This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/2455276E39B311EEA6DFE66BC4F9AE02.roa File: 2455276E39B311EEA6DFE66BC4F9AE02.roa (raw, json) Hash identifier: RK5tPBygONDShLt3IeKagZkrWMr91hP51vzRoPslud0= Subject key identifier: EF:98:D7:9B:72:23:86:F6:38:8F:41:E3:13:9A:54:9F:5B:2C:99:F0 Certificate issuer: /CN=A91689B7/serialNumber=88224785574C1F23CA9C439ED8F55388F6A68CE2 Certificate serial: 024D Authority key identifier: 88:22:47:85:57:4C:1F:23:CA:9C:43:9E:D8:F5:53:88:F6:A6:8C:E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iCJHhVdMHyPKnEOe2PVTiPamjOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/2455276E39B311EEA6DFE66BC4F9AE02.roa Signing time: Sat 29 Nov 2025 00:27:31 +0000 ROA not before: Sat 29 Nov 2025 00:27:31 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 150387 IP address blocks: 103.26.238.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.crl rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iCJHhVdMHyPKnEOe2PVTiPamjOI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:08:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 589 (0x24d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91689B7, serialNumber=88224785574C1F23CA9C439ED8F55388F6A68CE2 Validity Not Before: Nov 29 00:27:31 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=692a3df3-4cef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9a:94:0e:e1:c8:17:3a:f8:25:87:49:08:20: d1:ac:f9:fb:2a:34:74:6a:0a:61:57:e4:e7:19:84: ad:3a:a1:08:52:a8:3b:3a:65:15:80:52:b2:27:8c: 43:bc:b9:72:d1:03:5f:98:e5:99:70:0b:32:cb:f6: 6d:ae:23:cf:7f:f3:9d:76:39:c6:5d:d8:42:7b:96: 1e:bf:45:68:74:23:ff:31:f6:62:2a:fe:83:62:d8: ce:ae:9d:c5:0e:98:f8:ed:dc:0b:65:0c:e8:15:9e: f5:cb:e7:58:68:e9:c9:12:35:98:66:17:e4:f0:37: 72:2a:0d:02:3b:6b:c0:24:8f:b4:03:bb:ae:ba:43: f2:a5:f3:03:6f:37:59:b7:5e:3f:20:29:83:45:a5: 5e:1f:cc:fd:fe:77:90:f0:58:f2:54:eb:c3:04:bd: 91:b5:60:8d:ed:5c:12:0f:bb:9a:64:c0:0e:b6:65: 1a:d6:32:01:94:11:96:63:2d:ed:86:ef:c0:1a:e3: 6a:8a:17:5b:1f:45:08:b0:64:30:45:e7:ca:88:29: 77:68:58:30:46:50:0d:53:a6:98:a5:29:79:07:77: e7:fa:6d:5b:b5:c5:ab:89:36:db:17:05:14:e2:ac: da:54:23:8b:c3:10:c7:a7:fb:49:e9:63:e8:35:67: e0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:98:D7:9B:72:23:86:F6:38:8F:41:E3:13:9A:54:9F:5B:2C:99:F0 X509v3 Authority Key Identifier: keyid:88:22:47:85:57:4C:1F:23:CA:9C:43:9E:D8:F5:53:88:F6:A6:8C:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iCJHhVdMHyPKnEOe2PVTiPamjOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/2455276E39B311EEA6DFE66BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.26.238.0/23 