This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/6B096E780B8511EA97C80D52C4F9AE02.roa File: 6B096E780B8511EA97C80D52C4F9AE02.roa (raw, json) Hash identifier: RKcFdcMziNVq8aQAr5eNokx30FuoH7iCpLshPn3BtOk= Subject key identifier: F2:19:09:02:CD:F1:8A:AC:FF:0B:BA:19:38:4B:2E:A1:D3:A0:B4:EA Certificate issuer: /CN=A91B3AD7/serialNumber=9DE78A090B6E082C9FB00CAA5E2C913256C3C876 Certificate serial: 0C9D Authority key identifier: 9D:E7:8A:09:0B:6E:08:2C:9F:B0:0C:AA:5E:2C:91:32:56:C3:C8:76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/6B096E780B8511EA97C80D52C4F9AE02.roa Signing time: Wed 26 Nov 2025 18:08:24 +0000 ROA not before: Wed 26 Nov 2025 18:08:24 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 138346 IP address blocks: 103.123.168.0/22 maxlen: 22 103.123.168.0/23 maxlen: 23 103.123.168.0/24 maxlen: 24 103.123.169.0/24 maxlen: 24 103.123.170.0/24 maxlen: 24 103.123.171.0/24 maxlen: 24 2403:a540::/32 maxlen: 32 2403:a540::/33 maxlen: 33 2403:a540::/34 maxlen: 34 2403:a540::/40 maxlen: 40 2403:a540::/48 maxlen: 48 2403:a540:3::/48 maxlen: 48 2403:a540:4::/48 maxlen: 48 2403:a540:5::/48 maxlen: 48 2403:a540:6::/48 maxlen: 48 2403:a540:7::/48 maxlen: 48 2403:a540:8::/48 maxlen: 48 2403:a540:9::/48 maxlen: 48 2403:a540:a::/48 maxlen: 48 2403:a540:204::/48 maxlen: 48 2403:a540:20f::/48 maxlen: 48 2403:a540:21f::/48 maxlen: 48 2403:a540:4000::/34 maxlen: 34 2403:a540:8000::/33 maxlen: 33 2403:a540:8000::/34 maxlen: 34 2403:a540:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.crl rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3229 (0xc9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3AD7, serialNumber=9DE78A090B6E082C9FB00CAA5E2C913256C3C876 Validity Not Before: Nov 26 18:08:24 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69274218-4d49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:43:03:26:1e:9a:35:9d:4d:ac:e6:04:90:f7: 42:92:da:68:ab:ac:77:37:31:91:b8:10:55:5f:84: 18:f4:c3:df:68:f2:51:e5:8e:85:f5:21:9d:dd:a4: e5:f6:bf:65:31:0a:8e:7d:31:2c:a2:96:17:42:84: aa:1c:9e:ea:f3:9d:65:67:1d:57:f3:0d:af:6a:b3: 2d:0e:c3:39:d3:a7:11:94:50:bc:68:be:d7:07:11: 99:55:03:9b:2b:00:d2:fc:a3:ff:ca:59:72:ed:69: 8b:42:03:5b:a4:0a:15:92:e3:fa:33:2a:e8:c3:83: 5a:7e:13:52:90:6a:4c:81:c8:d8:27:27:12:0b:25: b4:ed:2c:d1:ec:86:77:0a:44:22:56:40:30:5e:82: dd:d8:ed:af:19:11:b8:43:74:41:5d:ea:ca:48:20: d2:75:67:88:20:5a:e9:b0:9c:b6:41:a8:2c:d5:9c: 83:71:26:0d:49:b5:f2:f3:84:94:9f:f6:91:4b:80: b4:5f:ee:38:07:a1:c6:85:47:8d:4c:c3:ab:e8:c6: a8:93:28:7e:c7:87:18:8e:e3:28:c0:d8:93:a1:fd: 0e:11:68:c5:4e:7a:0b:76:1c:cb:67:83:6e:25:b5: ce:48:8a:24:a3:29:e6:7c:89:27:5c:b7:41:d3:15: ee:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:19:09:02:CD:F1:8A:AC:FF:0B:BA:19:38:4B:2E:A1:D3:A0:B4:EA X509v3 Authority