This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/4F0E3CBCD22411ED99FF3546C4F9AE02.roa File: 4F0E3CBCD22411ED99FF3546C4F9AE02.roa (raw, json) Hash identifier: C/lzbHkONP4UJU8aFbu+K+eiu6XVgx9m09u0TLZ2PvA= Subject key identifier: 4C:7B:9D:3E:47:58:AC:30:74:C2:0D:B1:64:BA:DC:87:B8:23:35:D5 Certificate issuer: /CN=A91C9286/serialNumber=C8912DF4C47F8A66BC489EC84272480A211B0682 Certificate serial: 0C45 Authority key identifier: C8:91:2D:F4:C4:7F:8A:66:BC:48:9E:C8:42:72:48:0A:21:1B:06:82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJEt9MR_ima8SJ7IQnJICiEbBoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/4F0E3CBCD22411ED99FF3546C4F9AE02.roa Signing time: Tue 02 Dec 2025 18:49:11 +0000 ROA not before: Tue 02 Dec 2025 18:49:11 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 139881 IP address blocks: 103.146.150.0/24 maxlen: 24 103.146.151.0/24 maxlen: 24 2001:df2:6580::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.crl rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJEt9MR_ima8SJ7IQnJICiEbBoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 18:06:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3141 (0xc45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9286, serialNumber=C8912DF4C47F8A66BC489EC84272480A211B0682 Validity Not Before: Dec 2 18:49:11 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=692f34a7-00f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2a:96:08:62:72:bf:17:ae:97:20:ea:42:b2: e4:ec:98:12:bd:2d:b5:74:b2:7b:e4:2d:16:9c:d7: b4:8f:2b:f9:b4:47:6f:82:42:78:df:c8:94:e2:a5: 3f:73:d1:82:20:fd:91:19:58:8c:27:3f:47:d0:ca: 44:60:d3:2b:1e:ff:34:6f:9b:63:fb:37:e6:d9:39: ed:b5:4a:e0:61:f9:45:ac:ee:7b:0b:ca:44:58:01: 10:fd:24:bb:46:ca:e2:48:7f:e2:72:f1:34:04:36: 1c:7f:eb:e9:9e:b2:76:56:13:0f:c7:1c:b7:14:3b: 2c:4a:4c:c0:48:aa:44:9c:d9:d9:fb:99:fd:24:12: 28:fd:a3:c0:69:90:04:7e:bb:0e:95:23:4e:9d:48: da:a0:90:30:26:db:a6:f3:a6:9e:fd:1d:91:53:c5: 09:f1:8c:23:50:b5:1f:52:43:3c:ff:4d:f9:f5:1e: 13:a2:bb:94:33:04:05:a8:ae:d1:70:d8:1e:66:61: c6:8f:74:0c:fa:e1:78:9f:69:25:63:03:9c:30:08: fc:47:c9:23:b4:92:16:27:45:07:9a:c2:af:90:e4: 62:74:f2:b4:d0:0a:8a:29:b1:d5:18:ee:c2:88:01: a8:f0:51:3f:e3:25:8f:ea:50:03:da:60:01:39:66: 2c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:7B:9D:3E:47:58:AC:30:74:C2:0D:B1:64:BA:DC:87:B8:23:35:D5 X509v3 Authority Key Identifier: keyid:C8:91:2D:F4:C4:7F:8A:66:BC:48:9E:C8:42:72:48:0A:21:1B:06:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJEt9MR_ima8SJ7IQnJICiEbBoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/4F0E3CBCD22411ED99FF3546C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.146.150.0/23 