This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/90DB8A1EC6D211F09BF8672AC4F9AE02.roa File: 90DB8A1EC6D211F09BF8672AC4F9AE02.roa (raw, json) Hash identifier: Ch+R31zIfrzJRKJgm2Tt2XWhXYTdX4v/XjJrTvmQJyQ= Subject key identifier: D7:A4:76:B4:1D:74:C6:CB:3F:CA:0A:17:63:67:74:90:CC:F0:4E:59 Certificate issuer: /CN=A91D298C/serialNumber=5FC26B928DEDC90C391CC4F529BA7B9E09A5046E Certificate serial: 05 Authority key identifier: 5F:C2:6B:92:8D:ED:C9:0C:39:1C:C4:F5:29:BA:7B:9E:09:A5:04:6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/90DB8A1EC6D211F09BF8672AC4F9AE02.roa Signing time: Fri 21 Nov 2025 12:06:52 +0000 ROA not before: Fri 21 Nov 2025 12:06:52 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 141883 IP address blocks: 103.143.14.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.crl rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:51:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D298C, serialNumber=5FC26B928DEDC90C391CC4F529BA7B9E09A5046E Validity Not Before: Nov 21 12:06:52 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=692055dc-99bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b9:93:28:eb:c1:71:2d:e9:a2:b0:7b:65:71: 76:19:92:32:76:da:98:cf:fe:b7:e6:49:73:84:33: 90:c2:38:43:52:6a:f8:db:24:92:fb:7b:5c:cf:c2: 2b:38:80:5a:24:4c:00:e8:c2:1f:40:27:09:c3:c2: 1d:bc:23:82:ec:ca:b8:dd:bb:d4:aa:67:b5:07:15: ef:9c:c7:70:16:41:05:78:bf:60:4f:cf:9a:f5:e3: b1:e6:c5:08:a5:08:ab:68:ad:ab:ad:4b:99:dc:70: c0:62:bd:2f:69:98:22:d8:a1:20:10:d1:96:35:f2: f9:b8:0a:ff:bd:8e:f7:1e:5f:25:7f:33:32:e7:fb: 91:54:74:b4:7a:51:54:31:e3:db:c7:6c:99:6d:1e: 20:97:38:37:7a:46:f3:e7:45:82:94:05:2c:75:ec: 97:f8:20:ab:3b:ff:8e:9f:3d:db:d1:bd:ae:ca:ad: 81:5d:7d:ea:f3:71:3f:c8:f2:1b:b1:92:81:ee:f8: be:46:af:b5:02:fb:55:cd:1a:09:c8:6e:82:02:4e: 44:b1:20:41:a6:7b:08:0a:89:f6:89:5f:4d:86:3a: c9:69:2b:19:1f:5f:68:9d:50:68:db:f6:67:f3:9c: 10:b5:b4:f4:02:71:52:f7:d1:e9:05:fa:81:04:3c: e0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:A4:76:B4:1D:74:C6:CB:3F:CA:0A:17:63:67:74:90:CC:F0:4E:59 X509v3 Authority Key Identifier: keyid:5F:C2:6B:92:8D:ED:C9:0C:39:1C:C4:F5:29:BA:7B:9E:09:A5:04:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/90DB8A1EC6D211F09BF8672AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.143.14.0/23 Signature Algorithm: sha256WithRSAEncryption b1:15:3c:3e:a3:2d:37:69:85:10:23:65:87:e3:3e:eb:fa:95: e3:95:b0:51:75:6d:e1:89:2e:4d:22:83:6f:48:96:29:01:87: d0:d8:82:e8:83:5c:a5:a8:6d:8c:05:84:fe:fe:5e:9d:73:1c: ba:46:9e:b7:72:5b:f6:23:5c:23:e1:85:55:ab:0d:e0:fd:57: 09:fe:2b:22:01:e4:29:1b:6e:5f:f1:b4:29:73:4e:79:31:e4: 5e:2a:cf:03:22:a0:bc:a1:71:02:00:72:5c:9d:6f:f7:4b:82: cf:a3:1b:d5:67:2a:4e:02:8e:84:ed:04:00:73:1e:48:d4:ca: 59:ec:dc:47:37:4f:02:d0:6a:b7:9a:44:80:72:fe:6c:a7:5f: e3:0e:58:28:4a:ef:73:53:66:24:b5:04:a2:e7:ae:4c:32:da: fa:04:06:97:38:93:55:0c:93:27:63:0b:16:bb:ed:9d:5a:1d: 4a:c2:f3:5e:ac:4f:05:2d:f7:ae:ee:6d:29:43:82:d8:5b:30: e6:05:71:b9:05:6d:8b:d8:05:48:f9:0e:1b:73:22:f5:42:38: 9d:f6:04:08:62:93:09:94:36:c7:d0:6d:2d:54:0d:33:aa:b7: 7e:c8:f7:dd:01:00:df:80:5e:40:a9:fa:8b:89:98:4f:dd:a5: c9:d8:d7:0f -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE Mjk4QzExMC8GA1UEBRMoNUZDMjZCOTI4REVEQzkwQzM5MUNDNEY1MjlCQTdCOUUw OUE1MDQ2RTAeFw0yNTExMjExMjA2NTJaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MjA1NWRjLTk5YmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBuZMo68FxLemisHtlcXYZkjJ22pjP/rfmSXOEM5DCOENSavjbJJL7e1zPwis4 gFokTADowh9AJwnDwh28I4Lsyrjdu9SqZ7UHFe+cx3AWQQV4v2BPz5r147HmxQil CKtorautS5nccMBivS9pmCLYoSAQ0ZY18vm4Cv+9jvceXyV/MzLn+5FUdLR6UVQx 49vHbJltHiCXODd6RvPnRYKUBSx17Jf4IKs7/46fPdvRva7KrYFdferzcT/I8hux koHu+L5Gr7UC+1XNGgnIboICTkSxIEGmewgKifaJX02GOslpKxkfX2idUGjb9mfz nBC1tPQCcVL30ekF+oEEPODBAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU16R2tB10 xss/ygoXY2d0kMzwTlkwHwYDVR0jBBgwFoAUX8Jrko3tyQw5HMT1Kbp7ngmlBG4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyOThDL0FDNUU4QUMyQzZE MDExRjBCRDg4NEE3OUM0RjlBRTAyL1g4SnJrbzN0eVF3NUhNVDFLYnA3bmdtbEJH NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWDhKcmtvM3R5UXc1SE1UMUticDduZ21sQkc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Mjk4Qy9BQzVFOEFDMkM2RDAxMUYwQkQ4ODRBNzlDNEY5QUUwMi85MERCOEExRUM2 RDIxMUYwOUJGODY3MkFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWePDjANBgkqhkiG9w0BAQsFAAOCAQEAsRU8PqMtN2mFECNl h+M+6/qV45WwUXVt4YkuTSKDb0iWKQGH0NiC6INcpahtjAWE/v5enXMcukaet3Jb 9iNcI+GFVasN4P1XCf4rIgHkKRtuX/G0KXNOeTHkXirPAyKgvKFxAgByXJ1v90uC z6Mb1WcqTgKOhO0EAHMeSNTKWezcRzdPAtBqt5pEgHL+bKdf4w5YKErvc1NmJLUE oueuTDLa+gQGlziTVQyTJ2MLFrvtnVodSsLzXqxPBS33ru5tKUOC2Fsw5gVxuQVt i9gFSPkOG3Mi9UI4nfYECGKTCZQ2x9BtLVQNM6q3fsj33QEA34BeQKn6i4mYT92l ydjXDw== -----END CERTIFICATE-----Generated at Sat Dec 6 16:46:52 2025 by rpki-client