This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/5409C188C6CB11ECB185E43EC4F9AE02.roa File: 5409C188C6CB11ECB185E43EC4F9AE02.roa (raw, json) Hash identifier: 2/IKvkUuZOOzd7P3ebV8mfawdp+i1YZvP31f6RG6ltY= Subject key identifier: 57:E0:AB:BC:50:ED:4F:4E:50:5F:E7:FA:D3:FA:DD:3C:1C:EB:84:DD Certificate issuer: /CN=A91D873B/serialNumber=03BD909A1A15A4503DFAD594C3C6DE9B94604E66 Certificate serial: 0394 Authority key identifier: 03:BD:90:9A:1A:15:A4:50:3D:FA:D5:94:C3:C6:DE:9B:94:60:4E:66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A72QmhoVpFA9-tWUw8bem5RgTmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/5409C188C6CB11ECB185E43EC4F9AE02.roa Signing time: Wed 26 Nov 2025 23:16:34 +0000 ROA not before: Wed 26 Nov 2025 23:16:34 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 132742 IP address blocks: 43.249.220.0/22 maxlen: 24 103.41.80.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.crl rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A72QmhoVpFA9-tWUw8bem5RgTmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:12:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 916 (0x394) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D873B, serialNumber=03BD909A1A15A4503DFAD594C3C6DE9B94604E66 Validity Not Before: Nov 26 23:16:34 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69278a51-5b20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9f:39:3f:08:26:17:c9:96:df:cc:6a:be:3c: 2e:43:e3:18:ec:07:1e:c4:f5:a2:6f:42:71:85:24: f8:72:9e:bf:c0:a7:4d:7b:8c:83:c0:53:9a:d6:21: 03:6c:19:0f:09:85:26:c0:cf:26:03:4c:99:8d:c3: 4b:0b:01:9e:dc:1f:16:0e:cc:af:38:6a:10:29:1f: cd:16:87:3f:32:3a:95:28:d7:13:f6:61:8d:b3:33: d7:1b:c6:9c:54:32:f0:ff:29:36:dc:9d:b5:2b:be: cf:4b:90:b4:33:05:3a:a1:c5:64:ed:f9:60:27:93: 93:ad:5c:d3:ca:24:b3:4f:91:fc:54:9f:2c:f0:8c: b8:11:fe:1c:c8:02:ef:0b:c9:56:a5:da:55:18:1f: 10:e3:74:78:49:93:25:db:14:a6:ef:ce:87:77:b7: 5d:97:f2:b7:fa:0c:91:d0:b4:ee:70:3c:b2:d7:76: 06:3e:9b:ec:0a:3c:98:e1:33:6e:e3:d8:09:36:fc: 24:8d:13:ae:41:85:17:66:27:d2:f9:f7:b7:54:d2: 00:07:f3:c4:7b:91:6a:4c:11:33:cd:8a:f6:df:1f: 2b:ae:e1:71:02:e8:13:9d:a9:07:e8:db:e0:d2:60: aa:7d:58:cb:61:0c:e2:b2:8a:18:8a:4b:6c:c4:ee: 26:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:E0:AB:BC:50:ED:4F:4E:50:5F:E7:FA:D3:FA:DD:3C:1C:EB:84:DD X509v3 Authority Key Identifier: keyid:03:BD:90:9A:1A:15:A4:50:3D:FA:D5:94:C3:C6:DE:9B:94:60:4E:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A72QmhoVpFA9-tWUw8bem5RgTmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/5409C188C6CB11ECB185E43EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.249.220.0/22 103.41.80.