This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/6153EE40A64911EEA2F9C24AC4F9AE02.roa File: 6153EE40A64911EEA2F9C24AC4F9AE02.roa (raw, json) Hash identifier: 2FUCg0y6j+fzZjDHWeWQ+0mvZPhX1zx72r0IB9sChxs= Subject key identifier: 4D:A5:C8:26:77:F2:8E:1E:8B:B7:AB:99:B9:81:D5:40:D3:E5:72:3B Certificate issuer: /CN=A91FFE9F/serialNumber=0B095236234E6935BAA341E3235A3DB473ACC67F Certificate serial: 0F8B Authority key identifier: 0B:09:52:36:23:4E:69:35:BA:A3:41:E3:23:5A:3D:B4:73:AC:C6:7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/6153EE40A64911EEA2F9C24AC4F9AE02.roa Signing time: Thu 20 Nov 2025 17:36:53 +0000 ROA not before: Thu 20 Nov 2025 17:36:53 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 140039 IP address blocks: 103.130.156.0/24 maxlen: 24 103.130.157.0/24 maxlen: 24 103.130.158.0/24 maxlen: 24 103.130.159.0/24 maxlen: 24 2403:bd40::/48 maxlen: 48 2403:bd40:1::/48 maxlen: 48 2403:bd40:2::/48 maxlen: 48 2403:bd40:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3979 (0xf8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFE9F, serialNumber=0B095236234E6935BAA341E3235A3DB473ACC67F Validity Not Before: Nov 20 17:36:53 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=691f51b5-5594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6f:ed:43:e9:4d:b7:a5:d0:ba:85:53:36:30: 6f:3d:56:5e:63:a7:80:47:c8:16:23:6f:f6:61:9e: f4:d5:71:dc:b2:e0:eb:b7:7a:a5:c5:57:68:6f:cf: 7b:46:86:c2:91:cf:1f:c9:e7:0d:9d:7e:10:c3:d2: cc:6f:8d:98:89:91:39:c3:39:81:aa:5e:bd:24:c9: 71:d0:a3:16:72:d9:b2:46:e3:d3:8f:6f:1e:6a:cd: 46:58:20:1d:94:4e:7d:83:32:1e:7e:24:26:12:b8: 49:7b:68:68:66:ce:8e:f2:fc:13:d5:72:b7:f1:04: 38:d5:12:51:74:6a:00:c0:2a:0b:7f:ce:e2:8b:96: 73:b7:68:a3:59:02:52:13:9d:c7:81:ff:2b:20:11: d0:2e:fe:7c:d5:c8:0e:75:91:68:10:7e:1a:b4:9f: 67:65:3e:04:de:22:08:dc:10:c1:13:91:0a:b1:d5: ea:5b:33:9b:d6:1d:dd:1d:d0:ce:be:37:8c:c7:cb: 92:a4:a8:f4:fb:0a:b6:07:ae:fe:43:fa:b1:ae:c9: 24:f0:db:66:f3:e1:7c:a4:60:9e:ab:54:f0:d4:ac: 39:cb:d7:4c:b8:9f:d3:57:e5:80:8d:a2:14:de:94: bc:29:7e:be:78:57:a4:45:3e:a3:bb:c2:71:42:d5: 7d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A5:C8:26:77:F2:8E:1E:8B:B7:AB:99:B9:81:D5:40:D3:E5:72:3B X509v3 Authority Key Identifier: keyid:0B:09:52:36:23:4E:69:35:BA:A3:41:E3:23:5A:3D:B4:73:AC:C6:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/6153EE40A64911EEA2F9C24AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.130.156.0/22 IPv6: 2403:bd40::/46 Signature Algorithm: sha256WithRSAEncryption 