This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/E58488D0BB7A11F09DC5801DC4F9AE02.roa File: E58488D0BB7A11F09DC5801DC4F9AE02.roa (raw, json) Hash identifier: 2c2fswoHtuwwjSDYm9YL0aP4fxZNIBHz0gEM3XmMKGw= Subject key identifier: F0:73:F9:39:A3:22:BC:02:46:57:AF:EA:39:01:0D:49:B9:93:7D:6B Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Certificate serial: 0C90 Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/E58488D0BB7A11F09DC5801DC4F9AE02.roa Signing time: Fri 07 Nov 2025 01:41:36 +0000 ROA not before: Fri 07 Nov 2025 01:41:36 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 2519 IP address blocks: 103.240.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3216 (0xc90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Validity Not Before: Nov 7 01:41:36 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=690d4e50-a0d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ed:b6:82:b0:07:b9:54:f2:ee:a0:31:b4:ad: ed:26:96:bb:78:f5:5b:b1:41:43:a3:13:20:26:1d: 34:ce:1a:23:e5:a3:31:a6:c1:d6:66:6f:8f:19:cc: 77:68:0b:b5:81:ef:95:d9:27:fd:b9:92:a1:62:31: 07:a5:c5:69:eb:9e:94:61:33:4f:a9:80:90:30:a0: 5e:e7:6b:4b:32:49:65:6e:6b:f2:00:e8:f5:eb:c1: 2d:5f:2f:31:72:92:2e:fb:c5:1b:18:b4:fb:71:17: 7a:20:50:8c:f8:19:f6:7b:bd:76:de:ef:f8:6f:b7: 35:d1:ed:ea:13:60:eb:06:7d:f5:f0:dd:ad:75:45: e5:39:7f:43:3d:80:f8:15:fa:48:df:6a:23:f4:3e: ca:b5:2b:c9:30:f1:fc:72:bc:de:2c:82:f1:1e:39: c3:09:d4:7f:e0:f1:fe:f9:3c:ff:d5:b1:00:c1:9a: 7d:36:df:fc:0b:76:3c:db:7f:e0:92:0a:c7:3a:25: 39:a1:45:5b:fb:7e:68:1f:54:33:fe:3d:b8:f1:5c: 57:8f:17:fd:b1:f3:cd:07:de:61:c3:32:04:d5:08: ff:57:8b:62:e0:1d:ea:2a:53:53:de:fa:93:0d:88: e8:6e:ca:2d:ab:be:dc:39:a2:75:fc:aa:22:c9:d7: cf:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:73:F9:39:A3:22:BC:02:46:57:AF:EA:39:01:0D:49:B9:93:7D:6B X509v3 Authority Key Identifier: keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/E58488D0BB7A11F09DC5801DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.240.20.0/22 Signature Algorithm: sha256WithRSAEncryption b8:ee:db:d1:74:5b:f5:bb:12:e7:f8:22:57:9c:c3:f9:f5:ff: d4:a9:e1:42:81:4b:10:d9:44:b2:35:51:91:6a:97:93:64:e3: a2:68:d9:39:8a:4b:4e:47:69:9d:fd:31:6e:f4:b2:c1:09:15: 81:58:96:7c:6b:b1:de:ff:ff:ac:15:95:1a:89:84:d6:46:cc: b7:d7:0e:00:d9:1b:6f:36:ee:5c:4c:e2:38:8e:fe:c9:09:c8: cd:ea:72:82:f0:19:5f:84:18:fd:73:9b:4b:80:4b:43:5d:78: 30:7f:b6:21:db:0f:bf:19:78:88:a7:f8:56:47:39:0e:a8:bc: 73:fd:a4:3c:8a:84:89:92:a2:e8:27:1b:ad:e3:c0:a0:a7:c0: 26:82:11:0c:ac:b7:fc:1d:f6:ce:6b:6f:31:36:1e:dd:b1:4f: e6:88:8b:45:22:8e:d7:24:6d:e9:f0:60:28:79:37:b5:d7:77: ec:46:dd:7c:f1:b7:ed:d5:f4:f2:a1:ab:0f:64:0a:d4:3a:20: c0:62:11:97:40:dc:75:5d:a5:0a:fe:53:07:85:45:fc:e5:b9: 31:7e:27:f1:6c:55:fc:aa:75:81:7d:82:b2:8f:76:88:13:d5: db:f3:ca:30:94:e6:53:34:2d:e9:f8:b9:66:49:a5:11:da:df: 04:e3:74:f0 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG NjlDQkE4NDYwHhcNMjUxMTA3MDE0MTM2WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OTBkNGU1MC1hMGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy+22grAHuVTy7qAxtK3tJpa7ePVbsUFDoxMgJh00zhoj5aMxpsHWZm+PGcx3 aAu1ge+V2Sf9uZKhYjEHpcVp656UYTNPqYCQMKBe52tLMkllbmvyAOj168EtXy8x cpIu+8UbGLT7cRd6IFCM+Bn2e7123u/4b7c10e3qE2DrBn318N2tdUXlOX9DPYD4 FfpI32oj9D7KtSvJMPH8crzeLILxHjnDCdR/4PH++Tz/1bEAwZp9Nt/8C3Y823/g kgrHOiU5oUVb+35oH1Qz/j248VxXjxf9sfPNB95hwzIE1Qj/V4ti4B3qKlNT3vqT DYjobsotq77cOaJ1/KoiydfPOQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPBz+Tmj IrwCRlev6jkBDUm5k31rMB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ0MDIvRkRCRkQwMjAzRDk2MTFFQThFQTA3MDJGQzRGOUFFMDIvRTU4NDg4RDBC QjdBMTFGMDlEQzU4MDFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJn8BQwDQYJKoZIhvcNAQELBQADggEBALju29F0W/W7Euf4 Ilecw/n1/9Sp4UKBSxDZRLI1UZFql5Nk46Jo2TmKS05HaZ39MW70ssEJFYFYlnxr sd7//6wVlRqJhNZGzLfXDgDZG2827lxM4jiO/skJyM3qcoLwGV+EGP1zm0uAS0Nd eDB/tiHbD78ZeIin+FZHOQ6ovHP9pDyKhImSougnG63jwKCnwCaCEQyst/wd9s5r bzE2Ht2xT+aIi0UijtckbenwYCh5N7XXd+xG3Xzxt+3V9PKhqw9kCtQ6IMBiEZdA 3HVdpQr+UweFRfzluTF+J/FsVfyqdYF9grKPdogT1dvzyjCU5lM0Len4uWZJpRHa 3wTjdPA= -----END CERTIFICATE-----Generated at Sat Dec 6 18:23:34 2025 by rpki-client