This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/67921062E4A311F0B966D2274B6F56BC.roa File: 67921062E4A311F0B966D2274B6F56BC.roa (raw, json) Hash identifier: t+d97wIOWysUeZm6Mwn1/921As4Ai36VDQVdT/Ej2VI= Subject key identifier: 8A:2D:63:A4:CA:F1:7A:A2:98:73:88:5D:CF:8D:1F:C9:8A:B8:A8:09 Certificate issuer: /CN=A91A6943/serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Certificate serial: 0A59 Authority key identifier: 0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/67921062E4A311F0B966D2274B6F56BC.roa Signing time: Mon 29 Dec 2025 10:44:52 +0000 ROA not before: Mon 29 Dec 2025 10:44:52 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 132285 IP address blocks: 103.235.76.0/24 maxlen: 24 103.235.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Jan 2026 19:20:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2649 (0xa59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6943, serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Validity Not Before: Dec 29 10:44:52 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69525ba3-c3f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0f:53:2a:c0:19:ed:6f:01:77:6c:db:66:a1: 5f:f8:4a:e6:df:86:5d:f9:7d:3d:00:1c:55:e3:d7: b4:95:73:73:0a:d1:27:b6:62:4a:94:b3:98:6e:d4: c2:62:11:e4:c1:0f:de:a4:b6:27:5f:f8:12:0c:9c: c9:b9:00:93:03:d6:af:ab:20:4c:6d:e9:83:1d:85: eb:1d:ec:22:e6:7f:8b:9c:41:d9:da:1f:9c:a3:d1: c6:10:a9:5d:69:84:a4:a6:73:5e:9a:1c:52:0a:13: ba:05:c7:ca:e4:a1:8b:c1:b0:33:e0:c8:a1:66:5f: 8c:a3:3a:67:bf:24:c8:b9:cf:b9:fa:1f:90:23:b4: ac:b9:f9:53:b3:d7:88:2d:63:72:96:bc:2d:57:f5: c0:df:4b:42:6b:97:b7:38:9d:de:1a:74:18:47:c5: e5:87:e6:71:48:2b:ef:45:f3:96:40:fc:fd:43:ba: f7:ed:cb:7e:c4:d6:bf:cb:80:ec:48:10:bc:0f:d4: 25:f5:4e:20:d7:f9:7d:7f:01:ca:4c:10:4a:df:86: fe:4e:40:0c:03:67:bd:b6:04:cb:f7:ef:2a:c6:cb: 56:8d:59:73:ce:77:48:47:8b:3c:80:78:bb:d9:45: 93:a0:d6:9b:8d:db:55:20:38:d3:65:84:b6:5c:c2: 4b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:2D:63:A4:CA:F1:7A:A2:98:73:88:5D:CF:8D:1F:C9:8A:B8:A8:09 X509v3 Authority Key Identifier: keyid:0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/67921062E4A311F0B966D2274B6F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.235.76.0/24 103.235.79.0/24 Signature Algorithm: sha256WithRSAEncryption 14:fa:1b:b7:81:6a:f5:95:62:d9:cc:09:a8:42:15:02:3d:da: 75:1e:36:50:8a:00:02:13:03:b7:a2:52:96:b1:8c:a3:55:44: 53:15:e4:3f:0f:e3:40:a9:89:31:bc:82:f3:b3:7d:17:a4:2b: 01:d2:15:27:13:e3:ed:48:f4:00:4e:18:32:f5:b3:5a:08:66: 63:e5:58:05:a7:62:fc:93:a7:0b:86:d8:18:0f:af:73:79:bf: 30:77:7e:27:96:4c:1d:03:72:04:f5:2e:7e:7d:e9:ae:43:d8: b8:1a:d9:9b:c2:d0:e5:9d:6b:b9:8e:52:93:45:09:cd:d9:77: f5:a6:9a:ee:e2:f0:97:ed:6c:46:36:cb:01:6c:23:0b:c4:27: 54:99:c2:c6:45:08:01:54:19:56:24:1a:3d:dc:28:34:41:95: 9b:0a:d0:e9:a5:8b:db:5e:ed:ea:b3:36:92:18:14:63:c2:65: da:03:3c:79:46:a4:d8:8e:17:1e:50:26:25:88:ac:84:e7:2a: 29:66:f6:50:2f:f5:e8:18:c1:50:24:03:4f:08:26:5f:68:d0: f2:1d:26:c0:66:27:9b:4e:68:49:01:a4:5e:8a:d4:ce:55:b6: d6:e1:02:08:f3:ae:b2:cf:78:f0:2d:7f:c4:c5:c2:b7:40:54: 75:ca:1b:e9 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICClkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY5NDMxMTAvBgNVBAUTKDBBQjk5RjUyQzlBRDlCRTBCOUMwNDQ3MENGQjFCNkMy MzYwRkQwRjUwHhcNMjUxMjI5MTA0NDUyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDDA02OTUyNWJhMy1jM2Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwg9TKsAZ7W8Bd2zbZqFf+Erm34Zd+X09ABxV49e0lXNzCtEntmJKlLOYbtTC YhHkwQ/epLYnX/gSDJzJuQCTA9avqyBMbemDHYXrHewi5n+LnEHZ2h+co9HGEKld aYSkpnNemhxSChO6BcfK5KGLwbAz4MihZl+MozpnvyTIuc+5+h+QI7SsuflTs9eI LWNylrwtV/XA30tCa5e3OJ3eGnQYR8Xlh+ZxSCvvRfOWQPz9Q7r37ct+xNa/y4Ds SBC8D9Ql9U4g1/l9fwHKTBBK34b+TkAMA2e9tgTL9+8qxstWjVlzzndIR4s8gHi7 2UWToNabjdtVIDjTZYS2XMJL3QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFIotY6TK 8XqimHOIXc+NH8mKuKgJMB8GA1UdIwQYMBaAFAq5n1LJrZvgucBEcM+xtsI2D9D1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjk0My9CNzE4MTE2ODhE NTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0tQzV3RVJ3ejdHMndqWVAw UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NybWZVc210bS1DNXdFUnd6N0cyd2pZUDBQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTY5NDMvQjcxODExNjg4RDUxMTFFQUI4QjI2Mzg0QzRGOUFFMDIvNjc5MjEwNjJF NEEzMTFGMEI5NjZEMjI3NEI2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABn60wDBABn608wDQYJKoZIhvcNAQELBQADggEBABT6G7eB avWVYtnMCahCFQI92nUeNlCKAAITA7eiUpaxjKNVRFMV5D8P40CpiTG8gvOzfRek KwHSFScT4+1I9ABOGDL1s1oIZmPlWAWnYvyTpwuG2BgPr3N5vzB3fieWTB0DcgT1 Ln596a5D2Lga2ZvC0OWda7mOUpNFCc3Zd/Wmmu7i8JftbEY2ywFsIwvEJ1SZwsZF CAFUGVYkGj3cKDRBlZsK0Omli9te7eqzNpIYFGPCZdoDPHlGpNiOFx5QJiWIrITn Kilm9lAv9egYwVAkA08IJl9o0PIdJsBmJ5tOaEkBpF6K1M5VttbhAgjzrrLPePAt f8TFwrdAVHXKG+k= -----END CERTIFICATE-----Generated at Thu Jan 8 11:03:28 2026 by rpki-client