This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/82E0D450BC5011E6B01A8D4CC4F9AE02.roa File: 82E0D450BC5011E6B01A8D4CC4F9AE02.roa (raw, json) Hash identifier: Ln6JfwJHkmiB+85P/Z4z35YuWlAv/i1IkWjK1TkGFzQ= Subject key identifier: F7:AC:11:28:7B:98:3B:30:F9:83:30:2B:7B:B3:AF:AC:17:25:2E:AD Certificate issuer: /CN=A91847A0/serialNumber=5328616E7794547EB9CE92B4A8F045E4B2CCC0FC Certificate serial: 1D63 Authority key identifier: 53:28:61:6E:77:94:54:7E:B9:CE:92:B4:A8:F0:45:E4:B2:CC:C0:FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyhhbneUVH65zpK0qPBF5LLMwPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/82E0D450BC5011E6B01A8D4CC4F9AE02.roa Signing time: Thu 06 Nov 2025 15:54:14 +0000 ROA not before: Thu 06 Nov 2025 15:54:14 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 134976 IP address blocks: 103.204.100.0/22 maxlen: 22 103.204.100.0/24 maxlen: 24 103.204.101.0/24 maxlen: 24 103.204.102.0/24 maxlen: 24 103.204.103.0/24 maxlen: 24 202.53.156.0/22 maxlen: 22 202.53.156.0/24 maxlen: 24 202.53.157.0/24 maxlen: 24 202.53.158.0/24 maxlen: 24 202.53.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.crl rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyhhbneUVH65zpK0qPBF5LLMwPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:49:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7523 (0x1d63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847A0, serialNumber=5328616E7794547EB9CE92B4A8F045E4B2CCC0FC Validity Not Before: Nov 6 15:54:14 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=690cc4a6-47bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:41:cd:4c:60:f2:5c:35:f7:ae:1f:40:da:29: bd:bc:dc:fd:55:46:f8:c0:e6:61:fe:84:82:32:9a: f9:56:f1:6a:5f:2f:57:3a:14:81:e7:12:3c:83:e1: 72:d0:c5:8d:d0:33:a8:4b:92:2e:23:7f:ac:96:1a: 9f:23:b6:9f:e6:46:4d:bf:a9:f8:b6:d1:fc:56:9e: 83:c0:4d:cc:5a:90:62:ed:e2:a4:ef:be:a8:71:cd: f1:7d:fb:dc:eb:a4:8d:ea:37:2e:ad:bf:6c:e5:61: 57:b2:79:bb:c2:60:59:67:3f:ab:16:33:db:59:10: 79:c9:c6:97:9c:a1:74:71:43:19:ed:ce:b6:af:1a: ae:c1:7d:3c:cf:e0:1e:01:af:82:64:8d:53:24:7c: 78:4f:37:94:0d:8c:54:ef:7f:57:2b:9e:d6:4f:f2: 1d:64:50:42:97:bd:f3:69:c7:c6:a8:50:ea:1a:1d: ff:cd:a1:68:ec:01:60:af:b6:7b:c9:ee:c3:91:3f: 32:21:7e:d5:21:58:f1:a6:30:3e:10:a1:bf:68:cf: 21:1a:93:fc:d4:e9:fd:f5:77:7f:f2:ef:af:15:70: 9f:8b:6a:ae:3c:ab:3a:07:f9:31:1a:d5:ca:f1:cf: d2:2e:fb:db:08:aa:26:9c:a7:3f:7c:81:7f:46:c7: a4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:AC:11:28:7B:98:3B:30:F9:83:30:2B:7B:B3:AF:AC:17:25:2E:AD X509v3 Authority Key Identifier: