This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/2C9AACDAB2FC11ECA5096770C4F9AE02.roa File: 2C9AACDAB2FC11ECA5096770C4F9AE02.roa (raw, json) Hash identifier: t8VvneVUYRJgPgj481YthbBCTMCZ/uaBbHMKrlXT7S0= Subject key identifier: 01:08:C8:3C:5E:58:B0:BD:5D:10:1A:ED:0C:BB:E6:31:B0:9D:5D:96 Certificate issuer: /CN=A91EC9AE/serialNumber=A7DFD4C91332BD1E41CF26DB18221D1D7058FDD5 Certificate serial: 03C4 Authority key identifier: A7:DF:D4:C9:13:32:BD:1E:41:CF:26:DB:18:22:1D:1D:70:58:FD:D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/2C9AACDAB2FC11ECA5096770C4F9AE02.roa Signing time: Fri 14 Nov 2025 23:16:05 +0000 ROA not before: Fri 14 Nov 2025 23:16:05 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 137995 IP address blocks: 103.131.176.0/22 maxlen: 24 2403:cec0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.crl rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 23:16:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 964 (0x3c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC9AE, serialNumber=A7DFD4C91332BD1E41CF26DB18221D1D7058FDD5 Validity Not Before: Nov 14 23:16:05 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6917b835-e1f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:42:9f:08:53:5c:d4:8e:32:8a:a4:49:15:f8: 88:ba:78:58:1e:d3:b1:89:82:c5:b4:8c:ce:c0:b6: 77:b6:d2:9b:aa:b2:84:46:d2:f7:16:b1:08:9b:ae: 2b:44:14:5e:44:3b:7f:a1:40:ff:03:ff:9a:ca:1a: d2:93:c4:a2:70:6c:3d:46:be:21:11:96:11:77:39: 03:d2:6f:db:9d:80:0f:37:e7:20:1d:77:0a:8d:6f: 2f:2b:3d:f8:31:1f:e1:55:d8:75:4d:ac:8f:7a:42: 0a:72:48:ab:21:ba:f4:de:54:24:41:0b:11:89:1a: 2d:80:f9:fd:a6:84:ce:fb:fa:c5:94:ed:93:92:3a: d0:7e:b8:f0:fa:e8:b7:1b:3f:6d:64:8a:a5:d3:70: c4:a9:b6:a4:bf:ea:44:7e:46:d9:e1:c8:2e:4b:6d: 96:6f:49:fb:f7:87:b2:24:2f:97:e0:14:e1:94:e3: 0a:84:75:85:f5:62:61:3e:13:7f:14:14:85:cd:0f: 7e:17:e9:f0:2e:1f:b7:c3:e9:9d:68:38:de:ac:22: a1:00:c3:e7:b6:47:68:a2:c5:e8:47:42:fd:a5:f4: 8b:04:a4:19:a3:3f:3f:f0:21:51:5c:93:0b:d7:16: 45:6e:30:56:74:9f:ed:7e:2f:9f:5a:b2:a7:a5:01: cb:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:08:C8:3C:5E:58:B0:BD:5D:10:1A:ED:0C:BB:E6:31:B0:9D:5D:96 X509v3 Authority Key Identifier: keyid:A7:DF:D4:C9:13:32:BD:1E:41:CF:26:DB:18:22:1D:1D:70:58:FD:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/2C9AACDAB2FC11ECA5096770C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.131.176.0/22 IPv6: 2403:cec0::/32 Signature Algorithm: sha256WithRSAEncryption