This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/05E078B2A5D211EDBC42DA12C4F9AE02.roa File: 05E078B2A5D211EDBC42DA12C4F9AE02.roa (raw, json) Hash identifier: DPyqPkT0neP2hvNy+hn6VREMN9M60vGzkrQgZGHU27c= Subject key identifier: BD:FD:06:A0:5F:07:CB:8D:B9:65:3A:9C:DD:5C:0D:8A:A6:D2:0B:5A Certificate issuer: /CN=A91828F3/serialNumber=76661008DAC89284C537F2DCE0A920BA94E078CF Certificate serial: 0213 Authority key identifier: 76:66:10:08:DA:C8:92:84:C5:37:F2:DC:E0:A9:20:BA:94:E0:78:CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmYQCNrIkoTFN_Lc4KkgupTgeM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/05E078B2A5D211EDBC42DA12C4F9AE02.roa Signing time: Wed 03 Dec 2025 01:00:24 +0000 ROA not before: Wed 03 Dec 2025 01:00:24 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 150427 IP address blocks: 103.96.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.crl rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmYQCNrIkoTFN_Lc4KkgupTgeM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 00:46:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 531 (0x213) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91828F3, serialNumber=76661008DAC89284C537F2DCE0A920BA94E078CF Validity Not Before: Dec 3 01:00:24 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=692f8ba7-a46e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ce:d7:0d:87:55:82:4a:bf:0d:1d:07:27:77: 3d:f5:65:0b:9c:0a:56:98:6d:fb:9d:4d:5c:64:b6: d5:01:fe:48:35:c0:da:21:44:5a:c9:68:85:6c:2f: 28:f6:cf:a2:f1:e2:cc:dd:35:71:c1:d1:74:36:71: 2e:dc:e1:8d:ca:84:e0:7e:ce:96:58:26:5f:e9:ea: 5d:8f:0c:07:60:65:64:4a:ca:44:ad:7c:f4:a0:2b: 1e:88:dd:5d:bc:71:b1:b7:ef:16:aa:54:5d:c3:3f: 96:75:62:78:01:62:a8:11:12:23:c0:e9:41:f9:bc: 50:9c:22:f6:50:45:69:a4:12:6e:2f:06:93:f1:d0: 87:b0:76:82:96:71:ea:98:7c:b9:19:3c:b4:70:8d: 59:43:05:8b:f6:4c:70:fd:54:61:d5:21:d1:c1:60: b6:78:5b:06:ad:2f:f3:cf:4b:ac:1f:55:67:84:19: e4:1f:f6:f9:33:5d:31:21:dc:a0:4d:53:12:16:ca: ca:15:ca:06:a4:26:0e:59:95:5f:0d:44:f1:2b:99: 39:6f:55:f8:e0:90:46:45:5c:5e:12:c5:de:93:9b: 9f:9e:1a:6b:19:26:3c:71:e2:62:14:93:71:31:87: fd:27:70:e2:ce:30:ed:4c:6e:51:68:81:07:17:b5: 42:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:FD:06:A0:5F:07:CB:8D:B9:65:3A:9C:DD:5C:0D:8A:A6:D2:0B:5A X509v3 Authority Key Identifier: keyid:76:66:10:08:DA:C8:92:84:C5:37:F2:DC:E0:A9:20:BA:94:E0:78:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmYQCNrIkoTFN_Lc4KkgupTgeM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/05E078B2A5D211EDBC42DA12C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.96.88.0/24 