This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/87F6FDDC880911EB96D8882DC4F9AE02.roa File: 87F6FDDC880911EB96D8882DC4F9AE02.roa (raw, json) Hash identifier: f1JHwNaWJwnKC8MRg/tW+BsFmflYVGjbTNZJmO1xnUg= Subject key identifier: C8:FC:DD:53:C1:29:0E:EB:F8:54:F8:0F:90:47:84:2B:B0:FD:CA:52 Certificate issuer: /CN=A91B7E17/serialNumber=76D1F66C016DC184734E6D9BE1BEE90801FFA01F Certificate serial: 06AF Authority key identifier: 76:D1:F6:6C:01:6D:C1:84:73:4E:6D:9B:E1:BE:E9:08:01:FF:A0:1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtH2bAFtwYRzTm2b4b7pCAH_oB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/87F6FDDC880911EB96D8882DC4F9AE02.roa Signing time: Tue 18 Nov 2025 21:14:11 +0000 ROA not before: Tue 18 Nov 2025 21:14:11 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 133528 IP address blocks: 103.131.88.0/22 maxlen: 22 103.131.88.0/24 maxlen: 24 103.131.89.0/24 maxlen: 24 103.131.90.0/24 maxlen: 24 103.131.91.0/24 maxlen: 24 2403:c8c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.crl rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtH2bAFtwYRzTm2b4b7pCAH_oB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:05:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1711 (0x6af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7E17, serialNumber=76D1F66C016DC184734E6D9BE1BEE90801FFA01F Validity Not Before: Nov 18 21:14:11 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=691ce1a3-19f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:15:bb:31:f8:34:34:84:52:86:1b:4a:6d:0f: e2:a7:6c:fb:aa:2f:3b:98:85:ec:55:5a:ac:ef:c0: 3c:50:cf:bf:54:a0:9d:97:2b:23:d0:aa:db:46:7b: 31:6a:70:65:58:b3:19:62:36:cc:04:49:36:56:4a: 8f:c5:eb:c3:c1:87:be:24:3c:ee:7f:09:38:82:6f: 46:b8:32:92:1d:e1:4a:06:90:f9:ae:f2:dc:2a:86: 42:b3:ce:e2:3f:96:e9:1f:49:84:d1:96:e0:c8:49: 88:88:30:8d:78:bb:42:be:14:95:aa:48:e7:b0:65: fa:53:17:6b:46:1c:7e:30:ab:89:b8:42:01:c1:0c: 0e:ab:7e:d6:ae:e0:f0:ea:2b:55:dc:21:c6:e1:50: 05:2c:ba:74:dc:2b:66:05:83:b7:80:65:f2:b8:82: 86:ac:c1:09:3c:f4:de:a7:cf:68:ee:df:29:6a:6c: 6f:3f:d5:9c:bc:ec:3c:5f:c5:df:91:69:99:84:72: 8e:11:55:53:14:94:a0:c0:c4:7d:18:a5:3b:0a:55: 14:c0:e6:31:0b:bb:6f:e9:80:32:5e:87:a9:ad:92: f5:c0:65:a1:f4:b5:db:91:22:db:3a:d7:69:7b:a3: 90:e9:b4:8b:1a:8d:97:cd:89:02:63:30:13:74:66: 6e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:FC:DD:53:C1:29:0E:EB:F8:54:F8:0F:90:47:84:2B:B0:FD:CA:52 X509v3 Authority Key Identifier: keyid:76:D1:F6:6C:01:6D:C1:84:73:4E:6D:9B:E1:BE:E9:08:01:FF:A0:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtH2bAFtwYRzTm2b4b7pCAH_oB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/87F6FDDC880911EB96D8882DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.131.88.0/22 