This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/A6DF4CF8C34B11ECAFB25A68C4F9AE02.roa File: A6DF4CF8C34B11ECAFB25A68C4F9AE02.roa (raw, json) Hash identifier: QjWbiFJAMwmBAEMY1qS6fhF8PiRDmATsLV7gaqED+dA= Subject key identifier: 7B:8D:D0:E3:2B:76:1B:04:6F:75:BF:4D:09:FD:A3:58:7D:15:A5:8D Certificate issuer: /CN=A91D56CA/serialNumber=675A8676ED37D16ABBCA2FEF8EAA1F23F257B29F Certificate serial: 1848 Authority key identifier: 67:5A:86:76:ED:37:D1:6A:BB:CA:2F:EF:8E:AA:1F:23:F2:57:B2:9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/A6DF4CF8C34B11ECAFB25A68C4F9AE02.roa Signing time: Mon 24 Nov 2025 16:34:50 +0000 ROA not before: Mon 24 Nov 2025 16:34:50 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 135628 IP address blocks: 103.77.17.0/24 maxlen: 24 103.77.18.0/23 maxlen: 24 203.153.60.0/23 maxlen: 23 203.153.60.0/24 maxlen: 24 203.153.61.0/24 maxlen: 24 203.153.63.0/24 maxlen: 24 2407:8780::/32 maxlen: 32 2407:8780::/48 maxlen: 48 2407:8780:1::/48 maxlen: 48 2407:8780:2::/48 maxlen: 48 2407:8780:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.crl rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 16:08:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6216 (0x1848) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D56CA, serialNumber=675A8676ED37D16ABBCA2FEF8EAA1F23F257B29F Validity Not Before: Nov 24 16:34:50 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6924892a-5088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ba:0d:fb:4d:e0:2f:aa:42:da:28:3d:fd:a8: 5e:e3:ca:48:16:1c:00:49:05:35:76:9a:cc:47:9e: 99:37:30:54:1c:d6:de:4e:9a:ec:ad:1a:73:b8:cd: 8f:a1:0c:34:06:ef:05:c4:5e:dc:e4:c8:8a:74:e7: 06:89:f4:e7:f9:0e:1c:25:82:60:a7:f2:f5:16:e4: d8:a6:ba:0b:0c:9d:0a:0e:72:09:52:c7:fa:04:a3: 1f:a6:46:ed:63:0d:15:d8:78:dd:ff:03:11:61:2e: 6d:5e:61:5a:26:cb:c1:1c:5c:cd:62:8b:60:0c:75: 07:3e:b5:3d:9b:cb:8c:4c:bb:87:73:1b:1b:c5:26: d5:95:87:93:14:05:b0:0b:db:15:44:10:38:28:3c: 94:65:f8:15:5b:d5:34:3e:af:ae:7c:81:8c:76:29: 24:bc:7b:94:ff:a4:01:09:96:5e:dd:2b:84:72:3d: 80:ff:d3:de:63:00:4c:6e:4a:bf:04:5a:25:bc:77: 72:92:07:e9:c6:a1:a4:8f:64:01:03:ff:a9:46:2d: c8:4e:62:95:e2:31:5f:4c:ee:28:1a:ae:70:bb:05: 6e:1f:b0:db:e0:fb:46:f0:54:1e:e7:3e:dd:b8:dd: 61:03:42:0c:df:74:a0:d3:e8:2c:e0:a9:d0:24:b1: 61:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:8D:D0:E3:2B:76:1B:04:6F:75:BF:4D:09:FD:A3:58:7D:15:A5:8D X509v3 Authority Key Identifier: keyid:67:5A:86:76:ED:37:D1:6A:BB:CA:2F:EF:8E:AA:1F:23:F2:57:B2:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/A6DF4CF8C34B11ECAFB25A68C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.77.17.0-103.77.19.255 