IPv6: 2001:df2:6580::/48 Signature Algorithm: sha256WithRSAEncryption 16:00:a5:6b:e5:35:79:03:3d:09:31:c7:21:ca:8f:98:23:25: a1:7b:57:48:b6:89:30:ba:df:c6:4b:cc:6d:55:41:d5:8d:a3: b4:06:b9:e3:40:2d:3b:02:84:51:f1:4e:e4:60:77:67:1e:52: 0d:8e:aa:d9:da:80:3f:39:f0:fd:bd:c4:db:a1:46:7c:31:10: 5d:f7:ed:39:ad:c8:e9:49:18:f0:56:a1:83:92:e6:e3:d8:24: 02:78:a2:88:9d:4e:e1:09:ae:81:6b:54:8c:50:32:0b:81:b7: 4b:46:00:a9:7c:13:9a:4e:78:d5:5f:58:3d:98:3e:19:1a:4c: 86:64:17:52:45:94:2c:f8:a8:02:11:46:0c:54:bf:09:ec:c3: f2:2d:b3:5e:e7:82:f5:33:d4:c2:1c:d2:81:15:9d:a2:a7:fe: 9a:e3:ce:4e:72:09:62:92:a2:62:8d:6f:08:9a:54:97:d6:f1: 1a:d6:7a:c0:23:2f:6f:fb:37:12:31:ab:5f:37:80:03:98:88: 24:1a:29:83:22:86:0e:4b:b1:b4:15:cb:9e:4d:14:f0:87:c5: f8:81:ba:52:e1:3f:7e:67:e9:bf:27:7b:f4:f2:28:4e:88:6a: 2e:64:5b:cb:ff:eb:4d:f1:0d:50:70:ac:23:e7:d0:4d:7e:22: a3:5a:d0:6d -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICDEUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkyODYxMTAvBgNVBAUTKEM4OTEyREY0QzQ3RjhBNjZCQzQ4OUVDODQyNzI0ODBB MjExQjA2ODIwHhcNMjUxMjAyMTg0OTExWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJmMzRhNy0wMGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1iqWCGJyvxeulyDqQrLk7JgSvS21dLJ75C0WnNe0jyv5tEdvgkJ438iU4qU/ c9GCIP2RGViMJz9H0MpEYNMrHv80b5tj+zfm2TnttUrgYflFrO57C8pEWAEQ/SS7 RsriSH/icvE0BDYcf+vpnrJ2VhMPxxy3FDssSkzASKpEnNnZ+5n9JBIo/aPAaZAE frsOlSNOnUjaoJAwJtum86ae/R2RU8UJ8YwjULUfUkM8/0359R4ToruUMwQFqK7R cNgeZmHGj3QM+uF4n2klYwOcMAj8R8kjtJIWJ0UHmsKvkORidPK00AqKKbHVGO7C iAGo8FE/4yWP6lAD2mABOWYsgQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFEx7nT5H WKwwdMINsWS63Ie4IzXVMB8GA1UdIwQYMBaAFMiRLfTEf4pmvEieyEJySAohGwaC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTI4Ni9DQTk2MUMwMjIw OEQxMUVBOUZCN0NBM0ZDNEY5QUUwMi95SkV0OU1SX2ltYThTSjdJUW5KSUNpRWJC b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lKRXQ5TVJfaW1hOFNKN0lRbkpJQ2lFYkJvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzkyODYvQ0E5NjFDMDIyMDhEMTFFQTlGQjdDQTNGQzRGOUFFMDIvNEYwRTNDQkNE MjI0MTFFRDk5RkYzNTQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnkpYwDwQCAAIwCQMHACABDfJlgDANBgkqhkiG9w0BAQsF AAOCAQEAFgCla+U1eQM9CTHHIcqPmCMloXtXSLaJMLrfxkvMbVVB1Y2jtAa540At OwKEUfFO5GB3Zx5SDY6q2dqAPznw/b3E26FGfDEQXfftOa3I6UkY8Fahg5Lm49gk AniiiJ1O4QmugWtUjFAyC4G3S0YAqXwTmk541V9YPZg+GRpMhmQXUkWULPioAhFG DFS/CezD8i2zXueC9TPUwhzSgRWdoqf+muPOTnIJYpKiYo1vCJpUl9bxGtZ6wCMv b/s3EjGrXzeAA5iIJBopgyKGDkuxtBXLnk0U8IfF+IG6UuE/fmfpvyd79PIoTohq LmRby//rTfENUHCsI+fQTX4io1rQbQ== -----END CERTIFICATE-----Generated at Sun Dec 7 02:35:01 2025 by rpki-client