This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/8698CD28A42211EB91621734C4F9AE02.roa File: 8698CD28A42211EB91621734C4F9AE02.roa (raw, json) Hash identifier: 7Rz4+k6mAxaMGjURB8/55D4QBQngSJ+avXX3hTaAO80= Subject key identifier: 48:0B:F0:FE:60:A2:5D:D4:18:AB:C2:65:38:8E:19:4A:18:1E:EC:0B Certificate issuer: /CN=A91E89CD/serialNumber=CE580730040908874EB62AF2760529E75C3D5C68 Certificate serial: 0946 Authority key identifier: CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/8698CD28A42211EB91621734C4F9AE02.roa Signing time: Thu 20 Nov 2025 19:40:44 +0000 ROA not before: Thu 20 Nov 2025 19:40:44 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 137990 IP address blocks: 103.104.100.0/22 maxlen: 22 103.104.100.0/24 maxlen: 24 103.104.101.0/24 maxlen: 24 103.104.102.0/24 maxlen: 24 103.104.103.0/24 maxlen: 24 202.43.224.0/24 maxlen: 24 2402:940::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2374 (0x946) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E89CD, serialNumber=CE580730040908874EB62AF2760529E75C3D5C68 Validity Not Before: Nov 20 19:40:44 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=691f6ebb-454f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:10:9a:81:92:ff:0c:60:2c:39:fe:46:81:64: 82:f9:92:ea:76:a1:71:4b:d1:96:02:3b:8b:93:f6: 63:f2:b4:9d:b8:7f:22:77:62:f5:fa:dc:40:ea:31: 5a:8c:e5:b5:88:f6:2e:ac:9f:37:29:e9:eb:92:ea: c5:8b:f7:bf:f4:84:a1:01:e1:cf:d0:ed:9f:ca:49: 87:cf:c4:59:e3:1b:73:0a:ad:98:01:70:f1:7f:d8: cc:81:40:26:bf:41:02:e1:10:2b:f0:82:a7:50:bc: 46:e4:f3:86:73:86:95:03:d0:32:58:16:95:fe:96: ef:4d:67:43:5e:f9:7c:5a:30:59:8c:97:70:c9:6c: ea:48:fe:b9:33:37:94:e5:f5:57:3c:c4:08:ca:0e: 97:18:d3:ca:2b:f6:eb:73:43:41:37:5a:74:73:05: b6:f0:c2:cf:f2:28:b7:95:eb:43:61:d6:97:24:f0: 27:3e:f4:ee:af:98:4b:e8:52:94:b2:32:fe:60:97: a7:61:5c:58:f4:c1:24:e4:a1:e6:3f:89:ea:b6:0b: d4:55:9a:54:12:3e:e9:bc:dc:b3:a4:84:cd:2b:fc: 3f:4c:cd:2c:d2:21:d2:e1:09:e5:4c:50:5f:68:2e: 37:5b:c7:91:09:95:0f:46:96:56:aa:6d:15:08:a9: fd:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:0B:F0:FE:60:A2:5D:D4:18:AB:C2:65:38:8E:19:4A:18:1E:EC:0B X509v3 Authority Key Identifier: keyid:CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/8698CD28A42211EB91621734C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.104.100.0/22 202.43.224.0/24 IPv6: 2402:940::/32 Signature Algorithm: sha256WithRSAEncryption 2a:31:85:3f:ca:66:f5:86:ab:03:24:b8:d3:c4:0e:0b:a6:ce: 