This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/1AB255C68CFF11EDB7BDD865C4F9AE02.roa File: 1AB255C68CFF11EDB7BDD865C4F9AE02.roa (raw, json) Hash identifier: QdCbayHDAGnHmMRgnYF2PDyEgkvpSCxySVQrGEImkM0= Subject key identifier: 8F:BF:7C:75:77:D0:57:2E:53:59:37:5C:64:82:32:B9:6B:A1:09:D3 Certificate issuer: /CN=A91A9B3E/serialNumber=CEE34FA39FF285F72E229DA2862BC10E488FBA41 Certificate serial: 021C Authority key identifier: CE:E3:4F:A3:9F:F2:85:F7:2E:22:9D:A2:86:2B:C1:0E:48:8F:BA:41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/1AB255C68CFF11EDB7BDD865C4F9AE02.roa Signing time: Sun 09 Nov 2025 00:47:19 +0000 ROA not before: Sun 09 Nov 2025 00:47:19 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 141235 IP address blocks: 103.156.250.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.crl rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 00:39:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 540 (0x21c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9B3E, serialNumber=CEE34FA39FF285F72E229DA2862BC10E488FBA41 Validity Not Before: Nov 9 00:47:19 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=690fe496-205b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:43:32:9f:58:ee:f5:d1:3c:f0:1b:18:72:f6: cd:7e:e5:97:2d:c3:07:60:b7:67:ad:d1:3a:7a:94: 46:89:2d:c2:83:15:f3:5c:ff:4d:ba:54:5e:79:88: 0c:db:7c:65:aa:c9:ab:a5:7d:2c:07:06:ab:55:fc: f2:f7:94:d5:51:ce:88:72:90:50:e5:5d:d7:e3:cf: fe:a1:25:76:40:42:5c:66:5b:73:7e:3e:bf:cf:fe: e1:fe:6e:ad:77:34:68:48:fd:5c:85:70:28:6a:50: 4c:3d:20:51:61:19:88:9d:c4:ee:27:05:a3:b5:2c: 1a:35:ec:25:9a:e4:50:35:3d:86:71:c5:d0:e3:fa: 8c:6d:ae:10:5c:9b:f7:b9:8b:14:8f:03:d7:27:0f: 3b:1b:f9:21:32:25:ea:ed:90:e7:b0:ce:a2:2c:8b: 42:9c:e9:c5:e6:03:c8:3b:a8:35:6d:91:18:32:7c: b7:38:ba:54:86:b2:30:10:d6:71:e2:b0:8d:02:99: e9:dd:6f:8c:37:2a:23:60:b4:9e:87:c7:e3:6f:bc: b1:0f:25:25:d9:9b:bf:ba:c1:da:f0:1c:ed:ff:40: f4:21:0a:5c:19:72:7c:25:b4:e4:47:46:93:df:d8: 10:f3:9a:08:fc:52:75:29:3b:aa:ae:a4:61:ab:43: a9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:BF:7C:75:77:D0:57:2E:53:59:37:5C:64:82:32:B9:6B:A1:09:D3 X509v3 Authority Key Identifier: keyid:CE:E3:4F:A3:9F:F2:85:F7:2E:22:9D:A2:86:2B:C1:0E:48:8F:BA:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/1AB255C68CFF11EDB7BDD865C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.156.250.0/23 Signature Algorithm: sha256WithRSAEncryption 