This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB6DE/A53AB74C9C3811EB81BE1560C4F9AE02/FB47EC14C6B011EDAF5BEF4AC4F9AE02.roa File: FB47EC14C6B011EDAF5BEF4AC4F9AE02.roa (raw, json) Hash identifier: FmQZAUXNm38DMo656bhGGQ4YjcPbPSkKhH49dhwhdfc= Subject key identifier: 55:2F:89:0D:11:1A:ED:AD:B6:1C:B0:DD:73:2C:69:F0:E1:98:2C:5D Certificate issuer: /CN=A91BB6DE/serialNumber=5AE6336939EA8F5EFB2A21E430673F80CCD5055A Certificate serial: 0212 Authority key identifier: 5A:E6:33:69:39:EA:8F:5E:FB:2A:21:E4:30:67:3F:80:CC:D5:05:5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuYzaTnqj177KiHkMGc_gMzVBVo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB6DE/A53AB74C9C3811EB81BE1560C4F9AE02/FB47EC14C6B011EDAF5BEF4AC4F9AE02.roa Signing time: Thu 04 Dec 2025 21:35:07 +0000 ROA not before: Thu 04 Dec 2025 21:35:07 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 141372 IP address blocks: 103.157.200.0/23 maxlen: 23 103.157.200.0/24 maxlen: 24 103.157.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB6DE/A53AB74C9C3811EB81BE1560C4F9AE02/WuYzaTnqj177KiHkMGc_gMzVBVo.crl rsync://rpki.apnic.net/member_repository/A91BB6DE/A53AB74C9C3811EB81BE1560C4F9AE02/WuYzaTnqj177KiHkMGc_gMzVBVo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuYzaTnqj177KiHkMGc_gMzVBVo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:23:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 530 (0x212) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB6DE, serialNumber=5AE6336939EA8F5EFB2A21E430673F80CCD5055A Validity Not Before: Dec 4 21:35:07 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6931fe8a-8935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:7d:ad:df:57:4d:31:55:4e:6a:e6:2c:30:bd: 35:26:96:01:97:53:d5:a3:16:05:fb:e2:6e:6b:7e: 98:06:a0:31:50:b1:ee:c0:64:90:28:24:50:18:d5: 41:1f:78:99:73:2b:e5:18:10:07:97:46:59:38:d5: bf:93:40:7d:f5:ee:47:68:ad:af:cf:d9:d1:26:e2: 6f:2a:27:15:03:7a:9f:06:c6:1b:6d:98:77:ed:1e: 3a:7f:27:58:05:3b:97:f3:bd:98:5a:25:33:cd:ee: 6f:c2:39:1a:84:8f:c4:41:5e:8d:ae:c4:6a:ff:23: e0:9e:8f:22:88:03:56:4e:91:7f:5c:9f:b4:39:4e: 19:cb:8f:84:b1:ec:6a:77:0b:a1:b8:3b:e8:8f:e1: 5c:bf:fa:4a:5b:d7:29:11:50:e1:b2:b0:0e:a2:f0: 84:f5:c3:09:27:83:05:15:de:44:36:fd:a1:2f:fc: 93:a7:02:55:a5:b4:05:9e:8b:cb:c9:76:c4:a3:bf: 7a:54:7b:3c:51:6e:61:16:bd:fa:f5:3e:26:d6:14: bd:aa:dc:1b:a6:29:a5:1e:25:18:b8:3d:51:56:d8: 73:1e:42:15:27:9f:8d:48:97:22:2e:1c:a1:12:cf: 8d:50:17:16:27:81:70:92:07:e3:92:db:64:d1:26: 1d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:2F:89:0D:11:1A:ED:AD:B6:1C:B0:DD:73:2C:69:F0:E1:98:2C:5D X509v3 Authority Key Identifier: