This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E007B/09DE3482671311EAA4D26753C4F9AE02/BCFA6274C35C11F0BCE51340C4F9AE02.roa File: BCFA6274C35C11F0BCE51340C4F9AE02.roa (raw, json) Hash identifier: W5BhLwm8XeaqdragIwCA+lMkwRm6VapbpwEXtnEy0Xw= Subject key identifier: E1:59:77:B3:7E:42:AA:B3:4E:99:CC:E9:E8:F8:EE:02:BA:05:5C:F7 Certificate issuer: /CN=A91E007B/serialNumber=C2780CFD57A9986993DBF6C0D6BDEEF76B451972 Certificate serial: 0AB4 Authority key identifier: C2:78:0C:FD:57:A9:98:69:93:DB:F6:C0:D6:BD:EE:F7:6B:45:19:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wngM_VepmGmT2_bA1r3u92tFGXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E007B/09DE3482671311EAA4D26753C4F9AE02/BCFA6274C35C11F0BCE51340C4F9AE02.roa Signing time: Mon 17 Nov 2025 02:25:52 +0000 ROA not before: Mon 17 Nov 2025 02:25:52 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 4764 IP address blocks: 43.251.200.0/22 maxlen: 22 43.251.200.0/24 maxlen: 24 103.42.236.0/22 maxlen: 22 103.42.236.0/24 maxlen: 24 122.102.96.0/21 maxlen: 21 122.102.104.0/22 maxlen: 22 202.86.208.0/21 maxlen: 21 2405:e400::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E007B/09DE3482671311EAA4D26753C4F9AE02/wngM_VepmGmT2_bA1r3u92tFGXI.crl rsync://rpki.apnic.net/member_repository/A91E007B/09DE3482671311EAA4D26753C4F9AE02/wngM_VepmGmT2_bA1r3u92tFGXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wngM_VepmGmT2_bA1r3u92tFGXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 18:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2740 (0xab4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E007B, serialNumber=C2780CFD57A9986993DBF6C0D6BDEEF76B451972 Validity Not Before: Nov 17 02:25:52 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=691a87b0-65bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:29:c1:e3:b3:f5:5d:0b:e3:09:98:a0:4c:f2: 86:06:10:18:1f:58:51:97:f2:83:a0:dc:a9:56:03: 55:2b:73:08:a5:fd:9d:ad:75:23:76:48:93:e5:a6: 2e:99:59:28:b8:c1:8d:52:f6:27:70:a2:14:0e:5a: 1d:29:c5:21:c4:fa:09:26:30:cb:bf:30:b9:bf:5c: 75:6b:e6:69:e1:fd:a6:ee:19:e6:5f:7f:6f:2d:0e: 8c:2f:20:a2:a0:5e:7c:53:39:77:4e:eb:e3:eb:59: 50:b8:fb:95:16:01:f1:88:8c:b1:87:af:7f:55:d2: 41:af:4b:a2:3c:b5:bf:bf:6c:44:fc:88:33:6c:c0: cf:48:68:ef:a7:89:a0:ab:f1:aa:73:bf:62:47:3b: 3f:35:ec:36:57:13:f1:e0:7c:fd:0e:da:83:dd:6f: 1e:ba:c6:d7:90:6e:e4:29:68:a2:48:b4:ae:40:eb: 06:77:2f:66:79:cd:7a:d7:1e:7e:f0:5e:74:ab:b7: 8d:f6:4c:ec:0a:16:9a:71:a0:65:de:32:16:4c:61: dd:ae:f7:8c:a4:9c:b7:4e:7f:fc:fc:a6:c0:45:ce: 92:a3:95:aa:09:79:f3:c0:93:d9:22:3d:f3:53:8e: e3:1c:7e:1f:ca:58:7e:fa:1c:b6:47:d2:e8:35:81: 72:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:59:77:B3:7E:42:AA:B3:4E:99:CC:E9:E8:F8:EE:02:BA:05:5C:F7 X509v3 Authority Key Identifier: