This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/919148B2169911EF9DA1992BC4F9AE02.roa File: 919148B2169911EF9DA1992BC4F9AE02.roa (raw, json) Hash identifier: eq/kGWgomEiw4pMKrPya4BqnBXJsYemvIJbRjqP6JSw= Subject key identifier: D0:9C:65:1A:96:1F:F2:0A:1F:30:10:DF:43:D1:1B:5D:11:C5:20:85 Certificate issuer: /CN=A917E968/serialNumber=2E052B370113312AA9883D97EDAD230CA1662162 Certificate serial: FA Authority key identifier: 2E:05:2B:37:01:13:31:2A:A9:88:3D:97:ED:AD:23:0C:A1:66:21:62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/919148B2169911EF9DA1992BC4F9AE02.roa Signing time: Wed 03 Sep 2025 05:55:18 +0000 ROA not before: Wed 03 Sep 2025 05:55:18 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 150133 IP address blocks: 103.191.166.0/23 maxlen: 24 2400:9720::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.crl rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 03:46:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E968, serialNumber=2E052B370113312AA9883D97EDAD230CA1662162 Validity Not Before: Sep 3 05:55:18 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b7d845-f5ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e6:fd:3b:f7:14:2d:c2:d1:a2:56:28:5e:b7: a9:f4:d1:d5:61:48:1f:b8:a6:3a:40:9a:ae:61:4a: 2f:3e:97:9a:93:8f:0c:71:d0:84:67:10:bc:e5:1e: e7:1f:d2:71:d8:4e:45:51:4c:ab:38:e1:2c:7c:86: 16:d4:b5:a2:64:cb:c3:9c:11:65:fd:6a:98:5d:47: 87:98:17:dc:3b:98:d5:fa:08:68:94:ea:97:ce:d1: 15:6e:c2:7a:d2:46:57:5e:fd:bc:5c:d4:fe:65:80: 81:3f:05:8c:ce:e8:4d:49:27:54:7c:29:4c:6c:12: 15:52:b5:e3:d6:74:62:57:2f:1a:18:73:40:f8:71: 88:76:8d:c7:bc:48:d0:ad:b2:ac:11:e6:91:46:43: b2:8b:31:68:8d:50:cb:7c:5f:eb:5d:84:bb:76:02: a6:91:24:42:06:f0:05:f6:0b:43:8e:d1:4b:d4:d3: b5:45:63:f9:2d:53:e9:33:62:9b:f8:36:5a:95:6e: 06:0d:f1:36:88:2d:a1:22:e2:b1:57:de:5a:f7:7b: 86:27:e8:2b:b9:5c:a3:af:5d:bf:a4:af:32:76:4f: 24:4b:a8:ee:30:ef:9d:5c:5f:d9:e9:27:6f:6c:4f: a6:bb:73:64:84:3d:05:b2:12:a2:88:d3:fc:a6:cb: 8e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:9C:65:1A:96:1F:F2:0A:1F:30:10:DF:43:D1:1B:5D:11:C5:20:85 X509v3 Authority Key Identifier: keyid:2E:05:2B:37:01:13:31:2A:A9:88:3D:97:ED:AD:23:0C:A1:66:21:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/919148B2169911EF9DA1992BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.191.166.0/23 IPv6: 2400:9720::/32 Signature Algorithm: sha256WithRSAEncryption