This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/2A8DE0F42FA611EB980DEF79C4F9AE02.roa File: 2A8DE0F42FA611EB980DEF79C4F9AE02.roa (raw, json) Hash identifier: 6qF9h43DlEql9uVHDmWHQPm/sTRQL95grseNb5kyQF0= Subject key identifier: 1A:67:36:C5:5E:89:75:07:3B:B2:20:94:9D:5F:65:01:1B:82:AA:FC Certificate issuer: /CN=A91F3BDE/serialNumber=0CA407F0DD53072FA8A060816919296E6577D682 Certificate serial: 0CA3 Authority key identifier: 0C:A4:07:F0:DD:53:07:2F:A8:A0:60:81:69:19:29:6E:65:77:D6:82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKQH8N1TBy-ooGCBaRkpbmV31oI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/2A8DE0F42FA611EB980DEF79C4F9AE02.roa Signing time: Thu 20 Nov 2025 18:08:42 +0000 ROA not before: Thu 20 Nov 2025 18:08:42 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 139756 IP address blocks: 103.144.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.crl rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKQH8N1TBy-ooGCBaRkpbmV31oI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:45:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3235 (0xca3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3BDE, serialNumber=0CA407F0DD53072FA8A060816919296E6577D682 Validity Not Before: Nov 20 18:08:42 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=691f592a-8c56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1c:f4:81:ad:b8:92:ce:84:49:bf:e8:39:9f: a0:70:e1:1d:42:2e:19:48:95:dd:88:1e:91:4f:89: 49:d4:86:e1:e9:d2:12:2b:83:d1:24:ae:61:c5:bb: af:35:fb:9b:72:e2:58:7f:1c:08:df:4e:3f:15:b2: 7e:08:30:3d:be:78:d1:78:b0:d0:ef:50:85:3b:33: e7:e0:61:f3:24:d9:97:19:5b:cd:60:38:88:7f:1a: bf:b2:8d:7d:c9:7d:eb:3e:02:36:90:24:e3:f5:6c: 5e:e0:e5:03:f4:15:1c:2c:c6:b0:7b:bb:24:29:38: 75:d1:20:80:af:c9:be:c3:80:b4:1b:fa:84:4f:90: 7a:39:c8:ca:fb:25:83:d2:fb:14:ea:e8:51:a2:c8: 3e:d3:5a:f8:52:59:38:43:14:1b:00:ab:06:76:03: 86:9e:75:04:eb:0b:4e:5a:5a:d9:e5:89:87:bd:4f: 7d:41:b6:c4:b0:05:63:92:0b:1f:f8:87:d1:16:f1: 11:ce:a0:73:79:54:0a:ca:2b:d6:da:b9:24:a6:3b: ee:93:78:12:1c:40:00:32:c0:49:50:20:86:8c:91: 31:66:a5:a1:68:48:4f:71:6d:fd:50:93:64:56:1f: 38:68:ff:57:0f:cb:60:4e:ac:de:04:57:a4:88:5f: 0b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:67:36:C5:5E:89:75:07:3B:B2:20:94:9D:5F:65:01:1B:82:AA:FC X509v3 Authority Key Identifier: keyid:0C:A4:07:F0:DD:53:07:2F:A8:A0:60:81:69:19:29:6E:65:77:D6:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKQH8N1TBy-ooGCBaRkpbmV31oI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/2A8DE0F42FA611EB980DEF79C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.144.151.0/24 