keyid:C2:78:0C:FD:57:A9:98:69:93:DB:F6:C0:D6:BD:EE:F7:6B:45:19:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E007B/09DE3482671311EAA4D26753C4F9AE02/wngM_VepmGmT2_bA1r3u92tFGXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wngM_VepmGmT2_bA1r3u92tFGXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E007B/09DE3482671311EAA4D26753C4F9AE02/BCFA6274C35C11F0BCE51340C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.251.200.0/22 103.42.236.0/22 122.102.96.0-122.102.107.255 202.86.208.0/21 IPv6: 2405:e400::/32 Signature Algorithm: sha256WithRSAEncryption 64:63:3e:e4:1e:4c:c3:28:1c:5f:62:01:3d:93:38:64:90:df: 2b:a6:72:50:ff:4a:f5:d2:19:75:01:84:fc:80:c6:b2:f9:6f: 02:4f:f1:a4:e2:7a:fd:d0:91:95:25:43:f2:70:91:b4:14:ea: 80:c8:11:66:2d:9b:e0:b2:3b:df:d2:84:a4:f1:be:8a:ac:19: 41:2a:aa:79:a3:b7:0e:ed:32:87:72:a9:87:79:bd:db:37:7d: 9b:20:fb:fa:04:3e:52:9b:c3:17:36:cc:f3:be:5a:f8:c4:5e: 0f:70:86:f2:ed:96:b0:9a:bc:f4:bd:b5:fa:36:a2:f9:49:32: e2:81:0e:6c:e7:8b:f6:45:55:bd:5d:02:2e:49:02:a7:85:3a: 04:46:f9:d5:46:cf:30:59:5c:d5:ee:69:44:42:74:d8:16:f4: 2e:3b:93:fa:67:94:0c:ec:3f:0d:72:2c:ae:0b:99:54:28:e6: 99:06:99:15:a1:08:40:1f:9a:aa:37:e8:f0:77:28:ef:ec:9b: 83:31:7b:9c:98:f5:61:41:83:75:1a:69:1d:bb:6b:8b:31:33: 15:8e:0d:45:13:9e:04:7a:9d:b6:05:2c:38:1a:c8:5a:1c:ea: 42:ee:72:16:35:d5:e0:fb:7a:9f:40:ea:6d:51:44:8c:97:7f: dc:09:90:41 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgICCrQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAwN0IxMTAvBgNVBAUTKEMyNzgwQ0ZENTdBOTk4Njk5M0RCRjZDMEQ2QkRFRUY3 NkI0NTE5NzIwHhcNMjUxMTE3MDIyNTUyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTFhODdiMC02NWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAninB47P1XQvjCZigTPKGBhAYH1hRl/KDoNypVgNVK3MIpf2drXUjdkiT5aYu mVkouMGNUvYncKIUDlodKcUhxPoJJjDLvzC5v1x1a+Zp4f2m7hnmX39vLQ6MLyCi oF58Uzl3Tuvj61lQuPuVFgHxiIyxh69/VdJBr0uiPLW/v2xE/IgzbMDPSGjvp4mg q/Gqc79iRzs/New2VxPx4Hz9DtqD3W8eusbXkG7kKWiiSLSuQOsGdy9mec161x5+ 8F50q7eN9kzsChaacaBl3jIWTGHdrveMpJy3Tn/8/KbARc6So5WqCXnzwJPZIj3z U47jHH4fylh++hy2R9LoNYFy5QIDAQABo4ICvjCCArowHQYDVR0OBBYEFOFZd7N+ QqqzTpnM6ej47gK6BVz3MB8GA1UdIwQYMBaAFMJ4DP1XqZhpk9v2wNa97vdrRRly MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDA3Qi8wOURFMzQ4MjY3 MTMxMUVBQTREMjY3NTNDNEY5QUUwMi93bmdNX1ZlcG1HbVQyX2JBMXIzdTkydEZH WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3duZ01fVmVwbUdtVDJfYkExcjN1OTJ0RkdYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTAwN0IvMDlERTM0ODI2NzEzMTFFQUE0RDI2NzUzQzRGOUFFMDIvQkNGQTYyNzRD MzVDMTFGMEJDRTUxMzQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSAYIKwYBBQUHAQcBAf8E OTA3MCYEAgABMCADBAIr+8gDBAJnKuwwDAMEBXpmYAMEAnpmaAMEA8pW0DANBAIA AjAHAwUAJAXkADANBgkqhkiG9w0BAQsFAAOCAQEAZGM+5B5MwygcX2IBPZM4ZJDf K6ZyUP9K9dIZdQGE/IDGsvlvAk/xpOJ6/dCRlSVD8nCRtBTqgMgRZi2b4LI739KE pPG+iqwZQSqqeaO3Du0yh3Kph3m92zd9myD7+gQ+UpvDFzbM875a+MReD3CG8u2W sJq89L21+jai+Uky4oEObOeL9kVVvV0CLkkCp4U6BEb51UbPMFlc1e5pREJ02Bb0 LjuT+meUDOw/DXIsrguZVCjmmQaZFaEIQB+aqjfo8Hco7+ybgzF7nJj1YUGDdRpp HbtrizEzFY4NRROeBHqdtgUsOBrIWhzqQu5yFjXV4Pt6n0DqbVFEjJd/3AmQQQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:44:17 2025 by rpki-client