This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/7B3EE1DC524811F0B02FCD27C4F9AE02.roa File: 7B3EE1DC524811F0B02FCD27C4F9AE02.roa (raw, json) Hash identifier: kMBiYRb8mxC3e0GjqxC5EdicFThYrTP4waXCvHjqnwQ= Subject key identifier: 70:E1:88:1E:AF:CE:74:09:7E:81:3F:6B:00:29:E5:47:28:45:A0:44 Certificate issuer: /CN=A91C99B4/serialNumber=348BE6694ED7041AAF28D0EC8C6C6565591F2DDA Certificate serial: 0779 Authority key identifier: 34:8B:E6:69:4E:D7:04:1A:AF:28:D0:EC:8C:6C:65:65:59:1F:2D:DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/7B3EE1DC524811F0B02FCD27C4F9AE02.roa Signing time: Fri 28 Nov 2025 06:14:19 +0000 ROA not before: Fri 28 Nov 2025 06:14:19 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 140723 IP address blocks: 103.158.160.0/24 maxlen: 24 103.158.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1913 (0x779) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C99B4, serialNumber=348BE6694ED7041AAF28D0EC8C6C6565591F2DDA Validity Not Before: Nov 28 06:14:19 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=69293dba-ae6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4e:4d:18:e4:43:ed:7e:a4:00:c9:74:02:c4: 72:d2:17:a9:96:6e:74:2f:5f:49:e3:e4:ad:97:53: f3:b2:56:b6:4c:fc:ef:53:45:71:82:7b:ec:80:f5: ab:a4:bc:f5:eb:c7:53:b6:6f:8b:92:2e:c1:e7:02: 7e:0b:7c:8b:c0:d6:da:ac:3c:50:00:aa:ac:43:9b: f9:91:b3:56:a0:06:da:1b:28:83:93:84:26:45:4e: 28:86:fc:ab:ca:bb:95:e3:40:89:6e:39:2f:3c:8b: f4:19:3e:98:0c:f4:d9:e9:e7:ad:92:c8:d1:6f:45: 40:ec:05:54:4b:ff:0d:95:63:98:9c:b9:7b:93:df: cf:e2:d0:4b:22:b6:42:36:ea:38:37:b6:25:63:e1: 25:ed:01:dc:02:1a:b7:c8:26:0c:40:6b:d6:48:7e: 5c:dd:20:5a:ac:13:ce:b9:82:e5:43:5f:26:ce:59: 9e:4c:bd:14:48:65:2b:8e:92:e3:e9:f4:fb:18:fc: fb:75:01:52:72:2f:df:51:39:3f:79:07:47:14:77: ac:8a:94:86:64:5f:ba:95:3a:13:93:5b:9e:20:80: 5d:17:71:48:11:db:c6:a9:ef:bd:fb:1e:e1:c1:9c: 0c:21:ea:47:89:4b:f6:f7:8b:d9:11:b1:9c:d0:37: 3e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E1:88:1E:AF:CE:74:09:7E:81:3F:6B:00:29:E5:47:28:45:A0:44 X509v3 Authority Key Identifier: keyid:34:8B:E6:69:4E:D7:04:1A:AF:28:D0:EC:8C:6C:65:65:59:1F:2D:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/7B3EE1DC524811F0B02FCD27C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.158.160.0/23 Signature Algorithm: sha256WithRSAEncryption 01:f8:f8:61:9e:57:66:24:dc:33:82:08:8d:5d:cd:b9:36:f0: