This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/10771E5497C211F0A9D40817C4F9AE02.roa File: 10771E5497C211F0A9D40817C4F9AE02.roa (raw, json) Hash identifier: v/Xxd5gw24bVPmwugefsnZRtykzRBUwrtrP5k40Invw= Subject key identifier: FF:50:D1:99:83:01:34:C3:59:07:13:D3:F4:82:F0:9C:E8:F8:19:FA Certificate issuer: /CN=A91BAD2D/serialNumber=94A950B303B46900DD5A3061030C89A4896803AF Certificate serial: 0153 Authority key identifier: 94:A9:50:B3:03:B4:69:00:DD:5A:30:61:03:0C:89:A4:89:68:03:AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKlQswO0aQDdWjBhAwyJpIloA68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/10771E5497C211F0A9D40817C4F9AE02.roa Signing time: Thu 27 Nov 2025 02:50:18 +0000 ROA not before: Thu 27 Nov 2025 02:50:18 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 133894 IP address blocks: 43.230.209.0/24 maxlen: 24 103.46.208.0/22 maxlen: 23 103.46.208.0/24 maxlen: 24 103.46.209.0/24 maxlen: 24 103.46.210.0/24 maxlen: 24 103.46.211.0/24 maxlen: 24 103.96.233.0/24 maxlen: 24 103.146.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.crl rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKlQswO0aQDdWjBhAwyJpIloA68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 02:45:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 339 (0x153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAD2D, serialNumber=94A950B303B46900DD5A3061030C89A4896803AF Validity Not Before: Nov 27 02:50:18 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6927bc69-0339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f9:38:f6:6e:8e:6e:56:9d:d9:0f:7f:2a:58: de:3e:6e:07:92:fc:70:18:f5:5e:ed:d5:f1:94:38: 07:11:cd:c9:7a:a4:05:3b:4b:98:5b:b4:37:8e:af: d7:20:0c:ff:f2:e1:c4:d9:df:b5:74:26:35:fe:60: fd:73:fd:96:da:50:c5:38:8a:24:7e:fe:61:5f:ff: b4:82:6b:71:8c:90:d5:c8:8c:5a:02:2c:ee:6c:45: 9d:c1:2d:e9:d8:48:e9:79:ff:4b:a6:4f:1b:63:6f: ab:45:f8:f4:de:6c:86:1d:a0:5d:fd:70:4d:00:07: 88:b2:62:03:3c:1d:56:38:bf:6d:7d:86:b8:fe:d2: ff:b3:59:72:01:34:c7:1a:da:66:84:91:ec:ac:82: 7e:28:82:ba:95:da:10:f2:e8:40:76:62:ca:d6:90: 22:f7:0b:bd:26:67:67:70:ea:f4:9a:3b:4d:65:1b: 3d:b9:71:dd:0e:bb:93:b7:59:f3:23:d2:d5:12:33: 74:94:bf:b7:b7:bf:e4:5f:e9:30:87:d6:d6:32:d7: 99:3f:6f:29:47:75:ce:5f:61:1c:d8:05:00:48:ab: 1b:36:4d:9f:89:88:6a:b7:d7:cc:90:6a:b2:f5:e4: 98:cc:0f:14:c5:43:1b:f1:67:30:7d:10:70:95:d6: 68:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:50:D1:99:83:01:34:C3:59:07:13:D3:F4:82:F0:9C:E8:F8:19:FA X509v3 Authority Key Identifier: keyid:94:A9:50:B3:03:B4:69:00:DD:5A:30:61:03:0C:89:A4:89:68:03:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKlQswO0aQDdWjBhAwyJpIloA68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/10771E5497C211F0A9D40817C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.230.209.0/24 