This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/61141C1671AC11EDAA89DE61C4F9AE02.roa File: 61141C1671AC11EDAA89DE61C4F9AE02.roa (raw, json) Hash identifier: rtm7vvm7OiRTQ81QyLkzE6dolT8d+wgU5NT1/xcizMs= Subject key identifier: 45:75:88:9F:0A:8B:F3:4E:CF:4C:17:EE:59:6E:51:16:65:41:01:12 Certificate issuer: /CN=A91886E3/serialNumber=BBABD3F16E100FD9C95D474884E4DA9CB6FA768D Certificate serial: 0236 Authority key identifier: BB:AB:D3:F1:6E:10:0F:D9:C9:5D:47:48:84:E4:DA:9C:B6:FA:76:8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/61141C1671AC11EDAA89DE61C4F9AE02.roa Signing time: Thu 13 Nov 2025 00:47:22 +0000 ROA not before: Thu 13 Nov 2025 00:47:22 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 59253 IP address blocks: 103.21.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.crl rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:13:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 566 (0x236) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91886E3, serialNumber=BBABD3F16E100FD9C95D474884E4DA9CB6FA768D Validity Not Before: Nov 13 00:47:22 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69152a9a-1760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8b:38:e3:da:e7:36:66:ea:c9:3f:ba:25:8f: cc:1d:93:e0:86:b6:48:57:e9:85:3c:84:9b:49:b2: 8d:7c:56:6f:c0:d7:08:47:e7:ed:52:9f:40:36:94: 27:45:2b:45:ca:f2:a3:8b:52:5f:d3:29:eb:1e:7b: 5b:ba:e9:5b:75:0d:a1:9d:22:b7:86:e8:6f:27:c6: 51:fe:02:f2:e6:b7:26:c4:7d:40:73:1c:90:bd:9c: fe:96:83:5f:15:2e:82:2b:14:f1:d4:1c:b2:56:18: f1:4a:6e:47:e9:34:a1:a3:4b:44:e8:14:65:fc:45: 80:be:52:ac:74:00:6d:58:9b:dc:63:fc:8e:96:54: 6a:8e:42:e2:ae:aa:05:e8:c7:fb:58:86:61:d8:e2: 42:dc:9b:43:fe:4e:6c:80:d7:d2:d1:a3:0b:21:1b: 6f:ae:35:3f:a1:e7:fe:86:2a:51:f3:79:fa:b5:71: 4b:09:5c:98:5c:f3:85:d2:2f:17:98:ec:69:4f:48: c4:fa:21:7e:0c:ae:3a:70:3e:0f:18:61:0e:3a:7b: dc:7b:84:f1:cc:d1:7f:c2:b8:87:23:36:14:5f:46: a2:3a:25:1f:a9:d3:90:2b:45:c5:52:1a:23:7f:e9: 3b:be:6f:2f:40:24:e0:92:d3:11:6b:50:13:41:76: 57:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:75:88:9F:0A:8B:F3:4E:CF:4C:17:EE:59:6E:51:16:65:41:01:12 X509v3 Authority Key Identifier: keyid:BB:AB:D3:F1:6E:10:0F:D9:C9:5D:47:48:84:E4:DA:9C:B6:FA:76:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/61141C1671AC11EDAA89DE61C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.21.221.0/24 Signature Algorithm: sha256WithRSAEncryption