This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/D8EA816A3EEE11EF98924D60C4F9AE02.roa File: D8EA816A3EEE11EF98924D60C4F9AE02.roa (raw, json) Hash identifier: grefGbNN/VHvdzizv2NC+EAajk8nYYeMvxNGZRpSLyU= Subject key identifier: 02:0B:D1:70:DA:56:42:69:A0:72:DD:D0:BD:94:61:D9:A7:4E:8F:14 Certificate issuer: /CN=A91A6943/serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Certificate serial: 0A3A Authority key identifier: 0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/D8EA816A3EEE11EF98924D60C4F9AE02.roa Signing time: Fri 28 Nov 2025 19:22:28 +0000 ROA not before: Fri 28 Nov 2025 19:22:28 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 139879 IP address blocks: 103.74.20.0/24 maxlen: 24 103.74.21.0/24 maxlen: 24 103.74.22.0/24 maxlen: 24 103.74.23.0/24 maxlen: 24 103.235.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 19:06:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2618 (0xa3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6943, serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Validity Not Before: Nov 28 19:22:28 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6929f674-41f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f3:f1:68:48:fb:6c:de:0d:30:4a:26:92:9c: 8c:b5:b1:f1:d0:0a:9e:02:55:e6:18:cc:9e:cf:ef: b5:63:85:c4:e9:33:2a:e2:4f:f4:f0:9e:c5:8b:91: 7b:88:ae:56:0e:b6:01:85:a3:89:ed:b8:95:10:10: 43:d2:bb:27:83:29:97:84:99:22:be:70:b6:ad:cb: 7b:13:42:0f:dd:fe:27:20:04:7e:5d:89:5c:82:b3: 54:49:20:c8:6a:a1:74:17:11:12:12:47:29:a6:61: f1:dd:8c:09:87:d2:ba:9d:9f:61:1c:a7:ba:02:94: 45:26:03:03:bb:07:9f:80:7c:93:e9:c1:71:14:f1: f8:a6:8e:79:6d:ec:bb:9d:6f:2e:83:cc:38:69:80: f4:6c:cc:61:cf:8c:21:c3:87:9d:62:25:d8:ce:79: 0f:52:8a:82:50:76:50:3c:77:17:4b:8d:7d:35:89: 6a:79:15:05:71:51:dc:ce:0d:5f:00:1d:74:db:21: da:44:47:b4:c5:e1:c3:dc:ad:15:66:9c:42:bd:fe: 70:cc:b5:93:57:73:37:64:3a:fb:89:b3:96:d4:2e: 1a:f6:7d:e7:76:3d:ca:72:0e:15:34:55:4b:5f:d9: a3:56:1d:60:fd:bd:45:07:89:76:20:b3:9e:17:d0: 10:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:0B:D1:70:DA:56:42:69:A0:72:DD:D0:BD:94:61:D9:A7:4E:8F:14 X509v3 Authority Key Identifier: keyid:0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/D8EA816A3EEE11EF98924D60C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.74.20.0/22 103.235.77.0/24 Signature Algorithm: sha256WithRSAEncryption 37:06:a1:d2:dd:1f:44:a4:7b:2d:4e:9b:bf:81:32:e4:ed:d0: 84:11:53:cd:59:aa:5e:ec:43:ae:e8:98:8e:c2:c8:61:cd:10: b8:22:66:44:11:bc:c9:00:16:ce:3f:c7:8e:27:4f:0a:bb:a0: 31:42:c0:8f:f6:d8:86:2b:24:77:fb:11:a7:ec:17:1f:db:d5: 5e:d1:60:cb:7c:55:ae:87:0a:3a:2b:42:c9:bc:c4:e2:2d:08: 42:02:6e:cf:62:35:da:e5:8f:ea:b0:b6:0a:7d:57:bf:ae:8f: 7c:b6:15:5d:7b:a1:17:ff:1b:bf:85:07:26:c3:2e:d8:15:c0: 03:d2:c1:37:cb:95:00:d4:dc:96:32:06:85:cc:7c:0f:20:4f: 31:a4:bc:85:86:87:54:48:e6:dd:07:fd:3b:ba:8f:7a:87:3f: 72:3d:58:2b:45:34:12:0a:63:c9:4b:37:0e:88:1d:54:20:49: c9:2b:be:26:8b:34:e3:cd:1f:94:61:e1:fd:a5:7d:e4:f2:f8: d7:f8:8b:79:2f:80:b5:6e:5f:a7:da:0f:21:3b:6e:0e:50:83: 7d:03:c6:a7:94:fb:b7:23:01:9d:25:93:f3:e7:d9:10:66:60: 74:84:57:3e:6d:0f:d0:ce:8a:6e:22:2b:66:01:7e:d1:d0:76: 6c:85:44:50 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICCjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY5NDMxMTAvBgNVBAUTKDBBQjk5RjUyQzlBRDlCRTBCOUMwNDQ3MENGQjFCNkMy MzYwRkQwRjUwHhcNMjUxMTI4MTkyMjI4WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTI5ZjY3NC00MWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy/PxaEj7bN4NMEomkpyMtbHx0AqeAlXmGMyez++1Y4XE6TMq4k/08J7Fi5F7 iK5WDrYBhaOJ7biVEBBD0rsngymXhJkivnC2rct7E0IP3f4nIAR+XYlcgrNUSSDI aqF0FxESEkcppmHx3YwJh9K6nZ9hHKe6ApRFJgMDuwefgHyT6cFxFPH4po55bey7 nW8ug8w4aYD0bMxhz4whw4edYiXYznkPUoqCUHZQPHcXS419NYlqeRUFcVHczg1f AB102yHaREe0xeHD3K0VZpxCvf5wzLWTV3M3ZDr7ibOW1C4a9n3ndj3Kcg4VNFVL X9mjVh1g/b1FB4l2ILOeF9AQ2QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFAIL0XDa VkJpoHLd0L2UYdmnTo8UMB8GA1UdIwQYMBaAFAq5n1LJrZvgucBEcM+xtsI2D9D1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjk0My9CNzE4MTE2ODhE NTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0tQzV3RVJ3ejdHMndqWVAw UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NybWZVc210bS1DNXdFUnd6N0cyd2pZUDBQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTY5NDMvQjcxODExNjg4RDUxMTFFQUI4QjI2Mzg0QzRGOUFFMDIvRDhFQTgxNkEz RUVFMTFFRjk4OTI0RDYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnShQDBABn600wDQYJKoZIhvcNAQELBQADggEBADcGodLd H0Skey1Om7+BMuTt0IQRU81Zql7sQ67omI7CyGHNELgiZkQRvMkAFs4/x44nTwq7 oDFCwI/22IYrJHf7EafsFx/b1V7RYMt8Va6HCjorQsm8xOItCEICbs9iNdrlj+qw tgp9V7+uj3y2FV17oRf/G7+FBybDLtgVwAPSwTfLlQDU3JYyBoXMfA8gTzGkvIWG h1RI5t0H/Tu6j3qHP3I9WCtFNBIKY8lLNw6IHVQgSckrviaLNOPNH5Rh4f2lfeTy +Nf4i3kvgLVuX6faDyE7bg5Qg30DxqeU+7cjAZ0lk/Pn2RBmYHSEVz5tD9DOim4i K2YBftHQdmyFRFA= -----END CERTIFICATE-----Generated at Sat Dec 6 23:22:57 2025 by rpki-client