d7:f7:4c:96:80:a4:db:23:0f:c3:0a:1e:7c:49:3a:26:59:b0: ad:d2:b5:75:a8:62:52:a0:da:2c:73:a3:81:7d:c9:30:2a:1a: c1:ec:46:67:8f:8e:98:35:c7:99:c2:3e:93:56:a6:8a:1b:81: be:9e:3c:4e:0a:24:95:9e:a5:42:b1:a8:10:b9:0b:28:d8:b6: 1f:88:00:32:45:a5:1b:cd:cc:ab:23:7e:96:36:7e:94:34:43: 8c:16:9c:44:cf:5a:1a:6c:ba:19:48:05:60:f9:f1:22:f2:b4: a7:56:db:fc:17:64:62:10:c9:71:21:99:9d:c5:81:ca:23:c1: ca:c4:bd:0a:10:28:08:58:6d:8d:ba:c3:4f:43:29:fe:b9:5f: e7:e2:42:cb:98:83:75:f7:cd:c6:22:97:8c:21:b1:66:18:dd: 03:b8:99:fc:8a:30:9b:c3:81:96:8a:5b:15:f7:4b:c1:45:7d: 50:64:c3:88:b3:e0:bf:2c:e1:e3:41:a9:82:e3:73:82:74:61: c9:c1:9a:e7:27:08:e0:b1:8e:53:df:54:e1:cb:f9:c3:ad:5c: 2e:07:05:09:c3:3a:34:a0:4f:56:c3:49:52:36:71:86:36:bf: b8:c6:5e:27:85:46:35:9f:de:37:c5:ae:53:7f:39:ee:6c:54: da:4c:06:90 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U5NjgxMTAvBgNVBAUTKDJFMDUyQjM3MDExMzMxMkFBOTg4M0Q5N0VEQUQyMzBD QTE2NjIxNjIwHhcNMjUwOTAzMDU1NTE4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI3ZDg0NS1mNWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuub9O/cULcLRolYoXrep9NHVYUgfuKY6QJquYUovPpeak48McdCEZxC85R7n H9Jx2E5FUUyrOOEsfIYW1LWiZMvDnBFl/WqYXUeHmBfcO5jV+gholOqXztEVbsJ6 0kZXXv28XNT+ZYCBPwWMzuhNSSdUfClMbBIVUrXj1nRiVy8aGHNA+HGIdo3HvEjQ rbKsEeaRRkOyizFojVDLfF/rXYS7dgKmkSRCBvAF9gtDjtFL1NO1RWP5LVPpM2Kb +DZalW4GDfE2iC2hIuKxV95a93uGJ+gruVyjr12/pK8ydk8kS6juMO+dXF/Z6Sdv bE+mu3NkhD0FshKiiNP8psuOFwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFNCcZRqW H/IKHzAQ30PRG10RxSCFMB8GA1UdIwQYMBaAFC4FKzcBEzEqqYg9l+2tIwyhZiFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTk2OC8yQkEyRUMwRTE2 OTkxMUVGQkE0MEM5MkFDNEY5QUUwMi9MZ1VyTndFVE1TcXBpRDJYN2EwakRLRm1J V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xnVXJOd0VUTVNxcGlEMlg3YTBqREtGbUlXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0U5NjgvMkJBMkVDMEUxNjk5MTFFRkJBNDBDOTJBQzRGOUFFMDIvOTE5MTQ4QjIx Njk5MTFFRjlEQTE5OTJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnv6YwDQQCAAIwBwMFACQAlyAwDQYJKoZIhvcNAQELBQAD ggEBANf3TJaApNsjD8MKHnxJOiZZsK3StXWoYlKg2ixzo4F9yTAqGsHsRmePjpg1 x5nCPpNWpoobgb6ePE4KJJWepUKxqBC5CyjYth+IADJFpRvNzKsjfpY2fpQ0Q4wW nETPWhpsuhlIBWD58SLytKdW2/wXZGIQyXEhmZ3FgcojwcrEvQoQKAhYbY26w09D Kf65X+fiQsuYg3X3zcYil4whsWYY3QO4mfyKMJvDgZaKWxX3S8FFfVBkw4iz4L8s 4eNBqYLjc4J0YcnBmucnCOCxjlPfVOHL+cOtXC4HBQnDOjSgT1bDSVI2cYY2v7jG XieFRjWf3jfFrlN/Oe5sVNpMBpA= -----END CERTIFICATE-----Generated at Fri Dec 19 19:10:07 2025 by rpki-client