This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/F0405FAA173E11F0886E164DC4F9AE02.roa File: F0405FAA173E11F0886E164DC4F9AE02.roa (raw, json) Hash identifier: aK+gRHqMYEarAae2Uzmw6bZ9Bi3Cb4IMrnU/PvAPPLE= Subject key identifier: 98:09:83:11:5D:9A:06:F9:8A:50:70:FA:D8:4B:66:62:5D:39:BC:76 Certificate issuer: /CN=A91F3C87/serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B Certificate serial: 0240 Authority key identifier: EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/F0405FAA173E11F0886E164DC4F9AE02.roa Signing time: Fri 05 Dec 2025 01:11:06 +0000 ROA not before: Fri 05 Dec 2025 01:11:06 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 9304 IP address blocks: 43.224.149.0/24 maxlen: 24 103.43.172.0/24 maxlen: 24 103.43.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:11:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 576 (0x240) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3C87, serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B Validity Not Before: Dec 5 01:11:06 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69323129-12b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5e:a9:84:f9:2d:3e:74:5f:bf:31:39:36:ca: 87:53:28:86:d5:df:35:69:ba:1b:a7:9c:e2:72:c6: e5:4a:b2:43:59:b5:51:cf:eb:62:69:5d:57:43:52: e1:84:8c:2a:ec:53:9f:1a:b1:12:55:4e:31:fb:90: 13:70:f2:d0:a4:9d:a9:d8:40:74:12:e3:a9:e6:0b: 6c:1e:b3:40:df:8b:9a:2f:86:60:a4:aa:51:61:66: c9:dc:be:3a:cc:d4:37:3f:36:de:a4:c0:42:f0:58: b4:d2:f7:4f:2a:f6:74:73:c4:a4:6e:62:51:38:1c: 53:98:ff:37:32:24:9a:7a:11:ac:81:02:51:98:bb: 67:1e:49:fb:08:58:ba:a2:5a:91:fa:31:33:ee:57: e5:8e:49:18:13:fa:53:32:72:55:12:34:da:a7:39: ed:bb:46:e7:0c:85:d2:e4:67:63:90:a9:9e:58:b0: da:de:0a:61:32:fe:44:16:96:86:3f:6a:6d:c6:78: 6f:64:c8:da:d5:71:09:4f:e9:5d:7f:2b:d0:71:2b: 6d:1f:a3:d5:7a:50:3a:a4:03:ec:f9:18:11:60:e8: d8:2b:f1:37:79:3a:b6:27:6f:64:8e:62:a2:bc:48: eb:90:02:93:f8:18:3d:d1:64:9a:71:a7:a3:ad:bf: d6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:09:83:11:5D:9A:06:F9:8A:50:70:FA:D8:4B:66:62:5D:39:BC:76 X509v3 Authority Key Identifier: keyid:EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/F0405FAA173E11F0886E164DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.224.149.0/24 103.43.172.0/23 Signature Algorithm: sha256WithRSAEncryption 20:2b:99:58:e3:a8:5c:3e:62:ac:97:df:a7:2b:9a:46:a4:7b: 99:74:16:b3:13:a2:62:f8:96:2e:5d:e8:6a:55:85:db:a2:67: 1b:09:fd:89:33:33:d7:af:99:f8:1c:c8:55:b7:5a:4e:2f:bb: 32:2c:4d:8e:c8:3b:6f:28:6e:cd:be:81:50:cb:19:2a:14:46: 7a:8a:ec:54:14:2e:23:28:8e:38:91:69:85:a6:76:d8:bb:44: 68:7b:5e:cb:6b:fa:6e:0a:ac:bb:be:10:c9:e3:ef:89:91:ca: 1a:c2:c1:7e:bb:86:c8:7a:08:98:1e:ed:99:48:23:c8:08:40: 74:b2:52:1c:97:30:00:42:18:66:8a:45:d8:51:a8:c3:15:32: 4c:0f:66:46:2e:5a:71:28:1a:de:44:fa:29:83:61:a9:2c:8e: 22:d2:cb:0f:1f:05:38:ea:f3:ff:ec:6a:e5:3a:a0:d2:4a:ee: 28:49:35:e8:d5:fa:ab:d5:44:14:6b:f1:00:4a:71:a9:50:25: e5:cd:c9:bb:fb:fe:31:f9:53:da:3f:39:63:de:3d:b5:af:00: 3f:23:e8:66:47:a9:ef:4b:6e:df:55:27:86:49:39:f1:ac:f9: 47:70:59:18:37:79:c7:a2:41:18:a0:e2:91:1c:2a:bb:27:43: 30:e5:70:b9 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNDODcxMTAvBgNVBAUTKEVGOUZFMzgxREEzRDQyRUI3QzRFMEQwNDlDQ0FFNzIy OEUyOEZCNEIwHhcNMjUxMjA1MDExMTA2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTMyMzEyOS0xMmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxV6phPktPnRfvzE5NsqHUyiG1d81abobp5zicsblSrJDWbVRz+tiaV1XQ1Lh hIwq7FOfGrESVU4x+5ATcPLQpJ2p2EB0EuOp5gtsHrNA34uaL4ZgpKpRYWbJ3L46 zNQ3PzbepMBC8Fi00vdPKvZ0c8SkbmJROBxTmP83MiSaehGsgQJRmLtnHkn7CFi6 olqR+jEz7lfljkkYE/pTMnJVEjTapzntu0bnDIXS5GdjkKmeWLDa3gphMv5EFpaG P2ptxnhvZMja1XEJT+ldfyvQcSttH6PVelA6pAPs+RgRYOjYK/E3eTq2J29kjmKi vEjrkAKT+Bg90WSacaejrb/WUQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJgJgxFd mgb5ilBw+thLZmJdObx2MB8GA1UdIwQYMBaAFO+f44HaPULrfE4NBJzK5yKOKPtL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0M4Ny9FNzgyODU0RUVG MEIxMUVEODFERDJENzJDNEY5QUUwMi83NV9qZ2RvOVF1dDhUZzBFbk1ybklvNG8t MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc1X2pnZG85UXV0OFRnMEVuTXJuSW80by0wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjNDODcvRTc4Mjg1NEVFRjBCMTFFRDgxREQyRDcyQzRGOUFFMDIvRjA0MDVGQUEx NzNFMTFGMDg4NkUxNjREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAAr4JUDBAFnK6wwDQYJKoZIhvcNAQELBQADggEBACArmVjj qFw+YqyX36crmkake5l0FrMTomL4li5d6GpVhduiZxsJ/YkzM9evmfgcyFW3Wk4v uzIsTY7IO28obs2+gVDLGSoURnqK7FQULiMojjiRaYWmdti7RGh7Xstr+m4KrLu+ EMnj74mRyhrCwX67hsh6CJge7ZlII8gIQHSyUhyXMABCGGaKRdhRqMMVMkwPZkYu WnEoGt5E+imDYaksjiLSyw8fBTjq8//sauU6oNJK7ihJNejV+qvVRBRr8QBKcalQ JeXNybv7/jH5U9o/OWPePbWvAD8j6GZHqe9Lbt9VJ4ZJOfGs+UdwWRg3eceiQRig 4pEcKrsnQzDlcLk= -----END CERTIFICATE-----Generated at Sat Dec 6 18:03:44 2025 by rpki-client