This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/A84D830AA54511EAA942C683C4F9AE02.roa File: A84D830AA54511EAA942C683C4F9AE02.roa (raw, json) Hash identifier: g9TzHiZxRp9gVg5tuis5YayxUjGI5eJ759+d36dPNIU= Subject key identifier: F2:37:CD:17:9F:F7:88:94:E2:A1:A4:28:18:B3:F1:9C:F9:79:77:A6 Certificate issuer: /CN=A91C40D6/serialNumber=8E784349EF2DDF78575FD54CC78ED8C45C976CBF Certificate serial: 098B Authority key identifier: 8E:78:43:49:EF:2D:DF:78:57:5F:D5:4C:C7:8E:D8:C4:5C:97:6C:BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/A84D830AA54511EAA942C683C4F9AE02.roa Signing time: Mon 24 Nov 2025 19:40:10 +0000 ROA not before: Mon 24 Nov 2025 19:40:10 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 139750 IP address blocks: 45.253.248.0/24 maxlen: 24 45.253.249.0/24 maxlen: 24 45.253.250.0/24 maxlen: 24 45.253.251.0/24 maxlen: 24 45.253.252.0/24 maxlen: 24 45.253.253.0/24 maxlen: 24 45.253.254.0/24 maxlen: 24 45.253.255.0/24 maxlen: 24 103.144.140.0/24 maxlen: 24 103.144.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.crl rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2443 (0x98b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C40D6, serialNumber=8E784349EF2DDF78575FD54CC78ED8C45C976CBF Validity Not Before: Nov 24 19:40:10 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6924b49a-4e17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c1:90:38:7a:01:a8:76:8c:02:ab:7c:46:4a: 24:63:a5:99:52:be:12:bd:56:a7:80:fa:c5:de:25: ad:11:d6:8f:8f:2a:14:09:6e:13:16:2b:12:e5:95: 19:e6:08:c8:09:45:62:98:7b:e9:b0:1a:ad:09:8f: 8c:a7:9b:65:2d:54:f4:6e:88:84:90:a6:07:fa:55: 1e:5f:f7:3e:ab:2c:6d:47:10:02:9d:20:fa:48:08: 37:66:fd:a3:22:3f:fa:1a:cd:35:5a:c3:49:98:44: 38:1a:75:dd:d3:f4:32:f6:4e:40:b9:d6:9d:be:75: 9a:62:37:50:bf:43:fe:e0:f1:49:99:93:c8:8f:52: 81:d6:37:e2:3c:16:41:e9:d9:aa:93:37:1a:61:48: 73:24:f4:85:d9:1a:27:f7:8f:4d:f0:68:f1:fa:a9: a2:96:02:10:1d:4d:af:27:18:73:04:63:b4:cb:99: 0c:61:55:9a:bb:a9:d4:fb:35:f6:ff:83:7f:bd:9b: f2:93:14:e0:4d:7d:93:67:d6:4e:9e:88:56:11:f5: f3:09:ce:1f:17:b1:38:4e:cd:ac:70:05:6d:d2:f7: eb:ca:33:76:f2:77:f9:95:20:b3:fb:85:2a:17:83: 4a:08:58:b1:21:25:52:72:ae:d9:36:84:ef:e5:a9: 8f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:37:CD:17:9F:F7:88:94:E2:A1:A4:28:18:B3:F1:9C:F9:79:77:A6 X509v3 Authority Key Identifier: keyid:8E:78:43:49:EF:2D:DF:78:57:5F:D5:4C:C7:8E:D8:C4:5C:97:6C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/A84D830AA54511EAA942C683C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.253.248.0/21 