24:70:07:07:77:4d:28:6c:38:f4:12:c1:99:cb:ea:19:42:8a: 61:cf:5a:d2:37:49:49:10:fc:ed:c9:ab:5e:33:06:eb:66:81: f0:a0:91:a3:c9:eb:f1:27:9e:29:33:53:e2:7d:66:30:b8:4f: 13:ac:df:51:5a:d5:17:fb:79:52:cf:6a:ad:11:0f:6a:74:75: 8c:3a:dc:0f:83:65:e1:8e:b3:15:bc:37:17:e7:c1:3a:bb:3e: d4:24:49:68:5d:78:0e:65:f8:c2:b7:5d:c6:3e:82:a7:7e:5a: db:5b:ea:8a:b7:5c:b9:9d:54:26:f0:1c:84:5c:71:66:9a:f5: 6b:87:32:73:bf:63:0e:03:fa:cd:78:d5:f1:28:3a:92:58:cf: d3:32:97:86:98:ad:3d:eb:f5:15:4c:44:1c:de:a2:ab:15:da: 3e:dd:b3:59:c1:63:f9:ee:9e:71:02:b2:38:64:10:84:e4:74: 97:63:57:64:84:96:87:51:c3:ac:27:c2:c6:e9:20:37:6b:c1: 4b:db:ab:a8:de:84:76:3b:d7:36:21:f4:bf:29:10:ce:3e:ea: a0:df:38:bf:e4:20:b7:50:cb:85:be:1a:46:3b:73:12:0e:43: 22:fc:12:fe:ec:da:21:a9:c5:be:66:44:27:bb:d4:d7:4d:e1: 0c:6b:6d:ce -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlCM0UxMTAvBgNVBAUTKENFRTM0RkEzOUZGMjg1RjcyRTIyOURBMjg2MkJDMTBF NDg4RkJBNDEwHhcNMjUxMTA5MDA0NzE5WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTBmZTQ5Ni0yMDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzkMyn1ju9dE88BsYcvbNfuWXLcMHYLdnrdE6epRGiS3CgxXzXP9NulReeYgM 23xlqsmrpX0sBwarVfzy95TVUc6IcpBQ5V3X48/+oSV2QEJcZltzfj6/z/7h/m6t dzRoSP1chXAoalBMPSBRYRmIncTuJwWjtSwaNewlmuRQNT2GccXQ4/qMba4QXJv3 uYsUjwPXJw87G/khMiXq7ZDnsM6iLItCnOnF5gPIO6g1bZEYMny3OLpUhrIwENZx 4rCNApnp3W+MNyojYLSeh8fjb7yxDyUl2Zu/usHa8Bzt/0D0IQpcGXJ8JbTkR0aT 39gQ85oI/FJ1KTuqrqRhq0OplwIDAQABo4IClTCCApEwHQYDVR0OBBYEFI+/fHV3 0FcuU1k3XGSCMrlroQnTMB8GA1UdIwQYMBaAFM7jT6Of8oX3LiKdooYrwQ5Ij7pB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUIzRS9EQUIxQzNBNjhD RkIxMUVEOTJFMjVCNjFDNEY5QUUwMi96dU5QbzVfeWhmY3VJcDJpaGl2QkRraVB1 a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1TlBvNV95aGZjdUlwMmloaXZCRGtpUHVrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTlCM0UvREFCMUMzQTY4Q0ZCMTFFRDkyRTI1QjYxQzRGOUFFMDIvMUFCMjU1QzY4 Q0ZGMTFFREI3QkREODY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnnPowDQYJKoZIhvcNAQELBQADggEBACRwBwd3TShsOPQS wZnL6hlCimHPWtI3SUkQ/O3Jq14zButmgfCgkaPJ6/EnnikzU+J9ZjC4TxOs31Fa 1Rf7eVLPaq0RD2p0dYw63A+DZeGOsxW8NxfnwTq7PtQkSWhdeA5l+MK3XcY+gqd+ Wttb6oq3XLmdVCbwHIRccWaa9WuHMnO/Yw4D+s141fEoOpJYz9Myl4aYrT3r9RVM RBzeoqsV2j7ds1nBY/nunnECsjhkEITkdJdjV2SElodRw6wnwsbpIDdrwUvbq6je hHY71zYh9L8pEM4+6qDfOL/kILdQy4W+GkY7cxIOQyL8Ev7s2iGpxb5mRCe71NdN 4Qxrbc4= -----END CERTIFICATE-----Generated at Sun Dec 7 06:19:17 2025 by rpki-client