This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/207388F2D45E11EE8D29793EC4F9AE02.roa File: 207388F2D45E11EE8D29793EC4F9AE02.roa (raw, json) Hash identifier: sNtdGhFP5+8wGIN0odNsPXpZSkmhBenTgX2lN0L4D9w= Subject key identifier: 86:66:D9:D7:E1:A0:F6:DF:DD:0F:60:F5:8A:06:4B:70:35:28:35:2C Certificate issuer: /CN=A91CA8EA/serialNumber=B628B8A925C45E3AC3A71BE4114662998BF4B3E0 Certificate serial: 04F0 Authority key identifier: B6:28:B8:A9:25:C4:5E:3A:C3:A7:1B:E4:11:46:62:99:8B:F4:B3:E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/207388F2D45E11EE8D29793EC4F9AE02.roa Signing time: Fri 14 Nov 2025 22:44:27 +0000 ROA not before: Fri 14 Nov 2025 22:44:27 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 136897 IP address blocks: 103.175.196.0/23 maxlen: 23 103.175.196.0/24 maxlen: 24 2001:df7:fc80::/48 maxlen: 48 2001:df7:fc80::/56 maxlen: 56 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.crl rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:18:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1264 (0x4f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA8EA, serialNumber=B628B8A925C45E3AC3A71BE4114662998BF4B3E0 Validity Not Before: Nov 14 22:44:27 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6917b0ca-1b6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:41:53:28:0e:93:47:45:7a:85:1e:e8:c8:36: 82:41:6e:0b:7f:c0:a6:6e:65:37:59:34:fc:32:74: 0b:70:31:46:23:f6:65:7c:8c:e2:61:34:21:cd:84: 78:19:c8:93:b3:3e:54:68:85:79:bd:bd:6b:0d:4d: 7d:89:72:28:16:7b:4f:42:2c:9f:de:2c:e2:a9:29: 78:cd:63:8d:67:c0:5b:08:38:4b:78:64:af:5d:ea: 28:43:a2:d2:03:5f:bb:c5:0a:7a:ea:30:5e:c6:4d: d5:2c:b0:1f:2c:56:8a:bc:6e:78:7f:1a:e4:32:b9: af:1f:df:cb:81:45:91:db:b2:5a:e8:63:06:93:88: 33:16:74:f2:a7:5e:c9:e9:51:ca:90:50:6d:1d:6c: 00:5e:36:1b:6c:7c:cd:dc:f9:87:36:b3:e4:5c:b3: 4a:a5:bd:68:36:ad:fe:13:d3:3c:9f:33:3a:3e:b7: 6d:50:56:85:18:36:ec:8a:e3:a2:1d:f0:ff:51:de: 95:21:48:b5:29:a3:65:70:3e:3c:6f:f6:67:86:bb: 89:f7:25:b3:73:1a:84:3f:6e:19:82:d3:1a:85:ff: 2a:bd:09:4a:72:40:a0:b4:6b:e0:70:64:6b:a3:a1: 77:8b:e5:08:50:46:0d:33:33:35:a9:4a:54:32:a5: 38:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:66:D9:D7:E1:A0:F6:DF:DD:0F:60:F5:8A:06:4B:70:35:28:35:2C X509v3 Authority Key Identifier: keyid:B6:28:B8:A9:25:C4:5E:3A:C3:A7:1B:E4:11:46:62:99:8B:F4:B3:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/207388F2D45E11EE8D29793EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.175.196.0/23 IPv6: 2001:df7:fc80::/48 