This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/203FA37E750611ED95126872C4F9AE02.roa File: 203FA37E750611ED95126872C4F9AE02.roa (raw, json) Hash identifier: fm9S9mNo6Y2ygfq7yhWG4UNmDV8piD8pCbOO7u7749k= Subject key identifier: B7:9D:3D:41:F4:D1:DB:E2:F5:EF:7F:0B:2F:83:D3:7F:B0:55:0D:08 Certificate issuer: /CN=A91A014A/serialNumber=90BD1DF13A991C31F1184D511AF30316FC002102 Certificate serial: 0244 Authority key identifier: 90:BD:1D:F1:3A:99:1C:31:F1:18:4D:51:1A:F3:03:16:FC:00:21:02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kL0d8TqZHDHxGE1RGvMDFvwAIQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/203FA37E750611ED95126872C4F9AE02.roa Signing time: Wed 31 Dec 2025 01:21:31 +0000 ROA not before: Wed 31 Dec 2025 01:21:31 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 150438 IP address blocks: 103.99.187.0/24 maxlen: 24 2001:df1:91c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.crl rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kL0d8TqZHDHxGE1RGvMDFvwAIQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 01:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 580 (0x244) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A014A, serialNumber=90BD1DF13A991C31F1184D511AF30316FC002102 Validity Not Before: Dec 31 01:21:31 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69547a9b-4fa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ad:93:bf:41:1f:73:68:78:03:c4:a0:d6:50: 4e:87:93:28:25:d1:9a:42:ca:5e:04:57:96:27:85: 02:21:79:0b:f0:ef:62:d4:34:9e:67:44:64:8b:bb: 86:7d:be:f2:3f:0f:27:23:c3:40:62:ce:04:64:72: 79:0d:2d:f4:0c:be:69:f8:a1:ca:39:94:f5:d1:c1: 95:1e:81:3b:c1:39:2d:bf:60:3e:e9:71:2a:38:e8: 6a:c5:18:05:85:ee:4f:e7:3b:a1:f1:25:ca:0c:f5: 40:72:19:04:91:28:79:c4:12:30:26:d3:23:1f:8e: 20:8a:81:f7:f8:b8:20:1a:a7:4a:73:97:12:ac:59: 6f:c7:fd:b8:f5:4d:2d:e8:07:b4:a9:36:01:55:fe: 83:83:8a:24:f4:ac:0c:2b:96:33:6f:b9:bb:c2:f8: 8f:03:1e:b3:9e:76:cb:c6:d2:8a:1e:57:99:a0:69: 5f:d5:3b:8d:b0:8f:a2:41:60:9d:b1:73:8b:d2:56: 8e:43:dc:0f:2a:9a:4f:3f:ec:ae:54:40:44:9a:cf: cf:66:97:44:4b:f4:aa:89:58:ac:9b:f3:75:e3:13: 65:34:1f:3a:36:49:27:84:01:ad:c2:10:90:8b:84: 4a:2a:ca:a8:18:d9:f4:7b:f3:2a:a1:58:45:2d:c5: 00:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:9D:3D:41:F4:D1:DB:E2:F5:EF:7F:0B:2F:83:D3:7F:B0:55:0D:08 X509v3 Authority Key Identifier: keyid:90:BD:1D:F1:3A:99:1C:31:F1:18:4D:51:1A:F3:03:16:FC:00:21:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kL0d8TqZHDHxGE1RGvMDFvwAIQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/203FA37E750611ED95126872C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.99.187.0/24 