This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/DDCCD058B35111EE96186E1EC4F9AE02.roa File: DDCCD058B35111EE96186E1EC4F9AE02.roa (raw, json) Hash identifier: /F1r5TNvz5O+loAxtqvN6ua/Jk1sG70DsTCgwmr+C4M= Subject key identifier: DA:55:D6:CB:9B:88:55:EC:02:80:91:D8:81:01:3E:C1:8C:81:A5:61 Certificate issuer: /CN=A91D8A67/serialNumber=0354DBE1ED3D99E1945E27274BA2F603EB6A1781 Certificate serial: 0168 Authority key identifier: 03:54:DB:E1:ED:3D:99:E1:94:5E:27:27:4B:A2:F6:03:EB:6A:17:81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A1Tb4e09meGUXicnS6L2A-tqF4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/DDCCD058B35111EE96186E1EC4F9AE02.roa Signing time: Wed 03 Dec 2025 02:34:55 +0000 ROA not before: Wed 03 Dec 2025 02:34:55 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 135612 IP address blocks: 103.76.176.0/24 maxlen: 24 103.76.177.0/24 maxlen: 24 203.2.158.0/23 maxlen: 23 203.2.158.0/24 maxlen: 24 203.2.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.crl rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A1Tb4e09meGUXicnS6L2A-tqF4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 02:23:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 360 (0x168) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8A67, serialNumber=0354DBE1ED3D99E1945E27274BA2F603EB6A1781 Validity Not Before: Dec 3 02:34:55 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=692fa1ce-5c90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fc:46:62:e2:25:55:8e:0e:69:3a:7f:b8:34: a1:ab:ba:b3:0a:e7:dd:7d:86:55:8d:fb:3d:47:98: c7:c4:bd:83:b8:5c:0c:7a:86:d4:3a:8e:a1:4c:94: b8:0c:b3:0e:9e:9f:3d:f0:2e:ea:69:f7:64:40:22: 26:b5:f4:15:77:e3:7c:ff:a4:a1:39:61:28:cf:e1: 12:6b:41:95:63:b2:fa:d3:2d:a2:7b:c7:5b:95:41: 2a:f1:aa:c6:b1:39:c6:2a:9e:b1:f2:a2:d7:2b:1b: c8:cd:1c:a8:b3:ed:62:40:4c:8b:2a:55:de:44:5e: 9a:84:64:5f:dd:7d:51:0a:f6:42:e0:7c:fd:5e:fc: eb:4d:c8:52:37:b2:68:71:ce:e1:55:c1:f1:43:bc: 74:91:6f:5e:5e:76:46:5b:ad:f0:f1:63:07:25:e9: e8:9d:db:33:1f:3f:8a:1a:28:e6:dc:05:62:71:85: ca:95:f8:70:c9:9e:8f:d9:67:39:be:4f:0f:e0:d0: a9:73:5e:06:02:8d:94:4b:6c:c5:31:0b:fb:76:95: 30:d7:52:38:91:50:04:77:ee:46:9a:51:61:42:1f: 7b:29:7c:33:17:aa:94:5d:10:aa:54:5a:38:b8:0a: a4:fd:b8:b8:12:05:2e:b4:90:0c:b9:e2:25:dc:24: 09:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:55:D6:CB:9B:88:55:EC:02:80:91:D8:81:01:3E:C1:8C:81:A5:61 X509v3 Authority Key Identifier: keyid:03:54:DB:E1:ED:3D:99:E1:94:5E:27:27:4B:A2:F6:03:EB:6A:17:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A1Tb4e09meGUXicnS6L2A-tqF4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/DDCCD058B35111EE96186E1EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.76.176.0/23 