This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/064042F259F511EDB22E3F2BC4F9AE02.roa File: 064042F259F511EDB22E3F2BC4F9AE02.roa (raw, json) Hash identifier: S8UZRzpubYCJ+X0jACj9ZehbJ6hRsnjRgE1noRmlqCA= Subject key identifier: 50:B3:72:29:2A:CB:DA:45:F6:6A:C4:1F:74:73:02:3B:66:A6:09:10 Certificate issuer: /CN=A91C1FA7/serialNumber=FF5D132BC66AAA2BBCF65C3E5FE89A0C371D8B3A Certificate serial: 0239 Authority key identifier: FF:5D:13:2B:C6:6A:AA:2B:BC:F6:5C:3E:5F:E8:9A:0C:37:1D:8B:3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_10TK8Zqqiu89lw-X-iaDDcdizo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/064042F259F511EDB22E3F2BC4F9AE02.roa Signing time: Mon 03 Nov 2025 02:16:36 +0000 ROA not before: Mon 03 Nov 2025 02:16:36 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 150393 IP address blocks: 103.29.182.0/24 maxlen: 24 103.29.183.0/24 maxlen: 24 2001:df1:7840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.crl rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_10TK8Zqqiu89lw-X-iaDDcdizo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 00:19:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 569 (0x239) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1FA7, serialNumber=FF5D132BC66AAA2BBCF65C3E5FE89A0C371D8B3A Validity Not Before: Nov 3 02:16:36 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69081084-8c10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3a:29:be:bf:98:b9:ae:23:e7:d1:ae:96:17: 84:6d:ae:c2:95:66:de:eb:dc:be:21:dc:8d:3c:f8: 6e:54:f7:f9:98:45:62:ad:cc:1a:79:bc:9c:e5:ad: 58:21:6b:87:e8:0a:a9:c6:af:3f:9d:83:21:29:71: e0:11:fd:5c:4e:68:f9:4a:fa:82:c8:16:c5:56:c1: 7b:a0:52:ee:d4:e4:a9:7e:31:01:d4:f6:ab:c0:01: 54:5c:d9:dc:cf:cd:5b:e7:28:64:4e:4f:95:5e:c8: 18:e7:8e:d7:94:52:47:84:d2:be:09:12:c0:bc:ce: fa:33:5c:69:6b:e3:74:80:0d:6b:61:46:1d:29:d3: a5:70:c7:71:0d:84:79:fa:30:07:c5:dc:d5:b6:00: 14:bb:00:0a:7b:83:03:c2:ba:e5:e9:3f:b1:d1:45: 2c:eb:ec:53:71:2c:a7:d6:5f:43:50:e2:66:cd:c2: 92:14:34:ae:13:32:68:0f:09:a4:cd:5e:a1:a6:42: 13:76:82:1f:7a:5b:5a:dd:69:93:ba:c3:4d:1e:85: 8d:62:9c:05:f7:0c:de:5f:9a:a6:2a:27:e9:b8:70: 1f:da:13:88:f6:9d:ff:b2:a4:97:7e:92:41:eb:6c: 3f:30:0e:1f:cf:77:9f:dc:42:87:aa:c4:75:c0:8e: 41:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:B3:72:29:2A:CB:DA:45:F6:6A:C4:1F:74:73:02:3B:66:A6:09:10 X509v3 Authority Key Identifier: keyid:FF:5D:13:2B:C6:6A:AA:2B:BC:F6:5C:3E:5F:E8:9A:0C:37:1D:8B:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_10TK8Zqqiu89lw-X-iaDDcdizo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/064042F259F511EDB22E3F2BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.29.182.0/23 