This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/60E695B6C52A11EE80D54071C4F9AE02.roa File: 60E695B6C52A11EE80D54071C4F9AE02.roa (raw, json) Hash identifier: EbivVKsv2oyupGDtV6dF4T5ILVyhqV2iONhViZoJNxs= Subject key identifier: DC:13:0B:3D:66:7E:F1:5C:E8:29:A3:BD:DB:76:1E:88:49:2A:F5:F7 Certificate issuer: /CN=A91BE096/serialNumber=4ABDA24AD7BD9E8D9CEFB35938D0A878804C62E4 Certificate serial: 10F3 Authority key identifier: 4A:BD:A2:4A:D7:BD:9E:8D:9C:EF:B3:59:38:D0:A8:78:80:4C:62:E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sr2iSte9no2c77NZONCoeIBMYuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/60E695B6C52A11EE80D54071C4F9AE02.roa Signing time: Fri 14 Nov 2025 17:06:12 +0000 ROA not before: Fri 14 Nov 2025 17:06:12 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 132429 IP address blocks: 103.20.232.0/23 maxlen: 23 103.75.20.0/24 maxlen: 24 103.75.21.0/24 maxlen: 24 202.61.106.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.crl rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sr2iSte9no2c77NZONCoeIBMYuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4339 (0x10f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE096, serialNumber=4ABDA24AD7BD9E8D9CEFB35938D0A878804C62E4 Validity Not Before: Nov 14 17:06:12 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69176184-3bce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f1:da:b1:ed:3c:29:d2:3c:00:35:85:1c:c5: 99:0a:b9:6c:aa:f4:71:7c:a2:d2:ad:45:27:6c:05: c2:02:79:63:7b:b5:5b:0f:8e:61:6e:22:fe:67:63: 02:35:9f:ac:a3:72:a8:87:fc:9f:81:03:9f:4a:32: 41:49:cf:f9:de:71:f7:42:74:63:c5:f1:b2:fe:16: 4d:70:69:d2:54:6c:91:b8:b9:20:75:cb:c8:83:cd: 7c:e9:3c:3a:2b:04:60:b9:82:fc:1a:24:c4:7a:1c: e4:26:e6:28:9d:5f:2c:95:a1:4d:74:6e:b1:ec:05: 41:46:fc:f0:ee:7f:22:fa:eb:a8:77:db:02:23:fa: 21:fd:6c:5f:8f:42:91:b7:f7:25:8e:4c:7a:74:65: ad:67:06:87:41:1e:46:ce:85:14:74:b2:aa:07:57: c1:41:2d:6b:67:dd:0c:a6:ff:0e:ef:3c:ff:1a:31: da:93:90:6b:ea:bc:2b:99:83:5b:c0:a9:1f:e8:9b: 7f:a9:a5:63:cc:7e:63:ae:06:d6:2c:e8:e5:b7:ef: 4b:74:63:4d:ae:d6:48:07:64:e1:cd:7e:61:44:4c: b5:f4:84:ae:12:e3:ab:20:e1:50:f8:81:bd:b3:b5: 6a:c0:f6:87:0a:05:dd:78:ac:7f:c1:5a:94:53:04: ed:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:13:0B:3D:66:7E:F1:5C:E8:29:A3:BD:DB:76:1E:88:49:2A:F5:F7 X509v3 Authority Key Identifier: keyid:4A:BD:A2:4A:D7:BD:9E:8D:9C:EF:B3:59:38:D0:A8:78:80:4C:62:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sr2iSte9no2c77NZONCoeIBMYuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/60E695B6C52A11EE80D54071C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.20.232.0/23 