Signature Algorithm: sha256WithRSAEncryption 74:c6:68:d0:69:0b:61:41:12:75:3f:2e:17:bb:cf:6e:6b:29: f6:db:09:e5:79:e9:5c:50:bb:f1:3c:e5:d9:6d:d0:39:2a:99: 43:82:c3:48:a9:7f:41:63:42:40:14:52:38:47:32:87:35:99: a9:32:11:cb:d1:53:cf:c0:cd:0d:4e:2b:53:c3:de:ef:ed:9d: 17:47:61:3f:da:7a:d3:ff:b7:b5:37:3f:48:8f:0b:aa:0d:f3: 1c:05:79:fc:7f:9b:dc:61:a7:7a:08:bd:0e:9d:24:c9:7e:17: 4d:fa:ed:4d:23:40:8e:d6:d9:fe:32:21:69:f1:51:d7:f9:c5: f2:62:e2:0f:41:80:b5:0e:dd:03:43:85:d1:d6:b0:ac:2a:39: 6e:dc:24:69:01:00:41:a6:a0:54:e2:09:9d:40:bf:b9:4c:5a: 0f:7b:6f:7e:8e:fc:a0:59:41:7d:da:31:60:b8:3b:b5:99:45: 55:4a:8f:14:a7:f2:fd:ad:fb:fe:cb:85:0c:fa:a6:53:ec:2c: e2:1d:7c:e6:ca:2c:a5:9d:2b:6d:ac:7c:5e:8d:4a:84:13:d5: cb:4d:46:5f:8f:45:99:5c:2c:2a:f1:82:88:a6:32:d1:5a:e1: ea:51:77:7a:d4:60:43:31:b6:5b:78:4a:99:41:cc:73:c6:80: e9:9a:c4:b7 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5QjcxMTAvBgNVBAUTKDg4MjI0Nzg1NTc0QzFGMjNDQTlDNDM5RUQ4RjU1Mzg4 RjZBNjhDRTIwHhcNMjUxMTI5MDAyNzMxWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJhM2RmMy00Y2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5qUDuHIFzr4JYdJCCDRrPn7KjR0agphV+TnGYStOqEIUqg7OmUVgFKyJ4xD vLly0QNfmOWZcAsyy/ZtriPPf/OddjnGXdhCe5Yev0VodCP/MfZiKv6DYtjOrp3F Dpj47dwLZQzoFZ71y+dYaOnJEjWYZhfk8DdyKg0CO2vAJI+0A7uuukPypfMDbzdZ t14/ICmDRaVeH8z9/neQ8FjyVOvDBL2RtWCN7VwSD7uaZMAOtmUa1jIBlBGWYy3t hu/AGuNqihdbH0UIsGQwRefKiCl3aFgwRlANU6aYpSl5B3fn+m1btcWriTbbFwUU 4qzaVCOLwxDHp/tJ6WPoNWfgRwIDAQABo4IClTCCApEwHQYDVR0OBBYEFO+Y15ty I4b2OI9B4xOaVJ9bLJnwMB8GA1UdIwQYMBaAFIgiR4VXTB8jypxDntj1U4j2pozi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODlCNy9CMUU1NEFCODU2 QTIxMUVEQjRBMUIyMjVDNEY5QUUwMi9pQ0pIaFZkTUh5UEtuRU9lMlBWVGlQYW1q T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lDSkhoVmRNSHlQS25FT2UyUFZUaVBhbWpPSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njg5QjcvQjFFNTRBQjg1NkEyMTFFREI0QTFCMjI1QzRGOUFFMDIvMjQ1NTI3NkUz OUIzMTFFRUE2REZFNjZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnGu4wDQYJKoZIhvcNAQELBQADggEBAHTGaNBpC2FBEnU/ Lhe7z25rKfbbCeV56VxQu/E85dlt0DkqmUOCw0ipf0FjQkAUUjhHMoc1makyEcvR U8/AzQ1OK1PD3u/tnRdHYT/aetP/t7U3P0iPC6oN8xwFefx/m9xhp3oIvQ6dJMl+ F0367U0jQI7W2f4yIWnxUdf5xfJi4g9BgLUO3QNDhdHWsKwqOW7cJGkBAEGmoFTi CZ1Av7lMWg97b36O/KBZQX3aMWC4O7WZRVVKjxSn8v2t+/7LhQz6plPsLOIdfObK LKWdK22sfF6NSoQT1ctNRl+PRZlcLCrxgoimMtFa4epRd3rUYEMxtlt4SplBzHPG gOmaxLc= -----END CERTIFICATE-----Generated at Sat Dec 6 23:02:27 2025 by rpki-client