This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/4C738434ABD011F08EDDF110C4F9AE02.roa File: 4C738434ABD011F08EDDF110C4F9AE02.roa (raw, json) Hash identifier: Lm3n9/beTQTSuADhNOkS7uaY8GPI4m4BtlZmRSSiRCI= Subject key identifier: 77:6B:17:3B:ED:2C:B8:98:8F:D6:28:48:72:10:0D:ED:15:4B:C3:03 Certificate issuer: /CN=A91F2CE7/serialNumber=901A9F9E8AE4062E5219B7652D8E9FEE7EC5AE33 Certificate serial: F8 Authority key identifier: 90:1A:9F:9E:8A:E4:06:2E:52:19:B7:65:2D:8E:9F:EE:7E:C5:AE:33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kBqfnorkBi5SGbdlLY6f7n7FrjM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/4C738434ABD011F08EDDF110C4F9AE02.roa Signing time: Thu 27 Nov 2025 03:21:52 +0000 ROA not before: Thu 27 Nov 2025 03:21:52 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 26658 IP address blocks: 103.197.192.0/22 maxlen: 24 220.158.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.crl rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kBqfnorkBi5SGbdlLY6f7n7FrjM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2CE7, serialNumber=901A9F9E8AE4062E5219B7652D8E9FEE7EC5AE33 Validity Not Before: Nov 27 03:21:52 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6927c3d0-f864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:7e:ca:19:1d:d4:77:22:b2:ac:05:43:af:76: 06:85:bd:91:e9:93:37:f0:a7:c9:d4:62:ac:00:8d: 1f:67:11:6f:b8:ff:ea:23:4b:29:c1:49:e4:40:a2: 0d:0f:35:88:0a:f8:ba:5d:19:ab:5c:5a:94:b0:4e: 35:e1:d6:56:06:b6:da:59:7b:eb:f4:77:7d:e0:b3: db:c5:20:34:9b:17:41:c3:39:ba:b2:1b:ba:63:e8: ba:35:cf:1f:5c:fc:7c:18:87:ac:30:d4:e8:09:19: 39:28:e3:21:55:3c:d7:a4:7b:33:14:39:b1:ca:66: 12:ae:85:12:81:6b:60:09:3b:84:aa:08:4c:f4:b3: aa:c6:a0:9e:bb:bf:13:cd:0b:bf:f5:48:64:b1:db: 66:0f:c0:02:51:83:9f:7b:d2:f8:0d:e8:af:f6:7d: 13:bd:d5:35:55:c3:9e:8a:0c:55:00:e2:18:64:96: f1:7d:4b:8e:68:22:ef:2e:42:b0:11:84:11:67:de: 47:3f:66:cc:63:95:d6:e4:a5:f8:66:6a:b4:ff:59: 71:85:13:fb:78:30:34:21:7b:5e:8c:f9:bf:e9:89: 4b:d7:41:13:7f:58:0f:c6:d2:bc:77:01:d3:bb:12: 4f:0f:c6:3f:c6:b7:10:6f:2a:24:bb:58:e2:d3:2f: 9d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:6B:17:3B:ED:2C:B8:98:8F:D6:28:48:72:10:0D:ED:15:4B:C3:03 X509v3 Authority Key Identifier: keyid:90:1A:9F:9E:8A:E4:06:2E:52:19:B7:65:2D:8E:9F:EE:7E:C5:AE:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kBqfnorkBi5SGbdlLY6f7n7FrjM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/4C738434ABD011F08EDDF110C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.197.192.0/22 