103.46.208.0/22 103.96.233.0/24 103.146.104.0/24 Signature Algorithm: sha256WithRSAEncryption 81:43:47:04:e3:58:46:c9:eb:27:45:f5:8a:c9:c8:59:83:4f: 8a:3f:2c:d4:60:c4:2c:5b:ec:2f:5e:98:65:48:93:61:a4:0f: 6d:de:14:1b:85:e2:65:57:6d:22:d6:80:c9:07:f7:ce:f2:19: bb:a2:5b:f5:c2:3b:31:c1:ed:5b:97:1a:db:af:7b:9c:5f:65: 1d:5c:b3:75:24:b9:59:09:e0:a8:5b:e4:0a:e6:78:11:e2:84: 83:b2:26:e7:11:b3:34:c3:22:a7:15:91:e2:9f:b8:ff:14:e7: 7b:67:71:01:b8:d0:b0:0b:39:96:fd:ca:1d:f5:69:51:38:7e: d1:45:7b:c9:91:ac:db:dc:11:91:bc:65:e1:8c:b0:96:df:17: 33:90:98:e8:08:cf:6d:21:b2:df:f6:df:09:a6:9f:c3:15:01: fd:f0:fa:c3:2d:16:fe:b5:0e:be:58:a4:12:1d:8a:c7:73:75: 94:80:8a:5c:c0:3e:36:c5:fe:32:3c:3f:6d:09:9f:16:d7:21: 30:5b:e6:43:a2:fd:39:3b:8f:de:5a:74:8b:c5:2a:d3:06:c9: 02:e7:f2:79:d5:3e:c4:d5:c9:59:bb:2c:bb:80:e6:5a:03:fe: 7a:e3:24:23:ff:a7:78:ac:77:34:08:b7:31:57:63:33:9d:07: 6d:5c:89:90 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFEMkQxMTAvBgNVBAUTKDk0QTk1MEIzMDNCNDY5MDBERDVBMzA2MTAzMEM4OUE0 ODk2ODAzQUYwHhcNMjUxMTI3MDI1MDE4WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTI3YmM2OS0wMzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/k49m6Oblad2Q9/KljePm4HkvxwGPVe7dXxlDgHEc3JeqQFO0uYW7Q3jq/X IAz/8uHE2d+1dCY1/mD9c/2W2lDFOIokfv5hX/+0gmtxjJDVyIxaAizubEWdwS3p 2Ejpef9Lpk8bY2+rRfj03myGHaBd/XBNAAeIsmIDPB1WOL9tfYa4/tL/s1lyATTH GtpmhJHsrIJ+KIK6ldoQ8uhAdmLK1pAi9wu9JmdncOr0mjtNZRs9uXHdDruTt1nz I9LVEjN0lL+3t7/kX+kwh9bWMteZP28pR3XOX2Ec2AUASKsbNk2fiYhqt9fMkGqy 9eSYzA8UxUMb8WcwfRBwldZoywIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFP9Q0ZmD ATTDWQcT0/SC8Jzo+Bn6MB8GA1UdIwQYMBaAFJSpULMDtGkA3VowYQMMiaSJaAOv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUQyRC85MDg4RUU1QUU4 MDExMUVFQUQ2QzUwMzBDNEY5QUUwMi9sS2xRc3dPMGFRRGRXakJoQXd5SnBJbG9B NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xLbFFzd08wYVFEZFdqQmhBd3lKcElsb0E2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkFEMkQvOTA4OEVFNUFFODAxMTFFRUFENkM1MDMwQzRGOUFFMDIvMTA3NzFFNTQ5 N0MyMTFGMEE5RDQwODE3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAAr5tEDBAJnLtADBABnYOkDBABnkmgwDQYJKoZIhvcNAQEL BQADggEBAIFDRwTjWEbJ6ydF9YrJyFmDT4o/LNRgxCxb7C9emGVIk2GkD23eFBuF 4mVXbSLWgMkH987yGbuiW/XCOzHB7VuXGtuve5xfZR1cs3UkuVkJ4Khb5ArmeBHi hIOyJucRszTDIqcVkeKfuP8U53tncQG40LALOZb9yh31aVE4ftFFe8mRrNvcEZG8 ZeGMsJbfFzOQmOgIz20hst/23wmmn8MVAf3w+sMtFv61Dr5YpBIdisdzdZSAilzA PjbF/jI8P20JnxbXITBb5kOi/Tk7j95adIvFKtMGyQLn8nnVPsTVyVm7LLuA5loD /nrjJCP/p3isdzQItzFXYzOdB21ciZA= -----END CERTIFICATE-----Generated at Sun Dec 7 10:31:32 2025 by rpki-client