This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/43540B7A0EE311EF9E24862BC4F9AE02.roa File: 43540B7A0EE311EF9E24862BC4F9AE02.roa (raw, json) Hash identifier: mV4y857QRPSQMJQogVNfC/t4weo9OVDbm55M2NQZyIc= Subject key identifier: 9E:C8:98:85:E2:14:44:82:5A:45:07:AB:5F:AB:ED:DD:D2:41:D8:61 Certificate issuer: /CN=A91C8B4F/serialNumber=40DB9E2CBADECDA9B972351021507ADCD1A5627F Certificate serial: 048A Authority key identifier: 40:DB:9E:2C:BA:DE:CD:A9:B9:72:35:10:21:50:7A:DC:D1:A5:62:7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNueLLrezam5cjUQIVB63NGlYn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/43540B7A0EE311EF9E24862BC4F9AE02.roa Signing time: Thu 04 Dec 2025 22:37:23 +0000 ROA not before: Thu 04 Dec 2025 22:37:23 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 45814 IP address blocks: 103.48.24.0/24 maxlen: 24 103.48.25.0/24 maxlen: 24 103.104.84.0/24 maxlen: 24 103.104.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.crl rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNueLLrezam5cjUQIVB63NGlYn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 22:48:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1162 (0x48a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8B4F, serialNumber=40DB9E2CBADECDA9B972351021507ADCD1A5627F Validity Not Before: Dec 4 22:37:23 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69320d23-d84f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:53:7a:ae:17:96:bd:09:0a:52:28:a6:47:52: 71:6e:8e:29:ae:d4:17:c0:1f:8b:f7:b7:79:ee:be: 22:ca:8c:71:73:91:3f:ca:14:e5:f4:8b:b9:2e:00: af:80:33:7e:e9:29:7e:b6:9e:fd:c8:50:04:5e:b8: 42:33:c7:78:3e:4f:83:69:32:4e:01:e6:ce:4e:b8: b1:ea:e4:c1:13:d0:83:a4:7d:f3:25:de:59:02:d5: 72:ad:d7:a9:68:e9:65:1e:75:0a:77:34:9d:b2:2a: 6c:9d:ea:6c:ee:d3:de:3e:9e:1b:25:d5:15:71:51: a9:37:ce:04:73:4f:6a:7c:92:38:c1:98:08:93:dc: 85:57:df:52:e0:f9:58:7a:32:df:8b:88:03:c1:0b: e3:bf:92:f0:88:6c:40:b9:f4:5a:89:69:91:4b:c7: b5:66:fb:8b:61:7f:c7:9c:fa:94:66:bb:24:58:cb: 95:21:b3:e7:60:27:cb:f8:0f:fb:c1:f0:04:8b:f5: 54:28:d0:13:76:a9:ee:ff:da:bf:31:3e:7b:e6:ff: 5c:cb:ed:10:de:1f:fd:7a:de:a4:fb:06:a7:e1:98: d7:39:41:c0:a9:63:de:f9:84:15:4d:bd:5a:93:c9: 13:7b:1e:09:fa:40:7a:3c:40:dd:2d:4b:ad:0d:cc: ee:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:C8:98:85:E2:14:44:82:5A:45:07:AB:5F:AB:ED:DD:D2:41:D8:61 X509v3 Authority Key Identifier: keyid:40:DB:9E:2C:BA:DE:CD:A9:B9:72:35:10:21:50:7A:DC:D1:A5:62:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNueLLrezam5cjUQIVB63NGlYn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/43540B7A0EE311EF9E24862BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.48.24.0/23 