This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/819F7A60CF8B11EDAE77B351C4F9AE02.roa File: 819F7A60CF8B11EDAE77B351C4F9AE02.roa (raw, json) Hash identifier: dq+UE3KEv3N8CdfAK5DvJADVDmEdqe3OgaTu0NnhwV8= Subject key identifier: DB:1C:F5:5A:C1:5F:24:16:7C:FD:FE:47:CA:22:14:87:5A:1A:FF:7A Certificate issuer: /CN=A91A9B3E/serialNumber=CEE34FA39FF285F72E229DA2862BC10E488FBA41 Certificate serial: 021D Authority key identifier: CE:E3:4F:A3:9F:F2:85:F7:2E:22:9D:A2:86:2B:C1:0E:48:8F:BA:41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/819F7A60CF8B11EDAE77B351C4F9AE02.roa Signing time: Sun 09 Nov 2025 00:47:20 +0000 ROA not before: Sun 09 Nov 2025 00:47:20 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 63834 IP address blocks: 103.40.208.0/22 maxlen: 22 103.40.208.0/24 maxlen: 24 103.40.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.crl rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 00:39:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 541 (0x21d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9B3E, serialNumber=CEE34FA39FF285F72E229DA2862BC10E488FBA41 Validity Not Before: Nov 9 00:47:20 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=690fe497-5be4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c5:21:4f:fe:e1:69:f6:25:97:6c:85:fc:60: 17:d3:4e:5a:ec:26:1c:4b:89:e4:40:04:f4:3b:61: 79:76:67:af:ed:91:df:c8:e6:33:97:e7:55:11:34: 32:c8:ae:a4:29:bb:b1:dd:67:6a:cb:25:4b:78:f1: c8:a5:ea:b5:61:65:f6:c8:ca:2b:47:9f:54:58:9a: 2a:24:37:f3:70:f3:5c:63:47:bf:e5:09:75:81:9c: 88:3c:80:9d:e7:82:90:65:ca:a4:4b:50:08:27:7e: 83:21:a0:3e:de:8b:29:3b:bc:7a:be:71:86:29:ff: a9:02:a5:50:a0:6e:0e:51:f0:2d:96:8b:8f:a9:69: e8:f0:f3:bc:56:87:64:c3:38:87:31:1b:87:58:14: 15:d8:c7:4e:8b:ec:96:dd:cf:b9:59:91:85:5d:5a: 07:75:f6:93:85:e4:83:d2:32:98:25:27:4f:5b:c6: 5a:23:c5:88:18:57:e2:62:85:cb:84:6c:e1:6e:b2: 18:c3:97:b8:14:25:6f:1d:70:d0:e5:bd:fb:96:26: 8b:ab:76:33:a2:50:f5:0f:96:96:cb:89:65:a9:9e: da:b4:72:71:02:d0:93:19:6f:a4:31:18:bf:d6:53: bb:2e:1d:55:ed:34:cd:9f:a4:0b:45:89:f4:76:1d: a7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:1C:F5:5A:C1:5F:24:16:7C:FD:FE:47:CA:22:14:87:5A:1A:FF:7A X509v3 Authority Key Identifier: keyid:CE:E3:4F:A3:9F:F2:85:F7:2E:22:9D:A2:86:2B:C1:0E:48:8F:BA:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/819F7A60CF8B11EDAE77B351C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.40.208.0/22 Signature Algorithm: