This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/C82A0778680811EE88B5527CC4F9AE02.roa File: C82A0778680811EE88B5527CC4F9AE02.roa (raw, json) Hash identifier: g89QMUfdXK47mGwI+GGCtZtL1B+tmNfE6SHkWY/kxlk= Subject key identifier: 4D:C0:0A:A3:19:FF:EC:07:E1:EB:FC:DF:43:CD:D3:DA:0F:D4:36:6F Certificate issuer: /CN=A91ECC24/serialNumber=F497D17169276D43C585215C198331C33C225A75 Certificate serial: 024D Authority key identifier: F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/C82A0778680811EE88B5527CC4F9AE02.roa Signing time: Fri 21 Nov 2025 00:47:12 +0000 ROA not before: Fri 21 Nov 2025 00:47:12 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 149021 IP address blocks: 103.176.204.0/23 maxlen: 23 103.176.204.0/24 maxlen: 24 103.176.205.0/24 maxlen: 24 2401:43e0::/48 maxlen: 48 2401:43e0:1::/48 maxlen: 48 2401:43e0:2::/47 maxlen: 47 2401:43e0:4::/46 maxlen: 46 2401:43e0:8::/45 maxlen: 45 2401:43e0:10::/44 maxlen: 44 2401:43e0:20::/43 maxlen: 43 2401:43e0:40::/42 maxlen: 42 2401:43e0:80::/41 maxlen: 41 2401:43e0:100::/40 maxlen: 40 2401:43e0:200::/39 maxlen: 39 2401:43e0:400::/38 maxlen: 38 2401:43e0:800::/37 maxlen: 37 2401:43e0:1000::/36 maxlen: 36 2401:43e0:2000::/35 maxlen: 35 2401:43e0:4000::/34 maxlen: 34 2401:43e0:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 00:26:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 589 (0x24d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECC24, serialNumber=F497D17169276D43C585215C198331C33C225A75 Validity Not Before: Nov 21 00:47:12 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=691fb690-34af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:21:6a:57:26:5f:17:e4:cd:54:67:53:ec:2d: 9c:83:56:2c:50:f1:92:91:6e:09:0d:70:88:94:cc: fe:54:14:7c:37:1f:aa:04:64:17:5c:a8:53:1b:96: f7:3b:e4:29:f5:49:cd:d7:30:d3:67:64:c5:d2:6b: 97:15:f9:f4:6a:b3:e2:9e:8f:98:81:36:de:34:b8: d3:b2:95:bf:66:d8:c3:3c:10:7f:8d:a3:a7:6d:f7: b3:12:97:e1:b4:2a:ea:2c:75:52:07:c5:af:0b:30: 5f:4d:dd:96:db:42:76:b7:2f:17:a2:9f:69:72:cb: ec:a8:ee:1f:83:51:e8:72:e3:c9:1f:87:f6:88:fd: da:d1:fc:4c:a6:6b:b1:f5:96:93:5f:52:03:97:64: 9a:2f:04:69:c9:91:9c:33:7d:40:64:d4:92:d9:19: 46:db:4d:04:28:63:fd:9f:7a:e3:71:ad:8a:0e:a2: 9c:35:16:31:52:b0:39:b6:d2:ed:b4:3a:c4:44:6c: ea:67:66:0c:d5:f8:16:32:ca:80:62:fb:f8:0d:7c: 4d:ea:ab:a5:f8:91:44:ea:b0:d2:e2:bf:29:6a:13: a0:a6:17:5b:49:00:e3:42:80:0b:46:7b:bc:c2:26: fd:a9:b1:2d:a7:37:f2:50:c6:f7:5e:00:31:68:29: 4d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:C0:0A:A3:19:FF:EC:07:E1:EB:FC:DF:43:CD:D3:DA:0F:D4:36:6F X509v3 Authority Key Identifier: