This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/1FBEA1EEDE9711EC9289256FC4F9AE02.roa File: 1FBEA1EEDE9711EC9289256FC4F9AE02.roa (raw, json) Hash identifier: Pw1VfyFxavHvFST5T+H3g0H5LvyxMCtjtqjSFSOsHV4= Subject key identifier: 87:0D:A3:CB:44:D5:60:A2:C5:F4:48:2E:C9:C5:D6:E5:85:9F:27:87 Certificate issuer: /CN=A91DEB81/serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892 Certificate serial: 04B7 Authority key identifier: 77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/1FBEA1EEDE9711EC9289256FC4F9AE02.roa Signing time: Fri 05 Dec 2025 00:25:01 +0000 ROA not before: Fri 05 Dec 2025 00:25:01 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 137427 IP address blocks: 103.254.72.0/22 maxlen: 22 103.254.73.0/24 maxlen: 24 192.197.113.0/24 maxlen: 24 204.52.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 22:49:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1207 (0x4b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEB81, serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892 Validity Not Before: Dec 5 00:25:01 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6932265d-5273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:50:12:1c:34:93:25:98:a3:f7:f3:22:32:ee: bd:c4:a3:7d:6d:91:e8:b0:99:cf:9a:82:58:23:9f: ed:c2:d6:83:84:be:6a:86:c5:25:1b:30:8b:e8:a7: fd:bb:a9:b4:4f:37:5a:54:77:ab:e5:92:fa:29:f3: df:38:60:5c:64:d1:0b:83:a7:fe:de:63:9c:f0:cd: 3c:c5:f3:6c:90:f5:08:b3:0d:19:9e:eb:59:54:15: 3d:37:0b:e6:75:a4:41:ba:c6:19:db:67:48:ef:e1: 2a:29:98:4b:9b:18:7e:01:c5:60:12:0b:e8:ae:74: 07:0d:51:db:53:b4:ca:da:95:16:10:9c:97:5b:24: c5:4c:06:7d:47:91:3a:a1:42:ab:3f:88:51:16:ab: 86:5d:4a:e6:e5:bd:c1:ab:5f:a9:99:49:ca:f3:db: df:32:e1:88:a5:63:39:b7:e2:ee:7d:10:2d:50:af: e1:a3:b0:6f:c4:2d:4e:e9:88:e2:aa:c2:74:4f:77: 0f:b8:d0:8b:0b:bd:f6:aa:64:b4:09:ad:d2:18:1d: 12:b3:b1:35:5b:bd:13:ee:88:6a:b4:82:f1:f4:5d: 96:ff:ba:b1:87:1d:d1:41:d2:70:d6:4e:ab:ce:01: 67:c3:1b:21:b6:e3:76:58:28:30:26:90:12:3c:c8: bb:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:0D:A3:CB:44:D5:60:A2:C5:F4:48:2E:C9:C5:D6:E5:85:9F:27:87 X509v3 Authority Key Identifier: keyid:77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/1FBEA1EEDE9711EC9289256FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.254.72.0/22 192.197.113.0/24 204.52.191.0/24 Signature Algorithm: sha256WithRSAEncryption 59:b1:16:bf:36:c1:ca:74:63:d4:93:01:f8:b3:99:f1:f5:8d: 08:bc:78:53:13:84:a8:6d:1a:08:f5:b9:be:f4:ef:5f:29:78: d9:12:a8:01:6f:ca:f4:de:53:03:01:94:3a:07:79:32:c2:58: 95:8c:8a:55:e5:b5:e4:8d:2a:9d:ff:54:ff:91:07:a6:5c:55: f5:c0:02:e3:3a:4a:0c:07:b5:b3:52:cc:9f:7f:bf:64:a4:0d: 58:ed:c5:79:89:65:b2:5a:21:1e:19:a1:8e:76:72:9d:3d:5e: a2:15:93:13:77:ff:22:d0:05:c7:fc:f2:24:51:2b:d3:ee:88: d7:f6:e2:bd:54:9e:f6:c8:2d:c8:2b:dc:6e:9b:c4:ef:05:27: c3:71:77:92:76:e4:30:1f:b3:a5:ba:db:30:01:64:db:bd:76: b2:45:f8:9b:4e:1b:a1:1d:eb:58:ee:b1:5a:39:8f:82:35:8e: fc:eb:b5:d4:ec:fa:a5:7c:3d:bf:f7:c4:71:e5:3d:68:b0:c0: fb:84:70:60:29:e4:28:be:eb:3b:79:f8:89:a1:34:6a:fd:cb: b6:a9:60:c3:f0:43:15:61:4b:b8:5f:2b:98:03:5d:a8:89:80: be:7d:1c:eb:ad:1c:7f:fd:46:08:ab:e2:85:d4:d1:f2:3e:a1: 22:2d:7d:bb -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICBLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVCODExMTAvBgNVBAUTKDc3NzY2MTJBNDNDMjJEMEE2NkI4RjEzNjgwQjMwNThC RUQ1RDk4OTIwHhcNMjUxMjA1MDAyNTAxWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTMyMjY1ZC01MjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr1ASHDSTJZij9/MiMu69xKN9bZHosJnPmoJYI5/twtaDhL5qhsUlGzCL6Kf9 u6m0TzdaVHer5ZL6KfPfOGBcZNELg6f+3mOc8M08xfNskPUIsw0ZnutZVBU9Nwvm daRBusYZ22dI7+EqKZhLmxh+AcVgEgvornQHDVHbU7TK2pUWEJyXWyTFTAZ9R5E6 oUKrP4hRFquGXUrm5b3Bq1+pmUnK89vfMuGIpWM5t+LufRAtUK/ho7BvxC1O6Yji qsJ0T3cPuNCLC732qmS0Ca3SGB0Ss7E1W70T7ohqtILx9F2W/7qxhx3RQdJw1k6r zgFnwxshtuN2WCgwJpASPMi7lQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFIcNo8tE 1WCixfRILsnF1uWFnyeHMB8GA1UdIwQYMBaAFHd2YSpDwi0KZrjxNoCzBYvtXZiS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUI4MS9DRjk2NjNDNjcw RjcxMUVDQjMxOEU0M0FDNEY5QUUwMi9kM1poS2tQQ0xRcG11UEUyZ0xNRmktMWRt SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QzWmhLa1BDTFFwbXVQRTJnTE1GaS0xZG1KSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REVCODEvQ0Y5NjYzQzY3MEY3MTFFQ0IzMThFNDNBQzRGOUFFMDIvMUZCRUExRUVE RTk3MTFFQzkyODkyNTZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAJn/kgDBADAxXEDBADMNL8wDQYJKoZIhvcNAQELBQADggEB AFmxFr82wcp0Y9STAfizmfH1jQi8eFMThKhtGgj1ub70718peNkSqAFvyvTeUwMB lDoHeTLCWJWMilXlteSNKp3/VP+RB6ZcVfXAAuM6SgwHtbNSzJ9/v2SkDVjtxXmJ ZbJaIR4ZoY52cp09XqIVkxN3/yLQBcf88iRRK9PuiNf24r1UnvbILcgr3G6bxO8F J8Nxd5J25DAfs6W62zABZNu9drJF+JtOG6Ed61jusVo5j4I1jvzrtdTs+qV8Pb/3 xHHlPWiwwPuEcGAp5Ci+6zt5+ImhNGr9y7apYMPwQxVhS7hfK5gDXaiJgL59HOut HH/9Rgir4oXU0fI+oSItfbs= -----END CERTIFICATE-----Generated at Sun Dec 7 02:44:24 2025 by rpki-client