This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/38DEC3C04ED611ED84336740C4F9AE02.roa File: 38DEC3C04ED611ED84336740C4F9AE02.roa (raw, json) Hash identifier: MDsONJ4hpkxo4XypcmXy3n39INmGozN6I7wK4cJeqNQ= Subject key identifier: A0:74:DE:5A:7C:F4:05:7B:B6:A4:55:44:0F:26:B1:27:40:7B:8E:C4 Certificate issuer: /CN=A91E6419/serialNumber=895FB3CE2F9C2E47B914BB2A6B66C77D5397A40A Certificate serial: 025A Authority key identifier: 89:5F:B3:CE:2F:9C:2E:47:B9:14:BB:2A:6B:66:C7:7D:53:97:A4:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/38DEC3C04ED611ED84336740C4F9AE02.roa Signing time: Thu 25 Dec 2025 01:22:02 +0000 ROA not before: Thu 25 Dec 2025 01:22:02 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 132136 IP address blocks: 103.247.116.0/24 maxlen: 24 2001:df7:6a00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.crl rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 602 (0x25a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6419, serialNumber=895FB3CE2F9C2E47B914BB2A6B66C77D5397A40A Validity Not Before: Dec 25 01:22:02 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=694c91ba-853f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e8:ce:e8:55:76:7a:b3:78:5f:43:92:da:71: 6a:a2:b4:52:53:30:37:18:1c:7e:8e:5c:29:20:9f: 01:18:b4:10:d5:97:c0:29:ad:67:40:5f:0e:6e:d2: 59:fd:71:49:f6:56:cd:ff:ce:f9:bb:df:a0:b4:4a: e1:b1:a8:b0:94:96:a7:3d:36:bc:6a:c3:8d:0a:96: 0f:02:b5:a7:c9:01:fd:f6:cb:ea:4b:e5:93:19:8e: 4b:a3:0d:87:42:06:7b:71:2c:c5:08:11:a4:a4:ab: 6b:0c:fe:c6:b5:83:5f:bb:89:51:1f:4f:24:90:3b: 6a:54:c9:5f:35:de:fe:f6:1a:21:8b:c7:6f:25:4d: 55:62:d2:04:6a:67:5c:aa:d8:91:5b:d1:30:e1:e5: 2a:d6:d2:e6:5e:8c:34:a5:77:15:c4:5b:0f:7c:0e: 51:57:ec:4b:22:ba:fe:b8:63:4e:88:1f:2e:59:6f: 5b:11:1f:9f:88:c2:1e:87:56:ed:f2:ca:32:5d:0d: 5b:b4:a7:8d:88:2a:a2:6f:fe:8d:cd:f2:de:76:f4: 2f:55:1e:88:91:6a:77:a9:32:b9:a5:f5:d4:54:e6: 6d:f8:6e:28:a8:9b:3f:16:ec:af:cd:46:35:fb:50: f9:b2:e3:60:1d:1f:31:56:b0:2c:a5:b9:c2:bf:a6: f4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:74:DE:5A:7C:F4:05:7B:B6:A4:55:44:0F:26:B1:27:40:7B:8E:C4 X509v3 Authority Key Identifier: keyid:89:5F:B3:CE:2F:9C:2E:47:B9:14:BB:2A:6B:66:C7:7D:53:97:A4:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/38DEC3C04ED611ED84336740C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.247.116.0/24 IPv6: 2001:df7:6a00::/48 Signature Algorithm: sha256WithRSAEncryption 