This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/87B1CF3484AB11F08EC73477C4F9AE02.roa File: 87B1CF3484AB11F08EC73477C4F9AE02.roa (raw, json) Hash identifier: RjgLOuF0n1X6yMn5QtVrfn7LMHid0aUgc2sd0x2KRqg= Subject key identifier: EA:D9:65:5B:7F:5C:45:A1:0D:DB:D2:1F:64:CB:45:DB:C8:69:89:99 Certificate issuer: /CN=A91F08D9/serialNumber=2BB7E6F64E893D91304A8B258860350D675054AD Certificate serial: 37 Authority key identifier: 2B:B7:E6:F6:4E:89:3D:91:30:4A:8B:25:88:60:35:0D:67:50:54:AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7fm9k6JPZEwSosliGA1DWdQVK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/87B1CF3484AB11F08EC73477C4F9AE02.roa Signing time: Thu 27 Nov 2025 05:53:03 +0000 ROA not before: Thu 27 Nov 2025 05:53:03 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 153995 IP address blocks: 103.158.150.0/23 maxlen: 23 103.158.150.0/24 maxlen: 24 103.158.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.crl rsync://rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7fm9k6JPZEwSosliGA1DWdQVK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:22:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F08D9, serialNumber=2BB7E6F64E893D91304A8B258860350D675054AD Validity Not Before: Nov 27 05:53:03 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6927e73f-d87d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:43:22:90:1d:56:ad:f3:8d:68:e8:7e:d7:39: 3f:98:24:c3:81:74:36:f3:86:4c:37:b3:25:3d:f9: 57:c9:73:c2:78:0d:57:7c:d4:b1:e6:e1:29:f2:02: f3:fa:59:bc:f1:92:21:b4:1c:cb:32:11:82:0f:86: b0:08:fe:8e:3f:aa:58:3d:d1:78:77:75:31:32:3c: 9e:25:39:cc:53:f0:40:82:77:4f:3d:21:7e:51:9b: 00:a2:49:50:a9:9c:88:be:75:f5:ea:aa:cc:fa:b5: 3b:51:cc:e3:8d:57:a8:18:8d:d6:89:96:c8:5f:05: 79:7b:cd:c0:9c:01:53:c0:bf:f4:1c:38:fe:1f:16: 8a:4f:1a:cb:71:bd:8c:a6:3d:9d:7e:87:7d:4b:0f: 58:50:4b:62:43:d4:b6:db:e7:17:08:06:2f:77:a6: d7:03:4e:a1:c2:7e:10:cd:b6:88:90:f0:da:cf:f5: a9:01:52:88:07:0f:e1:f9:ea:c7:bb:4b:a0:36:38: a9:2c:25:44:31:f1:1e:dc:3c:02:72:55:bf:02:5c: 34:12:e8:64:94:a0:d7:4a:a3:21:a3:ab:a7:5a:ef: e3:33:16:65:a8:74:a4:9a:0a:a8:48:6f:7e:19:84: 66:e3:82:c9:29:fa:4d:18:e7:6e:38:35:e7:5f:68: 58:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:D9:65:5B:7F:5C:45:A1:0D:DB:D2:1F:64:CB:45:DB:C8:69:89:99 X509v3 Authority Key Identifier: keyid:2B:B7:E6:F6:4E:89:3D:91:30:4A:8B:25:88:60:35:0D:67:50:54:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7fm9k6JPZEwSosliGA1DWdQVK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/87B1CF3484AB11F08EC73477C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.158.150.0/23 