Signature Algorithm: sha256WithRSAEncryption 09:a6:9e:47:6f:71:42:a3:5b:1d:a9:67:e6:f5:56:67:b7:fe: fa:e6:c7:78:20:7d:87:46:f2:1c:9b:38:35:9f:12:ce:ec:9d: b9:9f:ca:87:ed:d6:ab:5e:a4:29:a5:4f:bb:13:9f:91:2b:86: d0:f2:3c:fd:15:f3:fc:69:fe:f4:d7:c9:03:93:d2:79:17:0a: 72:c2:ef:e5:57:09:ec:9a:02:4f:dd:b1:9d:17:54:bb:c1:c1: 60:81:2c:66:8b:98:d0:3e:ee:29:03:36:46:20:87:c1:9c:ad: ca:4e:a9:4d:84:67:5b:95:b3:c4:f5:44:cc:3f:76:6a:fd:1c: f8:47:10:62:df:f7:7d:2e:89:8f:b0:a2:a2:1f:5b:88:16:25: f6:ba:d9:f0:a0:12:4d:a7:56:88:0e:a5:2f:56:7d:63:d8:f0: 83:ba:4a:4e:f5:d9:ad:b1:77:79:a0:13:1c:f7:cb:eb:7e:ff: 5b:b4:31:87:ba:c6:db:b4:91:e3:24:a4:43:1b:02:10:3b:71: 02:75:89:4a:d8:68:59:ab:17:39:65:9a:9d:11:cd:de:84:25: 98:16:2d:f7:18:e1:43:6c:2b:69:dc:a3:cf:3d:ff:74:0f:10: c6:19:58:37:be:0a:aa:f4:23:3d:49:fb:93:8e:7d:e7:14:2c: f9:9f:bb:99 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E4RUExMTAvBgNVBAUTKEI2MjhCOEE5MjVDNDVFM0FDM0E3MUJFNDExNDY2Mjk5 OEJGNEIzRTAwHhcNMjUxMTE0MjI0NDI3WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTE3YjBjYS0xYjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsUFTKA6TR0V6hR7oyDaCQW4Lf8CmbmU3WTT8MnQLcDFGI/ZlfIziYTQhzYR4 GciTsz5UaIV5vb1rDU19iXIoFntPQiyf3iziqSl4zWONZ8BbCDhLeGSvXeooQ6LS A1+7xQp66jBexk3VLLAfLFaKvG54fxrkMrmvH9/LgUWR27Ja6GMGk4gzFnTyp17J 6VHKkFBtHWwAXjYbbHzN3PmHNrPkXLNKpb1oNq3+E9M8nzM6PrdtUFaFGDbsiuOi HfD/Ud6VIUi1KaNlcD48b/ZnhruJ9yWzcxqEP24ZgtMahf8qvQlKckCgtGvgcGRr o6F3i+UIUEYNMzM1qUpUMqU4WQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFIZm2dfh oPbf3Q9g9YoGS3A1KDUsMB8GA1UdIwQYMBaAFLYouKklxF46w6cb5BFGYpmL9LPg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQThFQS9EOENBMTNDMjQw NDkxMUVDOUI2RUZFN0JDNEY5QUUwMi90aWk0cVNYRVhqckRweHZrRVVaaW1ZdjBz LUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RpaTRxU1hFWGpyRHB4dmtFVVppbVl2MHMtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0E4RUEvRDhDQTEzQzI0MDQ5MTFFQzlCNkVGRTdCQzRGOUFFMDIvMjA3Mzg4RjJE NDVFMTFFRThEMjk3OTNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnr8QwDwQCAAIwCQMHACABDff8gDANBgkqhkiG9w0BAQsF AAOCAQEACaaeR29xQqNbHaln5vVWZ7f++ubHeCB9h0byHJs4NZ8SzuyduZ/Kh+3W q16kKaVPuxOfkSuG0PI8/RXz/Gn+9NfJA5PSeRcKcsLv5VcJ7JoCT92xnRdUu8HB YIEsZouY0D7uKQM2RiCHwZytyk6pTYRnW5WzxPVEzD92av0c+EcQYt/3fS6Jj7Ci oh9biBYl9rrZ8KASTadWiA6lL1Z9Y9jwg7pKTvXZrbF3eaATHPfL637/W7Qxh7rG 27SR4ySkQxsCEDtxAnWJSthoWasXOWWanRHN3oQlmBYt9xjhQ2wradyjzz3/dA8Q xhlYN74KqvQjPUn7k4595xQs+Z+7mQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:46:33 2025 by rpki-client