This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/835EF5A2C9DD11F09DEB004DC4F9AE02.roa File: 835EF5A2C9DD11F09DEB004DC4F9AE02.roa (raw, json) Hash identifier: b0gDJVf3M0zI90KeDasxgMyUSDFcKBbXk+l2t4A0mWE= Subject key identifier: 1E:87:AB:67:2D:0F:DB:F3:89:AE:DF:79:B9:FD:CD:E4:40:9A:43:44 Certificate issuer: /CN=A91BFFBE/serialNumber=7F96AE0A22CA938BD5F9D9A7328AF58362EB22C1 Certificate serial: CA Authority key identifier: 7F:96:AE:0A:22:CA:93:8B:D5:F9:D9:A7:32:8A:F5:83:62:EB:22:C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/835EF5A2C9DD11F09DEB004DC4F9AE02.roa Signing time: Tue 25 Nov 2025 09:02:48 +0000 ROA not before: Tue 25 Nov 2025 09:02:48 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 45491 IP address blocks: 103.109.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.crl rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFFBE, serialNumber=7F96AE0A22CA938BD5F9D9A7328AF58362EB22C1 Validity Not Before: Nov 25 09:02:48 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=692570b8-ca03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:14:60:ae:c4:dc:d4:ff:a6:65:c3:19:d1:38: ef:9a:3f:9b:dd:f1:25:33:eb:d1:07:74:a4:96:65: bf:60:d2:4f:da:b3:25:33:48:f3:77:ad:68:3f:65: 21:39:ba:f0:a2:c6:86:08:5b:fc:b6:1e:c0:01:86: dd:cd:cc:7e:1d:e3:16:95:a0:7a:00:f0:8a:cf:1a: 83:16:ae:c7:f6:54:e9:56:aa:e1:76:26:0c:88:d9: 0c:37:dd:a8:5e:bd:82:4a:4b:99:c9:c7:5d:34:3c: 19:8f:93:d4:63:f4:9b:b4:2f:0e:1c:f2:42:c6:54: ee:44:e7:1b:32:82:ad:8a:7c:00:84:23:60:5b:b8: 7d:90:a5:36:72:38:9f:78:c8:e3:d9:6f:0d:2b:f4: f5:51:14:5f:6f:58:71:da:81:9a:5f:a5:54:6f:41: 30:12:24:2b:5a:6e:5e:c4:97:1a:1b:36:c4:92:8f: 6a:4f:4b:e7:37:1b:0b:95:40:97:66:b1:19:4d:14: 2c:d0:b3:37:09:70:3c:ec:51:b7:ee:ce:17:8c:c5: 7a:36:98:74:73:26:00:9e:a1:ee:96:63:b9:07:f2: b0:93:0e:07:92:7a:dc:a3:c4:0a:26:49:cc:73:09: 4e:53:c0:ef:8e:c5:4c:7b:ac:df:00:6b:49:5c:15: ee:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:87:AB:67:2D:0F:DB:F3:89:AE:DF:79:B9:FD:CD:E4:40:9A:43:44 X509v3 Authority Key Identifier: keyid:7F:96:AE:0A:22:CA:93:8B:D5:F9:D9:A7:32:8A:F5:83:62:EB:22:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/835EF5A2C9DD11F09DEB004DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.109.144.0/24 Signature Algorithm: sha256WithRSAEncryption 94:ba:59:49:af:fb:dd:b6:91:ee:db:b7:b0:7d:18:09:d1:73: 