This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/F87DE4E2518011E98D519C48C4F9AE02.roa File: F87DE4E2518011E98D519C48C4F9AE02.roa (raw, json) Hash identifier: D7AruKrQL8CcQd0/9T8ln/IGqPpzFONIydluO3l9xac= Subject key identifier: CE:EF:E2:0F:A6:20:DA:C1:88:41:9E:18:C1:8C:02:17:91:22:2C:61 Certificate issuer: /CN=A91F6E65/serialNumber=EA8D864BBD2BB1D78CD8890A1504E111367F7A13 Certificate serial: 129F Authority key identifier: EA:8D:86:4B:BD:2B:B1:D7:8C:D8:89:0A:15:04:E1:11:36:7F:7A:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6o2GS70rsdeM2IkKFQThETZ_ehM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/F87DE4E2518011E98D519C48C4F9AE02.roa Signing time: Wed 26 Nov 2025 17:05:51 +0000 ROA not before: Wed 26 Nov 2025 17:05:51 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 10780 IP address blocks: 103.11.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.crl rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6o2GS70rsdeM2IkKFQThETZ_ehM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Dec 2025 16:47:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4767 (0x129f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6E65, serialNumber=EA8D864BBD2BB1D78CD8890A1504E111367F7A13 Validity Not Before: Nov 26 17:05:51 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6927336f-c9b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a2:24:12:4f:77:9f:3c:c2:5a:51:28:50:f5: ee:0c:81:e5:42:4f:9b:cd:5d:82:d9:f1:19:b1:6f: f7:90:22:3f:40:de:0c:3f:97:45:35:2f:d5:84:9e: 79:06:b4:15:ba:c7:2b:4c:3e:ef:40:ad:10:6a:cd: b3:94:1c:36:d8:79:f5:c1:6d:58:81:c8:6e:c0:2a: f6:2e:c7:fc:80:d0:97:12:26:92:cc:73:b5:15:cf: d2:a9:ee:ab:89:08:66:81:72:9d:02:9a:c4:1b:bc: 73:0b:f7:73:5e:53:68:73:05:1c:48:a7:89:74:7d: ed:2e:dd:89:c1:2c:a4:46:2b:83:6e:e4:99:63:1b: 6c:ef:aa:05:80:99:ec:91:14:da:00:54:ce:ec:32: 7f:f8:f1:2f:b5:99:1a:eb:4a:ba:ad:45:a3:2d:13: 36:8b:be:7b:71:39:47:7d:b4:ba:40:5e:90:7b:30: 5f:0c:29:b6:f3:1f:ab:25:82:92:24:da:45:05:84: 95:77:14:e4:0d:16:90:e0:99:8c:af:e1:b9:45:86: bb:ff:5d:a0:e6:35:b8:48:dd:56:ab:c7:6b:09:a2: a2:09:64:f1:e0:b1:dd:84:c0:55:33:e2:4b:8c:bf: 91:f6:59:7f:c0:a6:a6:6d:c2:31:8d:67:61:c7:d4: 8d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:EF:E2:0F:A6:20:DA:C1:88:41:9E:18:C1:8C:02:17:91:22:2C:61 X509v3 Authority Key Identifier: keyid:EA:8D:86:4B:BD:2B:B1:D7:8C:D8:89:0A:15:04:E1:11:36:7F:7A:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6o2GS70rsdeM2IkKFQThETZ_ehM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/F87DE4E2518011E98D519C48C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.11.165.0/24 