Signature Algorithm: sha256WithRSAEncryption 72:de:f2:ca:69:1e:17:60:4e:d1:1e:4d:f3:3b:a8:8e:9c:42: 3d:a6:44:92:1e:33:30:f8:6b:06:55:69:4f:4a:0b:fb:d2:95: 9f:e6:d8:28:f6:92:4c:73:fb:eb:b5:84:43:fb:f9:47:cb:8a: 51:e9:64:b5:19:32:34:41:37:c7:99:51:45:fd:10:f5:e0:cc: 41:fd:66:7d:f0:fc:8e:d7:39:41:79:3b:71:3a:02:5e:59:d4: 70:a6:5f:7b:67:93:65:e5:6f:01:d5:58:17:55:20:06:cb:9e: d5:eb:7d:08:48:fb:3d:8d:41:bb:f0:d0:fc:30:c8:a0:9a:6f: e0:55:68:3d:03:14:31:28:68:20:2f:2a:20:90:d4:28:38:16: ae:a0:b6:24:ac:04:29:72:0a:d5:35:48:e9:24:ea:41:81:81: a7:2f:f1:65:34:bf:e1:6e:78:89:52:6e:22:b2:d0:1c:4d:f1: 84:85:cb:1d:09:fa:84:17:46:d0:7e:14:d3:d9:27:1a:a0:c4: 68:63:55:a3:ac:1e:26:5d:1d:bd:d1:52:8e:e7:7f:d5:b1:74: 4f:61:64:da:7e:bc:9b:f7:48:c6:19:5c:6d:7a:8c:96:8d:b9: dd:ed:6c:a9:75:ad:2b:2d:d9:0a:d4:10:81:2b:ef:02:7c:11: e3:fa:3d:ef -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNCREUxMTAvBgNVBAUTKDBDQTQwN0YwREQ1MzA3MkZBOEEwNjA4MTY5MTkyOTZF NjU3N0Q2ODIwHhcNMjUxMTIwMTgwODQyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTFmNTkyYS04YzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Rz0ga24ks6ESb/oOZ+gcOEdQi4ZSJXdiB6RT4lJ1Ibh6dISK4PRJK5hxbuv NfubcuJYfxwI304/FbJ+CDA9vnjReLDQ71CFOzPn4GHzJNmXGVvNYDiIfxq/so19 yX3rPgI2kCTj9Wxe4OUD9BUcLMawe7skKTh10SCAr8m+w4C0G/qET5B6OcjK+yWD 0vsU6uhRosg+01r4Ulk4QxQbAKsGdgOGnnUE6wtOWlrZ5YmHvU99QbbEsAVjkgsf +IfRFvERzqBzeVQKyivW2rkkpjvuk3gSHEAAMsBJUCCGjJExZqWhaEhPcW39UJNk Vh84aP9XD8tgTqzeBFekiF8LVwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBpnNsVe iXUHO7IglJ1fZQEbgqr8MB8GA1UdIwQYMBaAFAykB/DdUwcvqKBggWkZKW5ld9aC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0JERS81MEE5MEUzNjA4 MTQxMUVBOEVCNUY4MTBDNEY5QUUwMi9ES1FIOE4xVEJ5LW9vR0NCYVJrcGJtVjMx b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RLUUg4TjFUQnktb29HQ0JhUmtwYm1WMzFvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjNCREUvNTBBOTBFMzYwODE0MTFFQThFQjVGODEwQzRGOUFFMDIvMkE4REUwRjQy RkE2MTFFQjk4MERFRjc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnkJcwDQYJKoZIhvcNAQELBQADggEBAHLe8sppHhdgTtEe TfM7qI6cQj2mRJIeMzD4awZVaU9KC/vSlZ/m2Cj2kkxz++u1hEP7+UfLilHpZLUZ MjRBN8eZUUX9EPXgzEH9Zn3w/I7XOUF5O3E6Al5Z1HCmX3tnk2XlbwHVWBdVIAbL ntXrfQhI+z2NQbvw0PwwyKCab+BVaD0DFDEoaCAvKiCQ1Cg4Fq6gtiSsBClyCtU1 SOkk6kGBgacv8WU0v+FueIlSbiKy0BxN8YSFyx0J+oQXRtB+FNPZJxqgxGhjVaOs HiZdHb3RUo7nf9WxdE9hZNp+vJv3SMYZXG16jJaNud3tbKl1rSst2QrUEIEr7wJ8 EeP6Pe8= -----END CERTIFICATE-----Generated at Sun Dec 7 03:43:52 2025 by rpki-client