This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/A88B0898EC9911EE9627923CC4F9AE02.roa File: A88B0898EC9911EE9627923CC4F9AE02.roa (raw, json) Hash identifier: Pb28ePl+LaxFmfxlcrX04O3ko/zAYNaeYubj9iJK29g= Subject key identifier: 4C:04:CA:B2:B6:78:8E:AF:51:00:D7:7D:1E:D3:48:06:63:FB:FE:5F Certificate issuer: /CN=A91BC15C/serialNumber=15E02CB4E7DCBB0ACCE228119CFF8034386297BF Certificate serial: 34E4 Authority key identifier: 15:E0:2C:B4:E7:DC:BB:0A:CC:E2:28:11:9C:FF:80:34:38:62:97:BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeAstOfcuwrM4igRnP-ANDhil78.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/A88B0898EC9911EE9627923CC4F9AE02.roa Signing time: Wed 26 Nov 2025 15:01:15 +0000 ROA not before: Wed 26 Nov 2025 15:01:15 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 45931 IP address blocks: 103.29.88.0/24 maxlen: 24 103.29.89.0/24 maxlen: 24 202.58.240.0/24 maxlen: 24 202.58.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.crl rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeAstOfcuwrM4igRnP-ANDhil78.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:58:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13540 (0x34e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC15C, serialNumber=15E02CB4E7DCBB0ACCE228119CFF8034386297BF Validity Not Before: Nov 26 15:01:15 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6927163a-0c2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:52:76:c4:6a:ae:3b:4e:e9:ba:b0:0f:0e:6f: c2:10:35:d8:7d:5c:fd:fa:ab:23:cc:ac:4d:99:66: 14:77:8b:60:7c:f8:fb:f9:f4:71:9a:5f:f5:c2:a7: 68:8f:89:37:fb:b4:9b:ce:7b:87:0b:de:8b:cb:29: 9f:7b:6a:da:62:9c:7b:49:86:f9:0d:1b:9f:30:4c: 61:c9:7b:d9:0f:ad:29:31:87:a0:02:7c:2f:a3:d3: a3:e5:cb:42:d8:63:42:ef:a9:d8:15:ed:d2:79:e3: f3:85:97:21:47:4e:5f:d1:0f:66:e7:75:ba:f9:94: 4a:6d:85:bb:56:c2:8c:2c:25:7a:89:7d:e6:35:b6: 6e:cb:05:a9:ba:4c:da:2e:1f:c8:e1:82:e1:8b:30: d4:a8:9a:b7:e5:85:fe:0f:9d:0b:27:42:8d:60:fb: 72:98:e1:6d:53:07:36:14:83:8f:c5:18:8f:1e:c9: 85:60:76:fc:f8:11:70:49:54:46:52:71:a1:c3:d9: 9c:cb:94:07:55:1c:a5:eb:da:b0:63:6c:d8:24:a4: da:01:29:9e:b2:25:89:8d:17:0e:cf:0f:81:e7:c2: 24:67:7c:2a:a1:33:05:33:60:2b:d5:53:c2:bf:e6: 07:2a:10:df:5a:c9:4d:2e:44:dc:4d:43:71:4a:6c: 3a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:04:CA:B2:B6:78:8E:AF:51:00:D7:7D:1E:D3:48:06:63:FB:FE:5F X509v3 Authority Key Identifier: keyid:15:E0:2C:B4:E7:DC:BB:0A:CC:E2:28:11:9C:FF:80:34:38:62:97:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeAstOfcuwrM4igRnP-ANDhil78.