This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/392987D254F611E79DF7E643C4F9AE02.roa File: 392987D254F611E79DF7E643C4F9AE02.roa (raw, json) Hash identifier: Zj1VjgjescNA34ntuLagaf4Gpvf1qUoGCJyDKrDQ9CM= Subject key identifier: 7E:12:B5:F1:48:B9:C1:C1:F9:B3:9D:24:F9:7C:B8:78:52:F4:37:16 Certificate issuer: /CN=A91AE85E/serialNumber=709765C7D4D331F4C36AC6BE347FA66A1F023490 Certificate serial: 353B Authority key identifier: 70:97:65:C7:D4:D3:31:F4:C3:6A:C6:BE:34:7F:A6:6A:1F:02:34:90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/392987D254F611E79DF7E643C4F9AE02.roa Signing time: Sat 08 Nov 2025 14:30:06 +0000 ROA not before: Sat 08 Nov 2025 14:30:06 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 132003 IP address blocks: 103.10.233.0/24 maxlen: 24 103.196.108.0/23 maxlen: 24 2404:2000:3000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.crl rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 14:17:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13627 (0x353b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE85E, serialNumber=709765C7D4D331F4C36AC6BE347FA66A1F023490 Validity Not Before: Nov 8 14:30:06 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=690f53ee-0583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:78:b9:08:7a:b8:70:4a:90:3e:c3:4f:cb:dd: c6:91:aa:b1:3b:3c:8e:8a:4e:3e:f7:30:a9:c9:1c: 57:fd:29:b2:11:82:79:f2:97:5e:9e:6d:77:41:e9: 53:2d:17:7c:79:8a:6e:43:59:ba:a8:7c:5d:b8:4a: be:dc:56:8b:18:29:51:42:1a:5a:c9:79:ba:fd:89: e1:ad:8e:f5:35:0f:ef:61:cc:cc:e7:7e:ba:c7:fe: dd:d7:23:66:f6:ed:6b:9f:20:65:5e:ce:b0:5f:11: 8a:de:52:af:db:65:73:2f:5b:0d:81:93:28:cb:da: 2d:ac:49:8f:24:85:b5:23:d5:0b:ae:e2:ac:1f:3f: 9e:2a:8e:fd:4c:3d:c4:7e:79:e6:21:07:1a:5e:a1: ef:79:22:a0:2e:fe:52:2d:2d:bf:63:27:2b:fd:62: 7f:b6:cd:cc:63:5c:2e:59:63:b6:fd:6e:0c:91:43: 33:f9:67:68:55:91:fc:d6:e0:9c:4c:05:ac:ab:bd: e9:06:33:de:1c:be:3b:6f:76:07:38:79:39:cf:a0: 97:2d:4a:a3:8d:70:75:65:d5:b6:9f:54:cd:74:2b: 29:57:98:0d:56:8f:ab:ee:ac:a7:64:7c:4b:fc:dc: 01:21:ea:0e:0b:0e:25:28:5d:b7:36:c0:d0:94:e0: e8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:12:B5:F1:48:B9:C1:C1:F9:B3:9D:24:F9:7C:B8:78:52:F4:37:16 X509v3 Authority Key Identifier: keyid:70:97:65:C7:D4:D3:31:F4:C3:6A:C6:BE:34:7F:A6:6A:1F:02:34:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/392987D254F611E79DF7E643C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.10.233.0/24 103.196.108.0/23 IPv6: 2404:2000:3000::/40 Signature Algorithm: sha256WithRSAEncryption 