This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/69911E0893AB11EEADF5F71BC4F9AE02.roa File: 69911E0893AB11EEADF5F71BC4F9AE02.roa (raw, json) Hash identifier: PSEZLzwnpVP0bMdPm9ss1klBUjjhwDdtS6Etm70E9UM= Subject key identifier: 8B:FF:1D:37:85:07:AB:B5:6C:34:5B:39:9D:C1:45:90:78:85:F9:13 Certificate issuer: /CN=A91D28C2/serialNumber=3EE5229761306B97BDA7FBE1F24CB4B04D49258F Certificate serial: 06FA Authority key identifier: 3E:E5:22:97:61:30:6B:97:BD:A7:FB:E1:F2:4C:B4:B0:4D:49:25:8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PuUil2Ewa5e9p_vh8ky0sE1JJY8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/69911E0893AB11EEADF5F71BC4F9AE02.roa Signing time: Wed 22 Oct 2025 23:11:20 +0000 ROA not before: Wed 22 Oct 2025 23:11:20 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 131291 IP address blocks: 43.224.250.0/24 maxlen: 24 43.224.251.0/24 maxlen: 24 103.44.110.0/24 maxlen: 24 103.44.111.0/24 maxlen: 24 103.242.36.0/23 maxlen: 23 103.242.36.0/24 maxlen: 24 103.242.37.0/24 maxlen: 24 2401:8940:e000::/40 maxlen: 40 2401:8940:fc00::/40 maxlen: 40 2401:8940:fd00::/40 maxlen: 40 2401:8940:fe00::/40 maxlen: 40 2401:8940:ff00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.crl rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PuUil2Ewa5e9p_vh8ky0sE1JJY8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 20:47:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1786 (0x6fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D28C2, serialNumber=3EE5229761306B97BDA7FBE1F24CB4B04D49258F Validity Not Before: Oct 22 23:11:20 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68f96497-c5a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:11:74:7a:2a:71:33:03:d9:07:33:c2:2a:01: 5c:c0:0d:68:c2:75:58:4b:55:d7:70:a6:fb:e1:4d: 8f:26:92:c6:59:e0:10:ca:0c:f6:68:03:4c:38:3d: 65:50:57:ab:25:19:42:da:32:77:53:89:c0:ca:f2: 8c:cf:2c:97:47:64:c5:d5:98:7c:64:b3:46:96:e8: a6:a3:43:55:0e:60:de:67:5b:b5:da:19:93:72:0b: 84:a3:1a:91:a4:de:a3:b5:b1:e2:25:75:6a:c7:b9: ae:b0:a4:e3:d4:12:35:c7:0f:6e:a1:95:91:68:2c: 75:ac:37:1c:28:1a:47:7c:f5:83:8f:6d:20:0c:c4: de:22:39:93:2d:40:5f:0c:e3:bb:cf:a0:46:5f:5b: bf:96:5a:26:cb:e0:d3:86:6a:c7:4e:51:75:c5:84: a8:03:d1:6e:9d:f4:13:64:aa:2f:50:cc:71:15:cc: 03:d6:7b:ee:65:ed:ec:3b:44:c3:52:45:7f:27:83: 9e:7a:27:24:37:ab:4e:97:0e:2b:6f:15:48:a6:37: 06:87:33:f3:26:2d:f3:74:64:59:ff:5e:61:94:19: b0:1f:c6:53:14:b3:4e:1a:53:d6:78:de:53:08:1b: cb:f7:15:56:9f:00:26:95:4e:a6:ba:3a:33:a9:32: d3:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:FF:1D:37:85:07:AB:B5:6C:34:5B:39:9D:C1:45:90:78:85:F9:13 X509v3 Authority Key Identifier: keyid:3E:E5:22:97:61:30:6B:97:BD:A7:FB:E1:F2:4C:B4:B0:4D:49:25:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PuUil2Ewa5e9p_vh8ky0sE1JJY8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/69911E0893AB11EEADF5F71BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.224.250.0/23 