This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/3A1C441A5A4E11E7965D9A75C4F9AE02.roa File: 3A1C441A5A4E11E7965D9A75C4F9AE02.roa (raw, json) Hash identifier: chUIzbNJwC8TKgIYKXoVKKtNLNEU3qxTe43tCLXzLSw= Subject key identifier: 73:79:6F:03:C5:2B:7D:54:F2:B1:FC:70:5A:1A:76:4E:A1:55:25:90 Certificate issuer: /CN=A91FA92A/serialNumber=A7EC2258682F6FAE9F8438FA2627189E542F4DEF Certificate serial: 1A4E Authority key identifier: A7:EC:22:58:68:2F:6F:AE:9F:84:38:FA:26:27:18:9E:54:2F:4D:EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-wiWGgvb66fhDj6JicYnlQvTe8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/3A1C441A5A4E11E7965D9A75C4F9AE02.roa Signing time: Thu 04 Dec 2025 16:15:11 +0000 ROA not before: Thu 04 Dec 2025 16:15:11 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 135666 IP address blocks: 43.230.208.0/24 maxlen: 24 103.78.111.0/24 maxlen: 24 103.78.116.0/23 maxlen: 24 103.252.84.0/24 maxlen: 24 2400:1440::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.crl rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-wiWGgvb66fhDj6JicYnlQvTe8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6734 (0x1a4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA92A, serialNumber=A7EC2258682F6FAE9F8438FA2627189E542F4DEF Validity Not Before: Dec 4 16:15:11 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6931b38f-e4ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:dd:a5:02:20:eb:c2:12:fe:fc:5f:ac:72:fa: 86:eb:61:31:25:77:e2:cb:04:92:ad:2f:d6:3e:4c: f8:f3:e1:b8:ed:de:a5:9a:9c:3c:27:d1:d7:0c:ee: 3b:f7:89:13:85:7d:b0:c9:48:e8:9b:e8:bc:c4:de: a9:41:a3:61:a4:22:1d:48:3c:ee:f2:e4:b5:f0:9d: 48:cc:6d:e5:0a:37:fb:a2:83:43:b8:7b:4a:5c:eb: 30:37:cf:63:85:b3:43:cb:79:de:9e:3e:f5:2c:0f: b7:38:ec:e4:49:b0:ac:ee:66:a3:db:ab:0c:33:00: e5:83:e9:58:74:42:d7:aa:df:b3:4c:db:77:82:91: 18:53:d3:6a:08:d9:b6:ef:2d:c2:5a:86:f5:26:1d: 75:db:06:8e:2c:13:93:c5:d1:1d:bb:8c:a0:75:9b: 64:4a:e1:be:27:61:3d:da:0f:90:86:95:7c:9f:06: d3:50:2e:0a:36:b2:c8:4d:da:14:09:c3:8f:c9:19: 1a:b7:a3:5f:8f:9a:19:83:27:21:af:48:05:34:e1: fe:ab:76:11:a9:14:88:36:5a:e7:eb:0e:bb:07:d7: 6b:6a:a9:04:d0:d7:c4:87:39:14:2e:6f:1f:b0:f3: c7:c4:a2:f8:f8:23:0f:28:50:a6:a1:e8:da:3c:c0: 8a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:79:6F:03:C5:2B:7D:54:F2:B1:FC:70:5A:1A:76:4E:A1:55:25:90 X509v3 Authority Key Identifier: keyid:A7:EC:22:58:68:2F:6F:AE:9F:84:38:FA:26:27:18:9E:54:2F:4D:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-wiWGgvb66fhDj6JicYnlQvTe8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/3A1C441A5A4E11E7965D9A75C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.230.208.0/24 