203.153.60.0/23 203.153.63.0/24 IPv6: 2407:8780::/32 Signature Algorithm: sha256WithRSAEncryption 1b:33:3e:6e:08:f3:20:dc:0f:84:91:0a:1c:bc:15:fe:9f:86: bb:d8:ee:34:ee:39:2b:e4:bf:09:51:e8:55:b6:ca:71:d0:d9: 7b:ed:26:83:67:c8:1e:da:88:51:ec:e8:08:45:b1:53:41:8e: 99:a8:a6:a2:8d:55:0a:0a:e4:7d:81:c6:d2:73:56:3d:d8:c7: ff:29:37:af:4f:39:83:7d:36:19:43:cd:d0:85:9a:69:71:2d: a3:39:47:25:cd:f0:98:b8:87:d5:c2:fb:32:41:2d:3b:f9:42: 5c:73:6c:2d:f9:27:de:17:7a:2e:0c:df:88:5f:81:da:59:a1: f4:60:79:47:d4:0d:21:3b:4e:38:3e:b4:c7:a7:8b:78:a5:1e: ed:4b:66:1d:32:24:c0:f7:78:7e:29:90:cd:a8:01:19:d6:ad: f8:70:43:c1:81:27:74:3d:cc:e7:23:87:e2:12:49:88:08:72: c7:5e:18:ce:7f:a3:3a:8c:27:c8:d9:69:8e:f1:09:92:52:d8: fc:32:b1:fa:f4:90:2f:49:9b:41:d7:00:16:c0:a8:1f:af:28: 7a:31:ba:6b:ed:64:ca:b2:de:5b:92:80:01:20:f4:11:8f:6a: b6:92:fc:1d:3e:d5:88:29:a7:5f:e8:fe:5c:10:b7:0c:32:ab: c3:1b:a8:22 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgICGEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU2Q0ExMTAvBgNVBAUTKDY3NUE4Njc2RUQzN0QxNkFCQkNBMkZFRjhFQUExRjIz RjI1N0IyOUYwHhcNMjUxMTI0MTYzNDUwWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTI0ODkyYS01MDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoLoN+03gL6pC2ig9/ahe48pIFhwASQU1dprMR56ZNzBUHNbeTprsrRpzuM2P oQw0Bu8FxF7c5MiKdOcGifTn+Q4cJYJgp/L1FuTYproLDJ0KDnIJUsf6BKMfpkbt Yw0V2Hjd/wMRYS5tXmFaJsvBHFzNYotgDHUHPrU9m8uMTLuHcxsbxSbVlYeTFAWw C9sVRBA4KDyUZfgVW9U0Pq+ufIGMdikkvHuU/6QBCZZe3SuEcj2A/9PeYwBMbkq/ BFolvHdykgfpxqGkj2QBA/+pRi3ITmKV4jFfTO4oGq5wuwVuH7Db4PtG8FQe5z7d uN1hA0IM33Sg0+gs4KnQJLFhvwIDAQABo4ICuDCCArQwHQYDVR0OBBYEFHuN0OMr dhsEb3W/TQn9o1h9FaWNMB8GA1UdIwQYMBaAFGdahnbtN9Fqu8ov746qHyPyV7Kf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTZDQS85MTRFNTNGNkMw RDExMUU3OEQxRUY4MkJDNEY5QUUwMi9aMXFHZHUwMzBXcTd5aV92anFvZklfSlhz cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1oxcUdkdTAzMFdxN3lpX3ZqcW9mSV9KWHNwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDU2Q0EvOTE0RTUzRjZDMEQxMTFFNzhEMUVGODJCQzRGOUFFMDIvQTZERjRDRjhD MzRCMTFFQ0FGQjI1QTY4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQgYIKwYBBQUHAQcBAf8E MzAxMCAEAgABMBowDAMEAGdNEQMEAmdNEAMEAcuZPAMEAMuZPzANBAIAAjAHAwUA JAeHgDANBgkqhkiG9w0BAQsFAAOCAQEAGzM+bgjzINwPhJEKHLwV/p+Gu9juNO45 K+S/CVHoVbbKcdDZe+0mg2fIHtqIUezoCEWxU0GOmaimoo1VCgrkfYHG0nNWPdjH /yk3r085g302GUPN0IWaaXEtozlHJc3wmLiH1cL7MkEtO/lCXHNsLfkn3hd6Lgzf iF+B2lmh9GB5R9QNITtOOD60x6eLeKUe7UtmHTIkwPd4fimQzagBGdat+HBDwYEn dD3M5yOH4hJJiAhyx14Yzn+jOownyNlpjvEJklLY/DKx+vSQL0mbQdcAFsCoH68o ejG6a+1kyrLeW5KAASD0EY9qtpL8HT7ViCmnX+j+XBC3DDKrwxuoIg== -----END CERTIFICATE-----Generated at Sun Dec 7 08:20:40 2025 by rpki-client