This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/C90C4476FBA611E9BA00AB33C4F9AE02.roa File: C90C4476FBA611E9BA00AB33C4F9AE02.roa (raw, json) Hash identifier: Cm3DQhbEayghF/7ogKNgiTb/7gIXNNRsWelKhE6uB7A= Subject key identifier: D9:E2:E6:87:50:66:5B:5B:85:D9:72:11:4C:5E:3E:02:47:0F:E1:B1 Certificate issuer: /CN=A915BA28/serialNumber=7F6045A376765BF82792AA705BBD899519CB19C7 Certificate serial: 1121 Authority key identifier: 7F:60:45:A3:76:76:5B:F8:27:92:AA:70:5B:BD:89:95:19:CB:19:C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2BFo3Z2W_gnkqpwW72JlRnLGcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/C90C4476FBA611E9BA00AB33C4F9AE02.roa Signing time: Mon 15 Dec 2025 18:09:32 +0000 ROA not before: Mon 15 Dec 2025 18:09:32 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 138596 IP address blocks: 103.134.28.0/22 maxlen: 22 103.134.28.0/24 maxlen: 24 103.134.29.0/24 maxlen: 24 103.134.30.0/24 maxlen: 24 103.134.31.0/24 maxlen: 24 2404:5bc0::/32 maxlen: 32 2404:5bc0:10::/48 maxlen: 48 2404:5bc0:20::/48 maxlen: 48 2404:5bc0:30::/48 maxlen: 48 2404:5bc0:40::/48 maxlen: 48 2404:5bc0:50::/48 maxlen: 48 2404:5bc0:60::/48 maxlen: 48 2404:5bc0:70::/48 maxlen: 48 2404:5bc0:80::/48 maxlen: 48 2404:5bc0:90::/48 maxlen: 48 2404:5bc0:200::/40 maxlen: 40 2404:5bc0:200::/64 maxlen: 64 2404:5bc0:400::/48 maxlen: 48 2404:5bc0:401::/48 maxlen: 48 2404:5bc0:402::/48 maxlen: 48 2404:5bc0:403::/48 maxlen: 48 2404:5bc0:800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.crl rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2BFo3Z2W_gnkqpwW72JlRnLGcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4385 (0x1121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BA28, serialNumber=7F6045A376765BF82792AA705BBD899519CB19C7 Validity Not Before: Dec 15 18:09:32 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69404edc-8504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:17:62:fe:b6:7e:db:08:ec:e7:75:c6:e0:a9: 8d:68:73:d2:62:9a:a3:49:4f:30:7e:05:22:b4:59: 6c:23:4e:1a:61:fe:99:6c:56:90:35:3c:ce:db:e7: 45:49:d3:b7:06:ea:ee:f1:85:10:5d:05:b9:ac:08: 04:ab:cd:25:b3:57:72:28:cb:e3:12:f4:c1:d1:63: d1:b0:c9:89:03:df:44:45:3f:84:5d:a9:8b:c0:e4: 0f:a7:87:9b:5e:70:6f:4d:1f:cb:12:5f:31:b8:3d: 1c:cd:8d:48:47:d0:f7:04:bc:6c:a0:97:f2:95:d4: e0:c6:e9:b8:e3:80:2c:81:da:79:19:ea:64:83:b2: ae:98:ac:30:e3:f4:f6:36:3e:78:ab:3e:a0:88:4c: 3e:d4:0c:a0:fd:f4:0d:aa:6a:a8:96:f8:91:35:88: 1f:72:fc:71:57:74:9b:2f:c6:ad:44:76:62:86:80: 2b:6d:36:24:7c:60:bc:09:17:22:96:d9:66:a2:71: 0f:2c:f6:02:60:6e:c9:d0:1a:76:ae:fe:28:b9:da: 66:db:c5:b2:ae:f7:c4:bb:3c:05:7e:b2:56:68:4a: 9e:88:49:bf:6f:b8:fc:33:fe:3e:49:7c:6d:fd:85: 1a:39:dd:28:8f:51:44:be:a4:53:20:9c:fd:c5:a4: 41:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E2:E6:87:50:66:5B:5B:85:D9:72:11:4C:5E:3E:02:47:0F:E1:B1 X509v3 Authority Key