This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/BDC1AB0AFDA611E88FA5E26DC4F9AE02.roa File: BDC1AB0AFDA611E88FA5E26DC4F9AE02.roa (raw, json) Hash identifier: 5aUeJ2nUgZKlO+WBC4IJNP8ylQ0g53K6edye7fUN2n8= Subject key identifier: F1:24:88:76:C4:10:1B:C9:90:A1:8C:AA:C4:20:0C:EA:82:E6:89:5D Certificate issuer: /CN=A91DCB25/serialNumber=61CB9085F02FF8FA45E732F580340F4249E00CA2 Certificate serial: 11E7 Authority key identifier: 61:CB:90:85:F0:2F:F8:FA:45:E7:32:F5:80:34:0F:42:49:E0:0C:A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YcuQhfAv-PpF5zL1gDQPQkngDKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/BDC1AB0AFDA611E88FA5E26DC4F9AE02.roa Signing time: Thu 04 Dec 2025 17:17:59 +0000 ROA not before: Thu 04 Dec 2025 17:17:59 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 134926 IP address blocks: 103.127.28.0/24 maxlen: 24 103.127.29.0/24 maxlen: 24 103.127.30.0/24 maxlen: 24 103.127.31.0/24 maxlen: 24 2404:17c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.crl rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YcuQhfAv-PpF5zL1gDQPQkngDKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 16:41:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4583 (0x11e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCB25, serialNumber=61CB9085F02FF8FA45E732F580340F4249E00CA2 Validity Not Before: Dec 4 17:17:59 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=6931c247-6739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:0a:34:be:36:cc:59:fa:a9:95:09:31:42:9b: 9a:4e:49:69:31:2e:4c:cd:d7:53:53:83:a3:76:c4: 87:56:27:30:c1:95:b2:53:90:16:f1:9b:ba:7a:ff: ca:74:02:a1:1a:fc:bc:14:98:82:2d:43:64:1b:4f: 3f:cd:80:81:ee:11:4e:95:bc:e5:57:2b:f9:0d:8d: ba:39:22:6d:b6:52:7e:ab:5b:17:87:b2:42:fc:94: d9:bc:d1:d1:c2:2e:81:64:96:d5:0b:2f:56:da:85: aa:11:b5:9a:4d:46:e7:fa:97:0a:a0:02:84:f7:d1: 59:46:48:38:00:36:b4:6f:35:89:d8:2d:1c:76:1b: 5d:a9:39:d5:20:62:14:4e:34:0a:d4:16:ce:a2:ab: 70:a1:02:db:fa:f4:83:ff:b0:19:47:ce:5d:8e:10: 3d:7c:9b:b0:0f:14:ee:9b:e5:5a:61:15:b9:af:a9: 66:75:e5:2e:17:aa:4a:45:61:c8:54:5e:e8:c9:81: 48:57:3a:0a:5a:33:3c:20:ca:3b:c7:64:7c:9a:52: 09:86:c3:97:db:c9:f5:a9:35:99:97:ab:e9:20:20: b7:a6:25:5a:bc:3f:9e:f0:6b:ef:c4:c7:bf:fb:e6: db:47:57:04:06:0f:f8:75:fb:94:54:5c:f3:cb:46: 88:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:24:88:76:C4:10:1B:C9:90:A1:8C:AA:C4:20:0C:EA:82:E6:89:5D X509v3 Authority Key Identifier: keyid:61:CB:90:85:F0:2F:F8:FA:45:E7:32:F5:80:34:0F:42:49:E0:0C:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YcuQhfAv-PpF5zL1gDQPQkngDKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/BDC1AB0AFDA611E88FA5E26DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.127.28.0/22 