This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/E15CC33CD55011EFB17CB022C4F9AE02.roa File: E15CC33CD55011EFB17CB022C4F9AE02.roa (raw, json) Hash identifier: TM7o1U1frnQzWPowFrhF6wZcjiDylkwLUHlakulI5i0= Subject key identifier: 2D:00:01:8C:8E:C5:3E:6D:B4:60:86:10:41:59:F4:4E:3B:B3:39:FF Certificate issuer: /CN=A91D873B/serialNumber=03BD909A1A15A4503DFAD594C3C6DE9B94604E66 Certificate serial: 0395 Authority key identifier: 03:BD:90:9A:1A:15:A4:50:3D:FA:D5:94:C3:C6:DE:9B:94:60:4E:66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A72QmhoVpFA9-tWUw8bem5RgTmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/E15CC33CD55011EFB17CB022C4F9AE02.roa Signing time: Wed 26 Nov 2025 23:16:35 +0000 ROA not before: Wed 26 Nov 2025 23:16:35 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 153494 IP address blocks: 43.249.220.0/22 maxlen: 24 103.41.80.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.crl rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A72QmhoVpFA9-tWUw8bem5RgTmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:12:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 917 (0x395) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D873B, serialNumber=03BD909A1A15A4503DFAD594C3C6DE9B94604E66 Validity Not Before: Nov 26 23:16:35 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69278a52-d951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:aa:96:44:e3:9d:86:97:7d:1c:25:8d:be:f5: 79:2f:e7:f9:74:ea:10:3e:19:85:02:5f:7f:48:8e: 9a:78:ad:4a:b2:bd:7b:b7:bf:4c:8e:1e:ce:bc:8c: 0f:bc:39:20:58:1b:23:0d:d4:c6:07:cf:c4:3d:3a: f1:60:3b:97:ee:c1:7b:c8:90:2e:26:03:2c:c8:01: ca:ea:f5:62:a7:9e:43:3f:ca:6b:5f:bd:a2:c3:18: ee:d5:9e:b0:c6:42:0b:90:d6:af:ca:9c:ee:91:9d: e0:30:27:6d:57:4a:57:e2:9c:1d:5e:4e:bf:36:c5: 8f:f3:37:e9:26:ab:bb:1f:0a:f6:03:5a:3a:e6:25: 34:3d:a6:69:64:75:34:69:08:e0:6b:81:4c:63:23: 7b:0f:02:f2:a1:91:15:38:c4:1a:ec:01:68:5e:44: e3:67:8e:0e:0d:75:5a:2d:75:0e:39:e1:29:4a:91: d2:e3:2c:29:13:68:4a:ec:0a:77:9a:5c:54:66:55: 1b:8a:56:4c:e8:69:a5:fb:8b:db:88:b2:d8:a5:89: 1a:5d:26:07:11:ef:fd:80:53:bf:2a:92:5c:41:ce: d5:4b:26:41:dd:0c:87:fd:c8:69:55:e9:d2:2f:96: 4a:d8:7b:60:b6:66:fb:61:25:a6:0a:9b:a9:94:a1: 86:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:00:01:8C:8E:C5:3E:6D:B4:60:86:10:41:59:F4:4E:3B:B3:39:FF X509v3 Authority Key Identifier: keyid:03:BD:90:9A:1A:15:A4:50:3D:FA:D5:94:C3:C6:DE:9B:94:60:4E:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A72QmhoVpFA9-tWUw8bem5RgTmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/E15CC33CD55011EFB17CB022C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.249.220.0/22 