This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/F67C04568FE011EDA9919C57C4F9AE02.roa File: F67C04568FE011EDA9919C57C4F9AE02.roa (raw, json) Hash identifier: DFdPG99faL2Uy7SH7Qallz1187Os6wr5b2O19nIz8q8= Subject key identifier: AF:08:D9:D0:C6:EC:D2:5C:E7:BD:F0:57:77:A6:3D:57:F6:B1:9D:58 Certificate issuer: /CN=A91D4120/serialNumber=3FCD3F33A8E0825C39E4A84CD69395A6F2B06148 Certificate serial: 021A Authority key identifier: 3F:CD:3F:33:A8:E0:82:5C:39:E4:A8:4C:D6:93:95:A6:F2:B0:61:48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P80_M6jgglw55KhM1pOVpvKwYUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/F67C04568FE011EDA9919C57C4F9AE02.roa Signing time: Wed 19 Nov 2025 00:48:16 +0000 ROA not before: Wed 19 Nov 2025 00:48:16 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 150444 IP address blocks: 103.101.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.crl rsync://rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P80_M6jgglw55KhM1pOVpvKwYUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 00:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 538 (0x21a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4120, serialNumber=3FCD3F33A8E0825C39E4A84CD69395A6F2B06148 Validity Not Before: Nov 19 00:48:16 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=691d13d0-94fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:98:af:6c:7d:5f:73:de:06:89:b8:8b:a5:8d: 6e:ea:eb:af:4b:12:5b:21:bd:f6:12:b3:5b:0d:63: d4:87:c7:b9:71:b0:7f:5c:5a:42:37:3d:49:b6:a8: 94:ec:09:ab:ba:86:ee:64:ae:d0:84:74:82:9f:43: 28:23:0b:c3:37:c1:03:3f:c7:91:4a:51:ec:0b:c8: 7a:dc:1b:f7:00:32:b1:4e:9b:7c:f0:54:59:21:61: d2:6d:4b:2f:7e:e3:f1:ff:39:8e:4e:47:76:45:dd: c2:1e:75:ec:95:64:47:e4:37:62:6d:a6:b9:a9:17: c6:38:b4:f9:2a:c9:52:5a:44:cc:77:20:0d:1c:92: b3:14:32:55:58:5d:9e:9d:a4:58:90:29:36:1f:ba: 85:9d:88:99:75:be:f0:bf:a5:31:95:b8:ac:55:5d: 98:82:07:a8:0c:80:85:0f:c8:b9:66:be:cb:e3:55: 1c:d9:d2:33:c4:4d:8a:99:16:a2:d7:61:6a:0b:05: 8c:f8:35:3b:03:2c:f2:39:a4:c2:25:e9:41:4b:ea: 13:a1:c8:7d:a2:53:e3:f1:27:47:be:2d:df:20:76: 83:74:af:aa:2f:3c:dc:46:31:e3:f1:9d:60:01:ec: 5d:00:16:03:06:31:a5:27:2e:f5:88:05:9e:89:e1: 2d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:08:D9:D0:C6:EC:D2:5C:E7:BD:F0:57:77:A6:3D:57:F6:B1:9D:58 X509v3 Authority Key Identifier: keyid:3F:CD:3F:33:A8:E0:82:5C:39:E4:A8:4C:D6:93:95:A6:F2:B0:61:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P80_M6jgglw55KhM1pOVpvKwYUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/F67C04568FE011EDA9919C57C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.101.152.0/24 