This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/F898AEBC8F6411EA96126E5DC4F9AE02.roa File: F898AEBC8F6411EA96126E5DC4F9AE02.roa (raw, json) Hash identifier: 0mkhd4eAuT9/naCzlV+KcaUe14bdcrlkm0xwSgwQ4wY= Subject key identifier: 11:97:6E:4C:07:55:16:73:19:86:9A:8D:A9:0D:9F:CA:5B:4A:BD:52 Certificate issuer: /CN=A9191DE0/serialNumber=7FC2458C86E25C9345A0852CB27EB17277FB81A3 Certificate serial: 09E5 Authority key identifier: 7F:C2:45:8C:86:E2:5C:93:45:A0:85:2C:B2:7E:B1:72:77:FB:81:A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/F898AEBC8F6411EA96126E5DC4F9AE02.roa Signing time: Fri 28 Nov 2025 19:22:36 +0000 ROA not before: Fri 28 Nov 2025 19:22:36 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 138424 IP address blocks: 103.125.60.0/24 maxlen: 24 2001:df7:2500::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.crl rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 19:08:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2533 (0x9e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191DE0, serialNumber=7FC2458C86E25C9345A0852CB27EB17277FB81A3 Validity Not Before: Nov 28 19:22:36 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6929f67b-bcb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:42:31:bb:b8:c3:80:59:a7:91:90:30:04:c3: a4:d6:c2:d4:2f:ff:7a:ac:d5:12:d8:86:72:35:1b: bf:30:32:80:cb:14:97:cd:2c:02:c1:4a:0b:08:36: 85:52:77:ce:b4:75:88:8e:4a:3a:f4:d4:62:2a:66: 2a:28:b7:38:1d:2b:8e:78:91:6e:f5:62:a3:d2:0e: 9d:2d:59:d9:dd:4c:81:d5:ca:1b:6b:1a:de:50:e9: 85:68:33:9d:10:98:45:a2:e0:e3:de:c5:f7:6e:46: 50:06:af:b3:94:cf:a6:78:71:5b:42:3f:7c:39:4c: 3f:fa:17:46:30:f7:73:27:22:1a:68:d5:0a:8a:10: 61:d0:41:44:0e:7c:b8:f1:92:70:2d:c3:3e:7e:43: 23:f7:09:92:59:13:b8:8c:79:92:5c:d8:ad:d9:13: cb:ec:49:4a:16:6f:d7:f4:e1:4c:1c:e5:ae:e7:be: 37:2e:05:f9:c1:c2:9c:8d:ca:1a:2e:29:36:88:24: bc:fc:9b:d8:02:5c:d7:47:b0:d3:41:e3:7a:17:94: b3:4a:83:03:f1:13:26:69:cb:ad:8b:c0:b9:26:4e: ec:7c:3b:46:1b:82:5d:71:29:66:bc:64:2d:cd:fc: 96:6f:e9:0f:e6:b8:0c:29:c7:3b:df:f5:1f:12:a3: 05:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:97:6E:4C:07:55:16:73:19:86:9A:8D:A9:0D:9F:CA:5B:4A:BD:52 X509v3 Authority Key Identifier: keyid:7F:C2:45:8C:86:E2:5C:93:45:A0:85:2C:B2:7E:B1:72:77:FB:81:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/F898AEBC8F6411EA96126E5DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.125.60.0/24 IPv6: 2001:df7:2500::/48 Signature Algorithm: