This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/61663178F88311EDB1DF555DC4F9AE02.roa File: 61663178F88311EDB1DF555DC4F9AE02.roa (raw, json) Hash identifier: FLWPyCCdfmecVu0JHu1esGWqwLx8eepgbZ0pVH/wRzU= Subject key identifier: 7C:90:A2:74:1F:81:73:7E:C8:B2:6C:3D:40:2C:3A:80:07:0B:A2:11 Certificate issuer: /CN=A91CFA8E/serialNumber=D880EF265B940E31DFED1C42AEF5144B64413717 Certificate serial: 0206 Authority key identifier: D8:80:EF:26:5B:94:0E:31:DF:ED:1C:42:AE:F5:14:4B:64:41:37:17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/61663178F88311EDB1DF555DC4F9AE02.roa Signing time: Fri 07 Nov 2025 05:03:19 +0000 ROA not before: Fri 07 Nov 2025 05:03:19 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 56309 IP address blocks: 43.229.148.0/22 maxlen: 24 43.249.32.0/23 maxlen: 24 103.13.28.0/22 maxlen: 24 103.40.118.0/23 maxlen: 24 103.99.11.0/24 maxlen: 24 103.107.52.0/22 maxlen: 24 103.114.201.0/24 maxlen: 24 103.114.203.0/24 maxlen: 24 103.117.148.0/22 maxlen: 24 103.224.84.0/22 maxlen: 24 117.18.124.0/22 maxlen: 24 199.21.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.crl rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 518 (0x206) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFA8E, serialNumber=D880EF265B940E31DFED1C42AEF5144B64413717 Validity Not Before: Nov 7 05:03:19 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=690d7d97-ed35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5e:22:9f:13:73:b2:88:41:60:1a:17:13:e3: 4a:8e:cc:6a:98:17:2a:52:51:85:1d:48:10:8b:90: 6c:ed:8c:a0:00:b2:df:d6:a8:86:25:a6:e6:d1:05: 47:24:0b:5f:d3:96:a8:fc:40:f2:40:ff:47:b4:b3: d0:28:8d:2a:1d:ab:db:9b:cb:c0:b8:a6:4a:f5:f7: 9c:e2:13:bc:ec:38:aa:fb:7e:50:d2:f1:7a:b3:4d: 2f:e9:fa:84:67:19:2a:99:a8:3d:71:ec:91:18:e8: 43:7d:b9:9d:6f:d1:88:a1:0c:9d:14:ae:88:13:83: f3:32:32:bf:e8:2a:68:96:ce:a7:22:7b:01:fd:a2: ba:89:b2:0c:80:fc:30:62:a0:0e:13:0a:fd:08:42: 09:ea:7b:aa:9a:13:c1:8e:bc:2b:b7:50:83:78:c9: 9b:bf:c2:a2:dd:5d:1f:f4:45:2e:be:ab:9e:ec:fd: af:bd:37:5e:52:03:9a:ca:b1:06:15:4f:11:12:86: cf:d3:cc:61:24:eb:fd:51:cd:5e:7c:a0:1d:6d:72: bc:4a:bb:64:5e:db:a9:e7:6f:e7:5a:88:7c:8d:5d: 85:37:df:87:9a:7e:7b:86:4e:f8:29:39:db:54:9a: 00:41:63:f9:f4:f0:fd:37:a7:c6:e9:f0:f9:43:15: 89:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:90:A2:74:1F:81:73:7E:C8:B2:6C:3D:40:2C:3A:80:07:0B:A2:11 X509v3 Authority Key Identifier: keyid:D8:80:EF:26:5B:94:0E:31:DF:ED:1C:42:AE:F5:14:4B:64:41:37:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/61663178F88311EDB1DF555DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.229.148.0/22 43.249.32.0/23 103.13.28.0/22 103.40.118.0/23 103.99.11.0/24 103.107.52.0/22 103.114.201.0/24 103.114.203.0/24 