Signature Algorithm: sha256WithRSAEncryption 3b:16:31:8c:85:55:1d:a6:19:f5:39:22:e2:84:ba:c0:2a:b1: 6f:54:2f:56:02:7f:d3:e6:db:8b:ed:16:70:b2:8d:4e:24:fc: f3:40:f7:72:ee:b6:c8:c2:2d:07:34:d6:4d:39:a7:9f:0e:19: e1:c0:e0:b4:fb:2c:a8:84:e3:77:65:6f:f6:25:88:a2:d4:d0: bf:61:e5:9d:07:65:cf:66:87:61:1c:e9:cf:ca:fd:c5:34:0b: ae:0b:a2:9c:e1:1b:28:14:6f:e7:00:6c:03:5f:9c:bb:88:d3: be:13:09:32:1f:3c:f2:21:70:77:c8:f5:f1:23:1e:a9:8f:85: bc:7f:b1:88:e0:8c:8c:56:ec:0e:ba:1f:81:5f:68:a2:d3:6a: 3b:ad:ba:7a:1f:2f:c7:97:99:32:68:a2:95:2e:69:b0:78:fe: da:62:bf:6a:09:0a:4b:f6:10:fc:42:83:d3:02:76:d8:1b:58: 37:26:99:10:ba:6d:0d:80:c1:e5:3b:f7:e4:1a:7c:be:b1:6e: 53:13:ee:34:1d:63:ae:84:51:a2:97:d6:90:0f:f1:d4:a8:47: f7:32:05:d5:59:0e:b8:9e:df:15:a4:c8:ff:a9:3c:36:dc:22: f9:40:6e:71:c7:70:78:ba:33:bb:60:65:ed:0f:70:cd:5b:1d: 20:5e:ac:43 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MDhEOTExMC8GA1UEBRMoMkJCN0U2RjY0RTg5M0Q5MTMwNEE4QjI1ODg2MDM1MEQ2 NzUwNTRBRDAeFw0yNTExMjcwNTUzMDNaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MjdlNzNmLWQ4N2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5QyKQHVat841o6H7XOT+YJMOBdDbzhkw3syU9+VfJc8J4DVd81LHm4SnyAvP6 WbzxkiG0HMsyEYIPhrAI/o4/qlg90Xh3dTEyPJ4lOcxT8ECCd089IX5RmwCiSVCp nIi+dfXqqsz6tTtRzOONV6gYjdaJlshfBXl7zcCcAVPAv/QcOP4fFopPGstxvYym PZ1+h31LD1hQS2JD1Lbb5xcIBi93ptcDTqHCfhDNtoiQ8NrP9akBUogHD+H56se7 S6A2OKksJUQx8R7cPAJyVb8CXDQS6GSUoNdKoyGjq6da7+MzFmWodKSaCqhIb34Z hGbjgskp+k0Y5244NedfaFgnAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU6tllW39c RaEN29IfZMtF28hpiZkwHwYDVR0jBBgwFoAUK7fm9k6JPZEwSosliGA1DWdQVK0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwOEQ5LzBGRDZBQjUyODE3 MTExRjA5QjEwQUU1NkM0RjlBRTAyL0s3Zm05azZKUFpFd1Nvc2xpR0ExRFdkUVZL MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSzdmbTlrNkpQWkV3U29zbGlHQTFEV2RRVkswLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDhEOS8wRkQ2QUI1MjgxNzExMUYwOUIxMEFFNTZDNEY5QUUwMi84N0IxQ0YzNDg0 QUIxMUYwOEVDNzM0NzdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWeeljANBgkqhkiG9w0BAQsFAAOCAQEAOxYxjIVVHaYZ9Tki 4oS6wCqxb1QvVgJ/0+bbi+0WcLKNTiT880D3cu62yMItBzTWTTmnnw4Z4cDgtPss qITjd2Vv9iWIotTQv2HlnQdlz2aHYRzpz8r9xTQLrguinOEbKBRv5wBsA1+cu4jT vhMJMh888iFwd8j18SMeqY+FvH+xiOCMjFbsDrofgV9ootNqO626eh8vx5eZMmii lS5psHj+2mK/agkKS/YQ/EKD0wJ22BtYNyaZELptDYDB5Tv35Bp8vrFuUxPuNB1j roRRopfWkA/x1KhH9zIF1VkOuJ7fFaTI/6k8Ntwi+UBuccdweLozu2Bl7Q9wzVsd IF6sQw== -----END CERTIFICATE-----Generated at Sat Dec 6 21:16:39 2025 by rpki-client