ac:bc:24:a2:8d:49:1e:59:dc:90:b7:94:a5:9c:3c:79:89:bf: 3d:d0:17:a8:8f:45:29:6e:b5:bb:16:ae:d6:8f:be:37:0c:e3: fb:a8:92:46:40:1b:d2:e1:ac:05:bb:74:69:63:c0:ce:97:c7: be:04:79:4a:f1:51:a1:12:af:3e:db:70:70:33:a7:66:6c:f7: a7:3b:24:b5:9c:e7:5a:f7:d9:49:d8:c6:00:4c:79:bb:92:5c: cb:cc:b6:3e:dd:a1:40:c4:e9:7d:9a:04:8e:01:6d:4b:0e:ba: 5f:77:8e:ee:ce:30:cf:d0:61:db:af:d4:66:0c:13:a0:3f:4b: cf:be:2c:6b:b9:75:5d:4f:89:c6:f5:16:41:cb:5c:34:1a:ba: 3d:dd:98:81:4c:15:86:be:6f:62:d5:45:0b:e4:89:b7:b7:0a: a2:16:7b:bb:c5:95:5b:c0:a2:7b:83:e7:e7:3e:9c:c7:c6:7d: b5:16:a6:dc:2d:93:b6:c0:98:27:94:e9:3c:86:a4:93:d8:fc: 89:07:13:6d:36:ff:89:45:b2:84:63:9f:3a:90:3a:90:fd:29: ac:7b:23:9a:b3:e7:03:0f:47:d1:7d:a9:0c:36:7a:0f:85:83: 58:9c:9f:05:ed:b6:b7:e6:de:51:d3:d0:4c:08:ee:87:32:11: 8d:df:4a:bd -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg2RTMxMTAvBgNVBAUTKEJCQUJEM0YxNkUxMDBGRDlDOTVENDc0ODg0RTREQTlD QjZGQTc2OEQwHhcNMjUxMTEzMDA0NzIyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTE1MmE5YS0xNzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzIs449rnNmbqyT+6JY/MHZPghrZIV+mFPISbSbKNfFZvwNcIR+ftUp9ANpQn RStFyvKji1Jf0ynrHntbuulbdQ2hnSK3huhvJ8ZR/gLy5rcmxH1AcxyQvZz+loNf FS6CKxTx1ByyVhjxSm5H6TSho0tE6BRl/EWAvlKsdABtWJvcY/yOllRqjkLirqoF 6Mf7WIZh2OJC3JtD/k5sgNfS0aMLIRtvrjU/oef+hipR83n6tXFLCVyYXPOF0i8X mOxpT0jE+iF+DK46cD4PGGEOOnvce4TxzNF/wriHIzYUX0aiOiUfqdOQK0XFUhoj f+k7vm8vQCTgktMRa1ATQXZXQQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEV1iJ8K i/NOz0wX7lluURZlQQESMB8GA1UdIwQYMBaAFLur0/FuEA/ZyV1HSITk2py2+naN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODZFMy8xMjQ3Qjg2MDY2 OTIxMUVEODJCRTcxMzNDNEY5QUUwMi91NnZUOFc0UUQ5bkpYVWRJaE9UYW5MYjZk bzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U2dlQ4VzRRRDluSlhVZEloT1RhbkxiNmRvMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODg2RTMvMTI0N0I4NjA2NjkyMTFFRDgyQkU3MTMzQzRGOUFFMDIvNjExNDFDMTY3 MUFDMTFFREFBODlERTYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnFd0wDQYJKoZIhvcNAQELBQADggEBAKy8JKKNSR5Z3JC3 lKWcPHmJvz3QF6iPRSlutbsWrtaPvjcM4/uokkZAG9LhrAW7dGljwM6Xx74EeUrx UaESrz7bcHAzp2Zs96c7JLWc51r32UnYxgBMebuSXMvMtj7doUDE6X2aBI4BbUsO ul93ju7OMM/QYduv1GYME6A/S8++LGu5dV1Picb1FkHLXDQauj3dmIFMFYa+b2LV RQvkibe3CqIWe7vFlVvAonuD5+c+nMfGfbUWptwtk7bAmCeU6TyGpJPY/IkHE202 /4lFsoRjnzqQOpD9Kax7I5qz5wMPR9F9qQw2eg+Fg1icnwXttrfm3lHT0EwI7ocy EY3fSr0= -----END CERTIFICATE-----Generated at Sat Dec 6 20:06:27 2025 by rpki-client