This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/76BF01E88EF511F0BA815369C4F9AE02.roa File: 76BF01E88EF511F0BA815369C4F9AE02.roa (raw, json) Hash identifier: mr1shSg9tdqYjDdey+BXiwnN08ArL/8XDM1KQaxVcCg= Subject key identifier: 05:05:37:A3:21:AC:66:E7:E5:80:07:65:C1:32:60:EE:0F:30:0A:89 Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Certificate serial: 0CCA Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/76BF01E88EF511F0BA815369C4F9AE02.roa Signing time: Mon 22 Dec 2025 07:53:17 +0000 ROA not before: Mon 22 Dec 2025 07:53:17 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 40605 IP address blocks: 43.249.242.0/24 maxlen: 24 43.250.88.0/24 maxlen: 24 103.7.117.0/24 maxlen: 24 103.12.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 18:33:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3274 (0xcca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Validity Not Before: Dec 22 07:53:17 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=6948f8ec-3281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4d:54:f9:b5:e9:da:aa:c8:3f:f5:c8:03:fc: 75:03:f2:79:ea:56:e3:b9:2a:84:87:09:f2:7f:28: e3:5c:b0:9c:c7:16:f0:43:09:a4:69:f5:4f:31:1b: 4c:d2:cb:af:59:87:d9:d4:8a:85:93:5b:7a:07:b4: 16:9e:89:ef:cc:27:82:82:67:05:30:a2:97:44:e9: b7:a3:0e:03:99:1a:80:f2:de:38:05:23:73:fd:22: d1:c1:14:0d:00:49:11:9e:4c:0d:4b:ba:fc:af:61: d3:7a:4c:4f:18:e3:98:d1:50:a5:79:45:a0:ed:d8: 33:ec:18:9b:d9:a0:22:b3:46:b6:84:31:c3:86:a0: 9a:af:85:50:ae:4b:f9:fb:24:7a:dd:2a:8e:95:d9: ca:ee:8f:e2:e8:66:a5:61:31:4e:0b:05:cf:bf:6a: 42:61:63:b0:9a:24:3c:1b:3c:60:34:5f:ab:57:ba: ea:ff:fb:29:de:e7:01:26:b1:77:19:21:55:e4:7e: af:c7:eb:9e:66:4b:44:61:51:47:a1:0d:bb:a0:31: 95:df:44:46:b8:d4:4d:22:ad:2b:41:b6:f1:8a:e2: 58:37:1c:5b:ba:b3:ec:06:2b:fc:75:f6:81:95:67: e4:90:61:af:9c:99:af:ae:0d:d3:9c:08:af:53:be: 80:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:05:37:A3:21:AC:66:E7:E5:80:07:65:C1:32:60:EE:0F:30:0A:89 X509v3 Authority Key Identifier: keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/76BF01E88EF511F0BA815369C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.249.242.0/24 43.250.88.0/24 103.7.117.0/24 103.12.55.0/24 Signature Algorithm: sha256WithRSAEncryption 93:52:57:82:16:58:77:d5:24:07:fe:f4:a0:69:68:38:7e:38: 7d:71:cb:63:6a:df:62:da:55:d6:21:f9:a9:b8:db:8c:14:f7: c8:35:3c:19:d3:2c:2f:8c:21:5e:7b:c3:76:77:57:2f:3d:bc: ca:5f:3c:89:20:a6:df:ad:0b:a9:6c:83:02:d7:78:19:f2:2d: 63:3d:f2:8b:1e:46:84:4b:9c:43:e1:ac:77:fa:37:fe:58:0d: b9:6a:02:1c:c0:d1:2b:b9:be:96:5e:ee:53:be:e2:c7:8f:72: b1:e9:fe:83:55:0b:29:44:8e:a1:99:6c:c8:5a:83:55:4a:b5: d6:be:d9:64:53:0f:8e:95:6e:fb:b7:51:63:59:08:ed:95:b5: d2:00:bc:9c:d3:31:3b:7a:38:c4:1b:eb:32:fb:88:78:a0:75: 83:49:35:36:e3:0d:a6:05:dc:88:ea:9f:1b:bf:5d:d7:31:49: 89:8c:0a:b8:68:00:60:9e:da:7a:85:34:7f:53:0a:f7:da:d2: ac:c1:8e:93:24:a5:d1:f2:9e:09:d9:64:d1:6b:b8:cc:29:c3: f1:68:8e:30:ec:b1:02:e8:b1:f5:1b:71:e8:40:56:d6:0d:57: 69:99:30:22:60:2b:12:6a:06:86:54:76:bd:cb:3d:f3:7d:f2: 82:53:03:f8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICDMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG NjlDQkE4NDYwHhcNMjUxMjIyMDc1MzE3WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDDA02OTQ4ZjhlYy0zMjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtE1U+bXp2qrIP/XIA/x1A/J56lbjuSqEhwnyfyjjXLCcxxbwQwmkafVPMRtM 0suvWYfZ1IqFk1t6B7QWnonvzCeCgmcFMKKXROm3ow4DmRqA8t44BSNz/SLRwRQN AEkRnkwNS7r8r2HTekxPGOOY0VCleUWg7dgz7Bib2aAis0a2hDHDhqCar4VQrkv5 +yR63SqOldnK7o/i6GalYTFOCwXPv2pCYWOwmiQ8GzxgNF+rV7rq//sp3ucBJrF3 GSFV5H6vx+ueZktEYVFHoQ27oDGV30RGuNRNIq0rQbbxiuJYNxxburPsBiv8dfaB lWfkkGGvnJmvrg3TnAivU76ADwIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFAUFN6Mh rGbn5YAHZcEyYO4PMAqJMB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ0MDIvRkRCRkQwMjAzRDk2MTFFQThFQTA3MDJGQzRGOUFFMDIvNzZCRjAxRTg4 RUY1MTFGMEJBODE1MzY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAAr+fIDBAAr+lgDBABnB3UDBABnDDcwDQYJKoZIhvcNAQEL BQADggEBAJNSV4IWWHfVJAf+9KBpaDh+OH1xy2Nq32LaVdYh+am424wU98g1PBnT LC+MIV57w3Z3Vy89vMpfPIkgpt+tC6lsgwLXeBnyLWM98oseRoRLnEPhrHf6N/5Y DblqAhzA0Su5vpZe7lO+4sePcrHp/oNVCylEjqGZbMhag1VKtda+2WRTD46Vbvu3 UWNZCO2VtdIAvJzTMTt6OMQb6zL7iHigdYNJNTbjDaYF3Ijqnxu/XdcxSYmMCrho AGCe2nqFNH9TCvfa0qzBjpMkpdHyngnZZNFruMwpw/FojjDssQLosfUbcehAVtYN V2mZMCJgKxJqBoZUdr3LPfN98oJTA/g= -----END CERTIFICATE-----Generated at Sun Jan 25 15:55:11 2026 by rpki-client