220.158.244.0/22 Signature Algorithm: sha256WithRSAEncryption 5b:58:63:37:90:ef:81:6a:f2:cf:ae:b0:78:88:5e:8a:4f:6a: bf:6d:dd:2f:c5:72:46:cf:a0:0c:66:6a:76:a7:56:1f:74:c3: a8:d4:b4:4b:ab:88:88:df:72:d3:0a:64:44:59:0b:33:ce:d1: a6:db:87:92:16:6e:08:ae:43:1c:a5:b7:7f:96:52:26:2d:65: e1:e0:74:aa:38:e5:40:de:82:9e:03:73:82:71:fa:5a:2d:c6: 3e:df:41:61:2a:7c:2f:c6:98:67:d9:2c:42:5c:27:d3:bc:60: ca:c3:96:64:ab:c9:b1:18:6a:d4:5d:9d:b2:6e:a4:3a:64:1e: c4:cf:c1:9f:c7:6a:84:40:d1:30:70:dc:5f:4c:0a:32:99:56: 0d:bd:9a:85:08:a5:47:11:a7:27:91:dd:97:11:4a:06:b8:9b: b4:49:5f:80:1f:91:48:46:31:20:20:a4:f3:11:65:b8:d2:00: ad:98:69:b8:01:dd:c1:da:a4:4b:b3:a9:41:95:b4:a2:c2:8a: 7d:cc:53:8a:b3:24:bb:76:a1:17:43:a5:dd:52:13:99:f8:95: 46:dc:22:8c:6f:fc:6d:47:b6:3a:9d:f2:56:0e:16:fe:d3:80: c8:a3:4d:fc:13:4b:de:b6:e3:16:6f:cb:8d:92:d7:4d:83:f4: c6:84:a3:4a -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJDRTcxMTAvBgNVBAUTKDkwMUE5RjlFOEFFNDA2MkU1MjE5Qjc2NTJEOEU5RkVF N0VDNUFFMzMwHhcNMjUxMTI3MDMyMTUyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTI3YzNkMC1mODY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7H7KGR3UdyKyrAVDr3YGhb2R6ZM38KfJ1GKsAI0fZxFvuP/qI0spwUnkQKIN DzWICvi6XRmrXFqUsE414dZWBrbaWXvr9Hd94LPbxSA0mxdBwzm6shu6Y+i6Nc8f XPx8GIesMNToCRk5KOMhVTzXpHszFDmxymYSroUSgWtgCTuEqghM9LOqxqCeu78T zQu/9UhksdtmD8ACUYOfe9L4Deiv9n0TvdU1VcOeigxVAOIYZJbxfUuOaCLvLkKw EYQRZ95HP2bMY5XW5KX4Zmq0/1lxhRP7eDA0IXtejPm/6YlL10ETf1gPxtK8dwHT uxJPD8Y/xrcQbyoku1ji0y+duQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHdrFzvt LLiYj9YoSHIQDe0VS8MDMB8GA1UdIwQYMBaAFJAan56K5AYuUhm3ZS2On+5+xa4z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkNFNy83MkY3NUI5ODVB REQxMUVGODEyQzkyM0ZDNEY5QUUwMi9rQnFmbm9ya0JpNVNHYmRsTFk2ZjduN0Zy ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tCcWZub3JrQmk1U0diZGxMWTZmN243RnJqTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjJDRTcvNzJGNzVCOTg1QUREMTFFRjgxMkM5MjNGQzRGOUFFMDIvNEM3Mzg0MzRB QkQwMTFGMDhFRERGMTEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnxcADBALcnvQwDQYJKoZIhvcNAQELBQADggEBAFtYYzeQ 74Fq8s+usHiIXopPar9t3S/FckbPoAxmananVh90w6jUtEuriIjfctMKZERZCzPO 0abbh5IWbgiuQxylt3+WUiYtZeHgdKo45UDegp4Dc4Jx+lotxj7fQWEqfC/GmGfZ LEJcJ9O8YMrDlmSrybEYatRdnbJupDpkHsTPwZ/HaoRA0TBw3F9MCjKZVg29moUI pUcRpyeR3ZcRSga4m7RJX4AfkUhGMSAgpPMRZbjSAK2YabgB3cHapEuzqUGVtKLC in3MU4qzJLt2oRdDpd1SE5n4lUbcIoxv/G1Htjqd8lYOFv7TgMijTfwTS9624xZv y42S102D9MaEo0o= -----END CERTIFICATE-----Generated at Sat Dec 6 19:33:31 2025 by rpki-client