Key Identifier: keyid:9D:E7:8A:09:0B:6E:08:2C:9F:B0:0C:AA:5E:2C:91:32:56:C3:C8:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/6B096E780B8511EA97C80D52C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.123.168.0/22 IPv6: 2403:a540::/32 Signature Algorithm: sha256WithRSAEncryption 39:64:af:bf:f4:84:52:ba:54:5c:26:8c:81:48:51:bc:36:e9: 24:6d:36:a6:4e:90:10:00:24:04:2b:ad:47:f7:68:bd:96:26: 06:7e:38:a9:70:b4:73:eb:ae:36:87:8e:d4:1b:ff:55:84:64: 22:eb:69:b0:26:fb:ec:f8:de:9a:d9:24:7c:fd:62:25:26:9a: 2f:52:3c:2d:1a:ca:27:ed:4e:38:19:6e:ce:06:1f:36:90:c1: 26:57:9b:da:cb:7f:dc:9e:02:64:79:17:a8:88:07:ef:bb:d1: 72:80:b3:b3:9f:d7:3e:7b:d0:f5:cf:5f:9c:f5:cd:24:0b:25: b2:a1:17:4b:7f:97:74:a2:23:f1:76:c4:4e:cd:43:52:52:8d: 4f:6b:77:9c:6c:6e:75:d8:c9:c2:4c:6c:b9:f0:a0:5b:9f:3a: 3f:5f:cb:52:ab:ad:5c:96:72:f8:eb:90:e7:ca:7f:41:28:8c: 6a:91:8c:85:45:12:d6:2c:03:c5:15:36:e8:18:b6:40:c2:48: c9:53:3c:14:9f:d1:65:c1:fd:0f:ba:69:3f:3f:49:14:ef:a4: cd:3b:81:48:1c:e4:6e:b5:39:4e:41:2d:eb:a7:d2:ea:df:fc: 8b:8b:ee:b9:2b:d3:4a:fd:87:59:3c:5f:9b:d8:69:90:9c:d3: f7:62:e6:6a -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICDJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNBRDcxMTAvBgNVBAUTKDlERTc4QTA5MEI2RTA4MkM5RkIwMENBQTVFMkM5MTMy NTZDM0M4NzYwHhcNMjUxMTI2MTgwODI0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTI3NDIxOC00ZDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv0MDJh6aNZ1NrOYEkPdCktpoq6x3NzGRuBBVX4QY9MPfaPJR5Y6F9SGd3aTl 9r9lMQqOfTEsopYXQoSqHJ7q851lZx1X8w2varMtDsM506cRlFC8aL7XBxGZVQOb KwDS/KP/ylly7WmLQgNbpAoVkuP6Myrow4NafhNSkGpMgcjYJycSCyW07SzR7IZ3 CkQiVkAwXoLd2O2vGRG4Q3RBXerKSCDSdWeIIFrpsJy2Qags1ZyDcSYNSbXy84SU n/aRS4C0X+44B6HGhUeNTMOr6Maokyh+x4cYjuMowNiTof0OEWjFTnoLdhzLZ4Nu JbXOSIokoynmfIknXLdB0xXu9QIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFPIZCQLN 8Yqs/wu6GThLLqHToLTqMB8GA1UdIwQYMBaAFJ3nigkLbggsn7AMql4skTJWw8h2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0FENy8wN0NGOEQ3QTBC ODQxMUVBQTIxNjc4NEZDNEY5QUUwMi9uZWVLQ1F0dUNDeWZzQXlxWGl5Uk1sYkR5 SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25lZUtDUXR1Q0N5ZnNBeXFYaXlSTWxiRHlIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjNBRDcvMDdDRjhEN0EwQjg0MTFFQUEyMTY3ODRGQzRGOUFFMDIvNkIwOTZFNzgw Qjg1MTFFQTk3QzgwRDUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJne6gwDQQCAAIwBwMFACQDpUAwDQYJKoZIhvcNAQELBQAD ggEBADlkr7/0hFK6VFwmjIFIUbw26SRtNqZOkBAAJAQrrUf3aL2WJgZ+OKlwtHPr rjaHjtQb/1WEZCLrabAm++z43prZJHz9YiUmmi9SPC0ayiftTjgZbs4GHzaQwSZX m9rLf9yeAmR5F6iIB++70XKAs7Of1z570PXPX5z1zSQLJbKhF0t/l3SiI/F2xE7N Q1JSjU9rd5xsbnXYycJMbLnwoFufOj9fy1KrrVyWcvjrkOfKf0EojGqRjIVFEtYs A8UVNugYtkDCSMlTPBSf0WXB/Q+6aT8/SRTvpM07gUgc5G61OU5BLeun0urf/IuL 7rkr00r9h1k8X5vYaZCc0/di5mo= -----END CERTIFICATE-----Generated at Sat Dec 6 22:47:42 2025 by rpki-client