103.117.148.0/22 103.224.84.0/22 117.18.124.0/22 199.21.172.0/22 Signature Algorithm: sha256WithRSAEncryption 6e:dd:32:39:ea:0a:71:d9:07:d5:9b:96:7e:dd:b1:f4:0d:75: 19:b0:63:b4:73:86:6b:ef:a5:b1:80:4d:97:a8:6b:4e:d9:13: 41:86:f6:64:2e:61:00:b4:51:8f:43:ba:3c:72:6d:cd:79:e4: 13:41:d3:98:91:d4:e1:8e:85:a4:63:ee:99:7d:30:62:cf:a3: ab:a0:52:8b:7c:41:48:ad:30:5f:bc:67:4d:e3:53:6e:d0:96: bb:37:b6:3b:17:34:bc:9b:e0:90:67:35:31:2a:d1:bf:c0:51: 75:29:85:92:2b:bb:1c:1e:58:6a:e6:7f:77:6a:a7:66:0e:d9: cf:05:21:08:32:7c:24:87:18:c5:7b:bc:63:7a:87:a9:01:65: 29:ea:93:40:88:da:cb:36:21:a2:5c:7f:08:22:b0:14:63:f0: b3:b8:ee:8b:d4:f4:8c:48:07:2b:80:1f:50:f8:bb:89:fc:20: 7f:22:6b:a3:00:16:90:1a:0e:e8:e7:6c:b1:86:3d:9e:e0:79: 8a:dd:44:50:d1:eb:1d:ed:ea:ae:92:6f:79:60:2a:f7:e3:fd: 23:3a:57:5c:d9:2e:b7:d9:96:a8:5c:bd:62:df:f7:60:06:7d: 8d:92:56:3b:5d:22:34:bd:4f:f8:e1:6c:09:7d:af:fc:dd:b3: 07:48:a7:ca -----BEGIN CERTIFICATE----- MIIFszCCBJugAwIBAgICAgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZBOEUxMTAvBgNVBAUTKEQ4ODBFRjI2NUI5NDBFMzFERkVEMUM0MkFFRjUxNDRC NjQ0MTM3MTcwHhcNMjUxMTA3MDUwMzE5WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTBkN2Q5Ny1lZDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqF4inxNzsohBYBoXE+NKjsxqmBcqUlGFHUgQi5Bs7YygALLf1qiGJabm0QVH JAtf05ao/EDyQP9HtLPQKI0qHavbm8vAuKZK9fec4hO87Diq+35Q0vF6s00v6fqE Zxkqmag9ceyRGOhDfbmdb9GIoQydFK6IE4PzMjK/6Cpols6nInsB/aK6ibIMgPww YqAOEwr9CEIJ6nuqmhPBjrwrt1CDeMmbv8Ki3V0f9EUuvque7P2vvTdeUgOayrEG FU8REobP08xhJOv9Uc1efKAdbXK8SrtkXtup52/nWoh8jV2FN9+Hmn57hk74KTnb VJoAQWP59PD9N6fG6fD5QxWJIQIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFHyQonQf gXN+yLJsPUAsOoAHC6IRMB8GA1UdIwQYMBaAFNiA7yZblA4x3+0cQq71FEtkQTcX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkE4RS82MUJBRDhFMEY4 N0UxMUVEOTBEODQ0NUNDNEY5QUUwMi8ySUR2Smx1VURqSGY3UnhDcnZVVVMyUkJO eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJJRHZKbHVVRGpIZjdSeENydlVVUzJSQk54Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0ZBOEUvNjFCQUQ4RTBGODdFMTFFRDkwRDg0NDVDQzRGOUFFMDIvNjE2NjMxNzhG ODgzMTFFREIxREY1NTVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwYQYIKwYBBQUHAQcBAf8E UjBQME4EAgABMEgDBAIr5ZQDBAEr+SADBAJnDRwDBAFnKHYDBABnYwsDBAJnazQD BABncskDBABncssDBAJndZQDBAJn4FQDBAJ1EnwDBALHFawwDQYJKoZIhvcNAQEL BQADggEBAG7dMjnqCnHZB9Wbln7dsfQNdRmwY7RzhmvvpbGATZeoa07ZE0GG9mQu YQC0UY9Dujxybc155BNB05iR1OGOhaRj7pl9MGLPo6ugUot8QUitMF+8Z03jU27Q lrs3tjsXNLyb4JBnNTEq0b/AUXUphZIruxweWGrmf3dqp2YO2c8FIQgyfCSHGMV7 vGN6h6kBZSnqk0CI2ss2IaJcfwgisBRj8LO47ovU9IxIByuAH1D4u4n8IH8ia6MA FpAaDujnbLGGPZ7geYrdRFDR6x3t6q6Sb3lgKvfj/SM6V1zZLrfZlqhcvWLf92AG fY2SVjtdIjS9T/jhbAl9r/zdswdIp8o= -----END CERTIFICATE-----Generated at Sun Dec 7 00:19:36 2025 by rpki-client