a8:40:60:67:86:d7:84:9a:a1:eb:be:e9:7e:be:df:c9:a1:3c: 4d:f0:44:56:26:4b:ed:4b:c8:d6:87:d2:f4:f9:f8:42:d4:71: 25:86:2b:f1:1e:3b:8b:81:d9:2c:d0:87:69:6c:d6:2f:5e:c6: 43:ef:52:27:a4:19:e8:1d:cf:47:08:3e:21:7c:18:fc:0b:9d: 9f:15:cc:92:ac:49:be:b8:c1:7b:7b:aa:83:e3:8d:96:6d:67: 45:c1:fb:5c:18:c6:6a:07:ad:d2:0a:dc:bd:af:53:8d:0a:fa: 9d:fe:18:55:93:8f:42:75:10:d6:eb:77:68:1e:b3:08:da:ce: 46:fb:77:b3:2f:f2:a1:02:36:d1:cd:c0:4c:f1:5c:59:25:da: 77:a6:b6:9f:8f:29:15:f4:d1:9d:b6:c3:26:59:7a:cb:12:b1: 66:d0:6a:ca:52:97:92:90:9e:cc:20:de:0b:6a:24:9e:04:18: 5c:ea:e4:e4:02:58:98:e4:db:82:18:b6:5c:6b:69:2f:7f:fa: b7:03:e3:aa:bc:b3:83:d4:5c:98:17:c1:59:98:ac:67:10:c0: 69:95:9a:53:90:ae:3b:01:85:da:6a:e9:15:7c:1b:63:bb:ff: f8:34:21:b5 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB3kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk5QjQxMTAvBgNVBAUTKDM0OEJFNjY5NEVENzA0MUFBRjI4RDBFQzhDNkM2NTY1 NTkxRjJEREEwHhcNMjUxMTI4MDYxNDE5WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTI5M2RiYS1hZTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwE5NGORD7X6kAMl0AsRy0heplm50L19J4+Stl1Pzsla2TPzvU0VxgnvsgPWr pLz168dTtm+Lki7B5wJ+C3yLwNbarDxQAKqsQ5v5kbNWoAbaGyiDk4QmRU4ohvyr yruV40CJbjkvPIv0GT6YDPTZ6eetksjRb0VA7AVUS/8NlWOYnLl7k9/P4tBLIrZC Nuo4N7YlY+El7QHcAhq3yCYMQGvWSH5c3SBarBPOuYLlQ18mzlmeTL0USGUrjpLj 6fT7GPz7dQFSci/fUTk/eQdHFHesipSGZF+6lToTk1ueIIBdF3FIEdvGqe+9+x7h wZwMIepHiUv294vZEbGc0Dc+WQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHDhiB6v znQJfoE/awAp5UcoRaBEMB8GA1UdIwQYMBaAFDSL5mlO1wQaryjQ7IxsZWVZHy3a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTlCNC81REU1OTY5NjU5 NDkxMUVCQTQ4Qzc4NzFDNEY5QUUwMi9OSXZtYVU3WEJCcXZLTkRzakd4bFpWa2ZM ZG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Jdm1hVTdYQkJxdktORHNqR3hsWlZrZkxkby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qzk5QjQvNURFNTk2OTY1OTQ5MTFFQkE0OEM3ODcxQzRGOUFFMDIvN0IzRUUxREM1 MjQ4MTFGMEIwMkZDRDI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnnqAwDQYJKoZIhvcNAQELBQADggEBAAH4+GGeV2Yk3DOC CI1dzbk28KhAYGeG14Saoeu+6X6+38mhPE3wRFYmS+1LyNaH0vT5+ELUcSWGK/Ee O4uB2SzQh2ls1i9exkPvUiekGegdz0cIPiF8GPwLnZ8VzJKsSb64wXt7qoPjjZZt Z0XB+1wYxmoHrdIK3L2vU40K+p3+GFWTj0J1ENbrd2geswjazkb7d7Mv8qECNtHN wEzxXFkl2nemtp+PKRX00Z22wyZZessSsWbQaspSl5KQnswg3gtqJJ4EGFzq5OQC WJjk24IYtlxraS9/+rcD46q8s4PUXJgXwVmYrGcQwGmVmlOQrjsBhdpq6RV8G2O7 //g0IbU= -----END CERTIFICATE-----Generated at Sat Dec 6 22:25:27 2025 by rpki-client