Signature Algorithm: sha256WithRSAEncryption 52:46:93:40:73:21:81:57:d1:c0:95:15:bb:dd:55:2c:9c:28: 37:0c:99:95:30:52:3f:5e:4b:18:f9:55:42:ed:c5:f1:b1:df: e8:58:c6:4d:e1:fe:4f:ec:ac:61:53:ba:46:83:8b:74:aa:29: 6b:9e:6f:48:62:5d:78:94:89:7a:4a:e5:49:3c:2b:0d:1f:60: 07:96:72:f1:e9:7f:1b:e2:7e:66:f3:d7:d2:97:e9:b0:3c:b0: 89:87:df:ac:eb:45:c9:72:17:0a:6a:54:02:6f:63:ce:c4:ed: fb:09:6a:c6:94:e3:38:85:3a:2c:33:00:7a:ac:ee:32:e6:29: 04:c7:fa:76:26:42:9b:d3:59:f9:ae:18:2b:8b:99:74:7f:b9: 87:02:03:da:10:60:dd:cb:7a:f7:1b:84:d0:c7:12:9c:68:55: e9:3b:e9:f3:58:e2:7e:34:9f:9e:c3:e0:a4:24:a6:c1:0a:ee: 31:d0:00:e4:99:b1:b3:02:0e:e8:29:66:15:f5:aa:61:f7:72: 92:e1:6a:ca:c2:da:cc:93:4f:03:91:6a:2d:96:a3:a7:4a:b7: 62:21:81:49:a4:69:05:ab:39:e0:f6:22:cd:02:3c:cf:09:5b: ec:21:4c:7e:da:ad:b9:7a:26:67:e9:66:2f:ac:c4:e2:08:c6: af:4a:ad:e8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQxMjAxMTAvBgNVBAUTKDNGQ0QzRjMzQThFMDgyNUMzOUU0QTg0Q0Q2OTM5NUE2 RjJCMDYxNDgwHhcNMjUxMTE5MDA0ODE2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTFkMTNkMC05NGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7pivbH1fc94GibiLpY1u6uuvSxJbIb32ErNbDWPUh8e5cbB/XFpCNz1JtqiU 7AmruobuZK7QhHSCn0MoIwvDN8EDP8eRSlHsC8h63Bv3ADKxTpt88FRZIWHSbUsv fuPx/zmOTkd2Rd3CHnXslWRH5Ddibaa5qRfGOLT5KslSWkTMdyANHJKzFDJVWF2e naRYkCk2H7qFnYiZdb7wv6UxlbisVV2YggeoDICFD8i5Zr7L41Uc2dIzxE2KmRai 12FqCwWM+DU7AyzyOaTCJelBS+oToch9olPj8SdHvi3fIHaDdK+qLzzcRjHj8Z1g AexdABYDBjGlJy71iAWeieEtowIDAQABo4IClTCCApEwHQYDVR0OBBYEFK8I2dDG 7NJc573wV3emPVf2sZ1YMB8GA1UdIwQYMBaAFD/NPzOo4IJcOeSoTNaTlabysGFI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDEyMC83NkE1ODg0RThG REUxMUVEQTczNTE5NTdDNEY5QUUwMi9QODBfTTZqZ2dsdzU1S2hNMXBPVnB2S3dZ VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A4MF9NNmpnZ2x3NTVLaE0xcE9WcHZLd1lVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDQxMjAvNzZBNTg4NEU4RkRFMTFFREE3MzUxOTU3QzRGOUFFMDIvRjY3QzA0NTY4 RkUwMTFFREE5OTE5QzU3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnZZgwDQYJKoZIhvcNAQELBQADggEBAFJGk0BzIYFX0cCV FbvdVSycKDcMmZUwUj9eSxj5VULtxfGx3+hYxk3h/k/srGFTukaDi3SqKWueb0hi XXiUiXpK5Uk8Kw0fYAeWcvHpfxvifmbz19KX6bA8sImH36zrRclyFwpqVAJvY87E 7fsJasaU4ziFOiwzAHqs7jLmKQTH+nYmQpvTWfmuGCuLmXR/uYcCA9oQYN3Levcb hNDHEpxoVek76fNY4n40n57D4KQkpsEK7jHQAOSZsbMCDugpZhX1qmH3cpLhasrC 2syTTwORai2Wo6dKt2IhgUmkaQWrOeD2Is0CPM8JW+whTH7arbl6JmfpZi+sxOII xq9Kreg= -----END CERTIFICATE-----Generated at Sun Dec 7 02:40:17 2025 by rpki-client