This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/E8F85ED4EC5811EFA9B9C618C4F9AE02.roa File: E8F85ED4EC5811EFA9B9C618C4F9AE02.roa (raw, json) Hash identifier: /8yKZ7ijIkZ+FPrPSN6BRvCVORAB+JrhwJVOpeQgC/c= Subject key identifier: E5:D0:94:11:E6:79:12:CA:1C:2A:52:C4:DE:70:93:84:6F:AF:9E:4A Certificate issuer: /CN=A91B25F2/serialNumber=B6C87BB58728F76F6F90A09DFD6BAA1AD4E73BCA Certificate serial: 0CFF Authority key identifier: B6:C8:7B:B5:87:28:F7:6F:6F:90:A0:9D:FD:6B:AA:1A:D4:E7:3B:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/E8F85ED4EC5811EFA9B9C618C4F9AE02.roa Signing time: Fri 26 Dec 2025 18:15:25 +0000 ROA not before: Fri 26 Dec 2025 18:15:25 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 137967 IP address blocks: 43.230.210.0/24 maxlen: 24 103.78.226.0/23 maxlen: 23 103.78.226.0/24 maxlen: 24 103.78.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.crl rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 17:51:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3327 (0xcff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B25F2, serialNumber=B6C87BB58728F76F6F90A09DFD6BAA1AD4E73BCA Validity Not Before: Dec 26 18:15:25 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=694ed0bd-fe7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fb:62:84:ed:a1:31:fc:9e:66:73:09:1c:02: 2c:ea:1c:ff:85:28:43:cc:68:a8:f4:28:77:80:fc: 7c:81:68:90:45:bb:b4:9a:de:92:62:44:0f:02:30: 4c:e5:bd:3e:e6:d1:46:33:46:17:34:38:91:75:f4: 8d:e7:3c:1f:c4:94:e1:e7:d0:3c:23:00:cb:7d:1c: 6f:4d:61:c4:6f:f0:17:8b:d7:31:a1:83:e2:ff:fe: 49:79:c4:63:85:6e:f3:22:a0:8b:26:2a:ff:6f:7f: 94:38:95:bd:af:d8:9c:1f:a3:18:eb:c5:1f:0d:75: 9f:82:46:e1:62:1c:d5:e2:70:7c:5a:4f:e9:5b:bc: d0:22:8c:7c:65:c2:56:3b:75:ed:80:5a:c8:e3:7c: d3:6e:2a:65:15:be:2e:4d:ab:9d:ca:58:9a:71:f6: f2:f1:75:a9:15:4d:b5:90:24:35:f5:13:ff:1c:2e: 5e:fd:f3:aa:c6:f9:31:f3:a0:4a:4a:fe:d8:4c:b6: 13:bf:bc:01:23:9b:99:44:bd:3f:1a:ed:12:43:e6: 9b:27:d4:a0:b9:a9:30:76:ca:f5:0c:6c:0f:51:ec: cf:14:69:f2:41:a4:b6:68:c8:43:97:8a:7d:3a:66: d7:a5:f3:10:8d:85:af:a1:7c:22:bc:f9:31:cd:2d: 5a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:D0:94:11:E6:79:12:CA:1C:2A:52:C4:DE:70:93:84:6F:AF:9E:4A X509v3 Authority Key Identifier: keyid:B6:C8:7B:B5:87:28:F7:6F:6F:90:A0:9D:FD:6B:AA:1A:D4:E7:3B:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/E8F85ED4EC5811EFA9B9C618C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.230.210.0/24 103.78.226.0/23 Signature Algorithm: sha256WithRSAEncryption