This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/E551CBD2BDCF11F0B085BE82C4F9AE02.roa File: E551CBD2BDCF11F0B085BE82C4F9AE02.roa (raw, json) Hash identifier: Wp5DBeY2hfRthc8mGuVx9Uzh1eNkov3yooGO4ExgjbE= Subject key identifier: B6:D3:BC:0F:B0:E2:9B:18:F4:54:FA:1B:10:41:FF:DB:13:C6:DA:38 Certificate issuer: /CN=A91B3D30/serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE Certificate serial: 0BDA Authority key identifier: 01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/E551CBD2BDCF11F0B085BE82C4F9AE02.roa Signing time: Tue 02 Dec 2025 18:50:36 +0000 ROA not before: Tue 02 Dec 2025 18:50:36 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 400342 IP address blocks: 45.124.204.0/24 maxlen: 24 45.124.205.0/24 maxlen: 24 45.124.206.0/24 maxlen: 24 45.124.207.0/24 maxlen: 24 103.25.100.0/24 maxlen: 24 103.25.101.0/24 maxlen: 24 103.25.102.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 18:27:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3034 (0xbda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3D30, serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE Validity Not Before: Dec 2 18:50:36 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=692f34fb-9833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:00:73:f3:a1:a2:50:3d:20:b3:a2:92:25:c1: 34:0f:69:01:13:ed:e9:07:2e:fd:49:4c:a0:35:4c: e2:11:7a:09:09:8b:4f:28:48:cf:5f:e7:f8:7c:88: 16:60:8a:fe:cc:a8:2b:9a:46:8e:f1:7d:91:22:39: 64:f6:43:69:1e:c5:71:0a:08:4d:5c:23:e4:55:a7: d1:8d:ff:61:b6:c3:1f:e5:05:18:16:85:06:04:8f: ad:02:b8:c7:7b:49:5d:20:8d:0d:fd:62:2c:df:de: 07:ce:51:e2:4c:ec:ff:40:1f:c6:1c:a2:98:a1:5f: b4:28:dd:2e:67:46:71:50:af:bb:d9:37:af:7d:d9: 39:5b:9c:c8:8e:7b:1f:d1:aa:9e:2c:2b:b7:0a:a9: 2a:65:ba:bf:6a:45:8c:52:7c:4f:0f:7a:c6:ec:c8: c1:c3:0c:75:63:7b:79:62:45:7d:9c:d7:0d:35:db: 12:eb:1c:93:41:a4:b8:70:f7:bc:21:d3:39:91:ef: 03:76:fb:07:dc:91:54:22:87:9f:6d:2e:a6:6d:32: 4d:62:a4:87:76:60:0f:14:a9:fa:ed:8c:d7:44:b9: 0e:de:1a:3b:c4:57:60:04:49:0d:2a:d0:73:a1:49: f0:8d:3f:70:52:f7:71:4d:e5:b2:86:6c:01:e7:85: eb:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:D3:BC:0F:B0:E2:9B:18:F4:54:FA:1B:10:41:FF:DB:13:C6:DA:38 X509v3 Authority Key Identifier: keyid:01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/E551CBD2BDCF11F0B085BE82C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.124.204.0/22 103.25.100.0/22 Signature Algorithm: sha256WithRSAEncryption