This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/008702ECFD2511EC813E430BC4F9AE02.roa File: 008702ECFD2511EC813E430BC4F9AE02.roa (raw, json) Hash identifier: oIYSd3WkL7MnVYU9mO5hPC/7Uvpo2x/ypJdb9x+xC2A= Subject key identifier: F9:7D:54:EA:DD:DB:C5:A5:D7:16:38:AE:57:EB:6D:E6:8B:93:AE:9B Certificate issuer: /CN=A91D86BA/serialNumber=CB2107320EDB392C3B4D6B066D79966E73553DE4 Certificate serial: 0304 Authority key identifier: CB:21:07:32:0E:DB:39:2C:3B:4D:6B:06:6D:79:96:6E:73:55:3D:E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/008702ECFD2511EC813E430BC4F9AE02.roa Signing time: Mon 24 Nov 2025 23:46:18 +0000 ROA not before: Mon 24 Nov 2025 23:46:18 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 139737 IP address blocks: 103.144.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 23:44:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 772 (0x304) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D86BA, serialNumber=CB2107320EDB392C3B4D6B066D79966E73553DE4 Validity Not Before: Nov 24 23:46:18 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6924ee4a-a686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:41:5f:7c:72:27:fe:73:2a:c5:46:a0:9a:b0: b1:51:7c:fd:af:71:9e:59:d6:4f:35:43:13:04:b4: 80:97:85:6f:ec:38:a2:a4:db:38:73:90:fa:a0:82: 91:8a:db:13:fc:71:85:92:24:aa:55:ab:6d:2c:9b: 1b:48:b5:d0:a2:ad:4b:04:12:ac:a6:17:46:2b:86: 69:30:3c:2f:48:4f:70:80:eb:be:5a:f3:1b:46:e0: 48:a7:b0:13:bf:3f:45:a4:d3:87:f7:9b:64:6e:95: 0c:68:fd:f8:df:0b:a2:7d:2b:3d:ab:0e:6a:be:4f: fb:e9:20:6b:84:fd:8b:34:f9:02:06:ce:b3:7d:e2: 80:6b:2d:4a:24:f3:4b:0f:3a:15:1e:ca:f0:a6:08: 70:25:2f:7c:f2:c8:0b:dd:ac:4c:d4:51:d6:b6:0a: 71:e5:58:9f:12:ee:98:a2:af:6b:b4:db:30:d8:65: 0b:5c:14:ca:75:7c:a7:31:06:f6:b5:a0:8d:26:3f: ff:c6:b0:7d:eb:00:bc:2a:dd:49:d2:94:f0:bb:02: a3:17:59:ec:61:51:30:9a:92:5b:bf:e8:ca:2c:e5: ed:a8:03:c9:b2:7d:c3:2a:31:bf:88:2f:65:1c:e3: 3c:ab:b8:73:52:d0:a1:95:be:f7:90:1c:64:0f:8e: fa:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:7D:54:EA:DD:DB:C5:A5:D7:16:38:AE:57:EB:6D:E6:8B:93:AE:9B X509v3 Authority Key Identifier: keyid:CB:21:07:32:0E:DB:39:2C:3B:4D:6B:06:6D:79:96:6E:73:55:3D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/008702ECFD2511EC813E430BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.144.95.