This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/959C0ABE93EA11EE91A46031C4F9AE02.roa File: 959C0ABE93EA11EE91A46031C4F9AE02.roa (raw, json) Hash identifier: Y2RHvC+UQg0XWoTdy/k2kZsqkD1xACeyViWJZiWZyos= Subject key identifier: 85:5E:72:09:F3:83:DF:1C:A3:33:32:EC:54:0D:A4:C7:83:6C:14:0F Certificate issuer: /CN=A91D9A6D/serialNumber=C6FA3ECFBE29CD3630690762EB3288103A6D08A0 Certificate serial: 0D74 Authority key identifier: C6:FA:3E:CF:BE:29:CD:36:30:69:07:62:EB:32:88:10:3A:6D:08:A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/959C0ABE93EA11EE91A46031C4F9AE02.roa Signing time: Thu 06 Nov 2025 17:27:29 +0000 ROA not before: Thu 06 Nov 2025 17:27:29 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 58726 IP address blocks: 103.20.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.crl rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:22:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3444 (0xd74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9A6D, serialNumber=C6FA3ECFBE29CD3630690762EB3288103A6D08A0 Validity Not Before: Nov 6 17:27:29 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=690cda80-bbb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:22:10:3d:91:1c:a9:86:88:b6:08:32:68:6b: a4:27:d9:85:de:6b:69:a0:ae:bd:0f:08:77:12:84: 5a:72:6c:d2:f4:7b:b2:ff:71:a8:c1:ed:4c:c6:10: 03:71:0c:95:cc:1e:b1:f6:13:81:2e:f8:38:af:d8: cd:c1:24:5d:d6:bd:6d:85:d1:46:da:a5:e3:4b:38: 11:ee:03:71:21:2d:19:72:28:87:b5:e0:e0:73:70: a0:a6:50:c2:7d:24:7d:65:e5:ca:62:28:a7:ea:cc: 48:98:0e:0e:5d:c4:b3:69:54:d1:5c:32:b2:83:ca: f7:a2:53:a7:80:41:b4:d4:81:70:84:a5:d4:ef:cc: bf:de:5f:d8:74:a8:79:55:97:cc:30:9e:76:7f:d0: 8f:18:be:3b:ed:12:b8:41:89:97:91:f6:fe:d7:55: 90:e2:c0:36:60:d4:a1:43:d3:82:1b:23:95:b2:8a: bb:de:e4:01:71:82:52:90:e0:38:23:1b:a3:5a:1c: 89:81:a4:6a:54:8b:9f:9f:95:9b:9d:5d:d9:f8:5b: 8e:91:85:39:16:7d:98:58:8d:a4:b3:9e:5f:11:60: 8d:cd:90:d1:fc:3e:c8:78:9a:37:ec:fa:6c:eb:96: 21:15:22:82:71:a8:2b:10:a7:22:b9:2a:63:aa:af: 63:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:5E:72:09:F3:83:DF:1C:A3:33:32:EC:54:0D:A4:C7:83:6C:14:0F X509v3 Authority Key Identifier: keyid:C6:FA:3E:CF:BE:29:CD:36:30:69:07:62:EB:32:88:10:3A:6D:08:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/959C0ABE93EA11EE91A46031C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.20.152.0/22 Signature Algorithm: sha256WithRSAEncryption 