This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/FADF73B4C42811F0B219BB6AC4F9AE02.roa File: FADF73B4C42811F0B219BB6AC4F9AE02.roa (raw, json) Hash identifier: SdFwkFKVKGQJMPSxRwUazujF8EdEIyRb2qsEHEvHujY= Subject key identifier: B9:3D:E3:02:F3:4D:4B:C8:32:C8:37:89:65:33:61:6B:49:09:48:70 Certificate issuer: /CN=A91DFEC2/serialNumber=745D577F5B8E7D4F8DB49A8DB9ACB13FC25AA233 Certificate serial: 16 Authority key identifier: 74:5D:57:7F:5B:8E:7D:4F:8D:B4:9A:8D:B9:AC:B1:3F:C2:5A:A2:33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF1Xf1uOfU-NtJqNuayxP8JaojM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/FADF73B4C42811F0B219BB6AC4F9AE02.roa Signing time: Tue 18 Nov 2025 03:12:20 +0000 ROA not before: Tue 18 Nov 2025 03:12:20 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 153995 IP address blocks: 103.86.72.0/24 maxlen: 24 103.86.73.0/24 maxlen: 24 103.86.74.0/24 maxlen: 24 103.86.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.crl rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF1Xf1uOfU-NtJqNuayxP8JaojM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFEC2, serialNumber=745D577F5B8E7D4F8DB49A8DB9ACB13FC25AA233 Validity Not Before: Nov 18 03:12:20 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=691be414-974d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2e:fe:e4:ed:30:e5:be:a6:99:58:90:5f:fb: 87:2e:23:61:ef:f4:6b:85:07:13:bb:a5:38:87:b7: 00:8f:eb:d3:80:a6:4e:df:0e:0c:62:d1:b8:14:60: 12:52:21:a4:1b:d2:63:0b:8a:25:80:77:dc:95:f5: 17:34:c2:8f:fb:f9:e0:e2:60:2c:36:89:60:e4:f2: 0a:43:c2:78:58:34:46:52:ac:7b:a0:fd:73:58:43: 35:bd:c7:ce:29:1f:9c:42:29:0d:9f:dd:b9:ef:6c: d7:43:fb:fc:5d:aa:c0:ba:5d:58:f1:2f:7f:a9:98: 27:50:ea:6d:19:cf:1b:3d:70:75:47:13:08:c6:da: 80:e7:be:c4:d7:36:40:56:1b:61:df:35:24:37:0b: 0b:f7:e5:60:98:9d:bb:c8:3d:ef:e0:75:b7:d9:01: 63:50:95:8e:2b:b6:0a:1e:9d:f1:37:13:91:4e:ff: 52:6c:26:31:64:31:20:3d:ad:50:30:ef:76:36:98: 9e:79:c2:c8:50:5e:c4:5c:26:cc:2c:c6:53:3a:c4: b8:e7:11:c9:e5:76:cd:fa:d4:72:d7:96:f6:56:5d: d2:0b:70:0e:43:6e:46:63:ad:77:60:cf:97:9f:3e: 6d:56:bc:05:23:46:45:0b:9e:35:3f:5f:c9:45:39: 66:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:3D:E3:02:F3:4D:4B:C8:32:C8:37:89:65:33:61:6B:49:09:48:70 X509v3 Authority Key Identifier: keyid:74:5D:57:7F:5B:8E:7D:4F:8D:B4:9A:8D:B9:AC:B1:3F:C2:5A:A2:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF1Xf1uOfU-NtJqNuayxP8JaojM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/FADF73B4C42811F0B219BB6AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.86.72.0/22 