This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/204E25DADE9711EC9289256FC4F9AE02.roa File: 204E25DADE9711EC9289256FC4F9AE02.roa (raw, json) Hash identifier: /aQYygAsI5fV2mFcfHBoburj5j4bXjYX8PU+kzkSJik= Subject key identifier: 80:E3:4C:DB:8F:0D:D0:A6:F3:D2:F7:C0:64:3B:1A:7C:D6:34:8C:5E Certificate issuer: /CN=A91DEB81/serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892 Certificate serial: 04B8 Authority key identifier: 77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/204E25DADE9711EC9289256FC4F9AE02.roa Signing time: Fri 05 Dec 2025 00:25:03 +0000 ROA not before: Fri 05 Dec 2025 00:25:03 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 205960 IP address blocks: 103.254.72.0/22 maxlen: 22 103.254.73.0/24 maxlen: 24 103.254.74.0/24 maxlen: 24 192.51.188.0/24 maxlen: 24 192.197.113.0/24 maxlen: 24 204.52.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1208 (0x4b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEB81, serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892 Validity Not Before: Dec 5 00:25:03 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6932265e-17fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:86:2c:61:98:1d:1e:78:b4:ad:4c:8c:15:f3: 90:52:58:e9:e3:86:a1:fb:0e:06:b4:68:53:a1:4d: 2c:f1:b3:4f:f1:66:9a:0e:e5:f9:05:a7:98:d2:45: 6d:3b:ec:5b:cb:a6:9d:03:92:ea:6b:2a:85:4b:f7: ab:76:07:64:f2:e8:29:3f:ba:07:c2:20:1c:23:ca: 47:30:0c:1a:01:8d:7d:a1:f4:c8:69:4a:84:d1:f9: 99:75:4d:ce:bd:75:d5:51:f6:4b:b4:c8:aa:f1:47: 9e:a0:6f:55:25:ff:e9:db:bf:6c:5a:bf:32:2f:03: 16:2a:18:c8:c2:29:c9:63:6b:96:76:ad:9c:5b:53: e6:5a:53:2f:ff:0f:23:a9:5f:8b:12:6d:c5:d2:76: 51:f6:3e:aa:d8:4a:d2:0d:36:6a:ae:a9:91:a4:a7: 91:47:f5:3a:ef:0a:35:e7:9d:c2:15:f3:be:c4:a3: 9f:65:03:d9:40:8f:0b:20:23:26:de:48:e9:63:35: ff:24:0b:2d:71:71:9e:81:15:54:7a:ba:5a:12:e5: 56:44:ce:c7:64:a9:06:76:f8:dd:3c:3a:77:0e:c9: 70:7a:62:64:38:5f:40:2a:22:18:6d:63:3e:99:18: 42:8a:64:04:19:e9:30:6f:fe:5f:11:fb:f4:83:10: 1a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:E3:4C:DB:8F:0D:D0:A6:F3:D2:F7:C0:64:3B:1A:7C:D6:34:8C:5E X509v3 Authority Key Identifier: keyid:77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/204E25DADE9711EC9289256FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.254.72.0/22 192.51.188.0/24 192.197.113.0/24 204.52.191.0/24 Signature Algorithm: sha256WithRSAEncryption 57:d3:d3:3b:8a:bb:fa:6f:2a:19:fd:3d:f5:aa:75:a7:ec:49: 