103.41.80.0/22 Signature Algorithm: sha256WithRSAEncryption 43:8c:4f:ec:c3:79:20:ef:3f:06:56:fc:97:a2:09:14:7b:70: 82:ec:da:a6:54:5e:90:d9:71:7e:96:d6:f3:3a:1e:8d:d2:00: b8:9c:0b:4a:97:ae:d6:6b:0b:89:50:2d:19:c1:ad:8f:d9:a6: c4:99:d8:32:57:c7:67:a4:10:68:f6:d1:56:d9:16:cf:75:ce: 96:73:f3:95:6a:8e:bb:a2:f3:c1:e3:a5:eb:69:45:a1:e9:00: 76:63:d7:47:aa:8d:f7:85:0d:79:ee:51:90:49:ed:c7:00:64: 9d:69:f3:cc:82:f6:4b:87:c8:36:e6:9e:73:ba:99:91:18:54: 37:9a:c0:18:77:93:a0:8f:1f:07:29:80:30:74:1e:a7:6f:8a: 72:63:0b:f9:5a:35:2f:4f:db:de:e2:be:af:ce:90:c3:5a:21: b5:35:29:21:25:13:5f:79:ae:e9:b0:fd:be:cd:35:a9:3d:e9: 63:86:12:bf:a7:d8:42:46:df:0b:9e:ad:22:68:9d:05:de:b8: f9:92:7e:b7:70:2b:8f:7a:2a:a5:42:ef:64:3d:2c:b0:27:cc: 45:51:00:b6:7d:46:1f:4c:75:7d:ce:ba:2d:11:75:26:3f:7a: c6:4d:52:6c:49:ca:c1:e7:ac:22:89:fb:da:70:1a:2f:94:97: 9f:31:7c:4e -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICA5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg3M0IxMTAvBgNVBAUTKDAzQkQ5MDlBMUExNUE0NTAzREZBRDU5NEMzQzZERTlC OTQ2MDRFNjYwHhcNMjUxMTI2MjMxNjM1WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTI3OGE1Mi1kOTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKqWROOdhpd9HCWNvvV5L+f5dOoQPhmFAl9/SI6aeK1Ksr17t79Mjh7OvIwP vDkgWBsjDdTGB8/EPTrxYDuX7sF7yJAuJgMsyAHK6vVip55DP8prX72iwxju1Z6w xkILkNavypzukZ3gMCdtV0pX4pwdXk6/NsWP8zfpJqu7Hwr2A1o65iU0PaZpZHU0 aQjga4FMYyN7DwLyoZEVOMQa7AFoXkTjZ44ODXVaLXUOOeEpSpHS4ywpE2hK7Ap3 mlxUZlUbilZM6Gml+4vbiLLYpYkaXSYHEe/9gFO/KpJcQc7VSyZB3QyH/chpVenS L5ZK2Htgtmb7YSWmCpuplKGGTQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFC0AAYyO xT5ttGCGEEFZ9E47szn/MB8GA1UdIwQYMBaAFAO9kJoaFaRQPfrVlMPG3puUYE5m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODczQi80QTE2QkJEQUM2 MDQxMUVDQUE5NDU5NEJDNEY5QUUwMi9BNzJRbWhvVnBGQTktdFdVdzhiZW01UmdU bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E3MlFtaG9WcEZBOS10V1V3OGJlbTVSZ1RtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDg3M0IvNEExNkJCREFDNjA0MTFFQ0FBOTQ1OTRCQzRGOUFFMDIvRTE1Q0MzM0NE NTUwMTFFRkIxN0NCMDIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr+dwDBAJnKVAwDQYJKoZIhvcNAQELBQADggEBAEOMT+zD eSDvPwZW/JeiCRR7cILs2qZUXpDZcX6W1vM6Ho3SALicC0qXrtZrC4lQLRnBrY/Z psSZ2DJXx2ekEGj20VbZFs91zpZz85Vqjrui88HjpetpRaHpAHZj10eqjfeFDXnu UZBJ7ccAZJ1p88yC9kuHyDbmnnO6mZEYVDeawBh3k6CPHwcpgDB0HqdvinJjC/la NS9P297ivq/OkMNaIbU1KSElE195rumw/b7NNak96WOGEr+n2EJG3wuerSJonQXe uPmSfrdwK496KqVC72Q9LLAnzEVRALZ9Rh9MdX3Oui0RdSY/esZNUmxJysHnrCKJ +9pwGi+Ul58xfE4= -----END CERTIFICATE-----Generated at Sat Dec 6 16:09:56 2025 by rpki-client