ab:64:2c:84:26:bf:56:00:b4:6f:05:4d:1e:4a:56:dc:1c:1a: 24:e1:cd:85:b9:05:ab:83:4e:b2:b3:10:d7:dc:49:87:0f:83: 24:f9:0b:fd:3a:4d:83:37:fd:c4:38:c0:9d:07:fd:85:27:86: 61:42:9a:6e:d6:3f:c6:9f:2d:9d:47:b8:ad:74:64:37:8b:c1: b5:35:2d:d9:67:3e:30:d1:92:d2:e5:4e:bd:a0:47:93:e0:79: 73:1d:67:32:cd:21:77:cf:7d:a2:ce:f4:65:d3:43:7b:18:88: 19:0e:1d:55:d5:37:26:82:e6:15:a0:48:40:0f:19:52:ca:d7: 4c:16:69:fb:98:d0:30:8a:17:8f:27:40:04:8f:e7:0c:f5:bf: 19:e6:bd:14:35:57:49:45:be:e6:c1:0b:c1:37:a2:5f:52:69: b0:12:7c:49:7f:78:7e:47:6f:73:6f:44:25:f1:3e:92:47:d2: 6e:45:a8:c8:6f:b4:66:41:47:25:6e:ae:e9:0c:b3:29:97:a0: 75:29:5c:63:14:0b:29:35:a8:7b:2c:e2:59:e3:3a:1b:30:d1: c7:fa:13:f0:59:0f:f0:72:bf:20:b5:81:b2:c7:3d:a3:5f:7c: 93:a0:c9:f0:64:3a:3b:e4:ea:bd:75:c6:2b:d2:7f:fa:44:a0: 9a:43:b6:e7 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICDP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QjI1RjIxMTAvBgNVBAUTKEI2Qzg3QkI1ODcyOEY3NkY2RjkwQTA5REZENkJBQTFB RDRFNzNCQ0EwHhcNMjUxMjI2MTgxNTI1WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTRlZDBiZC1mZTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtftihO2hMfyeZnMJHAIs6hz/hShDzGio9Ch3gPx8gWiQRbu0mt6SYkQPAjBM 5b0+5tFGM0YXNDiRdfSN5zwfxJTh59A8IwDLfRxvTWHEb/AXi9cxoYPi//5JecRj hW7zIqCLJir/b3+UOJW9r9icH6MY68UfDXWfgkbhYhzV4nB8Wk/pW7zQIox8ZcJW O3XtgFrI43zTbiplFb4uTaudyliacfby8XWpFU21kCQ19RP/HC5e/fOqxvkx86BK Sv7YTLYTv7wBI5uZRL0/Gu0SQ+abJ9Sguakwdsr1DGwPUezPFGnyQaS2aMhDl4p9 OmbXpfMQjYWvoXwivPkxzS1afwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFOXQlBHm eRLKHCpSxN5wk4Rvr55KMB8GA1UdIwQYMBaAFLbIe7WHKPdvb5Cgnf1rqhrU5zvK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjVGMi9FRjkwQ0Q0RTAz QjAxMUVBODVGMDI5MzRDNEY5QUUwMi90c2g3dFljbzkyOXZrS0NkX1d1cUd0VG5P OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RzaDd0WWNvOTI5dmtLQ2RfV3VxR3RUbk84by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjI1RjIvRUY5MENENEUwM0IwMTFFQTg1RjAyOTM0QzRGOUFFMDIvRThGODVFRDRF QzU4MTFFRkE5QjlDNjE4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAAr5tIDBAFnTuIwDQYJKoZIhvcNAQELBQADggEBAKtkLIQm v1YAtG8FTR5KVtwcGiThzYW5BauDTrKzENfcSYcPgyT5C/06TYM3/cQ4wJ0H/YUn hmFCmm7WP8afLZ1HuK10ZDeLwbU1LdlnPjDRktLlTr2gR5PgeXMdZzLNIXfPfaLO 9GXTQ3sYiBkOHVXVNyaC5hWgSEAPGVLK10wWafuY0DCKF48nQASP5wz1vxnmvRQ1 V0lFvubBC8E3ol9SabASfEl/eH5Hb3NvRCXxPpJH0m5FqMhvtGZBRyVurukMsymX oHUpXGMUCyk1qHss4lnjOhsw0cf6E/BZD/ByvyC1gbLHPaNffJOgyfBkOjvk6r11 xivSf/pEoJpDtuc= -----END CERTIFICATE-----Generated at Sun Jan 25 14:22:00 2026 by rpki-client