69:8a:a0:3b:ff:10:7f:a1:da:69:b3:b6:ef:e9:63:3d:22:6a: 34:c3:c5:3f:95:cd:5b:b3:40:2d:48:e2:32:5d:98:11:08:25: 48:8f:c8:37:c5:08:7f:5b:79:c0:a9:f5:e8:ff:54:d2:20:21: 4b:a5:7d:bc:5a:5c:68:0a:0f:a9:02:d9:6f:92:4e:85:c6:2b: 95:15:34:fb:24:8a:96:3c:a0:60:d3:e4:54:7c:bf:1b:a4:e0: 13:3c:4d:ca:54:56:e6:2a:ff:2a:15:e0:aa:bf:8a:c1:97:0d: 9a:63:18:a2:43:5b:07:57:1c:f6:4d:e5:41:5c:50:08:2a:24: 2d:a5:db:05:9c:14:09:85:08:24:c9:8b:d2:fb:17:d3:a9:d0: 69:f6:21:6c:7a:00:3d:cc:43:d6:21:9d:ae:93:b3:ad:3b:83: 5b:78:be:cf:bd:84:ab:b0:70:09:03:d1:3f:ac:f8:9b:7a:43: 86:26:7b:b8:e5:9a:97:a6:a9:f2:8a:41:80:a7:df:2d:2c:c2: aa:a0:71:5f:98:7b:2c:ae:57:dd:65:7a:e9:f4:82:08:d7:ad: 9c:57:80:e4:1d:ca:7e:d7:84:9f:6f:f8:c9:93:f8:73:a2:48: 8b:de:6a:54:ec:5f:e4:40:27:7f:f6:bd:93:9a:78:a1:fc:bc: 5a:3f:28:3a -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICD4swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZFOUYxMTAvBgNVBAUTKDBCMDk1MjM2MjM0RTY5MzVCQUEzNDFFMzIzNUEzREI0 NzNBQ0M2N0YwHhcNMjUxMTIwMTczNjUzWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTFmNTFiNS01NTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsG/tQ+lNt6XQuoVTNjBvPVZeY6eAR8gWI2/2YZ701XHcsuDrt3qlxVdob897 RobCkc8fyecNnX4Qw9LMb42YiZE5wzmBql69JMlx0KMWctmyRuPTj28eas1GWCAd lE59gzIefiQmErhJe2hoZs6O8vwT1XK38QQ41RJRdGoAwCoLf87ii5Zzt2ijWQJS E53Hgf8rIBHQLv581cgOdZFoEH4atJ9nZT4E3iII3BDBE5EKsdXqWzOb1h3dHdDO vjeMx8uSpKj0+wq2B67+Q/qxrskk8Ntm8+F8pGCeq1Tw1Kw5y9dMuJ/TV+WAjaIU 3pS8KX6+eFekRT6ju8JxQtV9fwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFE2lyCZ3 8o4ei7ermbmB1UDT5XI7MB8GA1UdIwQYMBaAFAsJUjYjTmk1uqNB4yNaPbRzrMZ/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkU5Ri84QkUwNjNFMDdC MTYxMUU5OTk0OUFDNTFDNEY5QUUwMi9Dd2xTTmlOT2FUVzZvMEhqSTFvOXRIT3N4 bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N3bFNOaU5PYVRXNm8wSGpJMW85dEhPc3huOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkZFOUYvOEJFMDYzRTA3QjE2MTFFOTk5NDlBQzUxQzRGOUFFMDIvNjE1M0VFNDBB NjQ5MTFFRUEyRjlDMjRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAJngpwwDwQCAAIwCQMHAiQDvUAAADANBgkqhkiG9w0BAQsF AAOCAQEAaYqgO/8Qf6HaabO27+ljPSJqNMPFP5XNW7NALUjiMl2YEQglSI/IN8UI f1t5wKn16P9U0iAhS6V9vFpcaAoPqQLZb5JOhcYrlRU0+ySKljygYNPkVHy/G6Tg EzxNylRW5ir/KhXgqr+KwZcNmmMYokNbB1cc9k3lQVxQCCokLaXbBZwUCYUIJMmL 0vsX06nQafYhbHoAPcxD1iGdrpOzrTuDW3i+z72Eq7BwCQPRP6z4m3pDhiZ7uOWa l6ap8opBgKffLSzCqqBxX5h7LK5X3WV66fSCCNetnFeA5B3KfteEn2/4yZP4c6JI i95qVOxf5EAnf/a9k5p4ofy8Wj8oOg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:59:26 2025 by rpki-client