keyid:5A:E6:33:69:39:EA:8F:5E:FB:2A:21:E4:30:67:3F:80:CC:D5:05:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB6DE/A53AB74C9C3811EB81BE1560C4F9AE02/WuYzaTnqj177KiHkMGc_gMzVBVo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuYzaTnqj177KiHkMGc_gMzVBVo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB6DE/A53AB74C9C3811EB81BE1560C4F9AE02/FB47EC14C6B011EDAF5BEF4AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.157.200.0/23 Signature Algorithm: sha256WithRSAEncryption d3:d1:c9:52:bc:a3:27:fe:c3:a2:ff:6d:92:7c:d3:bc:bc:af: c4:36:ba:6c:65:93:76:e6:91:74:e8:ec:24:ac:57:1c:21:da: be:21:c5:d6:fe:61:ff:7a:78:89:3d:f6:95:cd:42:d3:e4:2b: 40:29:bc:e2:cd:8f:fe:fc:ca:9b:4c:16:0a:ad:06:d7:b7:44: 78:f1:dc:9c:8f:77:3a:b9:ff:be:38:3e:89:76:9c:04:97:93: c7:ec:51:0b:ae:44:55:3a:50:49:21:f5:a3:2a:8b:d7:0c:e4: bd:6d:60:8f:8f:a8:45:a3:dc:8f:31:0e:42:96:7f:4a:2a:2c: 3d:96:a1:c4:4a:fb:eb:75:ae:46:72:66:86:a8:a9:93:cf:32: 82:c4:e0:67:38:67:0d:98:0a:ee:f6:7a:d1:4a:58:89:4e:2d: 7a:9d:07:c5:89:e4:7d:f8:fe:61:d9:73:6c:cd:4d:8b:fc:0d: 06:d3:26:36:d2:b8:af:53:45:e9:31:6e:5f:a6:90:28:8c:d9: 52:76:90:1c:2e:1b:79:43:a4:86:84:b7:e7:7a:b4:20:1d:2a: 8c:c2:14:85:23:11:89:70:96:18:8b:05:25:17:56:90:34:3b: 1e:ad:47:34:d3:f3:79:55:50:cb:83:fb:8d:64:8f:f3:20:fb: 51:6a:a5:c4 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI2REUxMTAvBgNVBAUTKDVBRTYzMzY5MzlFQThGNUVGQjJBMjFFNDMwNjczRjgw Q0NENTA1NUEwHhcNMjUxMjA0MjEzNTA3WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTMxZmU4YS04OTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5X2t31dNMVVOauYsML01JpYBl1PVoxYF++Jua36YBqAxULHuwGSQKCRQGNVB H3iZcyvlGBAHl0ZZONW/k0B99e5HaK2vz9nRJuJvKicVA3qfBsYbbZh37R46fydY BTuX872YWiUzze5vwjkahI/EQV6NrsRq/yPgno8iiANWTpF/XJ+0OU4Zy4+Esexq dwuhuDvoj+Fcv/pKW9cpEVDhsrAOovCE9cMJJ4MFFd5ENv2hL/yTpwJVpbQFnovL yXbEo796VHs8UW5hFr369T4m1hS9qtwbpimlHiUYuD1RVthzHkIVJ5+NSJciLhyh Es+NUBcWJ4Fwkgfjkttk0SYdVwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFUviQ0R Gu2tthyw3XMsafDhmCxdMB8GA1UdIwQYMBaAFFrmM2k56o9e+yoh5DBnP4DM1QVa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjZERS9BNTNBQjc0QzlD MzgxMUVCODFCRTE1NjBDNEY5QUUwMi9XdVl6YVRucWoxNzdLaUhrTUdjX2dNelZC Vm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1d1WXphVG5xajE3N0tpSGtNR2NfZ016VkJWby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkI2REUvQTUzQUI3NEM5QzM4MTFFQjgxQkUxNTYwQzRGOUFFMDIvRkI0N0VDMTRD NkIwMTFFREFGNUJFRjRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnncgwDQYJKoZIhvcNAQELBQADggEBANPRyVK8oyf+w6L/ bZJ807y8r8Q2umxlk3bmkXTo7CSsVxwh2r4hxdb+Yf96eIk99pXNQtPkK0ApvOLN j/78yptMFgqtBte3RHjx3JyPdzq5/744Pol2nASXk8fsUQuuRFU6UEkh9aMqi9cM 5L1tYI+PqEWj3I8xDkKWf0oqLD2WocRK++t1rkZyZoaoqZPPMoLE4Gc4Zw2YCu72 etFKWIlOLXqdB8WJ5H34/mHZc2zNTYv8DQbTJjbSuK9TRekxbl+mkCiM2VJ2kBwu G3lDpIaEt+d6tCAdKozCFIUjEYlwlhiLBSUXVpA0Ox6tRzTT83lVUMuD+41kj/Mg +1FqpcQ= -----END CERTIFICATE-----Generated at Sun Dec 7 01:38:46 2025 by rpki-client