1d:cb:a8:2b:ef:0a:87:06:90:e1:f9:56:ac:ae:ab:9f:b4:41: 71:ae:9a:93:08:cd:5b:5d:ae:60:4e:3a:64:9d:c9:1e:f3:d5: 55:1f:7a:87:d6:a5:61:1a:e2:c4:73:2b:21:33:79:25:11:60: 3a:d6:46:41:cb:f4:bc:db:b7:08:dc:b5:53:c4:92:b0:a2:44: d0:e9:6e:32:ae:bd:e0:4b:cf:fe:25:e3:35:6d:fb:6c:5e:bc: 20:10:9f:92:87:23:32:75:b5:d5:27:27:a2:cb:c8:29:2c:45: 47:bd:35:89:1b:9e:61:f4:9b:9e:00:00:a4:e9:e8:f3:5d:e1: 86:5d:b4:f2:fe:93:0c:69:c8:3f:d3:69:5f:13:40:92:93:37: d5:4d:08:18:92:d3:6f:8a:ea:ac:5f:d1:28:2e:87:23:2a:e2: b1:e7:63:3c:33:c5:77:cc:92:23:a4:35:ff:6a:8e:9c:33:24: a8:14:33:b4:76:60:ae:f1:8a:f1:44:08:f0:32:5f:57:d9:e7: 9b:87:6d:a9:32:05:9b:1e:aa:ba:ef:14:9b:09:6b:f7:56:cc: fe:9d:78:5c:47:0c:e4:1f:5d:e5:c6:a1:ee:7e:de:05:52:33: 05:9f:4f:66 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICCUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5Q0QxMTAvBgNVBAUTKENFNTgwNzMwMDQwOTA4ODc0RUI2MkFGMjc2MDUyOUU3 NUMzRDVDNjgwHhcNMjUxMTIwMTk0MDQ0WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTFmNmViYi00NTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBCagZL/DGAsOf5GgWSC+ZLqdqFxS9GWAjuLk/Zj8rSduH8id2L1+txA6jFa jOW1iPYurJ83KenrkurFi/e/9IShAeHP0O2fykmHz8RZ4xtzCq2YAXDxf9jMgUAm v0EC4RAr8IKnULxG5POGc4aVA9AyWBaV/pbvTWdDXvl8WjBZjJdwyWzqSP65MzeU 5fVXPMQIyg6XGNPKK/brc0NBN1p0cwW28MLP8ii3letDYdaXJPAnPvTur5hL6FKU sjL+YJenYVxY9MEk5KHmP4nqtgvUVZpUEj7pvNyzpITNK/w/TM0s0iHS4QnlTFBf aC43W8eRCZUPRpZWqm0VCKn9UQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFEgL8P5g ol3UGKvCZTiOGUoYHuwLMB8GA1UdIwQYMBaAFM5YBzAECQiHTrYq8nYFKedcPVxo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODlDRC8zQzBENEExNkIw NTUxMUVBQTA0NUI4MEVDNEY5QUUwMi96bGdITUFRSkNJZE90aXJ5ZGdVcDUxdzlY R2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3psZ0hNQVFKQ0lkT3RpcnlkZ1VwNTF3OVhHZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTg5Q0QvM0MwRDRBMTZCMDU1MTFFQUEwNDVCODBFQzRGOUFFMDIvODY5OENEMjhB NDIyMTFFQjkxNjIxNzM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJnaGQDBADKK+AwDQQCAAIwBwMFACQCCUAwDQYJKoZIhvcN AQELBQADggEBACoxhT/KZvWGqwMkuNPEDgumzh3LqCvvCocGkOH5Vqyuq5+0QXGu mpMIzVtdrmBOOmSdyR7z1VUfeofWpWEa4sRzKyEzeSURYDrWRkHL9LzbtwjctVPE krCiRNDpbjKuveBLz/4l4zVt+2xevCAQn5KHIzJ1tdUnJ6LLyCksRUe9NYkbnmH0 m54AAKTp6PNd4YZdtPL+kwxpyD/TaV8TQJKTN9VNCBiS02+K6qxf0SguhyMq4rHn YzwzxXfMkiOkNf9qjpwzJKgUM7R2YK7xivFECPAyX1fZ55uHbakyBZseqrrvFJsJ a/dWzP6deFxHDOQfXeXGoe5+3gVSMwWfT2Y= -----END CERTIFICATE-----Generated at Sat Dec 6 19:03:22 2025 by rpki-client