This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/DCAD7228C9DD11F0AAF51581C4F9AE02.roa File: DCAD7228C9DD11F0AAF51581C4F9AE02.roa (raw, json) Hash identifier: UJvZLXPSCNqpnXZ276Fx1goF+GJjK4vVWZ5GmP11adM= Subject key identifier: 41:39:1F:DF:BC:3F:4B:EC:53:77:B3:18:4E:0F:94:4C:39:B6:4B:58 Certificate issuer: /CN=A91BFFBE/serialNumber=7F96AE0A22CA938BD5F9D9A7328AF58362EB22C1 Certificate serial: CC Authority key identifier: 7F:96:AE:0A:22:CA:93:8B:D5:F9:D9:A7:32:8A:F5:83:62:EB:22:C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/DCAD7228C9DD11F0AAF51581C4F9AE02.roa Signing time: Tue 25 Nov 2025 09:05:18 +0000 ROA not before: Tue 25 Nov 2025 09:05:18 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 138610 IP address blocks: 103.109.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.crl rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFFBE, serialNumber=7F96AE0A22CA938BD5F9D9A7328AF58362EB22C1 Validity Not Before: Nov 25 09:05:18 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6925714d-abfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cd:9a:43:89:68:de:dd:d1:6e:ef:f5:b9:6e: 57:82:76:58:3d:8c:db:eb:ce:09:9d:83:06:b9:96: e0:d8:db:48:47:c2:aa:70:96:6e:5e:80:8b:41:c1: ef:4d:1a:8a:5b:7c:f0:43:b8:26:06:f3:bf:06:a0: ac:f6:db:55:64:f0:3a:16:58:8f:9e:b9:4d:fd:41: 04:b4:86:c3:49:dd:e4:a9:ff:c7:35:15:fc:89:de: f5:1a:3c:23:52:f3:f4:59:75:14:74:91:a7:74:e1: f4:54:a3:8d:7a:26:6d:91:89:03:76:77:fb:4d:88: 49:08:09:1d:71:dd:1c:19:b9:e6:cd:45:4e:74:45: 0e:a2:f5:16:a8:43:1e:6e:3e:e6:87:0d:b8:ae:03: 96:7d:0d:36:64:7d:7d:61:23:92:29:e9:b7:44:2c: 00:43:71:85:14:22:1e:02:00:9e:bd:1a:bb:eb:3b: 8f:df:20:70:3a:f0:44:93:4e:72:e8:97:af:f6:d0: 0d:21:2d:38:be:6a:0c:61:e7:8b:91:cb:1e:1e:64: 8c:9e:59:06:2c:ed:ee:07:00:2a:67:a7:cb:a8:c1: 8c:54:5b:0b:34:58:14:56:f0:eb:55:d8:d0:ab:17: f2:1c:fe:27:13:98:4d:e7:1c:cf:c4:1c:b3:52:95: 3d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:39:1F:DF:BC:3F:4B:EC:53:77:B3:18:4E:0F:94:4C:39:B6:4B:58 X509v3 Authority Key Identifier: keyid:7F:96:AE:0A:22:CA:93:8B:D5:F9:D9:A7:32:8A:F5:83:62:EB:22:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/DCAD7228C9DD11F0AAF51581C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.109.146.0/23 Signature Algorithm: sha256WithRSAEncryption 54:48:dc:95:e6:ae:a5:4c:ed:b3:47:95:ac:f8:5d:c3:08:fc: