This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/4C1F013E5AF511EFBAB1F86CC4F9AE02.roa File: 4C1F013E5AF511EFBAB1F86CC4F9AE02.roa (raw, json) Hash identifier: 37wRY/Cc6Mq3QSLFvHgV5f/52WNRD8oTGzaqCKYmvRI= Subject key identifier: 85:3B:BE:3E:2F:65:A8:90:BF:80:5C:96:AC:D0:72:7E:AA:8F:B3:2F Certificate issuer: /CN=A91104C9/serialNumber=68AE5BEB1BB7E442CEE0A7E014029FF72E3DB41F Certificate serial: 0C55 Authority key identifier: 68:AE:5B:EB:1B:B7:E4:42:CE:E0:A7:E0:14:02:9F:F7:2E:3D:B4:1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/4C1F013E5AF511EFBAB1F86CC4F9AE02.roa Signing time: Sat 08 Nov 2025 18:08:00 +0000 ROA not before: Sat 08 Nov 2025 18:08:00 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 131686 IP address blocks: 103.76.240.0/22 maxlen: 24 162.12.212.0/22 maxlen: 24 2407:7b80::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.crl rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 18:20:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3157 (0xc55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91104C9, serialNumber=68AE5BEB1BB7E442CEE0A7E014029FF72E3DB41F Validity Not Before: Nov 8 18:08:00 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=690f8700-5c75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:64:46:c4:30:7d:8d:cd:d9:8e:c1:99:b1:ac: c7:76:f2:a5:51:a8:4c:28:91:e8:15:5b:57:60:87: 4e:2e:7b:57:ba:49:00:78:09:d9:5b:7b:ed:fc:b0: a4:27:6f:df:ee:2d:4b:c5:c0:e7:9a:6a:f8:2f:de: ab:72:ce:79:c4:a4:1c:32:96:40:53:e1:22:4e:0a: a8:0f:46:32:6b:10:60:8b:d6:82:fa:f3:64:45:24: ac:bd:da:75:68:6c:d1:ae:31:2a:37:46:9a:d3:0a: 6b:7e:f0:f5:85:17:3a:54:92:ee:51:d1:0c:1f:a0: b4:b4:04:5d:e8:d7:19:a6:94:d8:04:08:ca:93:1d: 14:e5:0f:45:81:1b:6e:62:c1:9a:7b:0e:2a:68:01: 65:0a:56:3b:98:d3:37:fe:21:94:c7:04:a9:01:e7: 21:aa:cf:b6:b5:9c:f4:9f:1f:f2:de:cb:d1:29:46: d7:6f:24:cb:a9:e1:5f:a3:d8:1d:be:ce:9e:9a:4d: 81:03:fe:9f:d1:7a:3f:0c:82:ce:9e:5b:2b:bb:48: a1:f6:85:d5:c9:81:a9:98:2c:ba:60:44:79:fc:c3: 0d:1f:45:f2:b2:20:65:0e:fb:5f:13:47:dc:dd:1b: c5:bb:7a:dc:9b:dc:28:02:0d:ff:11:aa:21:59:a4: 03:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:3B:BE:3E:2F:65:A8:90:BF:80:5C:96:AC:D0:72:7E:AA:8F:B3:2F X509v3 Authority Key Identifier: keyid:68:AE:5B:EB:1B:B7:E4:42:CE:E0:A7:E0:14:02:9F:F7:2E:3D:B4:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/4C1F013E5AF511EFBAB1F86CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.76.240.0/22 162.12.212.0/22 IPv6: 2407:7b80::/32 Signature Algorithm: sha256WithRSAEncryption 