IPv6: 2404:17c0::/32 Signature Algorithm: sha256WithRSAEncryption 9c:b7:70:6c:ff:95:f8:22:e4:19:7a:25:35:20:11:cd:11:56: 1f:5b:32:b0:7e:67:b6:d7:de:cd:83:50:0f:ac:bc:91:46:f6: 0d:95:1f:3d:fb:ba:5b:a6:51:43:bc:9f:00:20:ad:af:35:85: 2e:8e:fa:1b:72:41:c0:87:79:9b:0d:e0:fb:42:be:72:21:6d: 3f:e2:d5:1b:96:3d:a5:5f:fc:d2:e7:02:ff:2e:8a:87:c6:4c: c6:b7:1e:21:b3:27:39:62:f5:5b:1c:91:03:6f:b1:39:11:d7: 6a:3b:cf:5e:8b:72:56:a5:37:72:b2:71:99:62:16:f9:23:e3: 51:1a:c4:43:aa:61:51:c4:ad:a2:73:f1:04:a0:d6:90:76:ce: 84:eb:84:47:6a:9c:86:e6:cd:c2:8b:8c:f2:16:7c:e1:eb:70: 89:39:b8:cc:49:39:09:66:25:ef:05:31:d5:b3:f2:b4:5c:94: c8:13:6f:1d:36:05:62:f6:ec:f6:e2:eb:54:5c:94:0b:3d:07: 00:5f:21:da:5b:a9:5c:60:45:f9:46:07:d3:6f:35:4f:0b:a1: 6b:82:23:42:5d:6c:cb:49:00:22:e9:a7:23:44:97:99:e7:c3: de:9e:7f:6d:ef:65:a9:9b:7f:bd:6b:63:92:e8:ac:23:08:c8: ba:24:d5:44 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICEecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENCMjUxMTAvBgNVBAUTKDYxQ0I5MDg1RjAyRkY4RkE0NUU3MzJGNTgwMzQwRjQy NDlFMDBDQTIwHhcNMjUxMjA0MTcxNzU5WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTMxYzI0Ny02NzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8Qo0vjbMWfqplQkxQpuaTklpMS5MzddTU4OjdsSHVicwwZWyU5AW8Zu6ev/K dAKhGvy8FJiCLUNkG08/zYCB7hFOlbzlVyv5DY26OSJttlJ+q1sXh7JC/JTZvNHR wi6BZJbVCy9W2oWqEbWaTUbn+pcKoAKE99FZRkg4ADa0bzWJ2C0cdhtdqTnVIGIU TjQK1BbOoqtwoQLb+vSD/7AZR85djhA9fJuwDxTum+VaYRW5r6lmdeUuF6pKRWHI VF7oyYFIVzoKWjM8IMo7x2R8mlIJhsOX28n1qTWZl6vpICC3piVavD+e8GvvxMe/ ++bbR1cEBg/4dfuUVFzzy0aIAwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFPEkiHbE EBvJkKGMqsQgDOqC5oldMB8GA1UdIwQYMBaAFGHLkIXwL/j6Recy9YA0D0JJ4Ayi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0IyNS8yQzYwREZEOEZE QTUxMUU4ODg1OUMwNkJDNEY5QUUwMi9ZY3VRaGZBdi1QcEY1ekwxZ0RRUFFrbmdE S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ljdVFoZkF2LVBwRjV6TDFnRFFQUWtuZ0RLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RENCMjUvMkM2MERGRDhGREE1MTFFODg4NTlDMDZCQzRGOUFFMDIvQkRDMUFCMEFG REE2MTFFODhGQTVFMjZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnfxwwDQQCAAIwBwMFACQEF8AwDQYJKoZIhvcNAQELBQAD ggEBAJy3cGz/lfgi5Bl6JTUgEc0RVh9bMrB+Z7bX3s2DUA+svJFG9g2VHz37ulum UUO8nwAgra81hS6O+htyQcCHeZsN4PtCvnIhbT/i1RuWPaVf/NLnAv8uiofGTMa3 HiGzJzli9VsckQNvsTkR12o7z16LclalN3KycZliFvkj41EaxEOqYVHEraJz8QSg 1pB2zoTrhEdqnIbmzcKLjPIWfOHrcIk5uMxJOQlmJe8FMdWz8rRclMgTbx02BWL2 7Pbi61RclAs9BwBfIdpbqVxgRflGB9NvNU8LoWuCI0JdbMtJACLppyNEl5nnw96e f23vZambf71rY5LorCMIyLok1UQ= -----END CERTIFICATE-----Generated at Sun Dec 7 01:02:44 2025 by rpki-client