This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/CA7A6F1A157C11E9BB547B7AC4F9AE02.roa File: CA7A6F1A157C11E9BB547B7AC4F9AE02.roa (raw, json) Hash identifier: 6AfnF5nLJAE3w4JLaTI+K2fojs88gAENM8OolAaJRQw= Subject key identifier: F3:81:72:40:EB:5A:76:A2:CD:23:B6:E0:DF:D3:24:AB:CD:F4:D5:25 Certificate issuer: /CN=A91B0B65/serialNumber=C057119CA45DD314215C61E09BF871D48ABB5F9B Certificate serial: 1187 Authority key identifier: C0:57:11:9C:A4:5D:D3:14:21:5C:61:E0:9B:F8:71:D4:8A:BB:5F:9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/CA7A6F1A157C11E9BB547B7AC4F9AE02.roa Signing time: Fri 28 Nov 2025 17:19:39 +0000 ROA not before: Fri 28 Nov 2025 17:19:39 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 138359 IP address blocks: 103.130.153.0/24 maxlen: 24 103.143.219.0/24 maxlen: 24 2001:df6:e100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.crl rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 16:44:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4487 (0x1187) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0B65, serialNumber=C057119CA45DD314215C61E09BF871D48ABB5F9B Validity Not Before: Nov 28 17:19:39 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6929d9ab-2057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ad:e6:94:3b:e7:4d:a3:a5:0f:5d:c7:3a:23: 58:f7:e7:b7:bc:80:ad:b9:e2:89:55:c7:22:6c:32: 86:84:c0:5e:ea:5d:bf:78:18:88:85:99:9d:ce:a5: 6f:c5:35:9e:b4:4a:63:54:19:df:77:e0:41:b2:02: e2:d4:dd:33:5c:00:7a:70:44:23:ea:b7:5f:94:72: 25:19:bc:c6:95:64:03:00:04:f5:5c:f0:42:9f:e5: 88:bd:55:60:20:f0:cc:e7:6b:68:77:3f:57:fb:37: b6:80:dd:ec:57:e9:ab:8a:7a:34:58:d2:c2:ae:e2: e8:d6:58:6d:68:28:65:49:b4:8e:9e:77:66:a7:a9: f5:06:06:0d:24:84:5b:4e:3f:ca:73:f7:f1:53:53: 4c:77:55:3a:6b:3c:f4:f1:84:ab:f3:c2:db:bf:cd: c8:af:3f:d1:40:a9:f8:1e:65:2b:a3:1f:5b:c6:37: 79:20:cb:84:12:82:c8:f8:77:9a:a4:f6:5b:9b:09: 89:6f:7b:87:61:8c:1b:8e:26:bd:52:e3:f3:81:8e: 77:7b:4d:c4:16:e4:26:de:ec:76:d7:e2:97:cc:3c: 1c:ba:33:7b:d3:cf:20:ad:60:1e:70:7d:9b:b1:e5: 26:a9:4e:f1:3e:a5:1b:19:ed:35:94:79:ed:d5:99: df:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:81:72:40:EB:5A:76:A2:CD:23:B6:E0:DF:D3:24:AB:CD:F4:D5:25 X509v3 Authority Key Identifier: keyid:C0:57:11:9C:A4:5D:D3:14:21:5C:61:E0:9B:F8:71:D4:8A:BB:5F:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/CA7A6F1A157C11E9BB547B7AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.130.153.0/24 103.143.219.0/24 IPv6: 2001:df6:e100::/48 Signature Algorithm: sha256WithRSAEncryption 