15:ef:ea:fd:9a:d3:a9:7d:d3:0b:b7:9d:d4:a0:b7:c6:f3:6a: 94:f3:e7:0b:74:05:83:5c:07:5c:28:0f:29:30:ef:02:3f:71: c9:2a:04:2e:0b:b1:da:4c:e2:6a:1d:36:6d:38:72:ae:dc:27: 56:b4:b4:0e:df:c4:cd:4f:9a:4b:0e:53:e2:c0:f6:0e:3a:77: 78:70:d5:ba:64:8b:65:8f:df:ec:13:53:be:06:db:40:5b:ee: b6:ab:44:b3:b9:5e:92:fa:48:bc:0b:43:2e:bd:6b:5b:61:ad: 20:a0:91:a8:3f:1c:fc:f3:05:27:6b:a5:a9:de:7c:eb:fa:8b: 74:0e:7f:25:55:cc:e6:11:a8:18:3c:ca:97:a9:11:82:23:f4: e2:07:af:6a:9b:00:41:63:a1:63:eb:1b:25:6e:0a:af:0f:a3: d2:fd:68:69:eb:5e:2d:57:bd:01:57:c8:d2:44:ec:89:86:74: b1:d3:dc:7e:00:44:13:e7:f2:d3:02:ec:29:ea:d0:39:52:f5: 9a:ff:5a:1f:f3:20:01:51:14:70:ad:4f:04:bf:d7:ca:a9:da: e1:fd:9c:64:f2:6a:d5:98:42:6e:de:a6:bf:83:44:08:97:ac: 9b:be:5a:62:65:db:4d:0d:4a:5e:41:b1:50:e9:c5:f4:c1:9c: 16:48:cc:c2 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx RTY0MTkxMTAvBgNVBAUTKDg5NUZCM0NFMkY5QzJFNDdCOTE0QkIyQTZCNjZDNzdE NTM5N0E0MEEwHhcNMjUxMjI1MDEyMjAyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTRjOTFiYS04NTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuOjO6FV2erN4X0OS2nFqorRSUzA3GBx+jlwpIJ8BGLQQ1ZfAKa1nQF8ObtJZ /XFJ9lbN/875u9+gtErhsaiwlJanPTa8asONCpYPArWnyQH99svqS+WTGY5Low2H QgZ7cSzFCBGkpKtrDP7GtYNfu4lRH08kkDtqVMlfNd7+9hohi8dvJU1VYtIEamdc qtiRW9Ew4eUq1tLmXow0pXcVxFsPfA5RV+xLIrr+uGNOiB8uWW9bER+fiMIeh1bt 8soyXQ1btKeNiCqib/6NzfLedvQvVR6IkWp3qTK5pfXUVOZt+G4oqJs/FuyvzUY1 +1D5suNgHR8xVrAspbnCv6b0WQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFKB03lp8 9AV7tqRVRA8msSdAe47EMB8GA1UdIwQYMBaAFIlfs84vnC5HuRS7Kmtmx31Tl6QK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjQxOS9GQTZFMzZDQzRF RDMxMUVEQTVFNTMwNDBDNEY5QUUwMi9pVi16emktY0xrZTVGTHNxYTJiSGZWT1hw QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lWLXp6aS1jTGtlNUZMc3FhMmJIZlZPWHBBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTY0MTkvRkE2RTM2Q0M0RUQzMTFFREE1RTUzMDQwQzRGOUFFMDIvMzhERUMzQzA0 RUQ2MTFFRDg0MzM2NzQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABn93QwDwQCAAIwCQMHACABDfdqADANBgkqhkiG9w0BAQsF AAOCAQEAFe/q/ZrTqX3TC7ed1KC3xvNqlPPnC3QFg1wHXCgPKTDvAj9xySoELgux 2kziah02bThyrtwnVrS0Dt/EzU+aSw5T4sD2Djp3eHDVumSLZY/f7BNTvgbbQFvu tqtEs7lekvpIvAtDLr1rW2GtIKCRqD8c/PMFJ2ulqd586/qLdA5/JVXM5hGoGDzK l6kRgiP04gevapsAQWOhY+sbJW4Krw+j0v1oaeteLVe9AVfI0kTsiYZ0sdPcfgBE E+fy0wLsKerQOVL1mv9aH/MgAVEUcK1PBL/Xyqna4f2cZPJq1ZhCbt6mv4NECJes m75aYmXbTQ1KXkGxUOnF9MGcFkjMwg== -----END CERTIFICATE-----Generated at Sun Jan 25 12:19:24 2026 by rpki-client