This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/C1C296F45A7111EBB1700884C4F9AE02.roa File: C1C296F45A7111EBB1700884C4F9AE02.roa (raw, json) Hash identifier: sUO+w24EDWFxtZWWupPK+h5YUKSCC6bz+nIIV5mnxZw= Subject key identifier: 6C:E9:AA:4D:1D:49:53:45:42:03:E9:54:A2:17:62:4D:46:01:1E:9E Certificate issuer: /CN=A91518AF/serialNumber=1A6934CAB5213D8B43FD54358938DD1F31A1690A Certificate serial: 0744 Authority key identifier: 1A:69:34:CA:B5:21:3D:8B:43:FD:54:35:89:38:DD:1F:31:A1:69:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/C1C296F45A7111EBB1700884C4F9AE02.roa Signing time: Mon 08 Dec 2025 21:02:38 +0000 ROA not before: Mon 08 Dec 2025 21:02:38 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 0 IP address blocks: 103.159.71.0/24 maxlen: 24 103.174.251.0/24 maxlen: 24 2001:df5:7880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.crl rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 21:06:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1860 (0x744) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91518AF, serialNumber=1A6934CAB5213D8B43FD54358938DD1F31A1690A Validity Not Before: Dec 8 21:02:38 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69373cee-f6ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:6a:48:c5:d1:0b:59:60:01:d3:1d:2b:87:60: fd:f3:0f:f0:41:76:35:1d:8e:3a:b3:20:66:e4:bf: dc:64:29:68:54:b8:7d:ce:96:86:cb:b9:6f:5b:d0: 3f:f4:2a:02:c1:1e:27:e7:8c:cc:da:0f:a3:51:9f: f7:bf:5d:95:29:20:1d:12:af:59:f6:93:af:61:56: e5:31:c0:52:c3:8c:1f:e5:ca:6d:43:66:d2:24:58: 70:66:58:f8:bf:00:d1:ad:42:e5:97:a1:f6:96:91: e0:bd:07:f8:ce:e2:db:96:9f:2b:c2:ff:08:76:62: 5c:74:2f:21:01:03:58:97:34:57:02:ed:28:87:f1: cb:e9:79:92:ca:6b:5a:b0:50:69:8a:bc:00:30:ea: d8:ea:0b:e6:72:cc:b8:24:92:50:63:50:16:64:52: 33:f7:75:68:be:d3:60:4f:da:4a:36:b4:94:dc:40: 1e:74:7a:e6:43:b5:7b:6a:58:c7:1b:a0:ec:8a:2c: 59:0a:7c:0b:f5:23:fa:5f:27:5f:2b:fb:60:b3:45: d1:a6:56:f0:85:a5:65:fe:86:75:7d:a5:fa:0d:52: 3a:5e:dd:43:eb:1c:e6:ea:32:65:0e:2d:9e:f6:47: 40:40:44:4a:a1:f9:fe:38:fa:51:00:d7:bd:87:89: cd:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:E9:AA:4D:1D:49:53:45:42:03:E9:54:A2:17:62:4D:46:01:1E:9E X509v3 Authority Key Identifier: keyid:1A:69:34:CA:B5:21:3D:8B:43:FD:54:35:89:38:DD:1F:31:A1:69:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/C1C296F45A7111EBB1700884C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.159.71.0/24 103.174.251.0/24 IPv6: 2001:df5:7880::/48 Signature Algorithm: sha256WithRSAEncryption 