keyid:F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/C82A0778680811EE88B5527CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.176.204.0/23 IPv6: 2401:43e0::/32 Signature Algorithm: sha256WithRSAEncryption 73:11:1e:a7:d7:b1:a2:b5:9e:68:2d:7a:6a:2c:3f:88:d7:e6: f3:f2:1d:18:07:5f:06:6b:9a:79:70:cf:8e:b3:10:b7:06:81: 97:48:4e:b9:f9:e6:d5:12:16:06:fe:84:11:2e:f6:bb:b4:34: d6:6b:24:17:55:ce:30:f7:ca:a9:5a:7b:1e:6f:a8:ec:e9:f5: 05:f0:b7:3d:a8:76:c8:59:a8:b9:46:5e:9b:ab:27:bd:50:46: 4b:6f:bf:c9:52:5e:9c:9d:a3:25:56:bf:dc:eb:32:fa:00:cd: 5c:b5:d1:a7:ed:d9:df:fe:fe:b3:50:4e:76:0b:36:49:1e:11: 7c:a5:2a:e2:90:3e:68:f9:53:a2:dc:12:6b:bd:d5:d4:2d:4f: 8f:15:10:2a:17:c0:b9:59:e6:71:3b:ea:b8:f3:6e:a5:69:cc: a8:0a:ef:2d:91:2c:bd:8f:39:1a:2e:b6:10:e6:09:ee:fe:8a: 21:fa:7b:21:23:f3:43:61:d6:e4:cc:ce:e4:ce:d5:94:b2:35: 74:34:3c:23:3b:2f:13:62:57:d3:b5:aa:c2:49:f0:e4:72:16: 7d:7c:6b:12:6d:69:b3:7e:a2:2e:e4:08:f1:9c:de:8c:8e:6f: f9:0c:af:2b:a9:34:f6:d2:72:d5:ba:62:1e:ab:ee:a3:24:a6: bc:00:c9:b5 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNDMjQxMTAvBgNVBAUTKEY0OTdEMTcxNjkyNzZENDNDNTg1MjE1QzE5ODMzMUMz M0MyMjVBNzUwHhcNMjUxMTIxMDA0NzEyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTFmYjY5MC0zNGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwyFqVyZfF+TNVGdT7C2cg1YsUPGSkW4JDXCIlMz+VBR8Nx+qBGQXXKhTG5b3 O+Qp9UnN1zDTZ2TF0muXFfn0arPino+YgTbeNLjTspW/ZtjDPBB/jaOnbfezEpfh tCrqLHVSB8WvCzBfTd2W20J2ty8Xop9pcsvsqO4fg1HocuPJH4f2iP3a0fxMpmux 9ZaTX1IDl2SaLwRpyZGcM31AZNSS2RlG200EKGP9n3rjca2KDqKcNRYxUrA5ttLt tDrERGzqZ2YM1fgWMsqAYvv4DXxN6qul+JFE6rDS4r8pahOgphdbSQDjQoALRnu8 wib9qbEtpzfyUMb3XgAxaClN/wIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFE3ACqMZ /+wH4ev830PN09oP1DZvMB8GA1UdIwQYMBaAFPSX0XFpJ21DxYUhXBmDMcM8Ilp1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0MyNC8xNkM2MTMxNjZB RkExMUVEQjcwNkZGM0NDNEY5QUUwMi85SmZSY1drbmJVUEZoU0ZjR1lNeHd6d2lX blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlKZlJjV2tuYlVQRmhTRmNHWU14d3p3aVduVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUNDMjQvMTZDNjEzMTY2QUZBMTFFREI3MDZGRjNDQzRGOUFFMDIvQzgyQTA3Nzg2 ODA4MTFFRTg4QjU1MjdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnsMwwDQQCAAIwBwMFACQBQ+AwDQYJKoZIhvcNAQELBQAD ggEBAHMRHqfXsaK1nmgtemosP4jX5vPyHRgHXwZrmnlwz46zELcGgZdITrn55tUS Fgb+hBEu9ru0NNZrJBdVzjD3yqlaex5vqOzp9QXwtz2odshZqLlGXpurJ71QRktv v8lSXpydoyVWv9zrMvoAzVy10aft2d/+/rNQTnYLNkkeEXylKuKQPmj5U6LcEmu9 1dQtT48VECoXwLlZ5nE76rjzbqVpzKgK7y2RLL2PORouthDmCe7+iiH6eyEj80Nh 1uTMzuTO1ZSyNXQ0PCM7LxNiV9O1qsJJ8ORyFn18axJtabN+oi7kCPGc3oyOb/kM ryupNPbSctW6Yh6r7qMkprwAybU= -----END CERTIFICATE-----Generated at Sun Dec 7 06:58:31 2025 by rpki-client