This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/997D587CABD011F0AA576211C4F9AE02.roa File: 997D587CABD011F0AA576211C4F9AE02.roa (raw, json) Hash identifier: J29CpVyilVJkH0F5PyK/Jzg80ZDp2eVcyqh2z2cf3Ik= Subject key identifier: B9:3B:31:61:34:0E:EB:D9:39:EB:5C:94:04:B4:05:95:94:E7:1B:6F Certificate issuer: /CN=A91CDC32/serialNumber=8199493AD265AD2DC73396F6BA0B6ED6CC41E10B Certificate serial: F9 Authority key identifier: 81:99:49:3A:D2:65:AD:2D:C7:33:96:F6:BA:0B:6E:D6:CC:41:E1:0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/997D587CABD011F0AA576211C4F9AE02.roa Signing time: Sat 29 Nov 2025 03:32:04 +0000 ROA not before: Sat 29 Nov 2025 03:32:04 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 26658 IP address blocks: 103.197.216.0/22 maxlen: 24 220.158.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.crl rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:14:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDC32, serialNumber=8199493AD265AD2DC73396F6BA0B6ED6CC41E10B Validity Not Before: Nov 29 03:32:04 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=692a6933-03c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c1:5e:4b:3b:e0:42:92:39:02:a0:90:eb:2c: bc:36:9c:46:c3:dd:c1:34:6f:5e:f1:16:13:cb:fb: 8c:b3:23:7a:03:8f:12:94:a7:4c:1f:32:ca:0b:28: d0:f9:11:83:41:29:99:1d:83:d8:a8:8e:77:33:9f: ae:45:6a:8b:1e:e1:f7:a6:f3:51:09:ca:ca:86:91: 0d:ae:f9:e6:02:19:c4:8d:0d:db:5a:1c:02:a3:fa: e4:bb:53:ca:83:5b:fe:9f:d1:66:b0:1d:ee:16:d6: 11:ec:f9:69:fb:9a:c1:c3:4a:b6:21:d6:e6:46:cc: 98:d6:d7:99:ca:2e:a5:d9:f5:c7:57:af:f4:e5:b9: 65:30:d3:2c:d5:3b:03:83:3c:e1:14:02:51:c3:0f: 76:26:29:7e:22:3a:68:fe:f2:4d:c5:dd:44:88:cf: 16:4a:b2:5c:1c:f1:52:0a:b8:06:61:c0:e1:7c:01: 8c:7e:f1:90:d0:3d:26:ba:95:98:40:ca:3f:8f:2a: e1:ad:59:cc:af:4e:4a:9b:24:57:79:82:59:6a:ad: 25:e2:e5:4f:28:68:8a:d3:13:93:01:7f:f2:c8:3a: eb:71:52:bb:87:76:25:2b:42:ee:9e:af:2c:18:50: 35:cb:c5:79:98:78:85:7d:76:0d:e5:53:5f:38:66: 64:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:3B:31:61:34:0E:EB:D9:39:EB:5C:94:04:B4:05:95:94:E7:1B:6F X509v3 Authority Key Identifier: keyid:81:99:49:3A:D2:65:AD:2D:C7:33:96:F6:BA:0B:6E:D6:CC:41:E1:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/997D587CABD011F0AA576211C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.197.216.0/22 220.158.252.0/22 Signature Algorithm: sha256WithRSAEncryption