This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/29B6EA80F2C411EC97A42B73C4F9AE02.roa File: 29B6EA80F2C411EC97A42B73C4F9AE02.roa (raw, json) Hash identifier: MIhJBQ/IYNcOuozmSACr2/1KtqYw3Vi4E6eq3oh42As= Subject key identifier: A9:4D:FB:4B:D6:34:FE:BF:9B:AC:C9:2A:1B:97:24:BA:D4:94:CD:11 Certificate issuer: /CN=A91AC100/serialNumber=309A2A364334A9DDBA4A6D44041D79A5D32BAFAB Certificate serial: 031A Authority key identifier: 30:9A:2A:36:43:34:A9:DD:BA:4A:6D:44:04:1D:79:A5:D3:2B:AF:AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJoqNkM0qd26Sm1EBB15pdMrr6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/29B6EA80F2C411EC97A42B73C4F9AE02.roa Signing time: Thu 20 Nov 2025 23:46:13 +0000 ROA not before: Thu 20 Nov 2025 23:46:13 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 138388 IP address blocks: 103.124.96.0/22 maxlen: 22 103.124.96.0/24 maxlen: 24 103.124.97.0/24 maxlen: 24 103.124.98.0/24 maxlen: 24 103.124.99.0/24 maxlen: 24 2403:ddc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.crl rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJoqNkM0qd26Sm1EBB15pdMrr6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:29:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 794 (0x31a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC100, serialNumber=309A2A364334A9DDBA4A6D44041D79A5D32BAFAB Validity Not Before: Nov 20 23:46:13 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=691fa845-85ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:27:c5:1b:43:0e:ef:2e:ad:17:5c:bf:81:94: 60:9e:3b:76:a3:b5:01:48:a6:a3:da:72:30:ca:e3: 34:95:fc:ff:0f:45:f6:cd:77:8d:eb:7b:06:c2:70: 9e:b4:39:93:83:51:4b:0f:5d:e8:62:f4:34:42:48: c1:9a:df:06:35:d9:5e:bb:84:41:68:e5:f8:4c:86: 37:64:b5:8a:01:a0:6a:61:9a:09:b4:01:d3:c9:80: d5:8d:4a:ae:2c:77:24:71:3e:3e:90:86:22:5e:84: ed:2a:ee:aa:08:f2:7a:92:73:41:09:0c:e4:15:3d: a5:0c:a7:26:42:f2:54:9e:4e:7a:27:cd:a2:b7:e8: 89:2e:be:1d:29:1d:75:3b:38:84:fc:e3:db:45:40: 65:57:14:34:d8:d3:6f:f8:b1:85:a3:f3:8a:69:ad: 88:f3:cf:36:89:15:8e:6f:4e:9f:69:2d:55:20:fa: 61:52:17:79:57:ae:ec:c5:80:71:db:3a:c6:20:90: 3a:4d:9c:80:a0:78:e6:4e:9d:96:fc:af:96:5a:4a: b7:96:c3:5d:d7:91:34:fb:21:04:27:f6:10:3d:ab: 42:5d:a2:9e:1d:e0:45:fb:fb:85:0d:69:13:74:1d: 46:e9:8f:01:58:3b:ca:c4:42:e3:7a:25:09:89:79: 11:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:4D:FB:4B:D6:34:FE:BF:9B:AC:C9:2A:1B:97:24:BA:D4:94:CD:11 X509v3 Authority Key Identifier: keyid:30:9A:2A:36:43:34:A9:DD:BA:4A:6D:44:04:1D:79:A5:D3:2B:AF:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJoqNkM0qd26Sm1EBB15pdMrr6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/29B6EA80F2C411EC97A42B73C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.124.96.0/22 