This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/790195326F6411ED83BC230FC4F9AE02.roa File: 790195326F6411ED83BC230FC4F9AE02.roa (raw, json) Hash identifier: xVQRlc0PkJ4VXTg8SHxKZBLplXrS1P4Dp3rhgyw72w4= Subject key identifier: 80:53:18:9A:0D:DC:B8:C9:89:3C:B6:56:44:B0:C7:7D:D4:AA:C1:C1 Certificate issuer: /CN=A91886EA/serialNumber=1B25EC59D07F93424B90C22D34ECAB22AD852A97 Certificate serial: 022F Authority key identifier: 1B:25:EC:59:D0:7F:93:42:4B:90:C2:2D:34:EC:AB:22:AD:85:2A:97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/790195326F6411ED83BC230FC4F9AE02.roa Signing time: Thu 13 Nov 2025 00:47:39 +0000 ROA not before: Thu 13 Nov 2025 00:47:39 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 142601 IP address blocks: 103.102.108.0/24 maxlen: 24 103.102.109.0/24 maxlen: 24 103.102.110.0/24 maxlen: 24 103.102.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.crl rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 00:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 559 (0x22f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91886EA, serialNumber=1B25EC59D07F93424B90C22D34ECAB22AD852A97 Validity Not Before: Nov 13 00:47:39 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69152aaa-43c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:01:36:77:31:ba:61:eb:35:e0:4d:cb:68:e5: f1:04:be:93:7f:3b:4a:35:85:13:b2:7c:e4:79:e0: 43:26:3d:19:e5:d6:43:1b:37:35:0c:b8:bd:3e:06: 6b:9e:95:ff:ff:31:4e:27:4a:cf:2f:10:80:ab:06: 93:f5:f7:01:44:f3:08:f4:bf:32:3a:36:ae:fb:af: 1a:f3:72:84:2d:8f:aa:dd:a4:3b:32:90:3a:48:bd: cb:03:35:70:25:ad:16:c4:34:b2:fd:03:69:54:3c: 6a:88:38:cb:de:9d:67:e5:b8:aa:68:99:d1:69:02: 12:19:fd:40:26:20:de:e0:38:b0:38:d7:5a:c5:b3: 1b:3d:30:76:15:92:ce:4f:3e:06:6d:3d:58:62:25: d2:e3:d8:1d:95:e7:00:f8:89:16:68:c4:57:b9:9c: f8:93:13:1f:18:de:c0:6c:22:35:e2:66:e6:a3:32: ff:f6:6e:36:85:39:f7:59:b3:c7:50:bb:12:e2:b6: 4f:0a:d8:64:3b:55:ae:c9:8e:b3:59:1e:75:0e:f9: f8:7b:b1:3d:36:bc:1e:43:ff:60:4c:57:27:46:5a: b9:14:97:86:b1:0f:c2:fe:14:10:ca:fd:e7:ce:37: 07:19:14:3c:9c:07:f1:a0:97:86:27:a0:fa:1a:d2: 10:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:53:18:9A:0D:DC:B8:C9:89:3C:B6:56:44:B0:C7:7D:D4:AA:C1:C1 X509v3 Authority Key Identifier: keyid:1B:25:EC:59:D0:7F:93:42:4B:90:C2:2D:34:EC:AB:22:AD:85:2A:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/790195326F6411ED83BC230FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.102.108.0/22 Signature