This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/95C4C7AA7F7911ED9C1EAE19C4F9AE02.roa File: 95C4C7AA7F7911ED9C1EAE19C4F9AE02.roa (raw, json) Hash identifier: 9UBDG0nK7dNXHoswvyDP2323eSe7RBcMWWQgGNewLxg= Subject key identifier: 13:C5:9F:B7:3F:24:38:96:31:77:45:81:EF:A0:E8:5F:18:2B:79:0B Certificate issuer: /CN=A91D9D8B/serialNumber=A1938C912AC2F4A958B93DAF8F4B272015B0D8D8 Certificate serial: 0229 Authority key identifier: A1:93:8C:91:2A:C2:F4:A9:58:B9:3D:AF:8F:4B:27:20:15:B0:D8:D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oZOMkSrC9KlYuT2vj0snIBWw2Ng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/95C4C7AA7F7911ED9C1EAE19C4F9AE02.roa Signing time: Wed 19 Nov 2025 00:48:04 +0000 ROA not before: Wed 19 Nov 2025 00:48:04 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 63890 IP address blocks: 103.43.52.0/22 maxlen: 22 103.43.52.0/24 maxlen: 24 103.43.53.0/24 maxlen: 24 103.43.54.0/24 maxlen: 24 103.43.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.crl rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oZOMkSrC9KlYuT2vj0snIBWw2Ng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:23:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 553 (0x229) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9D8B, serialNumber=A1938C912AC2F4A958B93DAF8F4B272015B0D8D8 Validity Not Before: Nov 19 00:48:04 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=691d13c4-c94f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:98:7f:1d:a5:2c:ba:a4:24:62:d3:e2:e3:f8: 83:91:3a:66:f3:f0:93:be:96:53:f4:76:64:84:54: f8:cd:04:a3:de:94:8a:b0:e9:46:95:af:e1:64:53: 40:2f:8c:79:14:a7:46:9e:08:bf:cf:66:ab:35:7d: 67:e3:f6:cf:fe:8e:f4:16:74:06:5a:35:13:66:ba: c6:ff:2f:4e:69:ef:87:f6:7a:48:cb:23:48:e1:92: 5e:77:dd:70:3d:57:58:b4:2a:31:f1:60:73:4e:98: a1:c4:0c:81:8f:35:21:38:b4:a1:28:68:64:17:1f: 18:37:81:90:e5:70:49:f5:b6:0a:3b:2d:83:1e:0b: 23:6c:e8:bd:13:a5:ab:44:4f:7c:e5:44:bf:3b:a5: 06:d7:b6:0b:5e:49:60:f9:d0:63:29:e0:fc:3d:ce: 10:7e:a4:03:c9:26:e8:01:18:27:ae:5f:24:c8:1e: e2:55:1c:dd:99:19:5d:ea:a6:d9:be:66:77:d2:d0: 77:9b:76:d0:a2:bf:9c:78:01:46:0f:56:05:35:36: 6a:90:6a:25:4a:12:ef:de:9a:5b:02:f6:68:37:e5: 49:2d:31:5c:5c:47:26:6e:77:82:48:c2:65:f5:36: ff:4f:3e:ef:93:43:ea:ad:a2:85:42:9a:7e:a0:2b: 90:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C5:9F:B7:3F:24:38:96:31:77:45:81:EF:A0:E8:5F:18:2B:79:0B X509v3 Authority Key Identifier: keyid:A1:93:8C:91:2A:C2:F4:A9:58:B9:3D:AF:8F:4B:27:20:15:B0:D8:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oZOMkSrC9KlYuT2vj0snIBWw2Ng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/95C4C7AA7F7911ED9C1EAE19C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.43.52.0/22 