This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/07B85890C29D11EBBAF29939C4F9AE02.roa File: 07B85890C29D11EBBAF29939C4F9AE02.roa (raw, json) Hash identifier: qm9jDcnTJhuOKIEMpVyp7iPMTXqtw87t7pPJBICpZrI= Subject key identifier: 90:E0:70:85:C6:33:F1:B2:07:57:00:6D:0D:ED:D6:73:19:16:0C:D1 Certificate issuer: /CN=A91A6DF8/serialNumber=7A506C217A31078E42178160380DD2C83928D92E Certificate serial: 0D04 Authority key identifier: 7A:50:6C:21:7A:31:07:8E:42:17:81:60:38:0D:D2:C8:39:28:D9:2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/07B85890C29D11EBBAF29939C4F9AE02.roa Signing time: Sun 30 Nov 2025 17:47:31 +0000 ROA not before: Sun 30 Nov 2025 17:47:31 +0000 ROA not after: Mon 30 Mar 2026 00:00:00 +0000 asID: 138212 IP address blocks: 103.122.136.0/22 maxlen: 24 2403:9040::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.crl rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3332 (0xd04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6DF8, serialNumber=7A506C217A31078E42178160380DD2C83928D92E Validity Not Before: Nov 30 17:47:31 2025 GMT Not After : Mar 30 00:00:00 2026 GMT Subject: CN=692c8332-9393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b9:23:c6:8b:2f:89:0b:11:f4:70:10:07:74: 8e:6c:e9:5f:3b:11:2e:3c:04:cf:85:ee:bd:45:27: f6:93:b7:ea:9b:89:77:d7:bc:5d:8f:8d:a2:bc:ec: 6d:2e:dc:79:e6:75:7a:6c:7a:69:9e:4a:73:77:11: 51:bd:65:da:f1:2c:5a:0a:cc:a3:77:5a:a1:2f:34: 05:72:c2:60:b3:3a:33:45:8b:fe:a2:e2:ef:f5:2c: 8c:91:d6:f6:20:cf:f2:8f:f6:02:88:cd:75:3e:d7: 05:95:c1:a0:f5:d3:ca:02:06:d3:21:e4:8d:32:55: ec:d9:0f:92:d6:2b:61:74:f5:40:65:d2:b8:88:ae: 06:fc:ba:0c:e3:b6:1e:85:30:cb:8c:67:c8:09:60: 1d:6c:a3:bd:4a:f8:17:c2:68:85:f9:48:13:bc:7c: f7:c3:b5:85:48:4b:8f:d8:f3:50:a1:8f:e9:8a:16: a4:fc:6a:15:93:9a:86:c4:dc:d8:e7:cd:63:a7:ad: 7e:f3:5c:c9:10:c8:04:c3:f1:cb:31:f1:86:f9:55: d4:54:9f:65:f4:ce:65:9a:65:8c:d2:70:ad:75:37: 10:bf:e3:9c:4f:d6:73:cf:7a:76:ae:c6:ee:a0:67: a5:a9:84:df:fb:49:5d:70:36:62:05:b0:eb:92:65: a0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:E0:70:85:C6:33:F1:B2:07:57:00:6D:0D:ED:D6:73:19:16:0C:D1 X509v3 Authority Key Identifier: keyid:7A:50:6C:21:7A:31:07:8E:42:17:81:60:38:0D:D2:C8:39:28:D9:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/07B85890C29D11EBBAF29939C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.122.136.0/22 IPv6: 2403:9040::/32 Signature Algorithm: sha256WithRSAEncryption 55:82:c8:f7:5b:06:8b:96:c7:c5:02:ef:d8:85:b5:51:e9:2c: 