHoUSbzZfv8FZ2dwYFCda3MfL5s9OY6SkWmcmW+a55i 3hQ8NfgseipNN1Te/SzQ27TI9bRwIynsA9iHf0mIInU2AkiOlCC4qHqOp67Obv81 buqGyNSThwq/PqtW3KXYzxI6LbCPhBZJ3eahNeuL3wEg9wULtI6K0KB4Vlbssou8 DpW24ijrzzYNw/BaKYJGqtd3MFGxGFIntRZecT3c5JlLL4miLznTJ4mk4k8p4VQf RFgQqcaMn5Dame8iTJil4gstEwIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFJVfU/4E t7CLifIMUY6IYJVfUwSEMB8GA1UdIwQYMBaAFEyokDZ7HqSevPlALIYgDc10RrbA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTVCQy8xNjREOTJCMkM0 NzExMUVEQTlDNUNCNjBDNEY5QUUwMi9US2lRTm5zZXBKNjgtVUFzaGlBTnpYUkd0 c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLaVFObnNlcEo2OC1VQXNoaUFOelhSR3RzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTE1QkMvMTY0RDkyQjJDNDcxMTFFREE5QzVDQjYwQzRGOUFFMDIvQTg3QUFDNTBD NDc3MTFFREEzRUY4ODg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBABnJzcDBAFnJ1QDBABn0JsDBAKJO8QwDQYJKoZIhvcNAQEL BQADggEBAG8+ePrSWfM5vlwQAS8Ijd5TTRAwsCCr2sIHjBeqYssedIwQW89odtbu zAP9iY4yHgJ1HeTyVBehfWTRGsSjq4C4hFjQNyXWpM9jeTJUF9T5P6PNiPt++j3U JOW8Ow6E+jmOl+ODD4mPuva1bKjlTFOjvFCrl0qk2AtA4OnwTT4wnBMuh/JrOxne dBdPsrqLxCG7ykWxG4znErm9km3QbIM/FaOj+QPD5DbE+QMD42VQHpy63lvphx13 AOR6+F7mo+/wZUAK6JqPB36xeIU+Q/1e+uvru/tFzTHuYcny58Xk4w5oLRZKTL8K s5soBJYvrWCCssGJvCqtEVWnwQ9ghjM= -----END CERTIFICATE-----Generated at Sun Dec 7 00:02:45 2025 by rpki-client