This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/291E55288C7111EBA752313FC4F9AE02.roa File: 291E55288C7111EBA752313FC4F9AE02.roa (raw, json) Hash identifier: /i9RofZ06AYBMENjcaJpNwKG22jU3wGWaEpuwf3htx0= Subject key identifier: 81:92:F9:33:3F:FD:7B:14:50:AC:07:B5:57:30:EE:63:43:44:28:D7 Certificate issuer: /CN=A91AF317/serialNumber=779CD921569E93F9D26B13A5AA7E376CFB5F0690 Certificate serial: 0684 Authority key identifier: 77:9C:D9:21:56:9E:93:F9:D2:6B:13:A5:AA:7E:37:6C:FB:5F:06:90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5zZIVaek_nSaxOlqn43bPtfBpA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/291E55288C7111EBA752313FC4F9AE02.roa Signing time: Tue 02 Sep 2025 22:43:46 +0000 ROA not before: Tue 02 Sep 2025 22:43:46 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 132464 IP address blocks: 103.73.58.0/24 maxlen: 24 103.145.187.0/24 maxlen: 24 2400:7de0::/32 maxlen: 32 2400:7de0::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.crl rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5zZIVaek_nSaxOlqn43bPtfBpA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:06:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1668 (0x684) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF317, serialNumber=779CD921569E93F9D26B13A5AA7E376CFB5F0690 Validity Not Before: Sep 2 22:43:46 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68b77322-b578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e7:e4:0c:ac:52:fc:2f:0d:c0:17:4f:a3:2f: d6:15:5c:d8:e6:01:a2:d7:3f:db:72:3d:86:5a:9c: 83:88:2d:b4:79:5b:03:47:1e:9f:26:6f:9e:ac:68: e1:58:76:35:f2:23:b2:e5:4d:2e:d9:d1:2d:8f:5d: e1:de:e7:91:35:9f:79:95:1b:96:e1:64:e2:3f:a2: 97:43:8a:82:06:e5:d5:76:d8:70:7f:21:bd:a4:00: cd:c8:b7:6a:24:2a:70:70:77:b5:8b:1d:d8:e0:f1: b6:75:fb:ea:6d:24:1f:85:4e:57:d0:95:8b:91:21: ad:c6:12:25:80:f6:38:e0:ef:7d:77:0a:64:30:31: 28:6e:95:e0:47:6d:2f:df:9c:62:4d:ed:c0:9a:96: 10:9f:8b:f4:1d:d4:ff:0b:d3:78:53:46:96:45:63: 2a:6a:dd:45:99:25:c2:a9:0d:71:5c:c7:fd:c2:d9: a4:d9:a3:47:c4:dc:d3:2d:11:81:72:f1:7d:a7:a0: b0:2f:c8:23:2b:da:b3:52:06:1d:fc:13:46:bb:5c: 37:47:ec:c7:9d:ec:44:cb:58:3f:83:51:29:18:3b: 27:93:ef:88:f7:66:c3:f4:25:5e:3b:e1:5f:8f:a3: a4:f8:4e:c2:7c:7f:8a:cc:2c:73:8f:7b:e9:86:41: b1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:92:F9:33:3F:FD:7B:14:50:AC:07:B5:57:30:EE:63:43:44:28:D7 X509v3 Authority Key Identifier: keyid:77:9C:D9:21:56:9E:93:F9:D2:6B:13:A5:AA:7E:37:6C:FB:5F:06:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5zZIVaek_nSaxOlqn43bPtfBpA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/291E55288C7111EBA752313FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.73.58.0/24 