6d:44:d5:64:bd:ec:6c:4e:08:dd:f9:d5:de:60:f0:64:6d:ff: 0c:5e:53:90:90:45:3a:ff:18:85:94:f2:c8:8e:0b:59:32:8f: 83:af:c5:ff:f6:7a:7d:6f:34:5f:d6:87:57:dc:64:c9:4a:26: 66:43:7f:54:fd:54:fc:99:33:6b:2f:92:92:73:46:80:86:73: ed:40:1d:23:e7:57:9c:f9:4b:fb:af:98:b7:b4:00:f8:c1:89: fe:19:b5:c2:f5:3f:2b:b3:7b:43:5e:82:4f:0a:eb:62:c8:e7: ac:2a:91:69:b1:8d:2c:e4:93:28:44:23:8c:40:82:9e:ab:92: 01:29:25:21:e8:fa:bd:3a:50:5e:39:03:11:0e:db:d6:56:e8: b9:ce:43:91:d6:04:70:02:f7:dc:95:6f:c3:43:78:ef:9d:74: 79:fc:61:7d:af:b8:fc:eb:b9:fb:0a:31:3c:c4:fc:de:3a:15: 7b:b8:bd:98:05:59:54:99:09:62:8c:a7:03:39:a9:e2:24:cb: b5:36:11:d7:04:b0:27:3b:ea:61:7e:ac:8e:29:17:8f:c4:4e: 58:90:fa:9a:da:9b:55:3c:e6:fc:85:fa:2c:eb:52:5c:f4:fc: 37:60:ba:18 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICBLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVCODExMTAvBgNVBAUTKDc3NzY2MTJBNDNDMjJEMEE2NkI4RjEzNjgwQjMwNThC RUQ1RDk4OTIwHhcNMjUxMjA1MDAyNTAzWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTMyMjY1ZS0xN2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1IYsYZgdHni0rUyMFfOQUljp44ah+w4GtGhToU0s8bNP8WaaDuX5BaeY0kVt O+xby6adA5LqayqFS/erdgdk8ugpP7oHwiAcI8pHMAwaAY19ofTIaUqE0fmZdU3O vXXVUfZLtMiq8UeeoG9VJf/p279sWr8yLwMWKhjIwinJY2uWdq2cW1PmWlMv/w8j qV+LEm3F0nZR9j6q2ErSDTZqrqmRpKeRR/U67wo1553CFfO+xKOfZQPZQI8LICMm 3kjpYzX/JAstcXGegRVUerpaEuVWRM7HZKkGdvjdPDp3DslwemJkOF9AKiIYbWM+ mRhCimQEGekwb/5fEfv0gxAaCQIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFIDjTNuP DdCm89L3wGQ7GnzWNIxeMB8GA1UdIwQYMBaAFHd2YSpDwi0KZrjxNoCzBYvtXZiS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUI4MS9DRjk2NjNDNjcw RjcxMUVDQjMxOEU0M0FDNEY5QUUwMi9kM1poS2tQQ0xRcG11UEUyZ0xNRmktMWRt SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QzWmhLa1BDTFFwbXVQRTJnTE1GaS0xZG1KSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REVCODEvQ0Y5NjYzQzY3MEY3MTFFQ0IzMThFNDNBQzRGOUFFMDIvMjA0RTI1REFE RTk3MTFFQzkyODkyNTZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAJn/kgDBADAM7wDBADAxXEDBADMNL8wDQYJKoZIhvcNAQEL BQADggEBAFfT0zuKu/pvKhn9PfWqdafsSW1E1WS97GxOCN351d5g8GRt/wxeU5CQ RTr/GIWU8siOC1kyj4Ovxf/2en1vNF/Wh1fcZMlKJmZDf1T9VPyZM2svkpJzRoCG c+1AHSPnV5z5S/uvmLe0APjBif4ZtcL1Pyuze0Negk8K62LI56wqkWmxjSzkkyhE I4xAgp6rkgEpJSHo+r06UF45AxEO29ZW6LnOQ5HWBHAC99yVb8NDeO+ddHn8YX2v uPzrufsKMTzE/N46FXu4vZgFWVSZCWKMpwM5qeIky7U2EdcEsCc76mF+rI4pF4/E TliQ+pram1U85vyF+izrUlz0/Ddguhg= -----END CERTIFICATE-----Generated at Sun Dec 7 01:52:42 2025 by rpki-client