bf:2a:25:00:66:19:53:4b:a4:71:14:7a:dd:f8:59:b3:88:e7: ee:80:ae:3b:09:7e:9a:ad:7a:e6:91:af:d0:b2:eb:6a:7a:81: 5c:31:7f:b8:d3:5f:32:94:b0:c2:a9:ef:a0:22:a0:49:78:27: 75:07:e0:90:e5:df:aa:5b:72:3a:a9:a7:40:78:c4:fe:01:4a: 28:e5:47:bb:19:ca:4d:23:78:eb:23:86:17:48:3c:4a:34:e4: 14:57:d9:d6:c6:75:09:1f:75:ca:39:e9:04:6b:12:62:d5:fe: cb:41:95:32:8d:f4:ac:e2:ef:88:db:b6:6d:a1:fb:d9:a1:32: dd:9e:42:bf:a1:e1:0c:91:ce:58:94:bb:01:de:71:33:3a:db: de:79:ad:49:7e:83:bd:a7:14:cb:29:13:dc:60:c5:b4:06:49: 5b:ce:cd:d4:07:24:c4:eb:78:15:4c:28:09:8a:ff:ca:40:f6: 55:3a:3b:a3:b2:91:88:9d:85:76:41:8c:56:1f:73:65:b8:86: f2:6d:4b:53:b2:0f:22:a7:f3:a1:12:47:32:24:cd:99:23:66: a1:e9:d2:9f:23:03:e7:a9:c3:5e:54:61:c3:bf:01:cc:64:9b: d0:5e:3b:34:b7:b0:3f:0e:2b:bf:87:59:71:49:7e:c1:67:08: fe:dc:e9:4a -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RDMzIxMTAvBgNVBAUTKDgxOTk0OTNBRDI2NUFEMkRDNzMzOTZGNkJBMEI2RUQ2 Q0M0MUUxMEIwHhcNMjUxMTI5MDMzMjA0WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJhNjkzMy0wM2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxsFeSzvgQpI5AqCQ6yy8NpxGw93BNG9e8RYTy/uMsyN6A48SlKdMHzLKCyjQ +RGDQSmZHYPYqI53M5+uRWqLHuH3pvNRCcrKhpENrvnmAhnEjQ3bWhwCo/rku1PK g1v+n9FmsB3uFtYR7Plp+5rBw0q2IdbmRsyY1teZyi6l2fXHV6/05bllMNMs1TsD gzzhFAJRww92Jil+Ijpo/vJNxd1EiM8WSrJcHPFSCrgGYcDhfAGMfvGQ0D0mupWY QMo/jyrhrVnMr05KmyRXeYJZaq0l4uVPKGiK0xOTAX/yyDrrcVK7h3YlK0Lunq8s GFA1y8V5mHiFfXYN5VNfOGZkHQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLk7MWE0 DuvZOetclAS0BZWU5xtvMB8GA1UdIwQYMBaAFIGZSTrSZa0txzOW9roLbtbMQeEL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREMzMi8wRjA5Mjg1NDVB REUxMUVGQTVDOUEyNDBDNEY5QUUwMi9nWmxKT3RKbHJTM0hNNWIydWd0dTFzeEI0 UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dabEpPdEpsclMzSE01YjJ1Z3R1MXN4QjRRcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0RDMzIvMEYwOTI4NTQ1QURFMTFFRkE1QzlBMjQwQzRGOUFFMDIvOTk3RDU4N0NB QkQwMTFGMEFBNTc2MjExQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnxdgDBALcnvwwDQYJKoZIhvcNAQELBQADggEBAL8qJQBm GVNLpHEUet34WbOI5+6ArjsJfpqteuaRr9Cy62p6gVwxf7jTXzKUsMKp76AioEl4 J3UH4JDl36pbcjqpp0B4xP4BSijlR7sZyk0jeOsjhhdIPEo05BRX2dbGdQkfdco5 6QRrEmLV/stBlTKN9Kzi74jbtm2h+9mhMt2eQr+h4QyRzliUuwHecTM62955rUl+ g72nFMspE9xgxbQGSVvOzdQHJMTreBVMKAmK/8pA9lU6O6OykYidhXZBjFYfc2W4 hvJtS1OyDyKn86ESRzIkzZkjZqHp0p8jA+epw15UYcO/Acxkm9BeOzS3sD8OK7+H WXFJfsFnCP7c6Uo= -----END CERTIFICATE-----Generated at Sun Dec 7 00:39:14 2025 by rpki-client