sha256WithRSAEncryption c8:14:8d:ec:83:74:d7:3d:f1:a5:f0:97:51:d4:ae:0d:de:11: 98:b2:7a:b3:39:a8:89:8b:cb:74:7f:75:c5:c1:64:a3:8b:b7: 65:e0:4e:d9:b7:f0:de:5a:f8:f5:e6:e8:ad:e7:92:92:e4:45: da:5b:4d:ab:29:a5:69:4b:57:81:43:b3:07:fb:43:e8:f9:b8: fd:ce:a7:d5:13:aa:26:90:32:41:62:81:8d:5e:74:3d:8f:e5: f5:54:e5:ba:0a:2a:2d:ef:82:b4:7b:9d:f0:3e:32:b3:c4:76: 89:08:d7:8d:13:27:82:7a:e4:1e:25:29:57:47:5b:85:f3:93: 39:02:3d:11:cf:af:0d:87:84:59:0c:67:59:89:64:00:29:49: 0f:e4:65:3e:e2:18:08:57:0d:1c:1d:f6:2f:76:80:22:6e:89: d5:4c:7b:55:ad:6c:a7:68:1e:89:29:5c:0b:98:4e:d4:12:ba: 0c:d8:ce:de:2b:c0:bd:5c:6a:14:c7:a6:c0:01:8e:85:9d:78: 5a:1a:06:7f:6a:7e:c3:cd:b1:69:92:66:6e:e9:e2:19:76:74: 07:4a:e1:52:fc:64:16:ec:98:14:b1:4d:cf:72:2e:51:79:84: 91:60:c0:f1:15:c8:62:9d:9c:87:36:19:42:e4:f4:a4:ba:fa: b9:e9:9b:d3 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFERTAxMTAvBgNVBAUTKDdGQzI0NThDODZFMjVDOTM0NUEwODUyQ0IyN0VCMTcy NzdGQjgxQTMwHhcNMjUxMTI4MTkyMjM2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTI5ZjY3Yi1iY2I2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwkIxu7jDgFmnkZAwBMOk1sLUL/96rNUS2IZyNRu/MDKAyxSXzSwCwUoLCDaF UnfOtHWIjko69NRiKmYqKLc4HSuOeJFu9WKj0g6dLVnZ3UyB1cobaxreUOmFaDOd EJhFouDj3sX3bkZQBq+zlM+meHFbQj98OUw/+hdGMPdzJyIaaNUKihBh0EFEDny4 8ZJwLcM+fkMj9wmSWRO4jHmSXNit2RPL7ElKFm/X9OFMHOWu5743LgX5wcKcjcoa Lik2iCS8/JvYAlzXR7DTQeN6F5SzSoMD8RMmacuti8C5Jk7sfDtGG4JdcSlmvGQt zfyWb+kP5rgMKcc73/UfEqMFxQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFBGXbkwH VRZzGYaajakNn8pbSr1SMB8GA1UdIwQYMBaAFH/CRYyG4lyTRaCFLLJ+sXJ3+4Gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MURFMC81OUNBNjY2RThG NjMxMUVBQUYwNzg1NThDNEY5QUUwMi9mOEpGakliaVhKTkZvSVVzc242eGNuZjdn YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y4SkZqSWJpWEpORm9JVXNzbjZ4Y25mN2dhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTFERTAvNTlDQTY2NkU4RjYzMTFFQUFGMDc4NTU4QzRGOUFFMDIvRjg5OEFFQkM4 RjY0MTFFQTk2MTI2RTVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnfTwwDwQCAAIwCQMHACABDfclADANBgkqhkiG9w0BAQsF AAOCAQEAyBSN7IN01z3xpfCXUdSuDd4RmLJ6szmoiYvLdH91xcFko4u3ZeBO2bfw 3lr49eboreeSkuRF2ltNqymlaUtXgUOzB/tD6Pm4/c6n1ROqJpAyQWKBjV50PY/l 9VTlugoqLe+CtHud8D4ys8R2iQjXjRMngnrkHiUpV0dbhfOTOQI9Ec+vDYeEWQxn WYlkAClJD+RlPuIYCFcNHB32L3aAIm6J1Ux7Va1sp2geiSlcC5hO1BK6DNjO3ivA vVxqFMemwAGOhZ14WhoGf2p+w82xaZJmbuniGXZ0B0rhUvxkFuyYFLFNz3IuUXmE kWDA8RXIYp2chzYZQuT0pLr6uemb0w== -----END CERTIFICATE-----Generated at Sun Dec 7 06:34:31 2025 by rpki-client