This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/1DB49770BDD511F0BF83ED5AC4F9AE02.roa File: 1DB49770BDD511F0BF83ED5AC4F9AE02.roa (raw, json) Hash identifier: 4baJUQaJ57JlaoSVexNlINX3qHBtfZSmHXr0z4zuVeE= Subject key identifier: B7:6A:25:B2:95:3D:81:0B:72:9E:7E:CE:B6:11:1C:FC:78:D6:F8:72 Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Certificate serial: 0CA7 Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/1DB49770BDD511F0BF83ED5AC4F9AE02.roa Signing time: Wed 26 Nov 2025 10:53:12 +0000 ROA not before: Wed 26 Nov 2025 10:53:12 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 400342 IP address blocks: 43.246.129.0/24 maxlen: 24 103.244.211.0/24 maxlen: 24 160.20.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3239 (0xca7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Validity Not Before: Nov 26 10:53:12 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=6926dc18-4058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2d:03:01:84:16:e2:f4:ee:73:c2:ff:13:18: d6:8a:c6:b6:85:0f:1f:37:d9:93:50:5c:97:e8:f1: 2a:63:a2:b7:f9:90:8c:f7:34:08:f2:c4:ab:2b:18: 60:e3:51:12:0a:91:b2:99:16:7f:4e:5c:01:3d:4a: 46:f8:b9:e9:e0:32:8f:2b:94:4e:38:2c:38:e5:8e: 26:18:ef:8d:3f:b0:61:4b:3b:53:04:b0:dc:0e:0c: 4a:a2:d5:fd:d3:f9:41:3e:1d:ca:6d:b0:a1:5b:9c: 33:1c:41:79:8a:03:1d:bd:3f:2e:3e:e0:6d:4f:e6: 98:79:b2:d5:83:31:96:00:ef:6a:90:a3:09:78:16: 71:34:10:cd:c8:11:9e:81:f2:85:26:c2:55:fc:4b: 66:c5:df:cc:5f:8d:ac:22:09:50:11:9f:98:3b:92: 84:71:c2:4a:9f:d2:51:7b:87:22:71:06:5c:70:2a: 7b:3d:42:be:cc:57:cf:21:a2:58:dc:5d:f4:f2:07: 22:bd:bf:f9:1a:3d:8a:6e:42:37:31:33:7d:82:b5: 6c:88:a0:ea:09:c9:98:92:24:80:cb:9d:81:0a:71: 70:98:04:fa:64:a3:92:bf:12:e4:1a:b9:59:25:62: f4:f1:69:93:92:ce:51:ee:0b:21:5e:95:e9:30:c5: e8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:6A:25:B2:95:3D:81:0B:72:9E:7E:CE:B6:11:1C:FC:78:D6:F8:72 X509v3 Authority Key Identifier: keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/1DB49770BDD511F0BF83ED5AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.246.129.0/24 103.244.211.0/24 160.20.45.0/24 Signature Algorithm: sha256WithRSAEncryption 88:47:87:4a:94:fd:83:db:4d:2f:04:3c:50:ba:b8:a3:86:86: 6b:a2:ae:31:2b:da:17:e8:d7:6e:ca:4f:01:64:19:60:e9:3f: fb:a2:08:36:a2:ed:4e:cf:78:d2:7a:1b:30:d1:5b:d4:f0:e2: 9b:be:37:3d:3a:ff:80:be:c2:b8:19:ff:3b:b5:ed:14:25:20: ce:52:cb:18:1e:53:e9:9b:16:23:26:e7:b5:71:cd:d1:77:74: fe:09:f2:bc:27:1c:57:02:f0:bc:f9:56:f7:9f:00:d3:55:cd: f6:96:72:6b:30:24:2c:cc:46:43:bc:47:1e:85:41:75:e5:60: f7:cf:e3:0d:22:bc:0b:b2:19:ac:fb:c6:fe:84:8f:78:ca:6c: c6:63:8e:9c:8a:5a:b6:94:e7:7e:81:3d:0b:78:c4:39:3a:fd: c0:d8:24:a3:6f:d7:ce:69:7f:93:70:3f:56:1d:c1:24:d9:a9: d0:9b:35:6d:c2:48:ab:cc:b3:6a:39:f7:a4:2f:70:46:26:4b: 01:9a:b7:aa:2b:ce:c8:a6:65:69:2b:bb:c7:4b:ff:fa:d5:48: 75:46:4e:0d:d8:0f:e0:81:7d:cd:97:d4:d6:21:65:1c:e8:c6: d1:65:48:e5:f5:c9:dd:40:0e:34:d7:45:6c:16:74:24:0e:5f: 59:c7:40:96 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICDKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG NjlDQkE4NDYwHhcNMjUxMTI2MTA1MzEyWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OTI2ZGMxOC00MDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsi0DAYQW4vTuc8L/ExjWisa2hQ8fN9mTUFyX6PEqY6K3+ZCM9zQI8sSrKxhg 41ESCpGymRZ/TlwBPUpG+Lnp4DKPK5ROOCw45Y4mGO+NP7BhSztTBLDcDgxKotX9 0/lBPh3KbbChW5wzHEF5igMdvT8uPuBtT+aYebLVgzGWAO9qkKMJeBZxNBDNyBGe gfKFJsJV/Etmxd/MX42sIglQEZ+YO5KEccJKn9JRe4cicQZccCp7PUK+zFfPIaJY 3F308gcivb/5Gj2KbkI3MTN9grVsiKDqCcmYkiSAy52BCnFwmAT6ZKOSvxLkGrlZ JWL08WmTks5R7gshXpXpMMXoPQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFLdqJbKV PYELcp5+zrYRHPx41vhyMB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ0MDIvRkRCRkQwMjAzRDk2MTFFQThFQTA3MDJGQzRGOUFFMDIvMURCNDk3NzBC REQ1MTFGMEJGODNFRDVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAAr9oEDBABn9NMDBACgFC0wDQYJKoZIhvcNAQELBQADggEB AIhHh0qU/YPbTS8EPFC6uKOGhmuirjEr2hfo127KTwFkGWDpP/uiCDai7U7PeNJ6 GzDRW9Tw4pu+Nz06/4C+wrgZ/zu17RQlIM5SyxgeU+mbFiMm57VxzdF3dP4J8rwn HFcC8Lz5VvefANNVzfaWcmswJCzMRkO8Rx6FQXXlYPfP4w0ivAuyGaz7xv6Ej3jK bMZjjpyKWraU536BPQt4xDk6/cDYJKNv185pf5NwP1YdwSTZqdCbNW3CSKvMs2o5 96QvcEYmSwGat6orzsimZWkru8dL//rVSHVGTg3YD+CBfc2X1NYhZRzoxtFlSOX1 yd1ADjTXRWwWdCQOX1nHQJY= -----END CERTIFICATE-----Generated at Sat Dec 6 18:23:40 2025 by rpki-client