IPv6: 2001:df1:7840::/48 Signature Algorithm: sha256WithRSAEncryption 2f:aa:5a:5c:06:70:4b:54:f1:9e:ae:d1:17:05:75:db:32:4a: d8:f2:be:d1:a0:d8:37:f4:e4:8c:e9:2e:d4:0d:29:fe:f3:33: c4:e7:25:98:e1:34:fa:22:91:53:da:35:07:5f:4e:8d:f7:64: 4e:8d:78:eb:47:2b:ab:3e:69:d3:9f:80:d8:ac:0c:c0:78:e1: a4:ac:af:8e:b7:44:b5:48:28:6b:59:71:66:00:ea:b8:b3:f1: 8e:93:33:52:3f:97:f9:7e:98:51:59:10:56:e9:2a:e0:29:eb: b9:4b:5e:98:12:0f:f8:fc:d9:7a:09:e8:90:a6:72:3b:dc:18: e0:e1:c6:0a:61:47:3c:a7:19:9f:fc:cb:70:07:60:0f:91:aa: 0f:5d:6a:0e:5a:e0:e0:b9:26:00:60:4d:54:35:52:25:19:d6: 72:90:af:d7:f4:b4:43:ea:45:bd:32:75:0a:da:16:9b:d9:b1: 0c:c8:18:3a:b0:3a:1d:cf:d3:d6:c8:56:cb:8c:c4:26:9a:1a: 36:d4:36:0f:8d:b1:b0:da:00:89:b3:77:ef:e9:c5:3a:ca:b2: 35:7f:ce:6c:9b:3f:b1:64:6b:bf:46:10:a2:94:33:58:d6:6c: 76:7a:6f:ec:f2:5b:79:c1:29:b9:07:e6:08:5c:80:ec:46:a4: 52:8b:d4:33 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFGQTcxMTAvBgNVBAUTKEZGNUQxMzJCQzY2QUFBMkJCQ0Y2NUMzRTVGRTg5QTBD MzcxRDhCM0EwHhcNMjUxMTAzMDIxNjM2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA4MTA4NC04YzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsjopvr+Yua4j59GulheEba7ClWbe69y+IdyNPPhuVPf5mEVircwaebyc5a1Y IWuH6Aqpxq8/nYMhKXHgEf1cTmj5SvqCyBbFVsF7oFLu1OSpfjEB1ParwAFUXNnc z81b5yhkTk+VXsgY547XlFJHhNK+CRLAvM76M1xpa+N0gA1rYUYdKdOlcMdxDYR5 +jAHxdzVtgAUuwAKe4MDwrrl6T+x0UUs6+xTcSyn1l9DUOJmzcKSFDSuEzJoDwmk zV6hpkITdoIfelta3WmTusNNHoWNYpwF9wzeX5qmKifpuHAf2hOI9p3/sqSXfpJB 62w/MA4fz3ef3EKHqsR1wI5ByQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFFCzcikq y9pF9mrEH3RzAjtmpgkQMB8GA1UdIwQYMBaAFP9dEyvGaqorvPZcPl/omgw3HYs6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUZBNy8yRDk5MUNEMDU5 OUYxMUVEQjk2N0FFMzlDNEY5QUUwMi9fMTBUSzhacXFpdTg5bHctWC1pYUREY2Rp em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18xMFRLOFpxcWl1ODlsdy1YLWlhRERjZGl6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzFGQTcvMkQ5OTFDRDA1OTlGMTFFREI5NjdBRTM5QzRGOUFFMDIvMDY0MDQyRjI1 OUY1MTFFREIyMkUzRjJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnHbYwDwQCAAIwCQMHACABDfF4QDANBgkqhkiG9w0BAQsF AAOCAQEAL6paXAZwS1Txnq7RFwV12zJK2PK+0aDYN/TkjOku1A0p/vMzxOclmOE0 +iKRU9o1B19OjfdkTo1460crqz5p05+A2KwMwHjhpKyvjrdEtUgoa1lxZgDquLPx jpMzUj+X+X6YUVkQVukq4CnruUtemBIP+PzZegnokKZyO9wY4OHGCmFHPKcZn/zL cAdgD5GqD11qDlrg4LkmAGBNVDVSJRnWcpCv1/S0Q+pFvTJ1CtoWm9mxDMgYOrA6 Hc/T1shWy4zEJpoaNtQ2D42xsNoAibN37+nFOsqyNX/ObJs/sWRrv0YQopQzWNZs dnpv7PJbecEpuQfmCFyA7EakUovUMw== -----END CERTIFICATE-----Generated at Sun Dec 7 10:52:36 2025 by rpki-client