203.2.158.0/23 Signature Algorithm: sha256WithRSAEncryption 2b:d2:27:47:44:01:75:b5:48:fd:a8:27:10:f3:05:ac:9a:40: c3:28:b4:1e:66:15:50:7d:39:9f:99:c1:ad:18:19:ea:d4:80: 9a:f0:12:cd:26:53:67:a6:43:b2:01:51:c6:72:79:f6:ed:f8: 6f:87:e6:2e:ac:42:0f:dd:ec:8a:88:23:35:cb:57:5e:a8:a8: 83:08:d8:f3:8a:8d:52:65:5c:68:76:25:06:96:59:e4:60:1f: 85:c2:4e:be:34:0f:66:c6:88:67:6a:1c:d0:3c:88:29:2d:fa: 5c:71:d2:67:4c:cb:95:db:8c:7f:80:d4:ba:08:c7:b9:c6:90: 28:20:0d:90:20:d6:de:99:86:b1:ef:fa:a2:b0:b5:db:18:11: 04:9a:c2:86:c1:38:5f:af:76:76:b0:b0:5d:10:9a:d1:d6:b8: 3b:b6:e9:a5:86:bf:20:09:63:c3:09:af:f3:bf:93:38:5f:9b: dc:68:66:1c:2f:08:76:ec:d3:a7:74:48:8f:88:f2:58:1e:70: d8:9f:10:cf:f0:be:bb:5c:c9:40:00:06:b8:8c:92:62:ae:84: 34:36:15:ea:c4:4e:2a:5c:4d:9c:80:30:c7:b5:dd:cd:7d:c5: 5a:36:86:cf:00:e6:79:28:34:2f:57:d4:78:5e:75:3a:63:b5: 2a:b9:18:46 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhBNjcxMTAvBgNVBAUTKDAzNTREQkUxRUQzRDk5RTE5NDVFMjcyNzRCQTJGNjAz RUI2QTE3ODEwHhcNMjUxMjAzMDIzNDU1WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJmYTFjZS01YzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPxGYuIlVY4OaTp/uDShq7qzCufdfYZVjfs9R5jHxL2DuFwMeobUOo6hTJS4 DLMOnp898C7qafdkQCImtfQVd+N8/6ShOWEoz+ESa0GVY7L60y2ie8dblUEq8arG sTnGKp6x8qLXKxvIzRyos+1iQEyLKlXeRF6ahGRf3X1RCvZC4Hz9XvzrTchSN7Jo cc7hVcHxQ7x0kW9eXnZGW63w8WMHJenondszHz+KGijm3AVicYXKlfhwyZ6P2Wc5 vk8P4NCpc14GAo2US2zFMQv7dpUw11I4kVAEd+5GmlFhQh97KXwzF6qUXRCqVFo4 uAqk/bi4EgUutJAMueIl3CQJ6wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFNpV1sub iFXsAoCR2IEBPsGMgaVhMB8GA1UdIwQYMBaAFANU2+HtPZnhlF4nJ0ui9gPraheB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEE2Ny81NTExQUY2OEIz NTExMUVFOThCQTAyMURDNEY5QUUwMi9BMVRiNGUwOW1lR1VYaWNuUzZMMkEtdHFG NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ExVGI0ZTA5bWVHVVhpY25TNkwyQS10cUY0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDhBNjcvNTUxMUFGNjhCMzUxMTFFRTk4QkEwMjFEQzRGOUFFMDIvRERDQ0QwNThC MzUxMTFFRTk2MTg2RTFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnTLADBAHLAp4wDQYJKoZIhvcNAQELBQADggEBACvSJ0dE AXW1SP2oJxDzBayaQMMotB5mFVB9OZ+Zwa0YGerUgJrwEs0mU2emQ7IBUcZyefbt +G+H5i6sQg/d7IqIIzXLV16oqIMI2POKjVJlXGh2JQaWWeRgH4XCTr40D2bGiGdq HNA8iCkt+lxx0mdMy5XbjH+A1LoIx7nGkCggDZAg1t6ZhrHv+qKwtdsYEQSawobB OF+vdnawsF0QmtHWuDu26aWGvyAJY8MJr/O/kzhfm9xoZhwvCHbs06d0SI+I8lge cNifEM/wvrtcyUAABriMkmKuhDQ2FerETipcTZyAMMe13c19xVo2hs8A5nkoNC9X 1HhedTpjtSq5GEY= -----END CERTIFICATE-----Generated at Sun Dec 7 04:44:13 2025 by rpki-client