103.44.110.0/23 103.242.36.0/23 IPv6: 2401:8940:e000::/40 2401:8940:fc00::/38 Signature Algorithm: sha256WithRSAEncryption 35:93:66:93:e5:f3:23:25:1a:bd:04:c1:fb:33:e2:c7:cf:ca: 18:c2:5d:1a:ea:13:4d:7e:a2:ed:4e:a0:d9:95:7f:94:2a:3b: 18:e6:c6:7f:95:35:a0:5c:1d:60:56:d8:65:09:b1:39:81:5e: e7:86:c7:5a:8f:bc:9a:d7:ac:5f:b0:0c:e5:29:cd:b2:7b:72: e0:52:77:62:f5:ad:c9:7e:05:73:fa:f2:5a:b4:62:e7:57:53: 3a:d7:4d:fc:f1:ca:13:58:d5:38:4c:1d:e4:16:f6:5c:f4:82: 79:89:63:62:95:af:25:19:cb:3a:ca:81:ca:65:65:36:6f:40: 6f:f0:57:38:22:b5:07:e2:ed:93:40:03:b1:1b:a6:39:5b:73: 4e:e7:cb:31:06:07:4f:aa:e9:91:66:8c:ae:6f:04:c2:b5:09: a4:f0:79:7c:47:22:4a:67:6d:04:c9:02:9a:b3:50:69:17:af: 3b:c7:0b:f9:53:53:f1:58:b4:92:c8:53:e8:1c:9e:2c:28:e5: 0f:eb:42:bf:8b:d1:db:f5:02:d3:98:c1:1f:ab:82:96:24:3f: 31:05:8d:68:b8:9d:fe:8f:66:f9:ac:28:7d:a2:12:ae:30:b9: 65:10:49:b8:c0:8c:d3:46:e0:d1:28:7c:4c:2d:08:61:46:88: 09:c1:1f:3f -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgICBvowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI4QzIxMTAvBgNVBAUTKDNFRTUyMjk3NjEzMDZCOTdCREE3RkJFMUYyNENCNEIw NEQ0OTI1OEYwHhcNMjUxMDIyMjMxMTIwWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGY5NjQ5Ny1jNWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRF0eipxMwPZBzPCKgFcwA1ownVYS1XXcKb74U2PJpLGWeAQygz2aANMOD1l UFerJRlC2jJ3U4nAyvKMzyyXR2TF1Zh8ZLNGluimo0NVDmDeZ1u12hmTcguEoxqR pN6jtbHiJXVqx7musKTj1BI1xw9uoZWRaCx1rDccKBpHfPWDj20gDMTeIjmTLUBf DOO7z6BGX1u/llomy+DThmrHTlF1xYSoA9FunfQTZKovUMxxFcwD1nvuZe3sO0TD UkV/J4OeeickN6tOlw4rbxVIpjcGhzPzJi3zdGRZ/15hlBmwH8ZTFLNOGlPWeN5T CBvL9xVWnwAmlU6mujozqTLTswIDAQABo4ICuTCCArUwHQYDVR0OBBYEFIv/HTeF B6u1bDRbOZ3BRZB4hfkTMB8GA1UdIwQYMBaAFD7lIpdhMGuXvaf74fJMtLBNSSWP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjhDMi9GNjlDM0JBQzY2 OTUxMUVCOEY0MjNGNTVDNEY5QUUwMi9QdVVpbDJFd2E1ZTlwX3ZoOGt5MHNFMUpK WTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B1VWlsMkV3YTVlOXBfdmg4a3kwc0UxSkpZOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDI4QzIvRjY5QzNCQUM2Njk1MTFFQjhGNDIzRjU1QzRGOUFFMDIvNjk5MTFFMDg5 M0FCMTFFRUFERjVGNzFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQwYIKwYBBQUHAQcBAf8E NDAyMBgEAgABMBIDBAEr4PoDBAFnLG4DBAFn8iQwFgQCAAIwEAMGACQBiUDgAwYC JAGJQPwwDQYJKoZIhvcNAQELBQADggEBADWTZpPl8yMlGr0Ewfsz4sfPyhjCXRrq E01+ou1OoNmVf5QqOxjmxn+VNaBcHWBW2GUJsTmBXueGx1qPvJrXrF+wDOUpzbJ7 cuBSd2L1rcl+BXP68lq0YudXUzrXTfzxyhNY1ThMHeQW9lz0gnmJY2KVryUZyzrK gcplZTZvQG/wVzgitQfi7ZNAA7Ebpjlbc07nyzEGB0+q6ZFmjK5vBMK1CaTweXxH IkpnbQTJApqzUGkXrzvHC/lTU/FYtJLIU+gcniwo5Q/rQr+L0dv1AtOYwR+rgpYk PzEFjWi4nf6PZvmsKH2iEq4wuWUQSbjAjNNG4NEofEwtCGFGiAnBHz8= -----END CERTIFICATE-----Generated at Sat Dec 6 19:14:44 2025 by rpki-client