Signature Algorithm: sha256WithRSAEncryption 58:5e:b3:81:3f:64:ed:87:5d:21:50:a4:fe:c9:41:a0:1e:49: 48:1a:9f:b0:d3:22:42:21:a3:b1:66:3f:25:9c:c3:04:3b:02: db:19:f9:8b:a0:69:cb:b4:9f:81:6f:5a:ab:f8:c8:85:43:d2: eb:4e:5b:07:15:b9:11:54:d5:98:45:a9:b5:79:7c:01:7a:70: 8e:78:b9:f5:46:98:64:3f:b6:76:bf:59:5d:62:c8:ca:1b:18: 40:87:f1:e0:c5:b8:0c:b3:fe:20:dc:ce:75:a7:b9:3b:d7:20: 8d:37:cf:2c:8f:2d:1c:9e:bf:be:00:a6:00:fc:f4:0e:2d:4e: 10:0a:d4:af:a5:36:0a:4d:6a:a4:f6:b7:b4:47:f9:bf:40:d9: 28:56:af:6f:5b:ec:59:15:52:79:ac:87:4c:43:4a:f5:37:8f: b5:4d:e1:59:ad:cd:2f:0d:8e:c1:6b:7c:e2:92:6d:c8:8e:20: 64:45:0c:e4:18:0e:51:55:d2:20:89:b3:27:4d:be:51:5a:31: fd:5e:b9:84:6d:31:cd:82:b1:5e:0a:52:c2:2c:cf:c9:d5:20: c3:d7:97:bc:c0:97:36:9b:c2:51:68:a1:06:5c:35:0a:22:f6: 3d:8a:90:f8:96:b3:cf:9e:0b:69:f5:49:bb:f5:09:da:0f:56: d4:d8:66:c0 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICEp8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZFNjUxMTAvBgNVBAUTKEVBOEQ4NjRCQkQyQkIxRDc4Q0Q4ODkwQTE1MDRFMTEx MzY3RjdBMTMwHhcNMjUxMTI2MTcwNTUxWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTI3MzM2Zi1jOWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs6IkEk93nzzCWlEoUPXuDIHlQk+bzV2C2fEZsW/3kCI/QN4MP5dFNS/VhJ55 BrQVuscrTD7vQK0Qas2zlBw22Hn1wW1YgchuwCr2Lsf8gNCXEiaSzHO1Fc/Sqe6r iQhmgXKdAprEG7xzC/dzXlNocwUcSKeJdH3tLt2JwSykRiuDbuSZYxts76oFgJns kRTaAFTO7DJ/+PEvtZka60q6rUWjLRM2i757cTlHfbS6QF6QezBfDCm28x+rJYKS JNpFBYSVdxTkDRaQ4JmMr+G5RYa7/12g5jW4SN1Wq8drCaKiCWTx4LHdhMBVM+JL jL+R9ll/wKambcIxjWdhx9SNfwIDAQABo4IClTCCApEwHQYDVR0OBBYEFM7v4g+m INrBiEGeGMGMAheRIixhMB8GA1UdIwQYMBaAFOqNhku9K7HXjNiJChUE4RE2f3oT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkU2NS9GRUQ5M0E3Q0Q4 OEExMUU4QTNFQ0ZGNERDNEY5QUUwMi82bzJHUzcwcnNkZU0ySWtLRlFUaEVUWl9l aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZvMkdTNzByc2RlTTJJa0tGUVRoRVRaX2VoTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjZFNjUvRkVEOTNBN0NEODhBMTFFOEEzRUNGRjREQzRGOUFFMDIvRjg3REU0RTI1 MTgwMTFFOThENTE5QzQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnC6UwDQYJKoZIhvcNAQELBQADggEBAFhes4E/ZO2HXSFQ pP7JQaAeSUgan7DTIkIho7FmPyWcwwQ7AtsZ+Yugacu0n4FvWqv4yIVD0utOWwcV uRFU1ZhFqbV5fAF6cI54ufVGmGQ/tna/WV1iyMobGECH8eDFuAyz/iDcznWnuTvX II03zyyPLRyev74ApgD89A4tThAK1K+lNgpNaqT2t7RH+b9A2ShWr29b7FkVUnms h0xDSvU3j7VN4VmtzS8NjsFrfOKSbciOIGRFDOQYDlFV0iCJsydNvlFaMf1euYRt Mc2CsV4KUsIsz8nVIMPXl7zAlzabwlFooQZcNQoi9j2KkPiWs8+eC2n1Sbv1CdoP VtTYZsA= -----END CERTIFICATE-----Generated at Wed Dec 10 17:14:05 2025 by rpki-client