Algorithm: sha256WithRSAEncryption 31:40:8b:59:d5:ff:83:b5:5a:cf:f1:36:ff:55:69:85:4f:0d: 74:a0:1b:6d:6b:30:b2:64:40:40:94:52:2b:59:9c:4f:10:bc: 29:19:17:16:9a:07:4d:5b:72:a6:e4:12:2e:ee:25:1f:23:fc: 2b:06:6a:13:7b:7a:62:37:f2:96:e9:01:aa:a4:8e:5b:4e:0f: 65:2f:00:3e:69:42:1c:84:88:c0:cb:92:6c:8b:c7:db:94:32: 61:a9:47:14:66:c7:33:7b:3a:e7:c1:55:3d:60:f2:98:18:fb: 2d:b4:4c:18:e8:9b:fb:84:00:cb:5e:c6:fe:9e:95:2b:ea:33: e3:8b:9d:e4:fc:b8:f2:ad:68:a7:d4:4c:bb:b0:f1:71:5c:ee: 72:1d:9c:65:82:e2:22:f9:ec:d5:29:89:9d:94:9f:f8:bd:db: 52:f1:26:d0:a5:5f:0f:25:1a:00:3c:7f:f2:98:65:3b:05:67: 9e:c1:a4:06:59:b1:18:ad:eb:33:78:d8:06:73:dc:2c:4d:04: 12:57:0c:a8:d3:35:2e:a2:14:a6:b5:da:f9:a2:eb:9a:b8:32: 34:15:ca:f7:95:c8:47:6c:f2:63:cf:2d:1c:1b:e5:73:71:af: 93:ee:18:61:bc:39:3f:dd:4f:5a:ba:0f:e6:44:22:cd:90:19: 15:7d:5e:33 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg2RUExMTAvBgNVBAUTKDFCMjVFQzU5RDA3RjkzNDI0QjkwQzIyRDM0RUNBQjIy QUQ4NTJBOTcwHhcNMjUxMTEzMDA0NzM5WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTE1MmFhYS00M2M0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwE2dzG6Yes14E3LaOXxBL6TfztKNYUTsnzkeeBDJj0Z5dZDGzc1DLi9PgZr npX//zFOJ0rPLxCAqwaT9fcBRPMI9L8yOjau+68a83KELY+q3aQ7MpA6SL3LAzVw Ja0WxDSy/QNpVDxqiDjL3p1n5biqaJnRaQISGf1AJiDe4DiwONdaxbMbPTB2FZLO Tz4GbT1YYiXS49gdlecA+IkWaMRXuZz4kxMfGN7AbCI14mbmozL/9m42hTn3WbPH ULsS4rZPCthkO1WuyY6zWR51Dvn4e7E9NrweQ/9gTFcnRlq5FJeGsQ/C/hQQyv3n zjcHGRQ8nAfxoJeGJ6D6GtIQAQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIBTGJoN 3LjJiTy2VkSwx33UqsHBMB8GA1UdIwQYMBaAFBsl7FnQf5NCS5DCLTTsqyKthSqX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODZFQS81Mjk4ODRFMDZG NjAxMUVEQTVGRkZGMDlDNEY5QUUwMi9HeVhzV2RCX2swSkxrTUl0Tk95cklxMkZL cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d5WHNXZEJfazBKTGtNSXROT3lySXEyRktwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODg2RUEvNTI5ODg0RTA2RjYwMTFFREE1RkZGRjA5QzRGOUFFMDIvNzkwMTk1MzI2 RjY0MTFFRDgzQkMyMzBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnZmwwDQYJKoZIhvcNAQELBQADggEBADFAi1nV/4O1Ws/x Nv9VaYVPDXSgG21rMLJkQECUUitZnE8QvCkZFxaaB01bcqbkEi7uJR8j/CsGahN7 emI38pbpAaqkjltOD2UvAD5pQhyEiMDLkmyLx9uUMmGpRxRmxzN7OufBVT1g8pgY +y20TBjom/uEAMtexv6elSvqM+OLneT8uPKtaKfUTLuw8XFc7nIdnGWC4iL57NUp iZ2Un/i921LxJtClXw8lGgA8f/KYZTsFZ57BpAZZsRit6zN42AZz3CxNBBJXDKjT NS6iFKa12vmi65q4MjQVyveVyEds8mPPLRwb5XNxr5PuGGG8OT/dT1q6D+ZEIs2Q GRV9XjM= -----END CERTIFICATE-----Generated at Sun Dec 7 03:39:32 2025 by rpki-client