29:4c:9f:45:0b:64:4d:11:53:dc:4f:d0:5f:b6:49:f5:4a:01: cb:5d:37:b3:8c:36:48:db:0f:66:dd:99:12:f6:15:20:9a:e5: 19:41:26:1c:6d:6a:61:bc:f5:e6:7f:43:3c:79:29:9c:9c:ff: d2:0a:f7:27:6f:a8:65:36:7b:ae:6a:ed:93:d2:f1:1a:a4:a1: 34:3f:04:cd:95:fd:62:ce:43:7e:09:bc:a3:ef:a6:64:c7:56: 7f:c9:b0:6b:a7:f6:ec:d5:e1:ab:ce:06:f3:e4:bf:97:39:87: c7:27:c8:4b:51:22:8b:56:aa:57:1e:e9:63:2e:e9:73:4b:4e: 5c:21:19:a7:42:cb:53:86:36:bb:8a:ef:aa:9d:1e:8e:80:6c: 84:35:54:e1:19:19:b5:e4:f4:2b:e6:9c:66:02:c7:8d:cb:81: 32:54:e5:90:dd:87:95:4c:60:e3:22:36:af:ac:ad:f0:bc:92: bf:9f:8a:53:48:29:66:9c:80:66:88:71:12:df:2a:4d:7a:a6: 7e:09:01:ba:02:38:75:9d:78:3b:e1:d5:fd:df:f2:54:c8:c9: c7:81:1c:7f:0c:d3:97:17:85:cc:6c:f4:07:6a:90:b5:92:a5: 81:79:66:4a:e6:20:77:a6:f0:5d:d8:03:99:4d:37:7f:5d:ad: 4f:1d:a1:aa -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICEYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBCNjUxMTAvBgNVBAUTKEMwNTcxMTlDQTQ1REQzMTQyMTVDNjFFMDlCRjg3MUQ0 OEFCQjVGOUIwHhcNMjUxMTI4MTcxOTM5WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTI5ZDlhYi0yMDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAya3mlDvnTaOlD13HOiNY9+e3vICtueKJVccibDKGhMBe6l2/eBiIhZmdzqVv xTWetEpjVBnfd+BBsgLi1N0zXAB6cEQj6rdflHIlGbzGlWQDAAT1XPBCn+WIvVVg IPDM52todz9X+ze2gN3sV+mrino0WNLCruLo1lhtaChlSbSOnndmp6n1BgYNJIRb Tj/Kc/fxU1NMd1U6azz08YSr88Lbv83Irz/RQKn4HmUrox9bxjd5IMuEEoLI+Hea pPZbmwmJb3uHYYwbjia9UuPzgY53e03EFuQm3ux21+KXzDwcujN7088grWAecH2b seUmqU7xPqUbGe01lHnt1ZnfjQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFPOBckDr WnaizSO24N/TJKvN9NUlMB8GA1UdIwQYMBaAFMBXEZykXdMUIVxh4Jv4cdSKu1+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEI2NS9FNkU0MjJBNjE1 NjExMUU5OTM0QjFCMzZDNEY5QUUwMi93RmNSbktSZDB4UWhYR0hnbV9oeDFJcTdY NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dGY1JuS1JkMHhRaFhHSGdtX2h4MUlxN1g1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjBCNjUvRTZFNDIyQTYxNTYxMTFFOTkzNEIxQjM2QzRGOUFFMDIvQ0E3QTZGMUEx NTdDMTFFOUJCNTQ3QjdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABngpkDBABnj9swDwQCAAIwCQMHACABDfbhADANBgkqhkiG 9w0BAQsFAAOCAQEAKUyfRQtkTRFT3E/QX7ZJ9UoBy103s4w2SNsPZt2ZEvYVIJrl GUEmHG1qYbz15n9DPHkpnJz/0gr3J2+oZTZ7rmrtk9LxGqShND8EzZX9Ys5Dfgm8 o++mZMdWf8mwa6f27NXhq84G8+S/lzmHxyfIS1Eii1aqVx7pYy7pc0tOXCEZp0LL U4Y2u4rvqp0ejoBshDVU4RkZteT0K+acZgLHjcuBMlTlkN2HlUxg4yI2r6yt8LyS v5+KU0gpZpyAZohxEt8qTXqmfgkBugI4dZ14O+HV/d/yVMjJx4EcfwzTlxeFzGz0 B2qQtZKlgXlmSuYgd6bwXdgDmU03f12tTx2hqg== -----END CERTIFICATE-----Generated at Sun Dec 7 01:11:37 2025 by rpki-client