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/A88B0898EC9911EE9627923CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.29.88.0/23 202.58.240.0/23 Signature Algorithm: sha256WithRSAEncryption 1d:88:e7:44:bd:64:16:b1:e2:78:bf:76:ec:c0:e7:68:92:2a: 5e:48:94:2c:2e:80:28:a6:eb:60:57:01:d8:cb:54:72:07:d9: fb:d0:af:28:09:f8:93:03:ce:82:52:59:87:ce:35:ef:7a:f0: a2:e2:32:22:c9:a6:97:16:5f:61:40:de:7a:c2:91:d7:8e:22: d3:d5:74:0e:0e:a8:69:ba:1b:f7:48:b1:7d:3e:5d:a4:7a:93: 30:ef:d1:1e:fc:c7:cd:4e:e5:1a:4f:bb:25:92:4f:19:af:8f: 5a:e7:7c:05:40:5f:9c:9a:b8:cb:a2:7b:fd:36:cc:55:0e:1e: 5d:47:b7:c7:38:73:f5:1d:f6:c6:60:ae:2f:96:dd:71:0d:65: 1d:9f:03:76:2f:11:4b:7a:67:40:d7:0a:b4:e6:33:60:c5:a1: df:78:8c:14:9b:d4:b0:52:8e:30:75:41:3d:ac:b2:ac:84:d6: 9f:83:95:1f:d1:9a:ba:e8:ef:52:be:e2:79:d4:31:b6:03:2a: 9b:5b:f3:8e:5b:fe:be:73:ea:be:68:9e:eb:31:90:8e:b8:0a: 80:10:bc:81:30:8f:dc:fb:5e:d1:94:8a:1b:cb:07:95:35:12: 1d:6f:cb:df:a3:a3:e2:7d:48:96:80:07:b6:28:94:41:bf:92: f3:cc:f0:5b -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICNOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMxNUMxMTAvBgNVBAUTKDE1RTAyQ0I0RTdEQ0JCMEFDQ0UyMjgxMTlDRkY4MDM0 Mzg2Mjk3QkYwHhcNMjUxMTI2MTUwMTE1WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTI3MTYzYS0wYzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1lJ2xGquO07purAPDm/CEDXYfVz9+qsjzKxNmWYUd4tgfPj7+fRxml/1wqdo j4k3+7SbznuHC96Lyymfe2raYpx7SYb5DRufMExhyXvZD60pMYegAnwvo9Oj5ctC 2GNC76nYFe3SeePzhZchR05f0Q9m53W6+ZRKbYW7VsKMLCV6iX3mNbZuywWpukza Lh/I4YLhizDUqJq35YX+D50LJ0KNYPtymOFtUwc2FIOPxRiPHsmFYHb8+BFwSVRG UnGhw9mcy5QHVRyl69qwY2zYJKTaASmesiWJjRcOzw+B58IkZ3wqoTMFM2Ar1VPC v+YHKhDfWslNLkTcTUNxSmw6IQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFEwEyrK2 eI6vUQDXfR7TSAZj+/5fMB8GA1UdIwQYMBaAFBXgLLTn3LsKzOIoEZz/gDQ4Ype/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzE1Qy82QkEzNTkzMDFE QTIxMUUyQjRCNjQ0OTUwOEIwMkNEMi9GZUFzdE9mY3V3ck00aWdSblAtQU5EaGls NzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZlQXN0T2ZjdXdyTTRpZ1JuUC1BTkRoaWw3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkMxNUMvNkJBMzU5MzAxREEyMTFFMkI0QjY0NDk1MDhCMDJDRDIvQTg4QjA4OThF Qzk5MTFFRTk2Mjc5MjNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnHVgDBAHKOvAwDQYJKoZIhvcNAQELBQADggEBAB2I50S9 ZBax4ni/duzA52iSKl5IlCwugCim62BXAdjLVHIH2fvQrygJ+JMDzoJSWYfONe96 8KLiMiLJppcWX2FA3nrCkdeOItPVdA4OqGm6G/dIsX0+XaR6kzDv0R78x81O5RpP uyWSTxmvj1rnfAVAX5yauMuie/02zFUOHl1Ht8c4c/Ud9sZgri+W3XENZR2fA3Yv EUt6Z0DXCrTmM2DFod94jBSb1LBSjjB1QT2ssqyE1p+DlR/Rmrro71K+4nnUMbYD Kptb845b/r5z6r5onusxkI64CoAQvIEwj9z7XtGUihvLB5U1Eh1vy9+jo+J9SJaA B7YolEG/kvPM8Fs= -----END CERTIFICATE-----Generated at Sun Dec 7 02:24:52 2025 by rpki-client