Identifier: keyid:7F:60:45:A3:76:76:5B:F8:27:92:AA:70:5B:BD:89:95:19:CB:19:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2BFo3Z2W_gnkqpwW72JlRnLGcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/C90C4476FBA611E9BA00AB33C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.134.28.0/22 IPv6: 2404:5bc0::/32 Signature Algorithm: sha256WithRSAEncryption 5d:7d:25:1f:e2:8e:07:9a:b1:a9:ef:24:5b:2a:95:d4:47:69: 66:d2:d4:df:de:03:f8:ff:24:60:bc:c9:1f:f2:d3:cd:73:13: 87:0e:eb:fd:26:9e:3e:b8:06:e5:2e:30:a1:0b:a6:db:a5:de: 51:fd:03:5c:36:08:56:ad:f5:17:f4:bb:4b:a5:c7:87:82:d0: 7f:36:f5:b8:4f:0e:af:82:de:55:0d:8f:4b:25:e2:fe:ce:46: 54:98:09:6d:af:bd:86:80:fc:99:ec:e4:4c:15:72:80:18:c1: 81:4a:27:0e:55:f2:3e:cd:5f:d1:cb:92:9b:41:5a:9b:d4:55: 5b:07:9e:d0:a6:eb:de:6d:5b:cc:5a:fd:35:ed:98:41:98:89: d7:9e:55:1e:9a:0e:49:30:4b:9f:4b:96:1f:5b:f2:a3:ea:44: 3e:02:92:3d:0e:10:d4:fa:48:b9:05:a3:a3:8e:1e:8f:13:1f: d3:a8:a0:52:4e:c8:c6:8d:e1:88:c7:91:39:0e:db:7f:9a:2d: 1c:f0:a1:76:ce:20:55:d9:03:8a:40:d5:37:0f:9e:e6:b9:6f: ee:79:63:f9:ff:84:e7:7a:cc:06:99:bc:b1:dc:27:95:e7:98: 46:91:b2:10:17:87:fe:4c:4d:89:02:74:d6:a3:71:2f:a1:ee: 74:6d:29:a8 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICESEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJBMjgxMTAvBgNVBAUTKDdGNjA0NUEzNzY3NjVCRjgyNzkyQUE3MDVCQkQ4OTk1 MTlDQjE5QzcwHhcNMjUxMjE1MTgwOTMyWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTQwNGVkYy04NTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqBdi/rZ+2wjs53XG4KmNaHPSYpqjSU8wfgUitFlsI04aYf6ZbFaQNTzO2+dF SdO3Buru8YUQXQW5rAgEq80ls1dyKMvjEvTB0WPRsMmJA99ERT+EXamLwOQPp4eb XnBvTR/LEl8xuD0czY1IR9D3BLxsoJfyldTgxum444Asgdp5Gepkg7KumKww4/T2 Nj54qz6giEw+1Ayg/fQNqmqolviRNYgfcvxxV3SbL8atRHZihoArbTYkfGC8CRci ltlmonEPLPYCYG7J0Bp2rv4oudpm28WyrvfEuzwFfrJWaEqeiEm/b7j8M/4+SXxt /YUaOd0oj1FEvqRTIJz9xaRBEwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFNni5odQ ZltbhdlyEUxePgJHD+GxMB8GA1UdIwQYMBaAFH9gRaN2dlv4J5KqcFu9iZUZyxnH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkEyOC9BNDdEMjAyODI4 NTUxMUU5QUQzODExNTFDNEY5QUUwMi9mMkJGbzNaMldfZ25rcXB3VzcySmxSbkxH Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YyQkZvM1oyV19nbmtxcHdXNzJKbFJuTEdjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUJBMjgvQTQ3RDIwMjgyODU1MTFFOUFEMzgxMTUxQzRGOUFFMDIvQzkwQzQ0NzZG QkE2MTFFOUJBMDBBQjMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnhhwwDQQCAAIwBwMFACQEW8AwDQYJKoZIhvcNAQELBQAD ggEBAF19JR/ijgeasanvJFsqldRHaWbS1N/eA/j/JGC8yR/y081zE4cO6/0mnj64 BuUuMKELptul3lH9A1w2CFat9Rf0u0ulx4eC0H829bhPDq+C3lUNj0sl4v7ORlSY CW2vvYaA/Jns5EwVcoAYwYFKJw5V8j7NX9HLkptBWpvUVVsHntCm695tW8xa/TXt mEGYideeVR6aDkkwS59Llh9b8qPqRD4Ckj0OENT6SLkFo6OOHo8TH9OooFJOyMaN 4YjHkTkO23+aLRzwoXbOIFXZA4pA1TcPnua5b+55Y/n/hOd6zAaZvLHcJ5XnmEaR shAXh/5MTYkCdNajcS+h7nRtKag= -----END CERTIFICATE-----Generated at Sun Dec 21 14:14:34 2025 by rpki-client