34:99:00:e6:67:8f:36:53:a1:6c:21:bf:f7:24:58:3e:4f:20: f4:a1:eb:a3:6a:fc:fa:27:31:30:ea:08:c6:f9:78:6d:85:19: af:0b:30:5e:0c:27:3c:36:89:e2:ce:50:a9:0a:b1:ff:d2:61: 91:e0:9e:b3:6d:ef:db:ef:37:9b:6c:04:8a:61:a8:e7:30:1f: 39:c6:9a:10:08:84:50:e5:eb:83:37:be:97:2c:60:a5:dc:5d: 56:3c:a7:2a:bb:60:3e:77:43:28:e7:62:b8:7f:c7:78:5b:c1: b9:a7:0b:fa:3c:81:a0:df:69:6c:3b:4e:20:ad:6c:06:d8:f9: 5e:26:e4:54:1c:76:1d:93:eb:98:79:45:cd:a1:72:2d:8a:80: ff:df:0f:cb:b0:50:00:5e:75:52:fe:2a:10:07:26:42:20:c2: 81:98:b3:7d:91:3f:75:15:83:bc:00:b3:04:c1:8d:1f:50:0e: e9:a5:9f:5b:ae:a9:bb:7b:a4:85:49:62:86:f9:84:e6:68:68: cc:97:3d:53:47:1d:0a:b7:e7:5b:02:a7:8a:b4:02:14:4f:d3: ea:01:fa:62:af:a8:20:8f:62:74:9d:e9:3b:0b:54:f7:f4:8d: 52:e7:6e:59:ac:52:97:cf:6b:bc:ca:9f:33:c1:75:68:dd:e9: 76:e3:23:5d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlBNkQxMTAvBgNVBAUTKEM2RkEzRUNGQkUyOUNEMzYzMDY5MDc2MkVCMzI4ODEw M0E2RDA4QTAwHhcNMjUxMTA2MTcyNzI5WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTBjZGE4MC1iYmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4yIQPZEcqYaItggyaGukJ9mF3mtpoK69Dwh3EoRacmzS9Huy/3Gowe1MxhAD cQyVzB6x9hOBLvg4r9jNwSRd1r1thdFG2qXjSzgR7gNxIS0ZciiHteDgc3CgplDC fSR9ZeXKYiin6sxImA4OXcSzaVTRXDKyg8r3olOngEG01IFwhKXU78y/3l/YdKh5 VZfMMJ52f9CPGL477RK4QYmXkfb+11WQ4sA2YNShQ9OCGyOVsoq73uQBcYJSkOA4 IxujWhyJgaRqVIufn5WbnV3Z+FuOkYU5Fn2YWI2ks55fEWCNzZDR/D7IeJo37Pps 65YhFSKCcagrEKciuSpjqq9jNQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIVecgnz g98cozMy7FQNpMeDbBQPMB8GA1UdIwQYMBaAFMb6Ps++Kc02MGkHYusyiBA6bQig MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUE2RC9BMjFFNzFEMkRC OEUxMUU5QTM1MjYyMjRDNEY5QUUwMi94dm8tejc0cHpUWXdhUWRpNnpLSUVEcHRD S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h2by16NzRwelRZd2FRZGk2ektJRURwdENLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDlBNkQvQTIxRTcxRDJEQjhFMTFFOUEzNTI2MjI0QzRGOUFFMDIvOTU5QzBBQkU5 M0VBMTFFRTkxQTQ2MDMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnFJgwDQYJKoZIhvcNAQELBQADggEBADSZAOZnjzZToWwh v/ckWD5PIPSh66Nq/PonMTDqCMb5eG2FGa8LMF4MJzw2ieLOUKkKsf/SYZHgnrNt 79vvN5tsBIphqOcwHznGmhAIhFDl64M3vpcsYKXcXVY8pyq7YD53QyjnYrh/x3hb wbmnC/o8gaDfaWw7TiCtbAbY+V4m5FQcdh2T65h5Rc2hci2KgP/fD8uwUABedVL+ KhAHJkIgwoGYs32RP3UVg7wAswTBjR9QDumln1uuqbt7pIVJYob5hOZoaMyXPVNH HQq351sCp4q0AhRP0+oB+mKvqCCPYnSd6TsLVPf0jVLnblmsUpfPa7zKnzPBdWjd 6XbjI10= -----END CERTIFICATE-----Generated at Sun Dec 7 02:34:52 2025 by rpki-client