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:c7:c2:d2:71:d8:2e:62:21:14:f7:df:8c:19:5b:54:0f:50: af:b5:4e:ef:48:e5:c0:22:67:ee:fd:09:16:74:99:9e:da:17: 40:90:62:09:27:52:7d:47:b4:e1:0c:d5:61:37:c8:8f:7e:6a: c1:1b:68:3c:90:c3:5e:f7:d1:17:09:84:69:80:f7:b0:df:b7: e6:47:ec:5b:1a:99:d9:d8:1f:80:c6:dd:5b:1c:e9:40:d2:2f: 00:f8:fa:06:38:33:00:9c:fb:bd:28:ae:2b:2b:b3:e0:ad:91: cf:e1:28:79:c9:40:b3:a4:61:72:ca:ef:cc:53:91:97:61:45: ee:79:f8:65:8e:e4:ef:26:dd:0c:0c:e0:e3:5b:cb:30:db:b6: 94:dc:6e:a0:6e:4e:98:11:85:b0:bb:e7:c8:a5:e1:be:5b:76: 17:b8:75:ee:0e:db:f6:22:1e:b0:5e:db:31:b8:18:bf:85:f8: 22:35:d3:04:ac:55:af:85:2b:71:95:b9:15:af:45:d2:9b:8a: 12:ef:5c:2a:0d:30:06:51:68:76:29:5d:ce:32:46:97:a1:eb: 3e:76:21:26:ee:e8:4a:39:1a:89:67:01:e6:05:3f:47:95:43: 0b:ec:ae:08:58:ab:6c:a5:df:6a:47:e0:18:a0:19:ce:50:9d: 62:94:f4:29 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAwQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg2QkExMTAvBgNVBAUTKENCMjEwNzMyMEVEQjM5MkMzQjRENkIwNjZENzk5NjZF NzM1NTNERTQwHhcNMjUxMTI0MjM0NjE4WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTI0ZWU0YS1hNjg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmEFffHIn/nMqxUagmrCxUXz9r3GeWdZPNUMTBLSAl4Vv7DiipNs4c5D6oIKR itsT/HGFkiSqVattLJsbSLXQoq1LBBKsphdGK4ZpMDwvSE9wgOu+WvMbRuBIp7AT vz9FpNOH95tkbpUMaP343wuifSs9qw5qvk/76SBrhP2LNPkCBs6zfeKAay1KJPNL DzoVHsrwpghwJS988sgL3axM1FHWtgpx5VifEu6Yoq9rtNsw2GULXBTKdXynMQb2 taCNJj//xrB96wC8Kt1J0pTwuwKjF1nsYVEwmpJbv+jKLOXtqAPJsn3DKjG/iC9l HOM8q7hzUtChlb73kBxkD476awIDAQABo4IClTCCApEwHQYDVR0OBBYEFPl9VOrd 28Wl1xY4rlfrbeaLk66bMB8GA1UdIwQYMBaAFMshBzIO2zksO01rBm15lm5zVT3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODZCQS9BNTc2MDRDOEZE MjExMUVDQTJDNTYyODNDNEY5QUUwMi95eUVITWc3Yk9TdzdUV3NHYlhtV2JuTlZQ ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l5RUhNZzdiT1N3N1RXc0diWG1XYm5OVlBlUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDg2QkEvQTU3NjA0QzhGRDIxMTFFQ0EyQzU2MjgzQzRGOUFFMDIvMDA4NzAyRUNG RDI1MTFFQzgxM0U0MzBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnkF8wDQYJKoZIhvcNAQELBQADggEBAErHwtJx2C5iIRT3 34wZW1QPUK+1Tu9I5cAiZ+79CRZ0mZ7aF0CQYgknUn1HtOEM1WE3yI9+asEbaDyQ w1730RcJhGmA97Dft+ZH7FsamdnYH4DG3Vsc6UDSLwD4+gY4MwCc+70orisrs+Ct kc/hKHnJQLOkYXLK78xTkZdhRe55+GWO5O8m3QwM4ONbyzDbtpTcbqBuTpgRhbC7 58il4b5bdhe4de4O2/YiHrBe2zG4GL+F+CI10wSsVa+FK3GVuRWvRdKbihLvXCoN MAZRaHYpXc4yRpeh6z52ISbu6Eo5GolnAeYFP0eVQwvsrghYq2yl32pH4BigGc5Q nWKU9Ck= -----END CERTIFICATE-----Generated at Sun Dec 7 12:02:21 2025 by rpki-client