This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5A08/B060CC54E26511ED850CDE54C4F9AE02/EC9A7C9EE26811EDBB19B85EC4F9AE02.roa File: EC9A7C9EE26811EDBB19B85EC4F9AE02.roa (raw, json) Hash identifier: 1sa+ik65HDpM/qIP+SkfWWXEJCGddK6P6JEdVTcmfes= Subject key identifier: B0:40:AC:12:90:07:B4:11:0B:18:32:1F:18:B2:2B:D8:89:71:6C:A8 Certificate issuer: /CN=A91E5A08/serialNumber=6006B9658313D864991619D6979B0F7E01E4B668 Certificate serial: 01EA Authority key identifier: 60:06:B9:65:83:13:D8:64:99:16:19:D6:97:9B:0F:7E:01:E4:B6:68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAa5ZYMT2GSZFhnWl5sPfgHktmg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5A08/B060CC54E26511ED850CDE54C4F9AE02/EC9A7C9EE26811EDBB19B85EC4F9AE02.roa Signing time: Thu 27 Nov 2025 01:18:16 +0000 ROA not before: Thu 27 Nov 2025 01:18:16 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 139723 IP address blocks: 103.144.23.0/24 maxlen: 24 2001:df1:af80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5A08/B060CC54E26511ED850CDE54C4F9AE02/YAa5ZYMT2GSZFhnWl5sPfgHktmg.crl rsync://rpki.apnic.net/member_repository/A91E5A08/B060CC54E26511ED850CDE54C4F9AE02/YAa5ZYMT2GSZFhnWl5sPfgHktmg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAa5ZYMT2GSZFhnWl5sPfgHktmg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:53:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 490 (0x1ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5A08, serialNumber=6006B9658313D864991619D6979B0F7E01E4B668 Validity Not Before: Nov 27 01:18:16 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6927a6d7-9308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:97:4b:c3:f1:07:fa:5f:27:8d:7e:d6:8a:58: be:cb:65:f6:9f:72:b3:47:31:fa:a0:d8:f0:ea:a6: 11:7c:c3:2c:24:2c:b7:8f:1c:1b:35:7a:63:83:b0: d2:e6:10:28:0b:c1:88:e2:37:44:98:a1:33:3b:25: 0f:37:10:37:cf:8c:1c:a1:aa:76:27:ef:8c:f7:68: eb:d2:1d:b1:4d:b6:a7:6c:30:e4:1c:52:74:d3:7e: 4d:48:25:a3:e6:b9:cf:57:ea:e9:dd:d9:32:de:ce: c3:b9:6b:76:ff:24:74:68:95:15:12:77:fa:d8:6f: 79:fa:2b:cd:74:5a:cd:7f:a2:38:28:ad:52:39:93: 72:14:3e:d4:c3:71:ae:b4:7a:97:80:dd:49:51:13: 61:b1:a0:f6:3d:32:95:c7:55:92:f2:2c:a7:f7:1f: 15:ea:c9:ad:12:3b:e9:f4:cb:8d:16:03:86:eb:c0: 20:9e:1a:12:b8:30:41:cd:13:57:7e:2d:ae:06:e8: b5:b7:09:55:90:9d:12:0d:c5:ac:b7:f1:1f:c3:01: 28:6d:4f:4c:c7:52:c3:98:7e:4e:2f:35:c7:81:f6: 7b:28:91:48:ae:12:c4:38:81:95:f5:8f:98:e4:72: 09:7a:c5:25:89:ec:ad:bd:d1:46:84:55:93:e7:b1: ab:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:40:AC:12:90:07:B4:11:0B:18:32:1F:18:B2:2B:D8:89:71:6C:A8 X509v3 Authority Key Identifier: