This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/FD987A54CC8511EC8D238672C4F9AE02.roa File: FD987A54CC8511EC8D238672C4F9AE02.roa (raw, json) Hash identifier: 8YKXLgBmjt4A8LGKsFF2WvwdLx1gjsD9BpALAirKEFE= Subject key identifier: 83:9C:53:33:EF:C6:8B:88:6F:1B:F5:87:BE:9F:1D:CD:DD:C8:0F:70 Certificate issuer: /CN=A91BC64D/serialNumber=DF11E9268D06AE53BAFB7413BD34FF3878E4EED0 Certificate serial: 06AE Authority key identifier: DF:11:E9:26:8D:06:AE:53:BA:FB:74:13:BD:34:FF:38:78:E4:EE:D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xHpJo0GrlO6-3QTvTT_OHjk7tA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/FD987A54CC8511EC8D238672C4F9AE02.roa Signing time: Wed 31 Dec 2025 22:18:36 +0000 ROA not before: Wed 31 Dec 2025 22:18:36 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 136933 IP address blocks: 103.144.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.crl rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xHpJo0GrlO6-3QTvTT_OHjk7tA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 21:37:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1710 (0x6ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC64D, serialNumber=DF11E9268D06AE53BAFB7413BD34FF3878E4EED0 Validity Not Before: Dec 31 22:18:36 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=6955a13c-bc6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1f:ea:dd:1b:3d:85:4a:8c:a3:4a:c5:5b:cf: fa:9d:a9:7b:13:75:34:89:71:2c:07:03:ec:0c:80: 4b:fa:c1:72:27:59:dc:6c:98:e8:bb:43:93:3c:c2: 41:21:86:0d:3d:c3:1b:6e:82:88:91:6f:97:ff:69: 4f:ad:df:21:e8:f6:89:88:3a:f9:62:4b:11:26:40: e9:e6:e0:85:b0:b2:8d:f0:89:00:69:44:03:50:4c: ed:47:a4:fd:1f:fd:0a:e3:3c:3f:39:9e:d5:e6:3c: e8:62:6f:0c:c8:1e:2b:95:d4:6e:b2:49:a7:84:c8: 5d:54:4e:93:fb:e1:06:9c:b7:7f:bf:30:f8:56:11: 1f:49:c1:aa:7d:34:71:d7:1f:e7:f4:95:4c:30:43: 27:79:6a:13:10:cd:3a:c8:e7:3c:13:43:e1:a2:8b: e1:db:59:fc:72:6e:44:65:2f:a6:d2:4f:2c:0d:0c: 20:7e:4b:8d:cc:54:5f:58:fc:d5:e5:dc:ae:6c:3f: a1:e6:7c:5e:74:f7:2f:c4:33:e5:c6:d3:b2:2d:11: 25:8d:07:62:ac:70:2f:aa:f7:75:71:89:a9:dd:7f: 96:23:5c:84:1b:2c:e5:42:97:71:79:07:8a:df:d7: b2:ad:27:04:4c:fa:b5:b2:96:b5:2b:de:7b:40:2e: 38:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:9C:53:33:EF:C6:8B:88:6F:1B:F5:87:BE:9F:1D:CD:DD:C8:0F:70 X509v3 Authority Key Identifier: keyid:DF:11:E9:26:8D:06:AE:53:BA:FB:74:13:BD:34:FF:38:78:E4:EE:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xHpJo0GrlO6-3QTvTT_OHjk7tA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/FD987A54CC8511EC8D238672C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.144.197.0/24 