This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/E3903588DA3311F082FD85DA8AD3641D.roa File: E3903588DA3311F082FD85DA8AD3641D.roa (raw, json) Hash identifier: EIkvBGNH5qK3+2nje6yCtU9+YLtk6KnHnSU6Aq8nm+k= Subject key identifier: CB:2D:A8:17:3F:E1:2F:E6:AE:EA:10:D3:BB:24:A7:B9:1E:B1:C6:99 Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Certificate serial: 0CBC Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/E3903588DA3311F082FD85DA8AD3641D.roa Signing time: Tue 16 Dec 2025 04:01:24 +0000 ROA not before: Tue 16 Dec 2025 04:01:24 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 142622 IP address blocks: 43.249.241.0/24 maxlen: 24 43.251.187.0/24 maxlen: 24 45.124.60.0/24 maxlen: 24 45.124.62.0/24 maxlen: 24 103.7.116.0/24 maxlen: 24 103.12.53.0/24 maxlen: 24 103.12.54.0/24 maxlen: 24 103.13.18.0/24 maxlen: 24 103.24.160.0/24 maxlen: 24 103.24.161.0/24 maxlen: 24 103.24.162.0/24 maxlen: 24 103.244.209.0/24 maxlen: 24 103.244.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 18:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3260 (0xcbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Validity Not Before: Dec 16 04:01:24 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=6940d994-28d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b7:a3:82:9f:3a:4a:81:bf:a9:cb:d8:74:04: e2:fa:a0:69:e1:9e:b3:c3:97:16:25:95:be:1c:9d: 66:0f:92:a4:d7:30:3b:67:40:e2:d6:19:49:fe:9c: b5:31:a7:d4:61:b5:a6:03:fe:11:7c:a6:79:57:eb: 6a:7a:8a:67:4f:b3:80:0c:11:5e:ea:18:be:b0:89: 55:fe:30:7c:02:29:79:62:c7:61:f0:f3:a2:0f:2e: 5c:a2:c0:7f:53:db:06:fc:f7:c6:8f:e5:fa:4a:c6: da:fc:11:13:a5:29:95:78:af:d9:42:15:34:51:46: fb:c4:67:8f:df:99:89:89:ab:04:0c:57:29:f9:43: 2c:f7:a9:9d:65:6c:a6:8e:23:53:6d:c8:f1:fc:c6: 99:db:87:37:21:76:b9:d5:c5:44:0d:ed:c4:ac:56: f4:e5:03:33:fd:0f:b5:ad:83:00:f7:55:7b:f8:93: 29:f6:7f:b2:fe:65:f5:a6:3d:3e:7e:8c:93:e8:ab: f5:17:1b:e7:c8:e0:b6:d7:51:bb:4b:d1:db:74:ea: 3e:c5:1f:6c:8a:b6:4b:dd:e1:db:cd:8d:15:e1:65: 22:05:6e:60:af:d1:87:d5:bb:30:d8:12:e1:e1:04: 41:2e:ee:c9:92:a3:4e:a4:fb:7e:8a:98:c3:5b:b8: 11:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:2D:A8:17:3F:E1:2F:E6:AE:EA:10:D3:BB:24:A7:B9:1E:B1:C6:99 X509v3 Authority Key Identifier: keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/E3903588DA3311F082FD85DA8AD3641D.