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:27:5e:56:7b:aa:36:d5:94:10:a1:98:c3:d3:49:8d:89:e6: 95:95:e5:63:78:b6:0d:e6:69:a5:00:0f:e5:ce:9c:2a:9a:4b: 4a:e5:20:de:66:ef:84:a0:87:fe:b9:9a:91:7f:ad:2a:85:b5: 9b:1b:0e:de:e0:74:4a:16:fd:db:4e:36:3b:67:05:d0:9d:fc: 7a:dd:7e:81:34:9f:e6:3f:d0:14:48:ae:cc:71:e4:ab:1a:f4: 51:f6:6a:1d:0a:cd:2f:9e:ef:7c:65:fd:cb:c9:86:51:fe:61: 51:5e:5c:9b:fa:79:f7:e6:c3:6f:06:fa:b4:89:96:5a:28:fc: bd:4c:e7:12:05:c3:b9:34:c6:7d:3d:b7:ea:57:a7:10:67:b4: da:81:ff:b8:57:ec:f9:d7:2b:1c:26:ff:31:1d:c9:e1:ba:5d: a8:09:57:9a:ec:fc:a1:4d:15:d3:ff:19:1f:fd:aa:6e:b1:df: 69:f2:24:69:5a:91:7d:29:d3:54:16:f1:77:b2:1f:91:52:a9: 39:9e:55:63:32:2e:d5:6e:12:6d:85:38:0a:6d:78:7c:d6:5b: 7b:44:5b:b4:5a:d6:89:db:37:1f:9c:25:46:da:a8:59:74:df: bb:db:d2:b6:b3:82:35:06:07:de:ea:41:b3:c8:71:e5:df:76: 37:77:a2:64 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICA5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg3M0IxMTAvBgNVBAUTKDAzQkQ5MDlBMUExNUE0NTAzREZBRDU5NEMzQzZERTlC OTQ2MDRFNjYwHhcNMjUxMTI2MjMxNjM0WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTI3OGE1MS01YjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxp85PwgmF8mW38xqvjwuQ+MY7AcexPWib0JxhST4cp6/wKdNe4yDwFOa1iED bBkPCYUmwM8mA0yZjcNLCwGe3B8WDsyvOGoQKR/NFoc/MjqVKNcT9mGNszPXG8ac VDLw/yk23J21K77PS5C0MwU6ocVk7flgJ5OTrVzTyiSzT5H8VJ8s8Iy4Ef4cyALv C8lWpdpVGB8Q43R4SZMl2xSm786Hd7ddl/K3+gyR0LTucDyy13YGPpvsCjyY4TNu 49gJNvwkjROuQYUXZifS+fe3VNIAB/PEe5FqTBEzzYr23x8rruFxAugTnakH6Nvg 0mCqfVjLYQzisooYiktsxO4mwwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFFfgq7xQ 7U9OUF/n+tP63Twc64TdMB8GA1UdIwQYMBaAFAO9kJoaFaRQPfrVlMPG3puUYE5m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODczQi80QTE2QkJEQUM2 MDQxMUVDQUE5NDU5NEJDNEY5QUUwMi9BNzJRbWhvVnBGQTktdFdVdzhiZW01UmdU bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E3MlFtaG9WcEZBOS10V1V3OGJlbTVSZ1RtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDg3M0IvNEExNkJCREFDNjA0MTFFQ0FBOTQ1OTRCQzRGOUFFMDIvNTQwOUMxODhD NkNCMTFFQ0IxODVFNDNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr+dwDBAJnKVAwDQYJKoZIhvcNAQELBQADggEBAC4nXlZ7 qjbVlBChmMPTSY2J5pWV5WN4tg3maaUAD+XOnCqaS0rlIN5m74Sgh/65mpF/rSqF tZsbDt7gdEoW/dtONjtnBdCd/HrdfoE0n+Y/0BRIrsxx5Ksa9FH2ah0KzS+e73xl /cvJhlH+YVFeXJv6effmw28G+rSJlloo/L1M5xIFw7k0xn09t+pXpxBntNqB/7hX 7PnXKxwm/zEdyeG6XagJV5rs/KFNFdP/GR/9qm6x32nyJGlakX0p01QW8XeyH5FS qTmeVWMyLtVuEm2FOApteHzWW3tEW7Ra1onbNx+cJUbaqFl037vb0razgjUGB97q QbPIceXfdjd3omQ= -----END CERTIFICATE-----Generated at Sat Dec 6 19:13:32 2025 by rpki-client