103.104.84.0/23 Signature Algorithm: sha256WithRSAEncryption 7f:87:c9:fa:76:fe:6d:91:a1:f3:5a:43:a5:1e:87:85:e0:54: be:2b:ef:fa:30:a6:a6:c8:1a:2b:22:c4:5c:4f:5c:a3:d3:e2: da:9d:21:4e:8a:09:4a:1a:c0:7b:b3:d2:bd:73:71:c0:22:33: 7c:1d:6a:18:04:c5:32:5c:c8:c3:e2:25:5e:25:4d:a1:d9:19: 43:14:6e:cb:1c:0c:ad:7a:5d:0e:a8:96:4b:65:47:8f:c5:d3: 0d:cd:92:96:05:14:b3:e3:34:70:7e:27:71:29:b1:98:46:c7: b3:a9:4e:b5:50:71:b3:4b:08:4d:a4:20:72:5f:9e:78:62:c0: 7f:c7:8e:a3:57:b5:07:89:66:d7:db:66:a3:0f:2c:e7:00:f4: d3:e9:f0:45:73:4e:bf:ba:54:28:23:96:bf:79:92:3d:21:07: b8:00:8e:be:f3:dc:cc:f9:40:1c:db:d7:08:9b:08:7f:f3:bd: b3:ee:d5:3f:b8:5a:d7:a0:c5:b4:7e:85:43:a1:bc:66:83:fe: 6a:51:d6:79:0b:53:16:33:df:f9:26:f7:7e:79:2e:93:4f:9a: b3:16:96:20:e0:13:e6:4a:bb:92:ea:03:e1:f8:b5:d6:ca:6d: 09:cb:58:e2:47:e2:68:b6:9a:f0:6c:c8:a3:6f:87:d8:31:25: 9b:62:e3:f9 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhCNEYxMTAvBgNVBAUTKDQwREI5RTJDQkFERUNEQTlCOTcyMzUxMDIxNTA3QURD RDFBNTYyN0YwHhcNMjUxMjA0MjIzNzIzWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTMyMGQyMy1kODRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsVN6rheWvQkKUiimR1Jxbo4prtQXwB+L97d57r4iyoxxc5E/yhTl9Iu5LgCv gDN+6Sl+tp79yFAEXrhCM8d4Pk+DaTJOAebOTrix6uTBE9CDpH3zJd5ZAtVyrdep aOllHnUKdzSdsipsneps7tPePp4bJdUVcVGpN84Ec09qfJI4wZgIk9yFV99S4PlY ejLfi4gDwQvjv5LwiGxAufRaiWmRS8e1ZvuLYX/HnPqUZrskWMuVIbPnYCfL+A/7 wfAEi/VUKNATdqnu/9q/MT575v9cy+0Q3h/9et6k+wan4ZjXOUHAqWPe+YQVTb1a k8kTex4J+kB6PEDdLUutDczuXQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJ7ImIXi FESCWkUHq1+r7d3SQdhhMB8GA1UdIwQYMBaAFEDbniy63s2puXI1ECFQetzRpWJ/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEI0Ri9ERDczMjY0ODY4 QkMxMUVDODc4MDc5NDhDNEY5QUUwMi9RTnVlTExyZXphbTVjalVRSVZCNjNOR2xZ bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FOdWVMTHJlemFtNWNqVVFJVkI2M05HbFluOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzhCNEYvREQ3MzI2NDg2OEJDMTFFQzg3ODA3OTQ4QzRGOUFFMDIvNDM1NDBCN0Ew RUUzMTFFRjlFMjQ4NjJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnMBgDBAFnaFQwDQYJKoZIhvcNAQELBQADggEBAH+Hyfp2 /m2RofNaQ6Ueh4XgVL4r7/owpqbIGisixFxPXKPT4tqdIU6KCUoawHuz0r1zccAi M3wdahgExTJcyMPiJV4lTaHZGUMUbsscDK16XQ6olktlR4/F0w3NkpYFFLPjNHB+ J3EpsZhGx7OpTrVQcbNLCE2kIHJfnnhiwH/HjqNXtQeJZtfbZqMPLOcA9NPp8EVz Tr+6VCgjlr95kj0hB7gAjr7z3Mz5QBzb1wibCH/zvbPu1T+4WtegxbR+hUOhvGaD /mpR1nkLUxYz3/km9355LpNPmrMWliDgE+ZKu5LqA+H4tdbKbQnLWOJH4mi2mvBs yKNvh9gxJZti4/k= -----END CERTIFICATE-----Generated at Sun Dec 7 02:47:50 2025 by rpki-client