Signature Algorithm: sha256WithRSAEncryption 88:d2:07:c2:2d:80:18:59:95:d1:84:c8:45:95:47:54:ff:92: 97:26:f5:06:aa:c3:11:45:bf:0d:66:6a:e8:b7:27:d4:1f:3f: 12:a0:7a:5b:81:e0:f2:96:14:1f:c4:28:d0:4b:40:3b:1c:c6: 5c:a7:1d:3e:95:34:d4:16:2a:eb:84:ad:58:9b:cf:9a:ed:21: 2d:f5:92:7e:45:80:c0:27:a8:c8:f0:c7:b7:4f:c0:ad:52:6d: 81:be:65:14:5e:84:94:07:58:c0:e6:28:3e:62:cd:44:59:25: f4:ed:58:38:96:be:34:0c:d1:8b:33:a2:e6:2f:00:2b:a8:5f: f2:dc:a0:47:d9:57:c5:a6:67:73:d2:32:c2:1a:a9:99:47:2c: 5b:8f:0d:02:61:e9:c3:64:8d:28:53:f8:6c:37:cc:45:e0:4a: dd:dd:2e:c0:18:63:28:d0:04:b5:24:65:37:cf:e3:98:99:01: 57:2d:f1:73:a4:4b:16:3f:0d:6a:ad:49:ad:81:e5:94:3c:e0: 2b:1d:b2:31:27:f6:44:ee:1f:ce:cb:9f:6c:32:56:1f:4e:31: 06:1e:ab:50:25:cd:7d:ca:5b:3a:e1:8f:c2:75:25:7c:94:c7: 2a:25:30:ac:a5:0c:32:32:0a:0a:4a:8d:cf:70:11:26:2a:41: ed:df:f1:c3 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RkVDMjExMC8GA1UEBRMoNzQ1RDU3N0Y1QjhFN0Q0RjhEQjQ5QThEQjlBQ0IxM0ZD MjVBQTIzMzAeFw0yNTExMTgwMzEyMjBaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MWJlNDE0LTk3NGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDaLv7k7TDlvqaZWJBf+4cuI2Hv9GuFBxO7pTiHtwCP69OApk7fDgxi0bgUYBJS IaQb0mMLiiWAd9yV9Rc0wo/7+eDiYCw2iWDk8gpDwnhYNEZSrHug/XNYQzW9x84p H5xCKQ2f3bnvbNdD+/xdqsC6XVjxL3+pmCdQ6m0Zzxs9cHVHEwjG2oDnvsTXNkBW G2HfNSQ3Cwv35WCYnbvIPe/gdbfZAWNQlY4rtgoenfE3E5FO/1JsJjFkMSA9rVAw 73Y2mJ55wshQXsRcJswsxlM6xLjnEcnlds361HLXlvZWXdILcA5DbkZjrXdgz5ef Pm1WvAUjRkULnjU/X8lFOWbTAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUuT3jAvNN S8gyyDeJZTNha0kJSHAwHwYDVR0jBBgwFoAUdF1Xf1uOfU+NtJqNuayxP8JaojMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURGRUMyL0I4MkE5QTFDQjg3 RjExRjA4NzFBRkY0MkM0RjlBRTAyL2RGMVhmMXVPZlUtTnRKcU51YXl4UDhKYW9q TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZEYxWGYxdU9mVS1OdEpxTnVheXhQOEphb2pNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkVDMi9CODJBOUExQ0I4N0YxMUYwODcxQUZGNDJDNEY5QUUwMi9GQURGNzNCNEM0 MjgxMUYwQjIxOUJCNkFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAmdWSDANBgkqhkiG9w0BAQsFAAOCAQEAiNIHwi2AGFmV0YTI RZVHVP+Slyb1BqrDEUW/DWZq6Lcn1B8/EqB6W4Hg8pYUH8Qo0EtAOxzGXKcdPpU0 1BYq64StWJvPmu0hLfWSfkWAwCeoyPDHt0/ArVJtgb5lFF6ElAdYwOYoPmLNRFkl 9O1YOJa+NAzRizOi5i8AK6hf8tygR9lXxaZnc9IywhqpmUcsW48NAmHpw2SNKFP4 bDfMReBK3d0uwBhjKNAEtSRlN8/jmJkBVy3xc6RLFj8Naq1JrYHllDzgKx2yMSf2 RO4fzsufbDJWH04xBh6rUCXNfcpbOuGPwnUlfJTHKiUwrKUMMjIKCkqNz3ARJipB 7d/xww== -----END CERTIFICATE-----Generated at Sat Dec 6 18:23:33 2025 by rpki-client