19:05:7d:3e:a3:0b:48:99:4a:a5:3e:8d:c0:ec:f1:0a:59:98: c6:ef:1a:16:dc:cc:72:43:96:69:46:b8:c6:03:44:10:b2:f0: c7:f3:43:fc:9f:e8:0a:69:a3:d3:bc:ec:3d:de:e3:0c:7c:0c: c5:5b:ae:c7:0d:d3:d0:a9:cf:c1:ee:66:4b:bb:34:38:dc:8f: 4b:00:34:9b:3c:cc:e4:40:41:a1:30:dc:e6:34:78:1e:3a:c6: fc:47:5d:d3:4f:74:52:59:16:96:ca:cf:10:5f:6e:a0:a5:de: a6:f9:75:df:09:d7:05:47:58:f0:69:ff:25:d5:32:f2:2d:68: 99:f1:1e:a6:b6:6e:d9:b8:a7:45:f9:4f:45:f3:ed:5b:aa:a7: 6c:16:ad:5b:3e:9a:27:7b:ce:4f:05:69:42:5d:e5:61:bc:0e: c7:9f:b2:b1:b0:40:19:61:87:29:20:26:80:db:b6:fa:9c:6b: 58:4f:c3:aa:9d:9f:c6:34:06:cd:91:77:38:6f:c4:97:90:10: e5:20:f8:39:9f:8c:3c:0b:f3:47:ad:12:64:6d:c6:93:c7:d7: cb:c7:0f:a6:8c:45:80:0c:53:68:89:98:30:c7:a5:64:c7:01: ba:43:b5:8c -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICDQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZERjgxMTAvBgNVBAUTKDdBNTA2QzIxN0EzMTA3OEU0MjE3ODE2MDM4MEREMkM4 MzkyOEQ5MkUwHhcNMjUxMTMwMTc0NzMxWhcNMjYwMzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJjODMzMi05MzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqbkjxosviQsR9HAQB3SObOlfOxEuPATPhe69RSf2k7fqm4l317xdj42ivOxt Ltx55nV6bHppnkpzdxFRvWXa8SxaCsyjd1qhLzQFcsJgszozRYv+ouLv9SyMkdb2 IM/yj/YCiM11PtcFlcGg9dPKAgbTIeSNMlXs2Q+S1ithdPVAZdK4iK4G/LoM47Ye hTDLjGfICWAdbKO9SvgXwmiF+UgTvHz3w7WFSEuP2PNQoY/pihak/GoVk5qGxNzY 581jp61+81zJEMgEw/HLMfGG+VXUVJ9l9M5lmmWM0nCtdTcQv+OcT9Zzz3p2rsbu oGelqYTf+0ldcDZiBbDrkmWgcwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFJDgcIXG M/GyB1cAbQ3t1nMZFgzRMB8GA1UdIwQYMBaAFHpQbCF6MQeOQheBYDgN0sg5KNku MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkRGOC83Njc2RjVEQ0Yz Q0ExMUU5QUFCQTUzN0ZDNEY5QUUwMi9lbEJzSVhveEI0NUNGNEZnT0EzU3lEa28y UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VsQnNJWG94QjQ1Q0Y0RmdPQTNTeURrbzJTNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTZERjgvNzY3NkY1RENGM0NBMTFFOUFBQkE1MzdGQzRGOUFFMDIvMDdCODU4OTBD MjlEMTFFQkJBRjI5OTM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJneogwDQQCAAIwBwMFACQDkEAwDQYJKoZIhvcNAQELBQAD ggEBAFWCyPdbBouWx8UC79iFtVHpLBkFfT6jC0iZSqU+jcDs8QpZmMbvGhbczHJD lmlGuMYDRBCy8MfzQ/yf6Appo9O87D3e4wx8DMVbrscN09Cpz8HuZku7NDjcj0sA NJs8zORAQaEw3OY0eB46xvxHXdNPdFJZFpbKzxBfbqCl3qb5dd8J1wVHWPBp/yXV MvItaJnxHqa2btm4p0X5T0Xz7Vuqp2wWrVs+mid7zk8FaUJd5WG8DsefsrGwQBlh hykgJoDbtvqca1hPw6qdn8Y0Bs2RdzhvxJeQEOUg+DmfjDwL80etEmRtxpPH18vH D6aMRYAMU2iJmDDHpWTHAbpDtYw= -----END CERTIFICATE-----Generated at Sat Dec 6 20:45:57 2025 by rpki-client