29:0e:d1:f5:ef:b1:49:d2:fa:7f:ac:06:cc:29:89:fa:75:e3: 8b:f5:68:38:13:be:77:3b:3a:be:72:f4:11:05:09:ef:15:0f: 99:66:0a:f6:d4:2c:9b:d4:d3:c1:52:b0:5f:2e:21:1d:86:ce: 41:8e:5f:cd:2b:f4:3a:40:43:80:c0:6d:11:a7:a7:37:7d:76: 02:4e:61:ae:99:a5:c1:c8:9f:bd:cb:84:dc:46:f4:e9:a9:18: 55:21:ac:50:87:9b:61:11:96:e0:7a:bc:d2:01:b7:16:ac:ab: 5f:e4:eb:6c:3e:03:8a:3b:eb:71:b4:58:6e:f0:fb:1f:53:ea: 4e:9e:74:31:3f:eb:74:0e:87:d7:67:9d:3d:7b:50:6e:0f:4c: bb:c8:ba:a8:eb:1a:3d:05:9f:43:e2:dc:a4:c4:f6:8a:50:aa: 69:44:09:b5:cd:03:e2:d0:fb:27:f7:66:b8:49:74:c6:02:f5: 34:6a:11:fc:01:c7:ab:da:0d:61:12:bf:27:f0:95:98:be:79: 1c:b6:03:38:c1:9b:9a:6c:5a:0c:34:6e:46:08:10:5d:17:f7: e5:c4:20:e7:b8:84:14:71:2f:1a:7a:c6:fa:1d:cf:ae:2f:02: 74:a4:94:94:a7:ef:1e:88:31:cc:cc:a5:90:11:49:1b:b7:7d: 49:3e:30:56 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICB0QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE4QUYxMTAvBgNVBAUTKDFBNjkzNENBQjUyMTNEOEI0M0ZENTQzNTg5MzhERDFG MzFBMTY5MEEwHhcNMjUxMjA4MjEwMjM4WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTM3M2NlZS1mNmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmGpIxdELWWAB0x0rh2D98w/wQXY1HY46syBm5L/cZCloVLh9zpaGy7lvW9A/ 9CoCwR4n54zM2g+jUZ/3v12VKSAdEq9Z9pOvYVblMcBSw4wf5cptQ2bSJFhwZlj4 vwDRrULll6H2lpHgvQf4zuLblp8rwv8IdmJcdC8hAQNYlzRXAu0oh/HL6XmSymta sFBpirwAMOrY6gvmcsy4JJJQY1AWZFIz93VovtNgT9pKNrSU3EAedHrmQ7V7aljH G6DsiixZCnwL9SP6XydfK/tgs0XRplbwhaVl/oZ1faX6DVI6Xt1D6xzm6jJlDi2e 9kdAQERKofn+OPpRANe9h4nNWwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFGzpqk0d SVNFQgPpVKIXYk1GAR6eMB8GA1UdIwQYMBaAFBppNMq1IT2LQ/1UNYk43R8xoWkK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MThBRi9ENzkyRjQ3NDU2 QzAxMUVCOEJDMzVCNzRDNEY5QUUwMi9HbWsweXJVaFBZdERfVlExaVRqZEh6R2hh UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dtazB5clVoUFl0RF9WUTFpVGpkSHpHaGFRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTE4QUYvRDc5MkY0NzQ1NkMwMTFFQjhCQzM1Qjc0QzRGOUFFMDIvQzFDMjk2RjQ1 QTcxMTFFQkIxNzAwODg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABnn0cDBABnrvswDwQCAAIwCQMHACABDfV4gDANBgkqhkiG 9w0BAQsFAAOCAQEAKQ7R9e+xSdL6f6wGzCmJ+nXji/VoOBO+dzs6vnL0EQUJ7xUP mWYK9tQsm9TTwVKwXy4hHYbOQY5fzSv0OkBDgMBtEaenN312Ak5hrpmlwcifvcuE 3Eb06akYVSGsUIebYRGW4Hq80gG3FqyrX+TrbD4DijvrcbRYbvD7H1PqTp50MT/r dA6H12edPXtQbg9Mu8i6qOsaPQWfQ+LcpMT2ilCqaUQJtc0D4tD7J/dmuEl0xgL1 NGoR/AHHq9oNYRK/J/CVmL55HLYDOMGbmmxaDDRuRggQXRf35cQg57iEFHEvGnrG +h3Pri8CdKSUlKfvHogxzMylkBFJG7d9ST4wVg== -----END CERTIFICATE-----Generated at Mon Dec 22 12:50:59 2025 by rpki-client