keyid:60:06:B9:65:83:13:D8:64:99:16:19:D6:97:9B:0F:7E:01:E4:B6:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5A08/B060CC54E26511ED850CDE54C4F9AE02/YAa5ZYMT2GSZFhnWl5sPfgHktmg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAa5ZYMT2GSZFhnWl5sPfgHktmg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5A08/B060CC54E26511ED850CDE54C4F9AE02/EC9A7C9EE26811EDBB19B85EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.144.23.0/24 IPv6: 2001:df1:af80::/48 Signature Algorithm: sha256WithRSAEncryption a7:d5:92:27:23:72:cb:eb:bf:0a:a0:dd:ed:7d:bd:ad:37:ad: 99:55:77:d0:ae:9e:ce:bf:bb:a8:be:de:5f:38:2e:05:db:0a: f8:98:3a:07:0a:31:70:fe:2d:1f:d4:63:04:5a:2c:ad:61:5d: 53:2f:4c:45:8d:86:9f:42:52:b3:3e:a2:1f:aa:8a:1c:fd:8b: 2c:17:39:73:e5:7c:54:21:49:78:cf:96:a9:6c:6d:78:69:11: ff:28:63:d1:fd:cb:42:7f:e5:ef:b4:8d:f5:6d:51:28:b3:ae: 50:32:c3:e1:4d:69:3f:ac:b5:51:0c:f2:6d:3d:48:3b:ef:48: c0:b4:60:fa:42:44:ca:53:1f:ba:3d:76:9a:7e:1f:7a:90:bd: e7:08:66:88:22:39:06:72:cc:07:27:7e:55:8c:37:71:d8:4a: 35:bd:ce:68:44:33:98:a2:3e:89:4a:5a:71:e5:71:71:d8:b9: d9:5d:ee:9b:60:9e:4b:62:8b:67:f1:15:9e:fb:cd:cc:02:0f: 9f:05:bf:ab:05:cd:1e:18:dc:79:7e:90:59:9f:a2:c9:be:61: e5:39:b9:7b:55:b3:12:a4:54:3d:24:f3:a4:58:41:c7:41:ee: 89:67:c3:53:74:13:2a:b3:f5:0a:58:aa:3c:79:a0:37:dd:e1: d3:5e:3a:4a -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVBMDgxMTAvBgNVBAUTKDYwMDZCOTY1ODMxM0Q4NjQ5OTE2MTlENjk3OUIwRjdF MDFFNEI2NjgwHhcNMjUxMTI3MDExODE2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTI3YTZkNy05MzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZdLw/EH+l8njX7Wili+y2X2n3KzRzH6oNjw6qYRfMMsJCy3jxwbNXpjg7DS 5hAoC8GI4jdEmKEzOyUPNxA3z4wcoap2J++M92jr0h2xTbanbDDkHFJ0035NSCWj 5rnPV+rp3dky3s7DuWt2/yR0aJUVEnf62G95+ivNdFrNf6I4KK1SOZNyFD7Uw3Gu tHqXgN1JURNhsaD2PTKVx1WS8iyn9x8V6smtEjvp9MuNFgOG68AgnhoSuDBBzRNX fi2uBui1twlVkJ0SDcWst/EfwwEobU9Mx1LDmH5OLzXHgfZ7KJFIrhLEOIGV9Y+Y 5HIJesUlieytvdFGhFWT57Gr2wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFLBArBKQ B7QRCxgyHxiyK9iJcWyoMB8GA1UdIwQYMBaAFGAGuWWDE9hkmRYZ1pebD34B5LZo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUEwOC9CMDYwQ0M1NEUy NjUxMUVEODUwQ0RFNTRDNEY5QUUwMi9ZQWE1WllNVDJHU1pGaG5XbDVzUGZnSGt0 bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lBYTVaWU1UMkdTWkZobldsNXNQZmdIa3RtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTVBMDgvQjA2MENDNTRFMjY1MTFFRDg1MENERTU0QzRGOUFFMDIvRUM5QTdDOUVF MjY4MTFFREJCMTlCODVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnkBcwDwQCAAIwCQMHACABDfGvgDANBgkqhkiG9w0BAQsF AAOCAQEAp9WSJyNyy+u/CqDd7X29rTetmVV30K6ezr+7qL7eXzguBdsK+Jg6Bwox cP4tH9RjBFosrWFdUy9MRY2Gn0JSsz6iH6qKHP2LLBc5c+V8VCFJeM+WqWxteGkR /yhj0f3LQn/l77SN9W1RKLOuUDLD4U1pP6y1UQzybT1IO+9IwLRg+kJEylMfuj12 mn4fepC95whmiCI5BnLMByd+VYw3cdhKNb3OaEQzmKI+iUpaceVxcdi52V3um2Ce S2KLZ/EVnvvNzAIPnwW/qwXNHhjceX6QWZ+iyb5h5Tm5e1WzEqRUPSTzpFhBx0Hu iWfDU3QTKrP1CliqPHmgN93h0146Sg== -----END CERTIFICATE-----Generated at Sun Dec 7 00:39:27 2025 by rpki-client