IPv6: 2001:df1:91c0::/48 Signature Algorithm: sha256WithRSAEncryption b4:ef:ab:2b:e1:6d:ec:87:c2:d2:8a:70:a3:e8:17:9d:45:a3: 39:f9:04:e1:27:46:fc:cb:b5:67:b8:95:98:57:e9:c5:75:7e: 12:29:f8:ca:af:c2:91:6c:05:4f:11:f2:78:12:eb:b3:d9:a3: 34:f8:15:86:9f:b5:b4:a3:e5:5f:be:7d:0c:f6:79:81:2a:87: ac:0b:59:2d:5b:35:67:f8:7d:b0:33:84:24:44:8d:e6:a9:af: dd:a3:e6:1b:0c:88:f9:1c:61:52:d9:12:96:8f:eb:5f:bd:3f: 8c:26:ce:a7:52:0d:cb:58:7f:fd:9d:1f:2a:78:a6:81:2f:df: c7:dd:87:80:8a:d7:4c:e9:d6:6f:b3:ac:2b:87:6e:b7:ef:48: 63:97:cb:14:08:ba:cd:d0:bb:11:d2:c5:1e:b4:fb:3e:25:d3: 73:c9:1d:a9:e6:2a:bd:d6:e8:97:89:33:69:d7:2f:4e:39:ff: b6:6d:e4:b0:8f:27:ee:49:4a:30:91:38:ce:2d:26:08:71:bd: b1:73:e4:c6:a9:1d:16:b7:e5:c5:f9:81:c3:77:a8:67:2e:61: 44:a6:7a:78:f1:66:b2:cc:93:dd:a6:29:a3:aa:39:fb:c4:71: c6:81:da:b9:e6:b3:d3:be:83:8c:af:d6:10:a6:99:33:26:e0: b5:02:5b:e6 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QTAxNEExMTAvBgNVBAUTKDkwQkQxREYxM0E5OTFDMzFGMTE4NEQ1MTFBRjMwMzE2 RkMwMDIxMDIwHhcNMjUxMjMxMDEyMTMxWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU0N2E5Yi00ZmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAza2Tv0Efc2h4A8Sg1lBOh5MoJdGaQspeBFeWJ4UCIXkL8O9i1DSeZ0Rki7uG fb7yPw8nI8NAYs4EZHJ5DS30DL5p+KHKOZT10cGVHoE7wTktv2A+6XEqOOhqxRgF he5P5zuh8SXKDPVAchkEkSh5xBIwJtMjH44gioH3+LggGqdKc5cSrFlvx/249U0t 6Ae0qTYBVf6Dg4ok9KwMK5Yzb7m7wviPAx6znnbLxtKKHleZoGlf1TuNsI+iQWCd sXOL0laOQ9wPKppPP+yuVEBEms/PZpdES/SqiVism/N14xNlNB86NkknhAGtwhCQ i4RKKsqoGNn0e/MqoVhFLcUAsQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFLedPUH0 0dvi9e9/Cy+D03+wVQ0IMB8GA1UdIwQYMBaAFJC9HfE6mRwx8RhNURrzAxb8ACEC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDE0QS9DQzA3REFCNjc0 RkYxMUVEQUI5QzkwNzVDNEY5QUUwMi9rTDBkOFRxWkhESHhHRTFSR3ZNREZ2d0FJ UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tMMGQ4VHFaSERIeEdFMVJHdk1ERnZ3QUlRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTAxNEEvQ0MwN0RBQjY3NEZGMTFFREFCOUM5MDc1QzRGOUFFMDIvMjAzRkEzN0U3 NTA2MTFFRDk1MTI2ODcyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnY7swDwQCAAIwCQMHACABDfGRwDANBgkqhkiG9w0BAQsF AAOCAQEAtO+rK+Ft7IfC0opwo+gXnUWjOfkE4SdG/Mu1Z7iVmFfpxXV+Ein4yq/C kWwFTxHyeBLrs9mjNPgVhp+1tKPlX759DPZ5gSqHrAtZLVs1Z/h9sDOEJESN5qmv 3aPmGwyI+RxhUtkSlo/rX70/jCbOp1INy1h//Z0fKnimgS/fx92HgIrXTOnWb7Os K4dut+9IY5fLFAi6zdC7EdLFHrT7PiXTc8kdqeYqvdbol4kzadcvTjn/tm3ksI8n 7klKMJE4zi0mCHG9sXPkxqkdFrflxfmBw3eoZy5hRKZ6ePFmssyT3aYpo6o5+8Rx xoHaueaz076DjK/WEKaZMybgtQJb5g== -----END CERTIFICATE-----Generated at Wed Dec 31 10:26:25 2025 by rpki-client