This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/5A0FAE220F7011EAB8E21167C4F9AE02.roa File: 5A0FAE220F7011EAB8E21167C4F9AE02.roa (raw, json) Hash identifier: ft/ZmUMult3UW/hGoWnnHI/0VP/gMrTykIcZOvK6Eqk= Subject key identifier: 93:3D:56:8F:9D:A7:B7:43:BA:36:70:D7:32:D1:DF:F9:7F:30:B2:9F Certificate issuer: /CN=A91B97DB/serialNumber=AD3D8703850B1271E8F31AE03E3CC9AC4660D942 Certificate serial: 0C86 Authority key identifier: AD:3D:87:03:85:0B:12:71:E8:F3:1A:E0:3E:3C:C9:AC:46:60:D9:42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT2HA4ULEnHo8xrgPjzJrEZg2UI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/5A0FAE220F7011EAB8E21167C4F9AE02.roa Signing time: Wed 31 Dec 2025 19:15:13 +0000 ROA not before: Wed 31 Dec 2025 19:15:13 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 138437 IP address blocks: 103.125.120.0/22 maxlen: 24 2403:f340::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.crl rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT2HA4ULEnHo8xrgPjzJrEZg2UI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 18:07:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3206 (0xc86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B97DB, serialNumber=AD3D8703850B1271E8F31AE03E3CC9AC4660D942 Validity Not Before: Dec 31 19:15:13 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69557641-89f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:7a:52:70:ee:3f:76:e7:a8:3b:0b:3e:62:b2: 5d:ac:a7:14:5a:30:d8:e0:71:c7:0a:98:91:c8:ce: 5b:73:6b:d3:33:e0:5a:17:7d:5e:42:4e:26:e0:bb: ee:48:75:fb:d2:3f:c1:32:49:b9:d0:b3:6e:1b:7f: 74:8e:03:41:31:80:67:86:46:05:b4:03:fc:d3:b9: 26:ce:08:eb:59:e9:5d:a1:73:f6:a4:48:3b:51:7b: 2d:04:d1:de:5b:99:88:c0:75:c6:06:71:14:ed:31: 06:f6:c3:08:e3:a3:95:24:6e:07:14:15:3a:56:9f: 0c:07:ba:a8:36:0b:f7:b4:99:c0:0c:e7:b0:0b:ef: a1:be:81:27:4e:a7:a3:a7:09:0e:cb:be:74:25:ce: 72:71:ec:fd:ed:c6:58:12:4f:be:cb:b4:90:48:c6: a4:c0:4d:82:50:50:d1:63:dd:2e:37:ca:1d:65:09: 0a:a3:72:95:95:41:80:d3:55:28:96:1e:48:1e:48: 3b:40:8f:b2:ac:56:1f:55:32:7b:f1:00:7d:4f:89: e8:0f:50:c5:88:f2:6c:73:bb:56:e6:a6:18:42:51: 42:41:a8:c5:a4:b8:d5:a5:0d:af:96:0b:bf:7d:1f: f7:68:13:30:93:92:55:ef:eb:17:57:7b:7d:a3:d1: 1c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:3D:56:8F:9D:A7:B7:43:BA:36:70:D7:32:D1:DF:F9:7F:30:B2:9F X509v3 Authority Key Identifier: keyid:AD:3D:87:03:85:0B:12:71:E8:F3:1A:E0:3E:3C:C9:AC:46:60:D9:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT2HA4ULEnHo8xrgPjzJrEZg2UI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/5A0FAE220F7011EAB8E21167C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.125.120.0/22 