Signature Algorithm: sha256WithRSAEncryption bb:c2:2f:f0:47:20:aa:e6:df:08:b5:ac:62:dc:dd:fd:d7:8f: f9:ce:a0:75:23:34:50:89:22:6f:f7:f6:29:14:d3:ee:2c:c5: 06:a0:80:8a:33:ea:80:37:1b:89:ae:09:19:a4:27:04:aa:86: 28:72:d9:c1:1b:28:94:08:1e:64:5b:61:c1:de:05:3b:ea:1a: be:56:69:77:76:88:4d:56:f2:1d:dc:10:98:c5:41:10:d4:5e: cb:b1:85:06:05:43:19:49:c1:11:00:db:11:68:63:65:44:31: d4:23:01:85:88:17:9c:2d:c2:92:75:4f:86:63:e0:23:7f:01: 16:91:7e:dc:45:ea:ed:e5:b2:d4:e0:8b:62:3a:25:d1:b9:c3: bf:92:eb:a1:b4:2c:b6:78:d1:e2:72:d7:6e:e4:b2:4f:73:d7: 53:11:97:37:72:75:f6:5c:1a:13:6e:7c:b6:93:37:2f:5f:ee: 80:5d:93:70:09:b6:25:f5:3b:51:d9:6b:66:e9:4e:85:8e:c3: 35:8b:f7:b2:f5:53:12:80:0e:ca:c5:76:9b:d6:3e:7f:d0:1a: d7:9a:52:b3:76:9c:ed:8f:42:80:5d:83:66:a3:8c:9a:c2:66: 62:ce:31:5b:0e:de:51:36:9d:e4:41:74:8b:c1:0d:0e:f8:28: bb:0d:7e:29 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QkM2NEQxMTAvBgNVBAUTKERGMTFFOTI2OEQwNkFFNTNCQUZCNzQxM0JEMzRGRjM4 NzhFNEVFRDAwHhcNMjUxMjMxMjIxODM2WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU1YTEzYy1iYzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAux/q3Rs9hUqMo0rFW8/6nal7E3U0iXEsBwPsDIBL+sFyJ1ncbJjou0OTPMJB IYYNPcMbboKIkW+X/2lPrd8h6PaJiDr5YksRJkDp5uCFsLKN8IkAaUQDUEztR6T9 H/0K4zw/OZ7V5jzoYm8MyB4rldRuskmnhMhdVE6T++EGnLd/vzD4VhEfScGqfTRx 1x/n9JVMMEMneWoTEM06yOc8E0Phoovh21n8cm5EZS+m0k8sDQwgfkuNzFRfWPzV 5dyubD+h5nxedPcvxDPlxtOyLREljQdirHAvqvd1cYmp3X+WI1yEGyzlQpdxeQeK 39eyrScETPq1spa1K957QC44AwIDAQABo4IClTCCApEwHQYDVR0OBBYEFIOcUzPv xouIbxv1h76fHc3dyA9wMB8GA1UdIwQYMBaAFN8R6SaNBq5Tuvt0E700/zh45O7Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzY0RC9CMkVGM0UzNDk1 RDYxMUVCOTgyMTVDMThDNEY5QUUwMi8zeEhwSm8wR3JsTzYtM1FUdlRUX09Iams3 dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN4SHBKbzBHcmxPNi0zUVR2VFRfT0hqazd0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkM2NEQvQjJFRjNFMzQ5NUQ2MTFFQjk4MjE1QzE4QzRGOUFFMDIvRkQ5ODdBNTRD Qzg1MTFFQzhEMjM4NjcyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnkMUwDQYJKoZIhvcNAQELBQADggEBALvCL/BHIKrm3wi1 rGLc3f3Xj/nOoHUjNFCJIm/39ikU0+4sxQaggIoz6oA3G4muCRmkJwSqhihy2cEb KJQIHmRbYcHeBTvqGr5WaXd2iE1W8h3cEJjFQRDUXsuxhQYFQxlJwREA2xFoY2VE MdQjAYWIF5wtwpJ1T4Zj4CN/ARaRftxF6u3lstTgi2I6JdG5w7+S66G0LLZ40eJy 127ksk9z11MRlzdydfZcGhNufLaTNy9f7oBdk3AJtiX1O1HZa2bpToWOwzWL97L1 UxKADsrFdpvWPn/QGteaUrN2nO2PQoBdg2ajjJrCZmLOMVsO3lE2neRBdIvBDQ74 KLsNfik= -----END CERTIFICATE-----Generated at Sun Jan 25 15:24:16 2026 by rpki-client