103.78.111.0/24 103.78.116.0/23 103.252.84.0/24 IPv6: 2400:1440::/32 Signature Algorithm: sha256WithRSAEncryption a7:fb:cb:58:ed:57:b5:3e:c0:49:a9:d1:de:d1:7e:2c:78:15: 50:1c:2e:79:f8:6b:50:5c:de:a3:3f:26:6c:b8:91:3a:c2:61: 3d:f5:66:3a:6f:05:1b:73:8a:a6:ab:c4:d7:24:de:e6:b5:73: 86:b4:58:d3:e2:98:76:8b:15:7b:f5:41:56:9c:da:c2:45:6d: f6:ed:54:a1:33:ae:49:d0:3c:72:5d:63:40:1c:0f:b1:c9:cc: ed:10:1e:40:eb:2c:8f:7e:c8:f1:86:43:b9:97:7f:13:b3:d0: 3f:42:fb:91:c7:1e:f3:4b:9c:a2:99:80:82:79:d0:aa:4a:67: e0:69:a5:91:be:e0:35:40:78:d5:2e:f1:99:6d:1a:99:a7:f3: 55:72:eb:2a:f3:cf:7c:21:0b:ac:5a:9a:20:ca:eb:56:4d:b0: c8:2d:e2:b3:62:3a:9a:89:88:9e:62:1a:f0:7a:97:64:0a:16: 31:0d:ed:9b:3a:12:ca:da:ca:39:dd:02:0a:f8:5e:19:d4:ed: 7b:4e:82:43:ec:bb:8d:c5:c5:b2:b0:15:cd:d5:8a:ea:d8:69: 03:fd:65:2c:a8:96:66:0b:5e:c8:f5:58:e1:cd:9e:e2:2d:ed: ef:11:b8:7b:a9:bf:b2:e7:c6:04:9a:6a:44:9e:50:ec:d2:b5: bf:e4:e3:14 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICGk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE5MkExMTAvBgNVBAUTKEE3RUMyMjU4NjgyRjZGQUU5Rjg0MzhGQTI2MjcxODlF NTQyRjRERUYwHhcNMjUxMjA0MTYxNTExWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTMxYjM4Zi1lNGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn92lAiDrwhL+/F+scvqG62ExJXfiywSSrS/WPkz48+G47d6lmpw8J9HXDO47 94kThX2wyUjom+i8xN6pQaNhpCIdSDzu8uS18J1IzG3lCjf7ooNDuHtKXOswN89j hbNDy3nenj71LA+3OOzkSbCs7maj26sMMwDlg+lYdELXqt+zTNt3gpEYU9NqCNm2 7y3CWob1Jh112waOLBOTxdEdu4ygdZtkSuG+J2E92g+QhpV8nwbTUC4KNrLITdoU CcOPyRkat6Nfj5oZgychr0gFNOH+q3YRqRSINlrn6w67B9draqkE0NfEhzkULm8f sPPHxKL4+CMPKFCmoejaPMCKDQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFHN5bwPF K31U8rH8cFoadk6hVSWQMB8GA1UdIwQYMBaAFKfsIlhoL2+un4Q4+iYnGJ5UL03v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTkyQS80NTc5N0M1QzVB NEQxMUU3OTlGNDZCNzRDNEY5QUUwMi9wLXdpV0dndmI2NmZoRGo2SmljWW5sUXZU ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Atd2lXR2d2YjY2ZmhEajZKaWNZbmxRdlRlOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkE5MkEvNDU3OTdDNUM1QTREMTFFNzk5RjQ2Qjc0QzRGOUFFMDIvM0ExQzQ0MUE1 QTRFMTFFNzk2NUQ5QTc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E MTAvMB4EAgABMBgDBAAr5tADBABnTm8DBAFnTnQDBABn/FQwDQQCAAIwBwMFACQA FEAwDQYJKoZIhvcNAQELBQADggEBAKf7y1jtV7U+wEmp0d7Rfix4FVAcLnn4a1Bc 3qM/Jmy4kTrCYT31ZjpvBRtziqarxNck3ua1c4a0WNPimHaLFXv1QVac2sJFbfbt VKEzrknQPHJdY0AcD7HJzO0QHkDrLI9+yPGGQ7mXfxOz0D9C+5HHHvNLnKKZgIJ5 0KpKZ+BppZG+4DVAeNUu8ZltGpmn81Vy6yrzz3whC6xamiDK61ZNsMgt4rNiOpqJ iJ5iGvB6l2QKFjEN7Zs6EsrayjndAgr4XhnU7XtOgkPsu43FxbKwFc3ViurYaQP9 ZSyolmYLXsj1WOHNnuIt7e8RuHupv7LnxgSaakSeUOzStb/k4xQ= -----END CERTIFICATE-----Generated at Sat Dec 6 22:44:56 2025 by rpki-client