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.249.241.0/24 43.251.187.0/24 45.124.60.0/24 45.124.62.0/24 103.7.116.0/24 103.12.53.0-103.12.54.255 103.13.18.0/24 103.24.160.0-103.24.162.255 103.244.209.0-103.244.210.255 Signature Algorithm: sha256WithRSAEncryption be:4f:28:5a:c9:1d:14:f0:3a:fc:10:94:24:97:3f:fa:7d:a6: 20:16:ef:c8:78:62:51:ca:bf:3e:04:71:28:02:86:23:1b:c5: e4:11:b0:ee:d9:35:86:5a:73:f7:39:5f:2c:38:2c:4a:6c:f6: ad:7f:28:79:46:98:d6:07:1e:45:28:21:95:77:34:67:9e:c3: 0e:c3:3d:c8:d2:84:85:ab:48:75:b5:f2:35:a8:38:d6:e9:3c: a3:c2:fe:3f:d0:cb:52:66:b0:bf:00:18:91:71:f8:1c:df:8b: 03:72:c6:7a:03:36:c5:21:b6:35:7d:82:b9:b2:3b:af:7e:93: b0:5d:4b:08:7d:88:14:ac:6c:50:c1:3f:17:43:64:54:29:99: ee:e5:02:f9:db:33:cd:60:f3:81:19:6d:e7:38:c2:ab:d6:4a: 67:4d:4a:65:30:84:7f:80:cb:ed:79:37:f2:a9:cf:f8:c4:2f: 85:60:57:55:e5:0b:76:c8:b7:b6:b0:21:c3:6b:41:bd:06:55: 86:03:a5:05:5e:16:fc:d1:dd:39:ea:ef:87:c8:55:cf:b9:08: 00:35:c6:37:9b:a8:12:58:04:5a:af:53:5f:c4:1b:e4:28:8a: a0:04:b8:ea:3a:d6:8d:3d:b5:ee:c0:45:8f:91:ec:80:14:55: bd:59:03:52 -----BEGIN CERTIFICATE----- MIIFuTCCBKGgAwIBAgICDLwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG NjlDQkE4NDYwHhcNMjUxMjE2MDQwMTI0WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDDA02OTQwZDk5NC0yOGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Lejgp86SoG/qcvYdATi+qBp4Z6zw5cWJZW+HJ1mD5Kk1zA7Z0Di1hlJ/py1 MafUYbWmA/4RfKZ5V+tqeopnT7OADBFe6hi+sIlV/jB8Ail5Ysdh8POiDy5cosB/ U9sG/PfGj+X6Ssba/BETpSmVeK/ZQhU0UUb7xGeP35mJiasEDFcp+UMs96mdZWym jiNTbcjx/MaZ24c3IXa51cVEDe3ErFb05QMz/Q+1rYMA91V7+JMp9n+y/mX1pj0+ foyT6Kv1FxvnyOC211G7S9HbdOo+xR9sirZL3eHbzY0V4WUiBW5gr9GH1bsw2BLh 4QRBLu7JkqNOpPt+ipjDW7gR+wIDAQABo4IC3TCCAtkwHQYDVR0OBBYEFMstqBc/ 4S/mruoQ07skp7kescaZMB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ0MDIvRkRCRkQwMjAzRDk2MTFFQThFQTA3MDJGQzRGOUFFMDIvRTM5MDM1ODhE QTMzMTFGMDgyRkQ4NURBOEFEMzY0MUQucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwZwYIKwYBBQUHAQcBAf8E WDBWMFQEAgABME4DBAAr+fEDBAAr+7sDBAAtfDwDBAAtfD4DBABnB3QwDAMEAGcM NQMEAGcMNgMEAGcNEjAMAwQFZxigAwQAZxiiMAwDBABn9NEDBABn9NIwDQYJKoZI hvcNAQELBQADggEBAL5PKFrJHRTwOvwQlCSXP/p9piAW78h4YlHKvz4EcSgChiMb xeQRsO7ZNYZac/c5Xyw4LEps9q1/KHlGmNYHHkUoIZV3NGeeww7DPcjShIWrSHW1 8jWoONbpPKPC/j/Qy1JmsL8AGJFx+BzfiwNyxnoDNsUhtjV9grmyO69+k7BdSwh9 iBSsbFDBPxdDZFQpme7lAvnbM81g84EZbec4wqvWSmdNSmUwhH+Ay+15N/Kpz/jE L4VgV1XlC3bIt7awIcNrQb0GVYYDpQVeFvzR3Tnq74fIVc+5CAA1xjebqBJYBFqv U1/EG+QoiqAEuOo61o09te7ARY+R7IAUVb1ZA1I= -----END CERTIFICATE-----Generated at Sat Dec 20 10:30:44 2025 by rpki-client