Signature Algorithm: sha256WithRSAEncryption 8d:ab:cb:be:21:1b:5c:72:7e:ed:02:aa:13:0f:61:74:00:fc: cf:b7:b5:13:f1:d1:65:44:f8:b0:56:a9:6b:a6:a4:88:0f:2d: 77:cc:f9:2c:72:a5:8e:21:84:f0:06:f3:f8:5e:d6:36:26:21: 31:fc:81:c4:89:7c:eb:a9:64:43:c1:a4:66:65:9a:e4:c7:10: 82:92:19:49:0d:29:3b:ab:74:50:75:c9:31:de:38:4c:e6:25: 42:93:bd:18:47:d4:9f:4c:77:a0:a6:89:1a:95:7b:93:66:a6: 54:3f:40:62:9e:a1:42:37:95:63:1e:27:4d:dc:95:18:44:ae: db:3e:ba:69:43:e0:cd:8f:9b:a0:51:f8:fd:61:12:ca:3f:64: eb:e7:e0:69:5d:c1:90:c4:e0:43:38:e5:4b:3e:07:50:63:7f: a9:16:68:6f:63:08:a5:e5:bf:d3:27:2b:20:0f:d7:03:89:01: 11:48:8a:ad:1b:c6:38:4d:d4:8f:c8:f6:e7:1d:15:50:5b:0c: 74:51:d1:3c:c7:69:31:61:e0:40:d3:0c:67:c2:aa:9d:5a:46: c5:12:9c:b2:2b:b9:25:78:12:96:6a:19:58:52:f7:a8:be:90: cb:d1:72:a8:d9:80:39:0b:ba:a5:f1:c8:d9:dc:83:29:1a:aa: 9d:9e:b6:7c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlEOEIxMTAvBgNVBAUTKEExOTM4QzkxMkFDMkY0QTk1OEI5M0RBRjhGNEIyNzIw MTVCMEQ4RDgwHhcNMjUxMTE5MDA0ODA0WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTFkMTNjNC1jOTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsJh/HaUsuqQkYtPi4/iDkTpm8/CTvpZT9HZkhFT4zQSj3pSKsOlGla/hZFNA L4x5FKdGngi/z2arNX1n4/bP/o70FnQGWjUTZrrG/y9Oae+H9npIyyNI4ZJed91w PVdYtCox8WBzTpihxAyBjzUhOLShKGhkFx8YN4GQ5XBJ9bYKOy2DHgsjbOi9E6Wr RE985US/O6UG17YLXklg+dBjKeD8Pc4QfqQDySboARgnrl8kyB7iVRzdmRld6qbZ vmZ30tB3m3bQor+ceAFGD1YFNTZqkGolShLv3ppbAvZoN+VJLTFcXEcmbneCSMJl 9Tb/Tz7vk0PqraKFQpp+oCuQhwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBPFn7c/ JDiWMXdFge+g6F8YK3kLMB8GA1UdIwQYMBaAFKGTjJEqwvSpWLk9r49LJyAVsNjY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUQ4Qi81RjExRTAyQTdG NzUxMUVEOEFGQkU2NzNDNEY5QUUwMi9vWk9Na1NyQzlLbFl1VDJ2ajBzbklCV3cy TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29aT01rU3JDOUtsWXVUMnZqMHNuSUJXdzJOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDlEOEIvNUYxMUUwMkE3Rjc1MTFFRDhBRkJFNjczQzRGOUFFMDIvOTVDNEM3QUE3 Rjc5MTFFRDlDMUVBRTE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnKzQwDQYJKoZIhvcNAQELBQADggEBAI2ry74hG1xyfu0C qhMPYXQA/M+3tRPx0WVE+LBWqWumpIgPLXfM+SxypY4hhPAG8/he1jYmITH8gcSJ fOupZEPBpGZlmuTHEIKSGUkNKTurdFB1yTHeOEzmJUKTvRhH1J9Md6CmiRqVe5Nm plQ/QGKeoUI3lWMeJ03clRhErts+umlD4M2Pm6BR+P1hEso/ZOvn4GldwZDE4EM4 5Us+B1Bjf6kWaG9jCKXlv9MnKyAP1wOJARFIiq0bxjhN1I/I9ucdFVBbDHRR0TzH aTFh4EDTDGfCqp1aRsUSnLIruSV4EpZqGVhS96i+kMvRcqjZgDkLuqXxyNncgyka qp2etnw= -----END CERTIFICATE-----Generated at Sat Dec 6 18:54:01 2025 by rpki-client