This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/13DE95F668FA11EFAE700D5FC4F9AE02.roa File: 13DE95F668FA11EFAE700D5FC4F9AE02.roa (raw, json) Hash identifier: 5vimEGr3gRZLpfm5tFt/h59hECKoXGndHIqB7DGboHs= Subject key identifier: 29:FC:E6:1A:18:52:7B:C6:58:54:63:B0:AC:D2:68:E6:A2:88:7F:AE Certificate issuer: /CN=A91A16CF/serialNumber=829F0F40884DD991121005B07D09A2CBFFB4DEC6 Certificate serial: 0C57 Authority key identifier: 82:9F:0F:40:88:4D:D9:91:12:10:05:B0:7D:09:A2:CB:FF:B4:DE:C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/13DE95F668FA11EFAE700D5FC4F9AE02.roa Signing time: Tue 02 Dec 2025 18:19:20 +0000 ROA not before: Tue 02 Dec 2025 18:19:20 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 131464 IP address blocks: 103.198.132.0/24 maxlen: 24 103.198.133.0/24 maxlen: 24 103.198.134.0/23 maxlen: 23 103.198.134.0/24 maxlen: 24 103.198.135.0/24 maxlen: 24 2403:60c0:100::/40 maxlen: 40 2403:60c0:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.crl rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 18:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3159 (0xc57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A16CF, serialNumber=829F0F40884DD991121005B07D09A2CBFFB4DEC6 Validity Not Before: Dec 2 18:19:20 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=692f2da8-f6d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:46:cf:ce:29:2a:02:b9:6a:07:b2:b6:08:81: 78:57:bd:74:c6:07:b6:35:8f:07:8e:a1:d9:5e:85: 87:8a:72:6d:6b:b8:a0:a3:8a:55:40:41:d9:78:ca: db:c2:36:18:5d:72:1b:68:c8:29:f1:93:ea:00:28: 16:c7:7a:aa:1c:cf:bc:2f:22:d6:77:7a:c5:5f:43: ea:46:1e:2d:ee:9f:71:c8:48:b8:ef:44:18:b7:8f: 34:0f:3c:e0:f1:84:17:a0:c7:49:38:c9:cc:eb:08: b6:cf:04:0f:6c:52:e5:46:9e:b7:bb:2f:27:c6:65: 93:51:fa:ab:91:ba:55:88:ae:3b:71:73:5b:36:05: 35:7f:14:e3:32:57:7f:38:3d:e5:cd:fa:60:25:75: af:72:bd:8e:e5:60:66:1e:51:96:f3:ae:c1:fb:3b: 7b:98:34:76:f9:ed:d1:5d:11:e7:fe:54:a2:da:87: fe:66:e5:6e:00:5d:3c:3c:40:06:8f:cf:bb:ce:46: 77:7e:16:46:eb:0c:cc:7f:c4:01:98:63:41:d3:35: 39:ad:c3:4c:51:9f:6d:85:d9:60:38:2c:84:63:c4: 75:cc:4d:2c:43:a7:91:53:cc:8b:4f:6e:ff:dc:47: a4:81:7a:68:f4:e4:16:93:81:03:80:f7:79:56:10: ae:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:FC:E6:1A:18:52:7B:C6:58:54:63:B0:AC:D2:68:E6:A2:88:7F:AE X509v3 Authority Key Identifier: keyid:82:9F:0F:40:88:4D:D9:91:12:10:05:B0:7D:09:A2:CB:FF:B4:DE:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/13DE95F668FA11EFAE700D5FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.198.132.0/22 IPv6: 2403:60c0:100::/40 Signature