IPv6: 2403:ddc0::/32 Signature Algorithm: sha256WithRSAEncryption 06:bc:6e:d4:87:64:a8:1c:0e:cf:83:08:f1:d4:e7:f0:11:a5: 0b:79:ac:34:a0:39:4f:b4:62:1b:49:5a:5b:c0:a2:e1:ec:4a: 8f:91:28:ae:d3:ed:ec:e5:0c:ae:7d:1e:0d:82:3e:bf:62:53: 3b:f3:42:7d:bd:5e:e3:27:e1:d9:99:de:b9:05:e5:ec:63:3e: da:55:65:00:55:bc:bb:5a:0c:e0:9e:07:48:55:7a:7b:f6:87: 95:6c:56:4e:f0:db:ed:85:ba:46:77:05:65:cb:14:3d:2c:2c: f5:9a:35:a2:54:e7:9b:bc:96:da:46:36:28:75:d8:d0:64:bc: 2a:4f:3a:fa:70:f9:5e:74:88:e4:b7:fc:61:f9:af:b8:42:9d: 16:b7:89:a2:6f:93:a9:9c:cb:c3:1f:18:b1:53:12:6a:fb:ce: 48:9f:ab:1c:29:79:df:a3:d3:ef:ca:99:b4:48:be:46:f9:f0: 5c:53:ea:76:fe:61:9b:e5:45:de:d7:4f:0a:20:2b:e3:2e:91: 46:e2:97:a5:5c:97:2f:1a:39:bf:13:cd:f5:8c:ec:5f:c3:0c: e1:3b:e5:17:33:cd:e8:e6:7a:13:90:c2:7d:af:54:c1:f2:ce: 74:47:ea:bb:03:b0:b8:85:c9:e4:34:f2:15:2a:b0:14:72:c9: d5:21:d6:10 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUMxMDAxMTAvBgNVBAUTKDMwOUEyQTM2NDMzNEE5RERCQTRBNkQ0NDA0MUQ3OUE1 RDMyQkFGQUIwHhcNMjUxMTIwMjM0NjEzWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTFmYTg0NS04NWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzyfFG0MO7y6tF1y/gZRgnjt2o7UBSKaj2nIwyuM0lfz/D0X2zXeN63sGwnCe tDmTg1FLD13oYvQ0QkjBmt8GNdleu4RBaOX4TIY3ZLWKAaBqYZoJtAHTyYDVjUqu LHckcT4+kIYiXoTtKu6qCPJ6knNBCQzkFT2lDKcmQvJUnk56J82it+iJLr4dKR11 OziE/OPbRUBlVxQ02NNv+LGFo/OKaa2I8882iRWOb06faS1VIPphUhd5V67sxYBx 2zrGIJA6TZyAoHjmTp2W/K+WWkq3lsNd15E0+yEEJ/YQPatCXaKeHeBF+/uFDWkT dB1G6Y8BWDvKxELjeiUJiXkRIwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFKlN+0vW NP6/m6zJKhuXJLrUlM0RMB8GA1UdIwQYMBaAFDCaKjZDNKndukptRAQdeaXTK6+r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzEwMC9FNDNEQzVDQUYy QkMxMUVDODhBQzk0NTJDNEY5QUUwMi9NSm9xTmtNMHFkMjZTbTFFQkIxNXBkTXJy NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01Kb3FOa00wcWQyNlNtMUVCQjE1cGRNcnI2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUMxMDAvRTQzREM1Q0FGMkJDMTFFQzg4QUM5NDUyQzRGOUFFMDIvMjlCNkVBODBG MkM0MTFFQzk3QTQyQjczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnfGAwDQQCAAIwBwMFACQD3cAwDQYJKoZIhvcNAQELBQAD ggEBAAa8btSHZKgcDs+DCPHU5/ARpQt5rDSgOU+0YhtJWlvAouHsSo+RKK7T7ezl DK59Hg2CPr9iUzvzQn29XuMn4dmZ3rkF5exjPtpVZQBVvLtaDOCeB0hVenv2h5Vs Vk7w2+2FukZ3BWXLFD0sLPWaNaJU55u8ltpGNih12NBkvCpPOvpw+V50iOS3/GH5 r7hCnRa3iaJvk6mcy8MfGLFTEmr7zkifqxwped+j0+/KmbRIvkb58FxT6nb+YZvl Rd7XTwogK+MukUbil6Vcly8aOb8TzfWM7F/DDOE75RczzejmehOQwn2vVMHyznRH 6rsDsLiFyeQ08hUqsBRyydUh1hA= -----END CERTIFICATE-----Generated at Sat Dec 6 23:44:12 2025 by rpki-client