IPv6: 2403:c8c0::/32 Signature Algorithm: sha256WithRSAEncryption a5:d2:23:85:fd:2a:22:03:13:38:76:0a:09:82:68:2b:37:9c: b9:0d:79:c3:9e:9b:9e:4f:4d:e9:77:72:1f:6b:a1:cb:99:1c: e8:d5:5f:51:4a:45:d7:3f:a4:0f:ff:12:cf:f8:5c:0b:be:af: e6:2c:d3:46:ad:5c:82:9c:8c:9f:12:9e:b4:32:68:00:bb:18: fc:87:ac:8b:f3:d7:6c:0c:12:d5:15:9e:60:fb:36:6a:cb:57: 42:4f:e2:f2:fd:13:76:36:25:39:25:3e:39:8d:1d:ee:db:6e: a3:f9:f6:3f:6b:b0:a2:98:4f:3f:d4:80:29:9d:ea:fb:90:1d: 14:5b:8e:39:01:d7:ff:3f:41:8c:d7:c0:72:e5:8d:e4:b8:94: aa:2b:30:4c:e5:c0:04:78:21:07:8c:17:74:d6:a5:3b:3f:d7: 1f:fd:de:04:2a:11:49:4f:cd:41:50:c9:8c:b7:26:9a:40:9c: 99:48:b3:13:84:82:5c:9b:a0:e3:11:4e:16:4c:41:29:9d:e9: 06:b3:40:0c:66:8a:02:ba:93:f5:65:8b:74:92:9a:55:d4:c4: f3:19:0b:ac:27:03:b0:0a:b2:e6:c0:57:9a:0f:26:bc:81:e4: 4d:d2:98:7a:b3:3e:66:0e:c8:85:42:7b:25:68:ba:8e:63:d3: 15:4a:08:53 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdFMTcxMTAvBgNVBAUTKDc2RDFGNjZDMDE2REMxODQ3MzRFNkQ5QkUxQkVFOTA4 MDFGRkEwMUYwHhcNMjUxMTE4MjExNDExWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTFjZTFhMy0xOWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4hW7Mfg0NIRShhtKbQ/ip2z7qi87mIXsVVqs78A8UM+/VKCdlysj0KrbRnsx anBlWLMZYjbMBEk2VkqPxevDwYe+JDzufwk4gm9GuDKSHeFKBpD5rvLcKoZCs87i P5bpH0mE0ZbgyEmIiDCNeLtCvhSVqkjnsGX6UxdrRhx+MKuJuEIBwQwOq37WruDw 6itV3CHG4VAFLLp03CtmBYO3gGXyuIKGrMEJPPTep89o7t8pamxvP9WcvOw8X8Xf kWmZhHKOEVVTFJSgwMR9GKU7ClUUwOYxC7tv6YAyXoeprZL1wGWh9LXbkSLbOtdp e6OQ6bSLGo2XzYkCYzATdGZunwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFMj83VPB KQ7r+FT4D5BHhCuw/cpSMB8GA1UdIwQYMBaAFHbR9mwBbcGEc05tm+G+6QgB/6Af MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0UxNy83QUIwQjU2Njg4 MDcxMUVCQTBBOUI2MkFDNEY5QUUwMi9kdEgyYkFGdHdZUnpUbTJiNGI3cENBSF9v QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R0SDJiQUZ0d1lSelRtMmI0YjdwQ0FIX29COC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjdFMTcvN0FCMEI1NjY4ODA3MTFFQkEwQTlCNjJBQzRGOUFFMDIvODdGNkZEREM4 ODA5MTFFQjk2RDg4ODJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJng1gwDQQCAAIwBwMFACQDyMAwDQYJKoZIhvcNAQELBQAD ggEBAKXSI4X9KiIDEzh2CgmCaCs3nLkNecOem55PTel3ch9rocuZHOjVX1FKRdc/ pA//Es/4XAu+r+Ys00atXIKcjJ8SnrQyaAC7GPyHrIvz12wMEtUVnmD7NmrLV0JP 4vL9E3Y2JTklPjmNHe7bbqP59j9rsKKYTz/UgCmd6vuQHRRbjjkB1/8/QYzXwHLl jeS4lKorMEzlwAR4IQeMF3TWpTs/1x/93gQqEUlPzUFQyYy3JppAnJlIsxOEglyb oOMRThZMQSmd6QazQAxmigK6k/Vli3SSmlXUxPMZC6wnA7AKsubAV5oPJryB5E3S mHqzPmYOyIVCeyVouo5j0xVKCFM= -----END CERTIFICATE-----Generated at Sat Dec 6 20:28:48 2025 by rpki-client