This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/69B0C410EC2411EFBE58C381C4F9AE02.roa File: 69B0C410EC2411EFBE58C381C4F9AE02.roa (raw, json) Hash identifier: +kwqGbWpipbMrj0CLjpjVwB+WbolyL/GD/coYdvqy5o= Subject key identifier: 4F:91:7D:72:9D:40:6C:79:75:BD:16:D4:7A:90:DB:4F:F1:0E:F4:E6 Certificate issuer: /CN=A91F1446/serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276 Certificate serial: 03A6 Authority key identifier: B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/69B0C410EC2411EFBE58C381C4F9AE02.roa Signing time: Fri 28 Nov 2025 23:26:19 +0000 ROA not before: Fri 28 Nov 2025 23:26:19 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 36352 IP address blocks: 103.21.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 934 (0x3a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1446, serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276 Validity Not Before: Nov 28 23:26:19 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=692a2f9a-52eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:75:86:b0:b1:02:4f:88:98:23:45:03:27:a2: 28:62:f5:ff:d4:ec:ce:b2:9c:8d:7a:e9:7a:f4:ef: 43:b0:32:2f:7e:f2:5e:02:5a:78:0e:c1:d3:66:fd: 18:94:8c:3d:51:93:cd:b6:85:e6:ce:03:e8:ce:d2: 49:aa:52:2a:65:61:8e:e8:41:f0:f8:99:cb:52:08: 25:ed:07:d3:12:06:dc:ba:e5:31:13:73:77:97:7d: 77:89:1e:8c:d4:1b:c8:7b:e1:77:99:25:5a:bc:16: 15:41:df:f4:67:aa:ae:31:3b:1a:e7:65:6f:7c:57: 1f:d8:35:a5:b8:b1:7d:51:39:38:96:a3:2b:2b:f0: 7c:03:68:a6:23:16:ee:3b:52:78:85:d8:1f:1c:52: f0:b9:8a:e9:5f:dd:09:fa:e9:07:7f:67:1f:08:ef: 50:51:7a:5e:8f:f7:23:75:92:89:78:24:77:67:bb: 64:c4:3a:2c:71:3f:47:86:c1:fb:5e:12:33:2b:a9: aa:06:78:94:fb:e0:e1:26:40:f1:1d:2a:a0:e7:93: 7e:1b:34:10:a0:83:53:4a:5c:f7:76:cc:c8:1c:4a: 5d:6a:f6:36:13:f9:dc:13:05:d0:23:6e:16:e6:e6: 2b:24:a4:56:68:d3:e0:5c:44:31:cf:fb:37:79:e9: 35:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:91:7D:72:9D:40:6C:79:75:BD:16:D4:7A:90:DB:4F:F1:0E:F4:E6 X509v3 Authority Key Identifier: keyid:B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/69B0C410EC2411EFBE58C381C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.21.208.0/22 Signature Algorithm: sha256WithRSAEncryption 79:2a:26:f3:c8:ac:c7:e7:c7:3a:21:05:c7:00:76:24:5b:86: 3f:ae:b1:ff:b5:84:a1:33:e2:4c:f5:84:cf:69:14:33:42:73: 96:c4:a7:09:cb:bf:0a:1a:2e:b3:fe:e5:78:31:b1:3d:bb:c1: fe:da:86:a3:e2:59:a2:0a:85:f3:bb:c3:a9:21:e8:74:f5:fb: df:e6:78:d4:fa:00:1a:10:22:ff:fa:72:02:d6:8e:94:b1:da: 6e:34:c1:3a:c8:20:81:c9:a1:b1:48:f9:ed:af:91:cd:90:9b: 5f:b6:ec:84:b2:15:fb:56:93:8b:68:40:aa:37:a2:dc:1f:b3: 3a:de:23:f9:e6:29:1a:30:16:26:93:22:99:ce:70:7b:2e:c0: 48:18:6a:7d:ab:8e:77:42:bc:f0:bb:d9:25:38:1c:42:60:b7: 10:bd:1a:b5:c5:a2:4b:92:60:28:a0:25:bc:21:5b:f1:b9:42: d3:8b:4c:b3:04:7f:8a:fb:c1:be:1a:da:84:6f:41:e8:95:da: 5a:34:35:8c:ef:6b:0f:af:b0:d3:51:3f:34:eb:96:e1:50:f2: b5:31:a6:1e:d9:a0:dc:79:26:df:df:63:bc:6d:9d:dd:84:f8: 84:9e:fe:13:15:f4:70:b5:e8:80:d0:01:c4:3c:a5:23:25:5e: 9a:0f:a5:72 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA6YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE0NDYxMTAvBgNVBAUTKEI1RDMzQTdBMzJBNTA4MkQzMzZCNkIwNUI3OTY1RjMw NzQ3MEEyNzYwHhcNMjUxMTI4MjMyNjE5WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJhMmY5YS01MmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqXWGsLECT4iYI0UDJ6IoYvX/1OzOspyNeul69O9DsDIvfvJeAlp4DsHTZv0Y lIw9UZPNtoXmzgPoztJJqlIqZWGO6EHw+JnLUggl7QfTEgbcuuUxE3N3l313iR6M 1BvIe+F3mSVavBYVQd/0Z6quMTsa52VvfFcf2DWluLF9UTk4lqMrK/B8A2imIxbu O1J4hdgfHFLwuYrpX90J+ukHf2cfCO9QUXpej/cjdZKJeCR3Z7tkxDoscT9HhsH7 XhIzK6mqBniU++DhJkDxHSqg55N+GzQQoINTSlz3dszIHEpdavY2E/ncEwXQI24W 5uYrJKRWaNPgXEQxz/s3eek1KwIDAQABo4IClTCCApEwHQYDVR0OBBYEFE+RfXKd QGx5db0W1HqQ20/xDvTmMB8GA1UdIwQYMBaAFLXTOnoypQgtM2trBbeWXzB0cKJ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTQ0Ni8yQTFGRjU2RUM1 MzUxMUVDOEU1QTAzMTNDNEY5QUUwMi90ZE02ZWpLbENDMHphMnNGdDVaZk1IUndv blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RkTTZlaktsQ0MwemEyc0Z0NVpmTUhSd29uWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjE0NDYvMkExRkY1NkVDNTM1MTFFQzhFNUEwMzEzQzRGOUFFMDIvNjlCMEM0MTBF QzI0MTFFRkJFNThDMzgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnFdAwDQYJKoZIhvcNAQELBQADggEBAHkqJvPIrMfnxzoh BccAdiRbhj+usf+1hKEz4kz1hM9pFDNCc5bEpwnLvwoaLrP+5XgxsT27wf7ahqPi WaIKhfO7w6kh6HT1+9/meNT6ABoQIv/6cgLWjpSx2m40wTrIIIHJobFI+e2vkc2Q m1+27ISyFftWk4toQKo3otwfszreI/nmKRowFiaTIpnOcHsuwEgYan2rjndCvPC7 2SU4HEJgtxC9GrXFokuSYCigJbwhW/G5QtOLTLMEf4r7wb4a2oRvQeiV2lo0NYzv aw+vsNNRPzTrluFQ8rUxph7ZoNx5Jt/fY7xtnd2E+ISe/hMV9HC16IDQAcQ8pSMl XpoPpXI= -----END CERTIFICATE-----Generated at Sun Dec 7 01:11:35 2025 by rpki-client