Algorithm: sha256WithRSAEncryption 20:30:43:4c:ae:e8:ab:d7:6e:21:f4:ca:7d:a4:ae:75:e2:ef: 44:83:73:74:1f:70:eb:00:b9:0c:8a:83:90:94:5f:5a:37:30: 3e:30:04:83:a7:11:aa:4e:a5:42:eb:3c:1c:91:0c:d8:60:03: d4:ad:42:d7:2a:14:d1:cc:2b:74:ec:fe:90:0c:b9:60:60:e6: ea:53:b0:3b:ad:0e:e1:01:99:1d:c6:8f:f0:50:02:bd:79:be: f3:37:c0:4e:ea:2f:b9:4c:a0:1e:8e:13:7d:fb:70:b0:57:64: cf:04:a8:55:cf:dd:6e:bf:dd:63:88:9a:82:07:68:5e:a0:bc: a5:ff:66:8a:7b:7c:d7:49:2d:e1:38:9a:7e:e6:fc:ce:52:13: 45:ad:10:ff:74:d3:e1:36:b1:3e:ad:53:e3:15:72:96:00:72: 09:5e:98:1e:25:a3:cb:8e:b2:50:ef:34:5b:f3:6c:fe:01:94: 6e:47:ee:c8:86:77:93:0d:73:ea:82:59:75:67:83:dd:8b:5b: ad:e4:59:d8:a8:29:22:d7:de:6b:8c:1a:4c:bf:d5:fe:a0:51: a0:db:db:73:5e:db:b2:76:02:c4:b9:79:9c:d2:63:1f:5f:9d: 6a:3a:2a:f9:23:b6:35:bb:a4:ed:6a:29:e0:d2:d8:f9:f3:49: fb:3c:1d:8c -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgICDFcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE2Q0YxMTAvBgNVBAUTKDgyOUYwRjQwODg0REQ5OTExMjEwMDVCMDdEMDlBMkNC RkZCNERFQzYwHhcNMjUxMjAyMTgxOTIwWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJmMmRhOC1mNmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr0bPzikqArlqB7K2CIF4V710xge2NY8HjqHZXoWHinJta7igo4pVQEHZeMrb wjYYXXIbaMgp8ZPqACgWx3qqHM+8LyLWd3rFX0PqRh4t7p9xyEi470QYt480Dzzg 8YQXoMdJOMnM6wi2zwQPbFLlRp63uy8nxmWTUfqrkbpViK47cXNbNgU1fxTjMld/ OD3lzfpgJXWvcr2O5WBmHlGW867B+zt7mDR2+e3RXRHn/lSi2of+ZuVuAF08PEAG j8+7zkZ3fhZG6wzMf8QBmGNB0zU5rcNMUZ9thdlgOCyEY8R1zE0sQ6eRU8yLT27/ 3EekgXpo9OQWk4EDgPd5VhCuiQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCn85hoY UnvGWFRjsKzSaOaiiH+uMB8GA1UdIwQYMBaAFIKfD0CITdmREhAFsH0Josv/tN7G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTZDRi8yQ0FENTA4ODE5 QTIxMUVBQUU4MTFDNzFDNEY5QUUwMi9ncDhQUUloTjJaRVNFQVd3ZlFtaXlfLTAz c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dwOFBRSWhOMlpFU0VBV3dmUW1peV8tMDNzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTE2Q0YvMkNBRDUwODgxOUEyMTFFQUFFODExQzcxQzRGOUFFMDIvMTNERTk1RjY2 OEZBMTFFRkFFNzAwRDVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLwYIKwYBBQUHAQcBAf8E IDAeMAwEAgABMAYDBAJnxoQwDgQCAAIwCAMGACQDYMABMA0GCSqGSIb3DQEBCwUA A4IBAQAgMENMruir124h9Mp9pK514u9Eg3N0H3DrALkMioOQlF9aNzA+MASDpxGq TqVC6zwckQzYYAPUrULXKhTRzCt07P6QDLlgYObqU7A7rQ7hAZkdxo/wUAK9eb7z N8BO6i+5TKAejhN9+3CwV2TPBKhVz91uv91jiJqCB2heoLyl/2aKe3zXSS3hOJp+ 5vzOUhNFrRD/dNPhNrE+rVPjFXKWAHIJXpgeJaPLjrJQ7zRb82z+AZRuR+7IhneT DXPqgll1Z4Pdi1ut5FnYqCki195rjBpMv9X+oFGg29tzXtuydgLEuXmc0mMfX51q Oir5I7Y1u6Ttaing0tj580n7PB2M -----END CERTIFICATE-----Generated at Sun Dec 7 07:50:03 2025 by rpki-client