keyid:53:28:61:6E:77:94:54:7E:B9:CE:92:B4:A8:F0:45:E4:B2:CC:C0:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyhhbneUVH65zpK0qPBF5LLMwPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/82E0D450BC5011E6B01A8D4CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.204.100.0/22 202.53.156.0/22 Signature Algorithm: sha256WithRSAEncryption 25:cf:4b:87:86:fb:78:87:99:76:bf:9f:cd:be:0c:20:c0:24: 83:c1:f8:4e:5b:b4:4b:43:28:ce:15:aa:3e:d1:52:f8:2c:f6: d3:5a:4d:a5:c0:d9:55:00:a6:ba:8e:8a:2d:3a:66:da:93:67: ef:50:0e:d6:0b:fc:5d:96:d4:09:c9:7b:c0:fd:3b:d2:ac:a1: 25:9b:ab:bd:c9:2d:f8:0e:5f:d4:48:0c:d0:92:0c:8d:96:d0: fa:79:a4:3c:8d:15:b5:6f:30:69:2f:4c:25:92:9e:c5:8e:97: a8:45:9b:15:19:47:a7:1e:b1:5e:26:3e:70:6a:01:fc:35:8f: 55:e5:b2:d1:d8:7e:19:18:f5:c2:21:b8:bb:d5:1f:40:04:87: f9:f6:88:33:9f:67:87:34:4c:76:4e:c7:02:98:48:ae:e6:41: 04:26:ac:f3:a0:a7:ce:1f:05:b1:08:f8:d1:38:49:67:7f:92: ce:d5:a6:51:ab:25:58:b7:34:06:60:4c:9a:72:c7:64:5e:e0: 7f:e3:01:02:d5:af:b4:60:55:d1:fa:f8:4e:eb:71:d1:52:36: 59:78:87:e8:d4:53:56:27:45:16:ae:89:24:74:58:0c:68:75: d4:82:29:1d:8a:4f:80:65:d2:52:09:cb:93:e2:18:f6:eb:d7: 64:ec:56:c9 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICHWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ3QTAxMTAvBgNVBAUTKDUzMjg2MTZFNzc5NDU0N0VCOUNFOTJCNEE4RjA0NUU0 QjJDQ0MwRkMwHhcNMjUxMTA2MTU1NDE0WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTBjYzRhNi00N2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA30HNTGDyXDX3rh9A2im9vNz9VUb4wOZh/oSCMpr5VvFqXy9XOhSB5xI8g+Fy 0MWN0DOoS5IuI3+slhqfI7af5kZNv6n4ttH8Vp6DwE3MWpBi7eKk776occ3xffvc 66SN6jcurb9s5WFXsnm7wmBZZz+rFjPbWRB5ycaXnKF0cUMZ7c62rxquwX08z+Ae Aa+CZI1TJHx4TzeUDYxU739XK57WT/IdZFBCl73zacfGqFDqGh3/zaFo7AFgr7Z7 ye7DkT8yIX7VIVjxpjA+EKG/aM8hGpP81On99Xd/8u+vFXCfi2quPKs6B/kxGtXK 8c/SLvvbCKomnKc/fIF/Rsek5wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFPesESh7 mDsw+YMwK3uzr6wXJS6tMB8GA1UdIwQYMBaAFFMoYW53lFR+uc6StKjwReSyzMD8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdBMC8wRTRBRDEyOEJD NEYxMUU2QkFGMUMyNEFDNEY5QUUwMi9VeWhoYm5lVVZINjV6cEswcVBCRjVMTE13 UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V5aGhibmVVVkg2NXpwSzBxUEJGNUxMTXdQdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODQ3QTAvMEU0QUQxMjhCQzRGMTFFNkJBRjFDMjRBQzRGOUFFMDIvODJFMEQ0NTBC QzUwMTFFNkIwMUE4RDRDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnzGQDBALKNZwwDQYJKoZIhvcNAQELBQADggEBACXPS4eG +3iHmXa/n82+DCDAJIPB+E5btEtDKM4Vqj7RUvgs9tNaTaXA2VUAprqOii06ZtqT Z+9QDtYL/F2W1AnJe8D9O9KsoSWbq73JLfgOX9RIDNCSDI2W0Pp5pDyNFbVvMGkv TCWSnsWOl6hFmxUZR6cesV4mPnBqAfw1j1XlstHYfhkY9cIhuLvVH0AEh/n2iDOf Z4c0THZOxwKYSK7mQQQmrPOgp84fBbEI+NE4SWd/ks7VplGrJVi3NAZgTJpyx2Re 4H/jAQLVr7RgVdH6+E7rcdFSNll4h+jUU1YnRRauiSR0WAxoddSCKR2KT4Bl0lIJ y5PiGPbr12TsVsk= -----END CERTIFICATE-----Generated at Sun Dec 7 00:38:53 2025 by rpki-client