49:fe:61:aa:e8:54:c8:f3:9c:12:68:04:4e:7e:89:9b:b9:af: e4:de:8d:b6:dd:83:be:ef:1b:93:65:4c:54:a2:75:e5:93:99: 21:b0:47:79:20:19:43:05:b0:e6:24:d5:d3:06:3a:34:29:c1: fa:06:8b:90:ba:65:ee:48:c5:e4:f9:b9:77:5f:61:1b:7c:c6: 4d:00:14:40:e1:4c:8c:37:5b:11:76:95:a0:f1:3f:5c:fa:e0: d9:52:8a:bb:fc:2d:72:02:37:cf:7d:14:a0:fb:2d:a9:e8:44: 13:c4:9f:f7:99:e8:a4:6b:a1:6f:04:7e:0e:0a:bd:8a:43:42: 87:48:dc:12:2b:81:f1:15:43:d7:f6:9a:bf:54:76:20:30:d2: 64:2b:90:48:ae:5c:17:c3:b6:e6:3a:94:23:ce:ef:d4:a4:b0: 73:0c:bb:be:12:cb:5f:fd:37:4c:1e:dd:2b:08:a7:12:ae:d9: 98:56:85:30:f1:b0:da:88:b3:16:c0:3e:e8:1e:b6:82:b3:c7: 90:2f:a7:89:73:54:5e:7b:5f:87:35:39:33:c8:94:eb:e1:ed: 8c:fd:ea:b2:02:e5:06:02:4d:36:19:a2:ce:82:f3:00:86:ae: dc:e5:92:be:f4:8d:72:cf:9c:8e:76:51:91:a7:bc:98:bf:68: e4:ae:21:52 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICDFUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA0QzkxMTAvBgNVBAUTKDY4QUU1QkVCMUJCN0U0NDJDRUUwQTdFMDE0MDI5RkY3 MkUzREI0MUYwHhcNMjUxMTA4MTgwODAwWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTBmODcwMC01Yzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA62RGxDB9jc3ZjsGZsazHdvKlUahMKJHoFVtXYIdOLntXukkAeAnZW3vt/LCk J2/f7i1LxcDnmmr4L96rcs55xKQcMpZAU+EiTgqoD0YyaxBgi9aC+vNkRSSsvdp1 aGzRrjEqN0aa0wprfvD1hRc6VJLuUdEMH6C0tARd6NcZppTYBAjKkx0U5Q9FgRtu YsGaew4qaAFlClY7mNM3/iGUxwSpAechqs+2tZz0nx/y3svRKUbXbyTLqeFfo9gd vs6emk2BA/6f0Xo/DILOnlsru0ih9oXVyYGpmCy6YER5/MMNH0XysiBlDvtfE0fc 3RvFu3rcm9woAg3/EaohWaQDowIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFIU7vj4v ZaiQv4BclqzQcn6qj7MvMB8GA1UdIwQYMBaAFGiuW+sbt+RCzuCn4BQCn/cuPbQf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDRDOS8yQUE4QjM4ODE0 QzgxMUVBODdEMTUxNkNDNEY5QUUwMi9hSzViNnh1MzVFTE80S2ZnRkFLZjl5NDl0 QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FLNWI2eHUzNUVMTzRLZmdGQUtmOXk0OXRCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTA0QzkvMkFBOEIzODgxNEM4MTFFQTg3RDE1MTZDQzRGOUFFMDIvNEMxRjAxM0U1 QUY1MTFFRkJBQjFGODZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJnTPADBAKiDNQwDQQCAAIwBwMFACQHe4AwDQYJKoZIhvcN AQELBQADggEBAEn+YaroVMjznBJoBE5+iZu5r+Tejbbdg77vG5NlTFSideWTmSGw R3kgGUMFsOYk1dMGOjQpwfoGi5C6Ze5IxeT5uXdfYRt8xk0AFEDhTIw3WxF2laDx P1z64NlSirv8LXICN899FKD7LanoRBPEn/eZ6KRroW8Efg4KvYpDQodI3BIrgfEV Q9f2mr9UdiAw0mQrkEiuXBfDtuY6lCPO79SksHMMu74Sy1/9N0we3SsIpxKu2ZhW hTDxsNqIsxbAPugetoKzx5Avp4lzVF57X4c1OTPIlOvh7Yz96rIC5QYCTTYZos6C 8wCGrtzlkr70jXLPnI52UZGnvJi/aOSuIVI= -----END CERTIFICATE-----Generated at Fri Dec 19 22:01:51 2025 by rpki-client