80:4c:6e:cd:ad:e6:26:76:35:8e:45:19:90:ff:70:94:a8:b1: 9a:d7:ee:79:fc:5b:4b:0c:ce:5b:3b:41:2e:68:49:8b:83:80: 3c:95:58:fc:18:9b:95:33:ae:0c:a8:61:4c:73:a1:e4:6e:1f: 70:ec:d5:3c:97:05:49:9e:da:0c:f7:93:76:22:0f:65:a8:a5: 0f:5c:d9:3a:16:a6:65:e2:84:83:5e:73:58:33:6f:22:65:05: 3c:09:0b:d4:71:bc:2a:6f:92:f1:c9:c2:0c:f0:d3:89:ff:ba: d9:dd:8f:40:c6:71:b9:69:10:5d:6b:ae:41:b6:ce:94:1e:ea: 4d:60:7a:13:15:85:b7:20:b9:60:17:ed:a1:d2:c5:7a:3b:2c: c0:b0:43:6c:b3:84:a1:b1:b0:1c:26:7b:65:d3:98:10:18:31: ba:99:17:18:97:32:88:fd:ff:be:59:8a:fc:93:c7:32:59:00: 8a:46:25:70:14:8c:ac:08:bb:1f:68:ce:43:0e:f5:e3:ce:80: f2:64:3c:7a:0b:b6:38:93:e3:c4:88:af:4c:f0:d4:53:4c:01: d4:48:19:12:0e:2e:2e:d7:8f:c7:78:80:9e:04:61:c4:af:2f: 7d:0b:0c:88 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZGQkUxMTAvBgNVBAUTKDdGOTZBRTBBMjJDQTkzOEJENUY5RDlBNzMyOEFGNTgz NjJFQjIyQzEwHhcNMjUxMTI1MDkwMjQ4WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTI1NzBiOC1jYTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxBRgrsTc1P+mZcMZ0Tjvmj+b3fElM+vRB3SklmW/YNJP2rMlM0jzd61oP2Uh ObrwosaGCFv8th7AAYbdzcx+HeMWlaB6APCKzxqDFq7H9lTpVqrhdiYMiNkMN92o Xr2CSkuZycddNDwZj5PUY/SbtC8OHPJCxlTuROcbMoKtinwAhCNgW7h9kKU2cjif eMjj2W8NK/T1URRfb1hx2oGaX6VUb0EwEiQrWm5exJcaGzbEko9qT0vnNxsLlUCX ZrEZTRQs0LM3CXA87FG37s4XjMV6Nph0cyYAnqHulmO5B/Kwkw4Hknrco8QKJknM cwlOU8DvjsVMe6zfAGtJXBXuYQIDAQABo4IClTCCApEwHQYDVR0OBBYEFB6Hq2ct D9vzia7febn9zeRAmkNEMB8GA1UdIwQYMBaAFH+WrgoiypOL1fnZpzKK9YNi6yLB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkZCRS80MjE1OUY1QTlE MDIxMUVGOTlDQzg2MDlDNEY5QUUwMi9mNWF1Q2lMS2s0dlYtZG1uTW9yMWcyTHJJ c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y1YXVDaUxLazR2Vi1kbW5Nb3IxZzJMcklzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkZGQkUvNDIxNTlGNUE5RDAyMTFFRjk5Q0M4NjA5QzRGOUFFMDIvODM1RUY1QTJD OUREMTFGMDlERUIwMDREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnbZAwDQYJKoZIhvcNAQELBQADggEBAJS6WUmv+922ke7b t7B9GAnRc4BMbs2t5iZ2NY5FGZD/cJSosZrX7nn8W0sMzls7QS5oSYuDgDyVWPwY m5UzrgyoYUxzoeRuH3Ds1TyXBUme2gz3k3YiD2WopQ9c2ToWpmXihINec1gzbyJl BTwJC9RxvCpvkvHJwgzw04n/utndj0DGcblpEF1rrkG2zpQe6k1gehMVhbcguWAX 7aHSxXo7LMCwQ2yzhKGxsBwme2XTmBAYMbqZFxiXMoj9/75ZivyTxzJZAIpGJXAU jKwIux9ozkMO9ePOgPJkPHoLtjiT48SIr0zw1FNMAdRIGRIOLi7Xj8d4gJ4EYcSv L30LDIg= -----END CERTIFICATE-----Generated at Sat Dec 6 19:23:10 2025 by rpki-client