IPv6: 2403:f340::/32 Signature Algorithm: sha256WithRSAEncryption 5a:96:4e:5e:4b:f5:d8:23:64:bd:ce:64:67:a3:af:ca:54:3d: 27:6a:e9:af:e8:c9:19:f3:99:fa:f0:ee:75:f0:67:ea:24:e2: 17:6c:25:8e:29:98:16:6e:62:3f:8d:27:af:e3:07:8d:25:43: e5:89:dc:ba:ab:48:9d:5a:65:2e:29:f4:b3:9f:09:a6:dc:38: 34:39:e6:6e:ab:80:f4:51:7e:f5:eb:a1:20:aa:d5:ff:2f:3b: f6:fc:0e:63:e6:d0:11:3c:0f:66:3e:bd:b5:10:8e:4e:1e:bc: a8:df:84:ea:fa:c9:53:67:46:5e:bc:75:bd:34:dc:e8:77:b9: 3c:ec:4d:de:83:8f:97:16:f6:f7:44:71:f1:bc:57:e7:e8:21: 4e:e4:da:5b:86:1e:cf:a9:d3:76:51:50:39:c9:00:2e:b9:92: 5f:d6:32:a5:63:2e:ba:16:47:d6:9b:7f:c3:02:33:61:96:d2: 75:2b:c4:f4:c5:62:a6:bf:89:50:4f:26:f8:23:30:5a:d1:f0: 99:fe:a0:9e:db:52:36:52:dc:cd:80:63:e1:dd:d2:21:e6:01: dd:ec:d3:18:11:37:ad:60:d4:ae:ec:89:ca:9d:9b:f2:a2:d5: 86:69:e1:c2:4e:ed:8a:53:dd:1e:67:70:58:31:39:80:96:03: 25:49:03:e4 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICDIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx Qjk3REIxMTAvBgNVBAUTKEFEM0Q4NzAzODUwQjEyNzFFOEYzMUFFMDNFM0NDOUFD NDY2MEQ5NDIwHhcNMjUxMjMxMTkxNTEzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU1NzY0MS04OWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7npScO4/dueoOws+YrJdrKcUWjDY4HHHCpiRyM5bc2vTM+BaF31eQk4m4Lvu SHX70j/BMkm50LNuG390jgNBMYBnhkYFtAP807kmzgjrWeldoXP2pEg7UXstBNHe W5mIwHXGBnEU7TEG9sMI46OVJG4HFBU6Vp8MB7qoNgv3tJnADOewC++hvoEnTqej pwkOy750Jc5ycez97cZYEk++y7SQSMakwE2CUFDRY90uN8odZQkKo3KVlUGA01Uo lh5IHkg7QI+yrFYfVTJ78QB9T4noD1DFiPJsc7tW5qYYQlFCQajFpLjVpQ2vlgu/ fR/3aBMwk5JV7+sXV3t9o9EcowIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFJM9Vo+d p7dDujZw1zLR3/l/MLKfMB8GA1UdIwQYMBaAFK09hwOFCxJx6PMa4D48yaxGYNlC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTdEQi80RTQxMEFDRTBG NkYxMUVBQUIwQURCNjRDNEY5QUUwMi9yVDJIQTRVTEVuSG84eHJnUGp6SnJFWmcy VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JUMkhBNFVMRW5Ibzh4cmdQanpKckVaZzJVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qjk3REIvNEU0MTBBQ0UwRjZGMTFFQUFCMEFEQjY0QzRGOUFFMDIvNUEwRkFFMjIw RjcwMTFFQUI4RTIxMTY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnfXgwDQQCAAIwBwMFACQD80AwDQYJKoZIhvcNAQELBQAD ggEBAFqWTl5L9dgjZL3OZGejr8pUPSdq6a/oyRnzmfrw7nXwZ+ok4hdsJY4pmBZu Yj+NJ6/jB40lQ+WJ3LqrSJ1aZS4p9LOfCabcODQ55m6rgPRRfvXroSCq1f8vO/b8 DmPm0BE8D2Y+vbUQjk4evKjfhOr6yVNnRl68db003Oh3uTzsTd6Dj5cW9vdEcfG8 V+foIU7k2luGHs+p03ZRUDnJAC65kl/WMqVjLroWR9abf8MCM2GW0nUrxPTFYqa/ iVBPJvgjMFrR8Jn+oJ7bUjZS3M2AY+Hd0iHmAd3s0xgRN61g1K7sicqdm/Ki1YZp 4cJO7YpT3R5ncFgxOYCWAyVJA+Q= -----END CERTIFICATE-----Generated at Sun Jan 25 23:09:54 2026 by rpki-client