This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/7112985C4DE711EC92010E61C4F9AE02.roa File: 7112985C4DE711EC92010E61C4F9AE02.roa (raw, json) Hash identifier: 3HpM5sDyPcBnfCNQnGdseSNgNAwpkHGO3HMNHlML1pM= Subject key identifier: D4:9F:29:FC:4C:5A:BC:1C:CA:1C:AF:44:43:9F:0B:13:7E:A4:39:2D Certificate issuer: /CN=A91E90DD/serialNumber=1AB89EF5B28EC82D6AE210FC29BDE8A71756B1B0 Certificate serial: 04CD Authority key identifier: 1A:B8:9E:F5:B2:8E:C8:2D:6A:E2:10:FC:29:BD:E8:A7:17:56:B1:B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/7112985C4DE711EC92010E61C4F9AE02.roa Signing time: Mon 10 Nov 2025 22:45:06 +0000 ROA not before: Mon 10 Nov 2025 22:45:06 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 137078 IP address blocks: 103.175.130.0/23 maxlen: 23 103.175.130.0/24 maxlen: 24 103.175.131.0/24 maxlen: 24 2400:1a20::/32 maxlen: 32 2400:1a20::/48 maxlen: 48 2400:1a20:1::/48 maxlen: 48 2400:1a20:2::/48 maxlen: 48 2400:1a20:3::/48 maxlen: 48 2400:1a20:4::/48 maxlen: 48 2400:1a20:5::/48 maxlen: 48 2400:1a20:6::/48 maxlen: 48 2400:1a20:7::/48 maxlen: 48 2400:1a20:8::/48 maxlen: 48 2400:1a20:9::/48 maxlen: 48 2400:1a20:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.crl rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 22:35:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1229 (0x4cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E90DD, serialNumber=1AB89EF5B28EC82D6AE210FC29BDE8A71756B1B0 Validity Not Before: Nov 10 22:45:06 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69126af2-4be5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8d:b9:9c:8e:21:95:ca:bc:50:69:34:0d:06: 6d:9a:a5:1c:63:5e:bf:c3:e4:6f:bd:03:69:ce:e2: 96:50:47:af:96:ff:be:ce:e3:48:3d:6a:ce:25:f5: 87:16:40:e6:61:72:8f:9d:37:bf:fc:ae:91:f8:21: f5:98:ef:54:ff:95:b0:d6:56:d5:5c:80:5a:92:82: d4:e4:61:42:19:3e:97:a0:f7:ff:bd:ce:8e:0f:5d: f1:a3:2e:ed:3e:4e:5a:7c:2e:2a:25:0f:2f:e2:05: 38:1b:da:59:16:d7:cc:92:21:1c:9e:26:f4:e4:c8: f5:7f:b5:d9:93:76:ce:26:8a:e1:bb:15:84:98:1b: 41:9a:cf:e0:e5:f4:6b:63:65:2b:6e:25:59:8f:03: 11:0c:a2:a5:b7:9d:7d:18:2d:3d:1a:ea:13:dd:af: c4:a9:83:b1:fb:80:1a:f4:82:a7:17:a3:1c:d9:68: df:91:7f:80:f4:d3:9e:17:b4:c0:c1:e4:5e:6b:da: f4:5d:77:4a:63:1a:2d:60:dc:ff:03:07:b7:d8:62: fc:2f:d2:dd:02:71:1b:bd:f9:2f:c0:bb:c5:8f:68: 20:b6:7b:33:ed:13:13:5c:f1:6f:d3:fe:46:f6:2b: 92:45:86:85:8b:4e:54:ae:08:4f:37:fe:12:c7:c8: f5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:9F:29:FC:4C:5A:BC:1C:CA:1C:AF:44:43:9F:0B:13:7E:A4:39:2D X509v3 Authority Key Identifier: keyid:1A:B8:9E:F5:B2:8E:C8:2D:6A:E2:10:FC:29:BD:E8:A7:17:56:B1:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/7112985C4DE711EC92010E61C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.175.130.0/23 IPv6: 2400:1a20::/32 Signature Algorithm: sha256WithRSAEncryption 70:6a:0e:d5:6b:3a:fa:e4:8f:e9:06:3a:bd:6a:c5:d9:e0:4a: 5b:16:3e:77:a9:b8:ee:ad:fa:b1:6f:35:b0:45:6f:f5:50:6f: 1b:45:b7:12:21:c4:ab:75:dd:71:2e:bb:5d:c1:92:e4:0f:58: 2b:82:0f:3f:c9:e4:04:a1:be:14:63:f8:33:a5:1d:ba:55:1e: 2c:e4:1a:e7:94:dd:59:fd:7c:47:67:bb:e9:a8:94:7f:13:f4: 21:1c:f2:98:d4:f9:a1:0e:e8:e3:3d:f7:8c:c5:1b:fd:c7:ef: 8d:5e:9a:57:a0:1d:2a:af:8c:23:1a:2c:47:a1:e3:e4:5d:8e: 8b:41:d9:a2:a4:1b:bb:66:76:69:63:3d:b8:9c:22:ad:c5:e7: b7:fc:fc:69:e0:3e:06:79:fb:eb:c6:c8:9a:02:26:6c:b1:0e: b8:01:c3:23:a6:9a:7b:ef:7d:d9:38:e3:83:6a:3f:23:d9:63: 11:e9:63:05:71:d1:14:46:a2:7f:6a:19:a1:82:bb:b3:15:6c: 57:32:b1:41:c2:b0:bb:b4:25:06:84:0b:82:0d:05:53:1e:87: d7:7c:b7:96:74:75:5c:22:23:5b:2a:e1:29:43:f1:79:2b:67: d2:fe:fe:2f:51:51:94:d8:e6:30:3b:10:6f:11:e9:2b:2b:8c: 87:8f:69:e8 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkwREQxMTAvBgNVBAUTKDFBQjg5RUY1QjI4RUM4MkQ2QUUyMTBGQzI5QkRFOEE3 MTc1NkIxQjAwHhcNMjUxMTEwMjI0NTA2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTEyNmFmMi00YmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Y25nI4hlcq8UGk0DQZtmqUcY16/w+RvvQNpzuKWUEevlv++zuNIPWrOJfWH FkDmYXKPnTe//K6R+CH1mO9U/5Ww1lbVXIBakoLU5GFCGT6XoPf/vc6OD13xoy7t Pk5afC4qJQ8v4gU4G9pZFtfMkiEcnib05Mj1f7XZk3bOJorhuxWEmBtBms/g5fRr Y2UrbiVZjwMRDKKlt519GC09GuoT3a/EqYOx+4Aa9IKnF6Mc2WjfkX+A9NOeF7TA weRea9r0XXdKYxotYNz/Awe32GL8L9LdAnEbvfkvwLvFj2ggtnsz7RMTXPFv0/5G 9iuSRYaFi05UrghPN/4Sx8j1twIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFNSfKfxM WrwcyhyvREOfCxN+pDktMB8GA1UdIwQYMBaAFBq4nvWyjsgtauIQ/Cm96KcXVrGw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTBERC82RDg3RUQwMjRE RTQxMUVDQTMxNzkxNURDNEY5QUUwMi9HcmllOWJLT3lDMXE0aEQ4S2Izb3B4ZFdz YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dyaWU5YktPeUMxcTRoRDhLYjNvcHhkV3NiQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTkwREQvNkQ4N0VEMDI0REU0MTFFQ0EzMTc5MTVEQzRGOUFFMDIvNzExMjk4NUM0 REU3MTFFQzkyMDEwRTYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnr4IwDQQCAAIwBwMFACQAGiAwDQYJKoZIhvcNAQELBQAD ggEBAHBqDtVrOvrkj+kGOr1qxdngSlsWPnepuO6t+rFvNbBFb/VQbxtFtxIhxKt1 3XEuu13BkuQPWCuCDz/J5AShvhRj+DOlHbpVHizkGueU3Vn9fEdnu+molH8T9CEc 8pjU+aEO6OM994zFG/3H741emlegHSqvjCMaLEeh4+RdjotB2aKkG7tmdmljPbic Iq3F57f8/GngPgZ5++vGyJoCJmyxDrgBwyOmmnvvfdk444NqPyPZYxHpYwVx0RRG on9qGaGCu7MVbFcysUHCsLu0JQaEC4INBVMeh9d8t5Z0dVwiI1sq4SlD8XkrZ9L+ /i9RUZTY5jA7EG8R6SsrjIePaeg= -----END CERTIFICATE-----Generated at Sun Dec 7 07:28:33 2025 by rpki-client