103.144.140.0/23 Signature Algorithm: sha256WithRSAEncryption 3f:65:14:82:a2:e2:15:6d:1d:f1:e4:69:dd:75:2c:c5:35:eb: bd:ad:94:ba:71:61:de:33:9b:be:74:f4:17:63:27:df:12:41: 3d:c7:ec:02:79:35:2c:2a:1b:d8:88:47:e9:fb:95:1f:98:ce: 67:30:c4:1e:da:52:8e:ed:7d:1c:9a:40:29:60:f5:af:42:c9: 5d:73:83:d0:fc:ef:f8:91:49:68:a6:14:38:20:3b:ad:f8:22: e0:8b:77:ea:ef:30:ea:34:60:cc:fb:5b:51:6d:a7:71:b2:22: f6:72:3b:b0:2c:94:9e:46:d6:df:bc:16:61:21:ae:40:c8:4d: 18:12:c1:10:85:97:48:03:76:18:9c:32:c1:4d:9f:b0:40:f8: 84:d0:a7:0a:b3:57:6c:20:77:eb:51:41:48:fb:d9:a0:0f:c1: f6:b7:11:16:da:75:30:3d:69:97:62:23:20:ac:92:0c:33:ee: 63:25:48:4b:b4:1d:e5:ea:b8:21:78:5c:8a:25:a5:4a:c8:55: 52:82:67:3c:90:ec:52:eb:9e:cc:bc:60:b2:85:3d:48:9d:3e: 58:29:15:1b:b5:53:74:ef:a8:51:da:fd:06:12:1f:b0:81:b9: 7c:79:cb:9b:44:95:be:8f:50:f4:cb:c8:93:ad:e2:1d:f1:42: 46:8b:d3:5a -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICCYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQwRDYxMTAvBgNVBAUTKDhFNzg0MzQ5RUYyRERGNzg1NzVGRDU0Q0M3OEVEOEM0 NUM5NzZDQkYwHhcNMjUxMTI0MTk0MDEwWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTI0YjQ5YS00ZTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy8GQOHoBqHaMAqt8RkokY6WZUr4SvVangPrF3iWtEdaPjyoUCW4TFisS5ZUZ 5gjICUVimHvpsBqtCY+Mp5tlLVT0boiEkKYH+lUeX/c+qyxtRxACnSD6SAg3Zv2j Ij/6Gs01WsNJmEQ4GnXd0/Qy9k5AudadvnWaYjdQv0P+4PFJmZPIj1KB1jfiPBZB 6dmqkzcaYUhzJPSF2Ron949N8Gjx+qmilgIQHU2vJxhzBGO0y5kMYVWau6nU+zX2 /4N/vZvykxTgTX2TZ9ZOnohWEfXzCc4fF7E4Ts2scAVt0vfryjN28nf5lSCz+4Uq F4NKCFixISVScq7ZNoTv5amPFQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFPI3zRef 94iU4qGkKBiz8Zz5eXemMB8GA1UdIwQYMBaAFI54Q0nvLd94V1/VTMeO2MRcl2y/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDBENi9DQThFN0Y3RUE1 NDQxMUVBOTREQTM2ODNDNEY5QUUwMi9qbmhEU2U4dDMzaFhYOVZNeDQ3WXhGeVhi TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2puaERTZTh0MzNoWFg5Vk14NDdZeEZ5WGJMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzQwRDYvQ0E4RTdGN0VBNTQ0MTFFQTk0REEzNjgzQzRGOUFFMDIvQTg0RDgzMEFB NTQ1MTFFQUE5NDJDNjgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAMt/fgDBAFnkIwwDQYJKoZIhvcNAQELBQADggEBAD9lFIKi 4hVtHfHkad11LMU1672tlLpxYd4zm7509BdjJ98SQT3H7AJ5NSwqG9iIR+n7lR+Y zmcwxB7aUo7tfRyaQClg9a9CyV1zg9D87/iRSWimFDggO634IuCLd+rvMOo0YMz7 W1Ftp3GyIvZyO7AslJ5G1t+8FmEhrkDITRgSwRCFl0gDdhicMsFNn7BA+ITQpwqz V2wgd+tRQUj72aAPwfa3ERbadTA9aZdiIyCskgwz7mMlSEu0HeXquCF4XIolpUrI VVKCZzyQ7FLrnsy8YLKFPUidPlgpFRu1U3TvqFHa/QYSH7CBuXx5y5tElb6PUPTL yJOt4h3xQkaL01o= -----END CERTIFICATE-----Generated at Sat Dec 6 22:10:31 2025 by rpki-client