103.75.20.0/23 202.61.106.0/23 Signature Algorithm: sha256WithRSAEncryption 9d:4e:f3:4c:2b:d4:ce:ba:b2:97:72:fd:24:3e:a2:c1:c7:91: bb:97:4c:69:30:6d:18:c6:f0:d9:62:20:38:b8:ef:7d:74:02: 23:aa:55:ee:f1:9a:9b:b8:d6:bb:fa:71:26:cb:42:42:d9:15: e5:33:4e:24:79:81:6f:df:bc:06:80:6a:8c:b8:6c:0a:14:80: 7c:9e:00:ae:9a:4d:4d:85:9d:8c:c4:63:ed:3d:6e:b1:8d:73: a9:6a:43:4d:a6:88:08:3f:a4:01:60:7e:b7:6a:87:53:cf:e2: 02:0a:02:0a:c9:52:dc:6a:32:41:e3:bb:38:9d:dc:8a:4e:9d: 5a:59:1e:06:7b:cb:eb:09:12:b2:b7:ca:b7:e5:64:e6:20:04: a0:7c:d0:96:f5:61:8d:31:be:83:5d:f6:54:92:6e:32:49:46: ab:e5:69:ad:54:61:9f:b4:de:77:c5:2e:69:28:9d:a8:5a:c0: bf:c2:51:4c:6a:1d:42:d8:da:03:fa:74:f1:71:31:d5:0e:19: aa:c0:79:a7:79:50:1b:1d:df:93:41:c4:b4:00:e6:96:ae:3c: 80:b2:da:40:09:1d:27:1d:9a:9e:87:db:27:19:72:5b:cd:43: 76:04:bc:dd:52:a7:51:30:e2:bb:cb:95:c4:d7:11:d5:0f:20: 62:df:bd:df -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICEPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUwOTYxMTAvBgNVBAUTKDRBQkRBMjRBRDdCRDlFOEQ5Q0VGQjM1OTM4RDBBODc4 ODA0QzYyRTQwHhcNMjUxMTE0MTcwNjEyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTE3NjE4NC0zYmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn/Hase08KdI8ADWFHMWZCrlsqvRxfKLSrUUnbAXCAnlje7VbD45hbiL+Z2MC NZ+so3Koh/yfgQOfSjJBSc/53nH3QnRjxfGy/hZNcGnSVGyRuLkgdcvIg8186Tw6 KwRguYL8GiTEehzkJuYonV8slaFNdG6x7AVBRvzw7n8i+uuod9sCI/oh/Wxfj0KR t/cljkx6dGWtZwaHQR5GzoUUdLKqB1fBQS1rZ90Mpv8O7zz/GjHak5Br6rwrmYNb wKkf6Jt/qaVjzH5jrgbWLOjlt+9LdGNNrtZIB2ThzX5hREy19ISuEuOrIOFQ+IG9 s7VqwPaHCgXdeKx/wVqUUwTtCwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFNwTCz1m fvFc6Cmjvdt2HohJKvX3MB8GA1UdIwQYMBaAFEq9okrXvZ6NnO+zWTjQqHiATGLk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTA5Ni8yRkJCNDQwRTMz NDUxMUU5OThDNTY3M0JDNEY5QUUwMi9TcjJpU3RlOW5vMmM3N05aT05Db2VJQk1Z dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NyMmlTdGU5bm8yYzc3TlpPTkNvZUlCTVl1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkUwOTYvMkZCQjQ0MEUzMzQ1MTFFOTk4QzU2NzNCQzRGOUFFMDIvNjBFNjk1QjZD NTJBMTFFRTgwRDU0MDcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAFnFOgDBAFnSxQDBAHKPWowDQYJKoZIhvcNAQELBQADggEB AJ1O80wr1M66spdy/SQ+osHHkbuXTGkwbRjG8NliIDi47310AiOqVe7xmpu41rv6 cSbLQkLZFeUzTiR5gW/fvAaAaoy4bAoUgHyeAK6aTU2FnYzEY+09brGNc6lqQ02m iAg/pAFgfrdqh1PP4gIKAgrJUtxqMkHjuzid3IpOnVpZHgZ7y+sJErK3yrflZOYg BKB80Jb1YY0xvoNd9lSSbjJJRqvlaa1UYZ+03nfFLmkonahawL/CUUxqHULY2gP6 dPFxMdUOGarAead5UBsd35NBxLQA5pauPICy2kAJHScdmp6H2ycZclvNQ3YEvN1S p1Ew4rvLlcTXEdUPIGLfvd8= -----END CERTIFICATE-----Generated at Sat Dec 6 22:47:33 2025 by rpki-client