Signature Algorithm: sha256WithRSAEncryption d9:c4:6a:38:60:84:db:55:28:c1:26:07:1b:24:34:2b:85:a1: 57:e6:a0:a2:99:0e:a0:27:6a:28:bd:ad:ff:eb:9a:21:7e:46: f2:b0:3a:f0:fa:b0:7b:e0:7a:d5:f0:91:be:3a:30:09:1a:ce: f4:bb:29:0e:12:1a:e3:1a:e0:94:cd:0a:ef:32:4e:a6:bc:83: 22:a1:25:8b:56:52:c1:fa:bf:e0:59:c3:de:bd:ae:17:07:d1: 1f:62:1f:72:f7:bf:68:6a:c1:bf:11:19:c7:1f:1f:69:b5:bb: 63:a3:73:23:e9:34:10:c7:92:85:0d:86:82:df:fe:ac:40:ae: eb:24:e3:3c:e8:93:b2:5d:88:a5:2b:23:27:41:01:aa:b9:44: ce:af:99:9e:a7:09:87:24:52:6a:b4:7f:11:60:e2:95:7b:0e: e5:8c:c7:90:a1:ba:97:dd:96:03:a7:e7:a3:6b:ea:6d:1e:2f: 89:85:84:5e:2a:2c:75:12:ca:be:73:9c:34:7f:67:87:78:9c: 9e:5f:35:8a:e3:87:79:7a:4e:43:eb:3b:99:d3:8c:a9:e2:30: 22:f1:22:7c:6b:4a:6e:ab:62:80:ac:40:64:b0:c2:19:e3:e0: d9:52:43:c2:8d:8b:66:b7:f2:d7:cd:f1:d3:68:fe:ff:1f:7b: ac:f4:5d:a2 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI4RjMxMTAvBgNVBAUTKDc2NjYxMDA4REFDODkyODRDNTM3RjJEQ0UwQTkyMEJB OTRFMDc4Q0YwHhcNMjUxMjAzMDEwMDI0WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJmOGJhNy1hNDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAls7XDYdVgkq/DR0HJ3c99WULnApWmG37nU1cZLbVAf5INcDaIURayWiFbC8o 9s+i8eLM3TVxwdF0NnEu3OGNyoTgfs6WWCZf6epdjwwHYGVkSspErXz0oCseiN1d vHGxt+8WqlRdwz+WdWJ4AWKoERIjwOlB+bxQnCL2UEVppBJuLwaT8dCHsHaClnHq mHy5GTy0cI1ZQwWL9kxw/VRh1SHRwWC2eFsGrS/zz0usH1VnhBnkH/b5M10xIdyg TVMSFsrKFcoGpCYOWZVfDUTxK5k5b1X44JBGRVxeEsXek5ufnhprGSY8ceJiFJNx MYf9J3DizjDtTG5RaIEHF7VClQIDAQABo4IClTCCApEwHQYDVR0OBBYEFL39BqBf B8uNuWU6nN1cDYqm0gtaMB8GA1UdIwQYMBaAFHZmEAjayJKExTfy3OCpILqU4HjP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjhGMy9DMjc5NThCOEE1 Q0QxMUVEQUVDRTEyNzhDNEY5QUUwMi9kbVlRQ05ySWtvVEZOX0xjNEtrZ3VwVGdl TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RtWVFDTnJJa29URk5fTGM0S2tndXBUZ2VNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODI4RjMvQzI3OTU4QjhBNUNEMTFFREFFQ0UxMjc4QzRGOUFFMDIvMDVFMDc4QjJB NUQyMTFFREJDNDJEQTEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnYFgwDQYJKoZIhvcNAQELBQADggEBANnEajhghNtVKMEm BxskNCuFoVfmoKKZDqAnaii9rf/rmiF+RvKwOvD6sHvgetXwkb46MAkazvS7KQ4S GuMa4JTNCu8yTqa8gyKhJYtWUsH6v+BZw969rhcH0R9iH3L3v2hqwb8RGccfH2m1 u2OjcyPpNBDHkoUNhoLf/qxArusk4zzok7JdiKUrIydBAaq5RM6vmZ6nCYckUmq0 fxFg4pV7DuWMx5ChupfdlgOn56Nr6m0eL4mFhF4qLHUSyr5znDR/Z4d4nJ5fNYrj h3l6TkPrO5nTjKniMCLxInxrSm6rYoCsQGSwwhnj4NlSQ8KNi2a38tfN8dNo/v8f e6z0XaI= -----END CERTIFICATE-----Generated at Sun Dec 7 07:47:43 2025 by rpki-client