a0:99:67:b5:7e:3d:1e:f6:9e:8c:92:33:34:e6:da:95:f3:81: f1:eb:f7:06:31:83:1f:61:34:f6:58:c9:2b:75:dc:43:2d:05: f9:c4:53:39:8a:0f:7d:2b:03:46:b8:e8:05:26:db:f4:c3:9e: d4:69:69:5f:5d:d7:8c:1f:b5:7b:84:a5:5b:80:6e:87:f0:a4: 54:02:44:9d:cd:b4:87:4c:16:33:4c:6b:f8:78:8e:3d:cc:68: b2:24:4c:3a:08:a3:62:d2:13:4c:5a:8a:14:88:3a:c6:25:77: 0c:61:87:62:2e:8a:e2:f0:e9:6d:84:7c:ae:bc:58:b2:f8:47: 84:cb:93:11:a9:0a:96:02:51:5f:e4:67:97:9a:c7:47:57:08: ad:20:26:5c:23:de:8c:cc:45:5e:fc:1b:ab:d8:e4:89:9f:b8: fb:b4:85:e0:60:22:ea:97:a7:c1:78:6a:38:b0:7d:86:18:99: 9c:69:4e:4f:66:d8:d3:14:c2:7b:06:2b:83:ab:83:8f:a5:c9: 62:d3:5e:a4:87:ae:2c:c7:bf:bd:2c:37:01:1d:db:be:e5:bc: 2e:37:12:7e:71:0b:4f:57:b6:53:18:2b:4f:5c:c0:02:28:8a: 39:57:14:ac:5a:2f:2d:dd:56:81:6f:e5:ed:d7:4c:69:e1:02: 49:6d:45:2e -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICA8QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM5QUUxMTAvBgNVBAUTKEE3REZENEM5MTMzMkJEMUU0MUNGMjZEQjE4MjIxRDFE NzA1OEZERDUwHhcNMjUxMTE0MjMxNjA1WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTE3YjgzNS1lMWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0kKfCFNc1I4yiqRJFfiIunhYHtOxiYLFtIzOwLZ3ttKbqrKERtL3FrEIm64r RBReRDt/oUD/A/+ayhrSk8SicGw9Rr4hEZYRdzkD0m/bnYAPN+cgHXcKjW8vKz34 MR/hVdh1TayPekIKckirIbr03lQkQQsRiRotgPn9poTO+/rFlO2TkjrQfrjw+ui3 Gz9tZIql03DEqbakv+pEfkbZ4cguS22Wb0n794eyJC+X4BThlOMKhHWF9WJhPhN/ FBSFzQ9+F+nwLh+3w+mdaDjerCKhAMPntkdoosXoR0L9pfSLBKQZoz8/8CFRXJML 1xZFbjBWdJ/tfi+fWrKnpQHL4wIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFAEIyDxe WLC9XRAa7Qy75jGwnV2WMB8GA1UdIwQYMBaAFKff1MkTMr0eQc8m2xgiHR1wWP3V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzlBRS9GN0U0QTJBRUIy RjQxMUVDOUJFRDM3NTNDNEY5QUUwMi9wOV9VeVJNeXZSNUJ6eWJiR0NJZEhYQllf ZFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A5X1V5Uk15dlI1Qnp5YmJHQ0lkSFhCWV9kVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUM5QUUvRjdFNEEyQUVCMkY0MTFFQzlCRUQzNzUzQzRGOUFFMDIvMkM5QUFDREFC MkZDMTFFQ0E1MDk2NzcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJng7AwDQQCAAIwBwMFACQDzsAwDQYJKoZIhvcNAQELBQAD ggEBAKCZZ7V+PR72noySMzTm2pXzgfHr9wYxgx9hNPZYySt13EMtBfnEUzmKD30r A0a46AUm2/TDntRpaV9d14wftXuEpVuAbofwpFQCRJ3NtIdMFjNMa/h4jj3MaLIk TDoIo2LSE0xaihSIOsYldwxhh2IuiuLw6W2EfK68WLL4R4TLkxGpCpYCUV/kZ5ea x0dXCK0gJlwj3ozMRV78G6vY5ImfuPu0heBgIuqXp8F4ajiwfYYYmZxpTk9m2NMU wnsGK4Org4+lyWLTXqSHrizHv70sNwEd277lvC43En5xC09XtlMYK09cwAIoijlX FKxaLy3dVoFv5e3XTGnhAkltRS4= -----END CERTIFICATE-----Generated at Sun Dec 7 12:51:35 2025 by rpki-client