f4:f8:e4:fd:96:6c:bc:a0:25:e9:ae:84:6b:d7:de:4b:ff:80: a9:09:a0:54:90:d6:e9:d8:32:0d:42:29:4e:46:ad:b2:4e:57: 2a:50:43:44:1a:1a:2b:21:4b:d6:d7:09:66:b7:70:e7:93:da: b6:f4:6e:b1:86:3d:c6:8e:cb:e1:8f:d6:0a:0f:d4:5e:ff:60: 63:a3:e4:7e:c1:55:f3:41:d8:e6:14:21:46:41:db:de:aa:3b: 42:08:97:f4:35:ab:73:00:e1:30:8e:48:4c:e1:73:c5:d1:ca: 28:fc:83:27:a7:2c:a9:c4:51:18:d4:a4:3b:06:20:b9:4d:74: 28:3d:3f:44:57:e2:3e:5c:0e:59:1b:40:c7:cf:29:10:bf:e9: 69:18:1a:e6:aa:0e:33:5f:b2:38:60:d7:69:ef:b2:68:bb:e9: c2:e4:a2:43:93:68:ef:66:8f:5b:7c:6f:0b:02:00:81:3b:11: 7b:74:dd:c4:31:d7:60:2a:16:d5:56:f0:1b:28:91:9e:27:7c: 6b:b8:f6:77:59:c1:6d:1e:d0:7e:80:40:d3:e6:db:1d:ac:43: 1f:a1:a2:de:dd:97:f7:ad:d1:60:29:fa:91:a0:7f:33:88:af: 26:1e:6a:c5 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZGQkUxMTAvBgNVBAUTKDdGOTZBRTBBMjJDQTkzOEJENUY5RDlBNzMyOEFGNTgz NjJFQjIyQzEwHhcNMjUxMTI1MDkwNTE4WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTI1NzE0ZC1hYmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyM2aQ4lo3t3Rbu/1uW5XgnZYPYzb684JnYMGuZbg2NtIR8KqcJZuXoCLQcHv TRqKW3zwQ7gmBvO/BqCs9ttVZPA6FliPnrlN/UEEtIbDSd3kqf/HNRX8id71Gjwj UvP0WXUUdJGndOH0VKONeiZtkYkDdnf7TYhJCAkdcd0cGbnmzUVOdEUOovUWqEMe bj7mhw24rgOWfQ02ZH19YSOSKem3RCwAQ3GFFCIeAgCevRq76zuP3yBwOvBEk05y 6Jev9tANIS04vmoMYeeLkcseHmSMnlkGLO3uBwAqZ6fLqMGMVFsLNFgUVvDrVdjQ qxfyHP4nE5hN5xzPxByzUpU9QQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEE5H9+8 P0vsU3ezGE4PlEw5tktYMB8GA1UdIwQYMBaAFH+WrgoiypOL1fnZpzKK9YNi6yLB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkZCRS80MjE1OUY1QTlE MDIxMUVGOTlDQzg2MDlDNEY5QUUwMi9mNWF1Q2lMS2s0dlYtZG1uTW9yMWcyTHJJ c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y1YXVDaUxLazR2Vi1kbW5Nb3IxZzJMcklzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkZGQkUvNDIxNTlGNUE5RDAyMTFFRjk5Q0M4NjA5QzRGOUFFMDIvRENBRDcyMjhD OUREMTFGMEFBRjUxNTgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnbZIwDQYJKoZIhvcNAQELBQADggEBAFRI3JXmrqVM7bNH laz4XcMI/PT45P2WbLygJemuhGvX3kv/gKkJoFSQ1unYMg1CKU5GrbJOVypQQ0Qa GishS9bXCWa3cOeT2rb0brGGPcaOy+GP1goP1F7/YGOj5H7BVfNB2OYUIUZB296q O0IIl/Q1q3MA4TCOSEzhc8XRyij8gyenLKnEURjUpDsGILlNdCg9P0RX4j5cDlkb QMfPKRC/6WkYGuaqDjNfsjhg12nvsmi76cLkokOTaO9mj1t8bwsCAIE7EXt03cQx 12AqFtVW8BsokZ4nfGu49ndZwW0e0H6AQNPm2x2sQx+hot7dl/et0WAp+pGgfzOI ryYeasU= -----END CERTIFICATE-----Generated at Sat Dec 6 19:23:53 2025 by rpki-client