This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/19CBA44C173F11F08E4D594DC4F9AE02.roa File: 19CBA44C173F11F08E4D594DC4F9AE02.roa (raw, json) Hash identifier: LL7+Mu/nmeVU1OrFCiVQyfZgCvDdqmfsmUWBsmo1XQE= Subject key identifier: 5D:A2:1B:87:38:66:0F:B0:06:C2:35:FB:19:4D:81:C7:95:B0:A1:5D Certificate issuer: /CN=A91F3C87/serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B Certificate serial: 023C Authority key identifier: EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/19CBA44C173F11F08E4D594DC4F9AE02.roa Signing time: Fri 05 Dec 2025 01:11:02 +0000 ROA not before: Fri 05 Dec 2025 01:11:02 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 197537 IP address blocks: 43.224.149.0/24 maxlen: 24 103.43.172.0/24 maxlen: 24 103.43.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:11:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 572 (0x23c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3C87, serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B Validity Not Before: Dec 5 01:11:02 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69323125-ce03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b3:82:00:2c:c3:38:46:df:19:80:31:19:6e: 66:e7:88:76:fc:39:c7:be:c9:eb:15:66:3e:71:81: 46:8f:ef:84:34:3a:c9:28:1b:65:38:7b:56:cc:e4: 69:10:0f:58:eb:ab:9c:40:a7:94:1c:c8:87:45:3e: 65:5b:76:1f:89:91:39:59:34:4b:25:8e:49:1e:3c: 37:b6:92:3b:14:15:47:f4:5e:f3:5a:9b:55:b1:a6: 46:68:ed:bf:5b:fe:7c:0f:0c:e7:a9:ac:72:1f:2c: c0:c0:f1:45:45:cb:d1:20:49:e2:4e:cb:da:4c:60: 4d:9d:36:ef:f3:fc:42:58:9a:72:38:31:18:56:a3: 5f:17:83:1d:b3:fb:ba:ef:f2:e5:18:e9:18:73:d6: 5c:00:4e:88:b5:4d:3c:e5:09:db:08:9b:7d:30:82: 79:c7:6b:18:ca:c6:ba:9d:50:db:b4:2a:d4:2a:89: 01:96:ce:b6:50:9a:3e:f7:c5:84:e1:00:6d:48:4f: 0f:f4:e8:3f:21:98:ce:49:b4:a4:3f:95:4b:ad:da: e5:06:fd:99:2f:63:2e:6f:51:05:d0:ba:f9:c2:28: a8:4f:71:f2:26:81:89:c8:f1:c9:0d:68:f7:fc:52: 46:62:ec:58:4c:1c:a8:4d:b7:f7:9c:1f:81:69:76: 22:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A2:1B:87:38:66:0F:B0:06:C2:35:FB:19:4D:81:C7:95:B0:A1:5D X509v3 Authority Key Identifier: keyid:EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/19CBA44C173F11F08E4D594DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.224.149.0/24 103.43.172.0/23 Signature Algorithm: sha256WithRSAEncryption 79:d8:20:ca:0e:ee:88:c8:19:a8:00:4e:af:1c:e3:cd:04:f6: d2:ba:4d:35:0c:28:53:94:d5:dc:9d:92:97:9f:15:7a:d7:6d: b9:fa:dc:63:e9:72:81:b6:09:c8:60:78:ad:21:e5:18:20:25: 6e:bd:f2:d2:7f:58:12:3f:10:00:0b:a0:63:d5:09:45:ca:35: 70:d3:f1:53:b3:91:2a:a6:ce:d3:91:44:14:21:b4:1e:92:82: 67:fa:3d:50:47:de:a3:4c:23:05:fa:aa:a8:6c:3a:23:1e:cc: b6:58:8b:a0:4d:28:f2:3f:c3:e9:56:e7:af:4f:f8:5e:32:31: 3a:ed:ea:56:2d:74:19:81:27:24:5e:29:e0:47:5c:7b:91:f1: 6b:c6:3a:06:d2:f9:bc:a2:42:fb:e5:a6:cf:49:ea:46:e8:a5: bb:f0:43:e0:25:9f:83:d3:6d:f8:5c:1b:de:b5:e9:90:30:3e: ad:7e:4b:e5:b7:44:36:a9:2b:cf:a8:1a:6f:c6:12:e8:2a:a9: c4:e0:4a:72:d3:0a:32:12:9d:b7:59:89:54:1c:b0:80:f2:9b: 80:54:15:b0:dd:d6:74:28:ea:67:b4:7a:57:0d:a6:12:b3:c3: 92:1a:bb:6e:b3:3e:8c:af:5d:e3:63:b4:15:df:6d:7c:e6:8f: 3c:db:83:a7 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNDODcxMTAvBgNVBAUTKEVGOUZFMzgxREEzRDQyRUI3QzRFMEQwNDlDQ0FFNzIy OEUyOEZCNEIwHhcNMjUxMjA1MDExMTAyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTMyMzEyNS1jZTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsrOCACzDOEbfGYAxGW5m54h2/DnHvsnrFWY+cYFGj++ENDrJKBtlOHtWzORp EA9Y66ucQKeUHMiHRT5lW3YfiZE5WTRLJY5JHjw3tpI7FBVH9F7zWptVsaZGaO2/ W/58DwznqaxyHyzAwPFFRcvRIEniTsvaTGBNnTbv8/xCWJpyODEYVqNfF4Mds/u6 7/LlGOkYc9ZcAE6ItU085QnbCJt9MIJ5x2sYysa6nVDbtCrUKokBls62UJo+98WE 4QBtSE8P9Og/IZjOSbSkP5VLrdrlBv2ZL2Mub1EF0Lr5wiioT3HyJoGJyPHJDWj3 /FJGYuxYTByoTbf3nB+BaXYiPQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFF2iG4c4 Zg+wBsI1+xlNgceVsKFdMB8GA1UdIwQYMBaAFO+f44HaPULrfE4NBJzK5yKOKPtL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0M4Ny9FNzgyODU0RUVG MEIxMUVEODFERDJENzJDNEY5QUUwMi83NV9qZ2RvOVF1dDhUZzBFbk1ybklvNG8t MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc1X2pnZG85UXV0OFRnMEVuTXJuSW80by0wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjNDODcvRTc4Mjg1NEVFRjBCMTFFRDgxREQyRDcyQzRGOUFFMDIvMTlDQkE0NEMx NzNGMTFGMDhFNEQ1OTREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAAr4JUDBAFnK6wwDQYJKoZIhvcNAQELBQADggEBAHnYIMoO 7ojIGagATq8c480E9tK6TTUMKFOU1dydkpefFXrXbbn63GPpcoG2CchgeK0h5Rgg JW698tJ/WBI/EAALoGPVCUXKNXDT8VOzkSqmztORRBQhtB6Sgmf6PVBH3qNMIwX6 qqhsOiMezLZYi6BNKPI/w+lW569P+F4yMTrt6lYtdBmBJyReKeBHXHuR8WvGOgbS +byiQvvlps9J6kbopbvwQ+Aln4PTbfhcG9616ZAwPq1+S+W3RDapK8+oGm/GEugq qcTgSnLTCjISnbdZiVQcsIDym4BUFbDd1nQo6me0elcNphKzw5Iau26zPoyvXeNj tBXfbXzmjzzbg6c= -----END CERTIFICATE-----Generated at Sat Dec 6 18:01:28 2025 by rpki-client