7a:9a:1f:93:a1:6b:73:e8:1c:f4:39:e9:0f:d7:71:01:6f:ce: fc:8d:d0:3d:af:80:13:1e:ea:ad:e7:12:9f:44:b3:40:48:af: 32:89:7d:f0:ca:1f:d0:ee:84:78:33:5e:3a:1c:c1:15:e6:6f: f9:b4:7e:ce:2a:9c:ec:d1:3d:1c:6c:37:68:97:30:18:d6:01: 61:36:3f:af:3a:f6:41:17:cf:78:20:be:10:cd:e2:be:bb:41: 44:6a:b2:89:a2:38:af:9b:69:e7:9c:7a:02:f3:a2:98:29:76: 2d:6b:8b:dc:48:3d:b4:a5:77:80:2c:62:89:20:c9:f9:8f:8a: eb:59:e2:63:be:1c:9c:6e:2c:db:36:c5:c1:e5:78:a1:8c:ba: 54:c3:b9:5d:7e:83:28:2c:17:08:28:82:b4:08:cc:74:d6:e9: ca:d5:6c:1b:c1:c7:93:1d:4a:ff:02:d0:f3:eb:b6:47:5c:6c: 7a:8f:8c:af:01:e0:08:98:fe:fc:23:24:ad:5d:7e:e9:f9:c0: 22:91:28:28:f7:f2:97:e1:bd:d6:9c:8a:28:f3:00:af:60:e3: d4:03:f6:fa:bd:5a:bc:5b:95:3f:da:fb:aa:8e:a9:62:cd:4f: e3:6f:dd:06:fb:2a:ea:ce:25:b3:ba:12:0f:eb:33:af:e8:e0: a3:47:39:57 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICNTswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU4NUUxMTAvBgNVBAUTKDcwOTc2NUM3RDREMzMxRjRDMzZBQzZCRTM0N0ZBNjZB MUYwMjM0OTAwHhcNMjUxMTA4MTQzMDA2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTBmNTNlZS0wNTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHi5CHq4cEqQPsNPy93GkaqxOzyOik4+9zCpyRxX/SmyEYJ58pdenm13QelT LRd8eYpuQ1m6qHxduEq+3FaLGClRQhpayXm6/YnhrY71NQ/vYczM5366x/7d1yNm 9u1rnyBlXs6wXxGK3lKv22VzL1sNgZMoy9otrEmPJIW1I9ULruKsHz+eKo79TD3E fnnmIQcaXqHveSKgLv5SLS2/Yycr/WJ/ts3MY1wuWWO2/W4MkUMz+WdoVZH81uCc TAWsq73pBjPeHL47b3YHOHk5z6CXLUqjjXB1ZdW2n1TNdCspV5gNVo+r7qynZHxL /NwBIeoOCw4lKF23NsDQlODomwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFH4StfFI ucHB+bOdJPl8uHhS9DcWMB8GA1UdIwQYMBaAFHCXZcfU0zH0w2rGvjR/pmofAjSQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTg1RS8wQkVEMzUyNjFE NkUxMUUyQjA0QTYxQUYwOEIwMkNEMi9jSmRseDlUVE1mVERhc2EtTkgtbWFoOENO SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NKZGx4OVRUTWZURGFzYS1OSC1tYWg4Q05KQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUU4NUUvMEJFRDM1MjYxRDZFMTFFMkIwNEE2MUFGMDhCMDJDRDIvMzkyOTg3RDI1 NEY2MTFFNzlERjdFNjQzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNQYIKwYBBQUHAQcBAf8E JjAkMBIEAgABMAwDBABnCukDBAFnxGwwDgQCAAIwCAMGACQEIAAwMA0GCSqGSIb3 DQEBCwUAA4IBAQB6mh+ToWtz6Bz0OekP13EBb878jdA9r4ATHuqt5xKfRLNASK8y iX3wyh/Q7oR4M146HMEV5m/5tH7OKpzs0T0cbDdolzAY1gFhNj+vOvZBF894IL4Q zeK+u0FEarKJojivm2nnnHoC86KYKXYta4vcSD20pXeALGKJIMn5j4rrWeJjvhyc bizbNsXB5XihjLpUw7ldfoMoLBcIKIK0CMx01unK1WwbwceTHUr/AtDz67ZHXGx6 j4yvAeAImP78IyStXX7p+cAikSgo9/KX4b3WnIoo8wCvYOPUA/b6vVq8W5U/2vuq jqlizU/jb90G+yrqziWzuhIP6zOv6OCjRzlX -----END CERTIFICATE-----Generated at Sat Dec 6 16:00:26 2025 by rpki-client