This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919676F/FE49FAC2D3A011ED814C4C18C4F9AE02/D277F83CD3A411ED8C51160FC4F9AE02.roa File: D277F83CD3A411ED8C51160FC4F9AE02.roa (raw, json) Hash identifier: svqT+ztwVAcsLzuBMu/xSdAzmsSO3QMnOMcc+rCxEvg= Subject key identifier: 05:63:F8:D1:22:89:6C:B8:55:8E:07:09:AB:71:6C:62:94:E3:60:11 Certificate issuer: /CN=A919676F/serialNumber=EBBA143B28663718CD8C7DA3F631009A9804EE5F Certificate serial: 0205 Authority key identifier: EB:BA:14:3B:28:66:37:18:CD:8C:7D:A3:F6:31:00:9A:98:04:EE:5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67oUOyhmNxjNjH2j9jEAmpgE7l8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919676F/FE49FAC2D3A011ED814C4C18C4F9AE02/D277F83CD3A411ED8C51160FC4F9AE02.roa Signing time: Sun 21 Dec 2025 02:23:12 +0000 ROA not before: Sun 21 Dec 2025 02:23:11 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 137880 IP address blocks: 103.157.90.0/23 maxlen: 23 103.157.90.0/24 maxlen: 24 103.157.91.0/24 maxlen: 24 2406:9cc0::/32 maxlen: 32 2406:9cc0:1::/48 maxlen: 48 2406:9cc0:5::/48 maxlen: 48 2406:9cc0:100::/48 maxlen: 48 2406:9cc0:200::/48 maxlen: 48 2406:9cc0:fce::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919676F/FE49FAC2D3A011ED814C4C18C4F9AE02/67oUOyhmNxjNjH2j9jEAmpgE7l8.crl rsync://rpki.apnic.net/member_repository/A919676F/FE49FAC2D3A011ED814C4C18C4F9AE02/67oUOyhmNxjNjH2j9jEAmpgE7l8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67oUOyhmNxjNjH2j9jEAmpgE7l8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:29:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 517 (0x205) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919676F, serialNumber=EBBA143B28663718CD8C7DA3F631009A9804EE5F Validity Not Before: Dec 21 02:23:11 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69475a0f-e881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8e:ad:7e:ad:d3:a1:09:e7:19:e3:3a:b6:4b: 27:d5:67:d9:17:14:d0:c0:ec:34:66:ea:d3:7e:cb: 9b:74:30:0f:45:ad:ae:c9:89:0a:21:31:ce:c5:89: 13:4e:a1:ca:e4:61:10:5d:4f:13:db:75:66:0a:d1: 20:68:2d:36:1b:4d:e8:be:52:e7:98:2d:b9:cf:ef: 56:f8:22:87:82:58:e0:93:48:43:37:2b:52:6c:33: 97:c5:3b:f7:3b:b8:ea:14:3d:04:0e:28:97:ad:43: 6f:b1:0c:bd:0b:ad:e7:31:ee:da:96:14:a6:88:e4: 9f:38:65:68:1d:36:b5:72:e3:f0:a7:9a:8e:a4:7e: de:e6:f4:a2:ca:ad:b1:5e:93:2c:77:7b:1f:46:3d: 17:f5:a4:57:c4:24:41:65:df:74:d0:a0:4c:ce:c7: f0:b4:a8:e1:f0:30:b1:a3:a2:37:89:51:de:1a:4a: 39:b9:95:61:e1:16:79:83:5b:6d:f6:21:7a:62:a3: af:79:d0:67:0c:5c:52:2f:f9:72:5a:ba:08:17:d9: bd:17:26:c9:7d:68:d6:a7:cf:97:52:ca:21:35:5f: cb:3c:ef:59:a4:a1:06:d7:5b:f6:9c:cf:ac:ae:d3: 17:f7:47:6c:93:bc:b6:4c:9e:ba:4b:1d:87:77:92: 61:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:63:F8:D1:22:89:6C:B8:55:8E:07:09:AB:71:6C:62:94:E3:60:11 X509v3 Authority Key Identifier: keyid:EB:BA:14:3B:28:66:37:18:CD:8C:7D:A3:F6:31:00:9A:98:04:EE:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919676F/FE49FAC2D3A011ED814C4C18C4F9AE02/67oUOyhmNxjNjH2j9jEAmpgE7l8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67oUOyhmNxjNjH2j9jEAmpgE7l8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919676F/FE49FAC2D3A011ED814C4C18C4F9AE02/D277F83CD3A411ED8C51160FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.157.90.0/23 IPv6: 2406:9cc0::/32 Signature Algorithm: sha256WithRSAEncryption 56:69:ec:3e:ee:cd:90:41:9f:f0:c3:e7:ea:de:c2:92:ac:57: 22:22:d3:75:b6:0f:e4:35:fb:ed:f7:b9:83:77:72:0d:81:6d: 0e:8a:62:cd:ae:40:20:1f:db:24:85:95:d9:8f:8c:a4:ba:5a: 9f:b8:65:9a:ff:6b:f2:0d:86:09:0e:37:13:45:fd:af:5e:fd: 4a:21:1f:23:98:42:d0:8e:38:c4:47:b8:8e:00:a0:4d:97:05: d6:e6:70:ca:92:eb:29:d9:9d:6a:67:28:85:7b:03:b3:de:21: f2:7c:67:5b:e1:1a:0f:e9:49:ba:41:1f:15:db:89:e2:9f:d6: 93:25:67:6e:6b:8e:bc:ec:fe:be:42:a0:ac:2c:13:c6:fa:f3: 2f:89:45:90:05:fb:16:43:b9:07:0a:b7:f2:43:27:cd:c6:93: 42:4a:20:cb:02:a2:45:32:0f:f7:82:1b:2a:06:71:38:5e:f9: b5:4e:0f:01:ee:5d:21:f5:d4:0c:71:a2:d4:42:5e:b5:24:f9: 44:63:7a:2f:a1:9b:11:e6:82:2a:3f:da:5e:aa:2d:9c:a3:ed: 12:2b:62:55:d6:6d:8d:81:1b:a7:c3:65:e9:ca:cb:ea:ab:d0: 37:23:5b:49:12:f9:c2:41:0b:a8:a9:8a:4b:3b:2f:64:1b:bf: 7d:8c:88:ca -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx OTY3NkYxMTAvBgNVBAUTKEVCQkExNDNCMjg2NjM3MThDRDhDN0RBM0Y2MzEwMDlB OTgwNEVFNUYwHhcNMjUxMjIxMDIyMzExWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDDA02OTQ3NWEwZi1lODgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs46tfq3ToQnnGeM6tksn1WfZFxTQwOw0ZurTfsubdDAPRa2uyYkKITHOxYkT TqHK5GEQXU8T23VmCtEgaC02G03ovlLnmC25z+9W+CKHgljgk0hDNytSbDOXxTv3 O7jqFD0EDiiXrUNvsQy9C63nMe7alhSmiOSfOGVoHTa1cuPwp5qOpH7e5vSiyq2x XpMsd3sfRj0X9aRXxCRBZd900KBMzsfwtKjh8DCxo6I3iVHeGko5uZVh4RZ5g1tt 9iF6YqOvedBnDFxSL/lyWroIF9m9FybJfWjWp8+XUsohNV/LPO9ZpKEG11v2nM+s rtMX90dsk7y2TJ66Sx2Hd5JhvwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFAVj+NEi iWy4VY4HCatxbGKU42ARMB8GA1UdIwQYMBaAFOu6FDsoZjcYzYx9o/YxAJqYBO5f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Njc2Ri9GRTQ5RkFDMkQz QTAxMUVEODE0QzRDMThDNEY5QUUwMi82N29VT3lobU54ak5qSDJqOWpFQW1wZ0U3 bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY3b1VPeWhtTnhqTmpIMmo5akVBbXBnRTdsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTY3NkYvRkU0OUZBQzJEM0EwMTFFRDgxNEM0QzE4QzRGOUFFMDIvRDI3N0Y4M0NE M0E0MTFFRDhDNTExNjBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnnVowDQQCAAIwBwMFACQGnMAwDQYJKoZIhvcNAQELBQAD ggEBAFZp7D7uzZBBn/DD5+rewpKsVyIi03W2D+Q1++33uYN3cg2BbQ6KYs2uQCAf 2ySFldmPjKS6Wp+4ZZr/a/INhgkONxNF/a9e/UohHyOYQtCOOMRHuI4AoE2XBdbm cMqS6ynZnWpnKIV7A7PeIfJ8Z1vhGg/pSbpBHxXbieKf1pMlZ25rjrzs/r5CoKws E8b68y+JRZAF+xZDuQcKt/JDJ83Gk0JKIMsCokUyD/eCGyoGcThe+bVODwHuXSH1 1AxxotRCXrUk+URjei+hmxHmgio/2l6qLZyj7RIrYlXWbY2BG6fDZenKy+qr0Dcj W0kS+cJBC6ipiks7L2Qbv32MiMo= -----END CERTIFICATE-----Generated at Wed Dec 24 18:03:16 2025 by rpki-client