b2:af:1c:3b:72:fb:a0:c8:c0:ed:99:33:8b:92:61:8f:10:c2: 6e:5d:6b:c8:33:1e:4f:0b:65:c1:29:c6:32:40:5a:3d:62:69: 61:b0:47:95:6f:90:cc:be:aa:bb:06:db:1d:6e:db:d7:04:4f: 7b:bb:f9:6a:a9:95:c0:8d:8e:df:d1:ec:8e:9b:1e:a3:16:30: 1e:1a:21:15:00:f8:08:3d:c8:5d:15:2f:44:4e:68:e7:2a:b5: 2d:78:df:71:26:13:3f:8d:f6:dc:4e:d0:09:76:6b:77:cf:dc: 9f:ab:2f:eb:4d:ac:03:95:08:09:00:4a:f1:50:e9:55:71:23: 21:49:94:0c:f7:aa:19:bc:a8:d6:eb:06:28:e6:88:92:9e:52: 3e:04:58:be:f8:74:23:47:64:27:c4:39:64:18:fd:3d:15:d5: 76:4b:f5:5d:c5:60:c4:3f:d4:fd:b7:ef:25:8b:cb:62:7c:83: 0a:76:11:c2:c8:0d:8f:a1:58:e6:ce:15:24:08:54:56:da:ca: de:c0:68:46:88:46:1e:3a:8e:6e:b9:b1:8d:32:90:89:8d:01: 7d:d3:fd:3a:43:fa:27:5b:cb:89:09:78:e4:c7:ae:af:f0:a6: 7b:94:2a:38:b0:33:1f:da:0f:76:d7:41:14:5d:5a:31:6c:7e: c0:de:bc:1d -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICC9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNEMzAxMTAvBgNVBAUTKDAxRUUwODlERDQ4NjdCMkNCMjc2NTgyQUE5N0IzMThG NTA5RUE2RUUwHhcNMjUxMjAyMTg1MDM2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJmMzRmYi05ODMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0QBz86GiUD0gs6KSJcE0D2kBE+3pBy79SUygNUziEXoJCYtPKEjPX+f4fIgW YIr+zKgrmkaO8X2RIjlk9kNpHsVxCghNXCPkVafRjf9htsMf5QUYFoUGBI+tArjH e0ldII0N/WIs394HzlHiTOz/QB/GHKKYoV+0KN0uZ0ZxUK+72Tevfdk5W5zIjnsf 0aqeLCu3CqkqZbq/akWMUnxPD3rG7MjBwwx1Y3t5YkV9nNcNNdsS6xyTQaS4cPe8 IdM5ke8DdvsH3JFUIoefbS6mbTJNYqSHdmAPFKn67YzXRLkO3ho7xFdgBEkNKtBz oUnwjT9wUvdxTeWyhmwB54XrIwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLbTvA+w 4psY9FT6GxBB/9sTxto4MB8GA1UdIwQYMBaAFAHuCJ3UhnsssnZYKql7MY9Qnqbu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0QzMC9FM0RGNDY5QzQx NjgxMUVBQUU4QTc3NTBDNEY5QUUwMi9BZTRJbmRTR2V5eXlkbGdxcVhzeGoxQ2Vw dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FlNEluZFNHZXl5eWRsZ3FxWHN4ajFDZXB1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjNEMzAvRTNERjQ2OUM0MTY4MTFFQUFFOEE3NzUwQzRGOUFFMDIvRTU1MUNCRDJC RENGMTFGMEIwODVCRTgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAItfMwDBAJnGWQwDQYJKoZIhvcNAQELBQADggEBALKvHDty +6DIwO2ZM4uSYY8Qwm5da8gzHk8LZcEpxjJAWj1iaWGwR5VvkMy+qrsG2x1u29cE T3u7+WqplcCNjt/R7I6bHqMWMB4aIRUA+Ag9yF0VL0ROaOcqtS1433EmEz+N9txO 0Al2a3fP3J+rL+tNrAOVCAkASvFQ6VVxIyFJlAz3qhm8qNbrBijmiJKeUj4EWL74 dCNHZCfEOWQY/T0V1XZL9V3FYMQ/1P237yWLy2J8gwp2EcLIDY+hWObOFSQIVFba yt7AaEaIRh46jm65sY0ykImNAX3T/TpD+idby4kJeOTHrq/wpnuUKjiwMx/aD3bX QRRdWjFsfsDevB0= -----END CERTIFICATE-----Generated at Sat Dec 6 19:45:08 2025 by rpki-client