sha256WithRSAEncryption b4:65:cc:fa:90:e9:40:f2:31:6e:4d:30:0f:5f:bc:97:66:13: 01:81:66:aa:8e:12:e8:b4:c8:33:99:31:de:18:7b:a3:66:d3: cc:fe:5a:9c:7a:ec:ec:ff:87:0e:0e:9c:b9:61:fd:ca:97:0e: 86:cb:8a:30:25:b1:75:55:01:10:4f:f7:e0:e7:14:59:9e:ab: 88:78:3a:d4:8a:2a:65:0e:1f:60:03:34:0f:37:8f:16:6d:b3: 30:72:07:b9:b9:82:17:77:35:27:b6:bc:3e:84:37:43:84:33: 39:57:42:ce:3e:d1:7c:92:b5:f5:60:1e:47:35:5f:d2:0c:96: ee:0f:3a:53:0d:81:11:8a:64:4a:78:e3:78:fb:5d:47:b1:c5: c7:a7:03:28:50:9f:32:48:ba:aa:70:4b:26:81:6b:03:a1:32: 29:f4:e9:ee:ef:04:67:29:19:4c:61:e3:88:91:38:09:7b:93: 1c:46:43:74:1e:b1:57:e9:ac:6b:f9:85:ed:3d:7f:a4:dd:48: a8:2d:8e:c2:ac:2e:9b:63:2e:e2:0e:bd:fb:cf:36:d2:da:78: 79:df:08:82:5d:4e:de:36:dd:fb:7a:8b:f8:db:83:c1:4c:f5: 4d:de:c2:93:18:04:94:f5:10:5f:7b:1c:5d:26:57:2f:cd:ba: 93:67:aa:6a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlCM0UxMTAvBgNVBAUTKENFRTM0RkEzOUZGMjg1RjcyRTIyOURBMjg2MkJDMTBF NDg4RkJBNDEwHhcNMjUxMTA5MDA0NzIwWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTBmZTQ5Ny01YmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2MUhT/7hafYll2yF/GAX005a7CYcS4nkQAT0O2F5dmev7ZHfyOYzl+dVETQy yK6kKbux3WdqyyVLePHIpeq1YWX2yMorR59UWJoqJDfzcPNcY0e/5Ql1gZyIPICd 54KQZcqkS1AIJ36DIaA+3ospO7x6vnGGKf+pAqVQoG4OUfAtlouPqWno8PO8Vodk wziHMRuHWBQV2MdOi+yW3c+5WZGFXVoHdfaTheSD0jKYJSdPW8ZaI8WIGFfiYoXL hGzhbrIYw5e4FCVvHXDQ5b37liaLq3YzolD1D5aWy4llqZ7atHJxAtCTGW+kMRi/ 1lO7Lh1V7TTNn6QLRYn0dh2ndQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNsc9VrB XyQWfP3+R8oiFIdaGv96MB8GA1UdIwQYMBaAFM7jT6Of8oX3LiKdooYrwQ5Ij7pB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUIzRS9EQUIxQzNBNjhD RkIxMUVEOTJFMjVCNjFDNEY5QUUwMi96dU5QbzVfeWhmY3VJcDJpaGl2QkRraVB1 a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1TlBvNV95aGZjdUlwMmloaXZCRGtpUHVrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTlCM0UvREFCMUMzQTY4Q0ZCMTFFRDkyRTI1QjYxQzRGOUFFMDIvODE5RjdBNjBD RjhCMTFFREFFNzdCMzUxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnKNAwDQYJKoZIhvcNAQELBQADggEBALRlzPqQ6UDyMW5N MA9fvJdmEwGBZqqOEui0yDOZMd4Ye6Nm08z+Wpx67Oz/hw4OnLlh/cqXDobLijAl sXVVARBP9+DnFFmeq4h4OtSKKmUOH2ADNA83jxZtszByB7m5ghd3NSe2vD6EN0OE MzlXQs4+0XyStfVgHkc1X9IMlu4POlMNgRGKZEp443j7XUexxcenAyhQnzJIuqpw SyaBawOhMin06e7vBGcpGUxh44iROAl7kxxGQ3QesVfprGv5he09f6TdSKgtjsKs LptjLuIOvfvPNtLaeHnfCIJdTt423ft6i/jbg8FM9U3ewpMYBJT1EF97HF0mVy/N upNnqmo= -----END CERTIFICATE-----Generated at Sun Dec 7 07:07:07 2025 by rpki-client