103.145.187.0/24 IPv6: 2400:7de0::/32 Signature Algorithm: sha256WithRSAEncryption 7c:db:72:02:fa:27:b2:63:29:2e:56:fc:84:a3:4f:83:cc:df: 02:9a:9a:c9:57:74:71:4e:c5:34:2c:22:8b:40:56:10:3d:a5: 9a:36:8f:cd:2a:9c:36:fd:e1:04:66:ef:f3:a4:5e:5d:58:8e: 6b:59:b5:45:99:65:d3:ce:7a:f9:50:bc:bd:6f:4a:26:13:b7: 98:6e:03:47:fa:fc:47:4c:3a:28:2c:e4:af:6b:f0:1d:1d:53: 15:83:85:8b:ab:b0:2e:fa:58:40:c0:78:2a:73:40:14:87:40: 59:d3:d1:68:70:4f:1b:e8:8d:08:d9:fb:3c:b6:1b:e5:11:db: e8:92:ea:24:ef:6b:c9:07:ca:be:26:a1:ba:9e:76:08:22:3e: 41:bd:e9:c7:91:e8:2f:fb:2e:b4:c1:b1:96:58:d9:a9:8c:dc: 79:dc:cb:7c:fc:ff:93:b4:4d:95:00:fc:da:b4:d0:e8:35:2d: 49:84:05:7f:ba:88:ed:92:96:be:a9:35:6a:69:23:3d:86:4d: d9:c4:ea:fb:f9:aa:c6:c1:9e:48:47:d6:b2:62:b1:fb:5b:92: 19:e7:a8:f2:5d:6f:c4:90:e6:c1:40:0b:57:f9:d1:ff:ca:7d: 9f:b2:10:f5:01:42:0b:74:a3:19:d5:f5:e7:d4:0e:f4:27:18: e2:da:be:d2 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICBoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYzMTcxMTAvBgNVBAUTKDc3OUNEOTIxNTY5RTkzRjlEMjZCMTNBNUFBN0UzNzZD RkI1RjA2OTAwHhcNMjUwOTAyMjI0MzQ2WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI3NzMyMi1iNTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOfkDKxS/C8NwBdPoy/WFVzY5gGi1z/bcj2GWpyDiC20eVsDRx6fJm+erGjh WHY18iOy5U0u2dEtj13h3ueRNZ95lRuW4WTiP6KXQ4qCBuXVdthwfyG9pADNyLdq JCpwcHe1ix3Y4PG2dfvqbSQfhU5X0JWLkSGtxhIlgPY44O99dwpkMDEobpXgR20v 35xiTe3AmpYQn4v0HdT/C9N4U0aWRWMqat1FmSXCqQ1xXMf9wtmk2aNHxNzTLRGB cvF9p6CwL8gjK9qzUgYd/BNGu1w3R+zHnexEy1g/g1EpGDsnk++I92bD9CVeO+Ff j6Ok+E7CfH+KzCxzj3vphkGxTwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFIGS+TM/ /XsUUKwHtVcw7mNDRCjXMB8GA1UdIwQYMBaAFHec2SFWnpP50msTpap+N2z7XwaQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjMxNy80RkQ1NzY4MDhD NkYxMUVCQkE4MTlGMzFDNEY5QUUwMi9kNXpaSVZhZWtfblNheE9scW40M2JQdGZC cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q1elpJVmFla19uU2F4T2xxbjQzYlB0ZkJwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUYzMTcvNEZENTc2ODA4QzZGMTFFQkJBODE5RjMxQzRGOUFFMDIvMjkxRTU1Mjg4 QzcxMTFFQkE3NTIzMTNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBABnSToDBABnkbswDQQCAAIwBwMFACQAfeAwDQYJKoZIhvcN AQELBQADggEBAHzbcgL6J7JjKS5W/ISjT4PM3wKamslXdHFOxTQsIotAVhA9pZo2 j80qnDb94QRm7/OkXl1YjmtZtUWZZdPOevlQvL1vSiYTt5huA0f6/EdMOigs5K9r 8B0dUxWDhYursC76WEDAeCpzQBSHQFnT0WhwTxvojQjZ+zy2G+UR2+iS6iTva8kH yr4mobqedggiPkG96ceR6C/7LrTBsZZY2amM3Hncy3z8/5O0TZUA/Nq00Og1LUmE BX+6iO2Slr6pNWppIz2GTdnE6vv5qsbBnkhH1rJisftbkhnnqPJdb8SQ5sFAC1f5 0f/KfZ+yEPUBQgt0oxnV9efUDvQnGOLavtI= -----END CERTIFICATE-----Generated at Sat Dec 6 19:13:36 2025 by rpki-client