This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/8C9194A6D50711F0A051830FC4F9AE02.roa File: 8C9194A6D50711F0A051830FC4F9AE02.roa (raw, json) Hash identifier: BMrQfEFUdHBG1+hVJI5ZafIJJhH7k/HHG7OZcpqihJw= Subject key identifier: 24:2B:25:31:6C:E2:99:11:26:08:55:05:19:7E:05:26:64:65:12:57 Certificate issuer: /CN=A91B25F2/serialNumber=B6C87BB58728F76F6F90A09DFD6BAA1AD4E73BCA Certificate serial: 0CF1 Authority key identifier: B6:C8:7B:B5:87:28:F7:6F:6F:90:A0:9D:FD:6B:AA:1A:D4:E7:3B:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/8C9194A6D50711F0A051830FC4F9AE02.roa Signing time: Tue 09 Dec 2025 14:05:31 +0000 ROA not before: Tue 09 Dec 2025 14:05:31 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 135881 IP address blocks: 43.230.211.0/24 maxlen: 24 103.78.224.0/22 maxlen: 24 2407:ff80::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.crl rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 18:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3313 (0xcf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B25F2, serialNumber=B6C87BB58728F76F6F90A09DFD6BAA1AD4E73BCA Validity Not Before: Dec 9 14:05:31 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=69382cab-1986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:02:17:48:1f:60:3b:7e:52:cf:07:5b:de:05: 37:d1:8f:1a:fb:a5:9a:23:e1:fe:3b:c9:d2:42:50: 0d:c5:dd:2e:4a:7e:20:70:54:a8:32:5a:c9:8a:82: 35:bb:96:2e:e4:84:dd:8f:7e:7c:56:35:eb:b9:62: bc:c9:cd:10:1a:be:90:41:97:ea:1c:e2:ed:fd:e6: 76:31:47:82:fd:7b:d4:b2:3d:81:2a:79:82:4d:b4: 65:e1:0a:4c:ae:87:3f:a9:67:b9:81:7a:2d:78:cd: 01:7c:e0:33:a0:b8:84:d3:1e:cc:67:49:f7:dc:dc: 0a:6b:ca:95:b7:97:95:0e:b1:2b:3f:c7:32:b3:19: 08:03:bc:ce:32:12:75:56:20:6a:dd:bb:4f:88:2c: 65:e4:42:2f:35:bc:29:ae:53:5c:b7:b7:6c:93:26: 0c:2c:c1:b4:de:35:af:f3:f2:3f:80:19:53:64:a5: 2d:2b:1e:85:22:70:e4:13:c8:38:68:c9:ed:70:f1: 62:67:39:6e:94:aa:19:85:e9:a5:f9:1f:35:f4:4e: 13:ce:01:71:15:2c:e9:59:a1:b3:3f:ca:16:b4:73: 8a:21:97:c5:a5:34:c3:1c:97:ae:97:e4:7e:80:38: af:73:2f:e6:14:18:bf:6b:10:8d:1a:9c:ad:90:80: 77:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:2B:25:31:6C:E2:99:11:26:08:55:05:19:7E:05:26:64:65:12:57 X509v3 Authority Key Identifier: keyid:B6:C8:7B:B5:87:28:F7:6F:6F:90:A0:9D:FD:6B:AA:1A:D4:E7:3B:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/8C9194A6D50711F0A051830FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.230.211.0/24 103.78.224.0/22 IPv6: 2407:ff80::/32 Signature Algorithm: sha256WithRSAEncryption 1f:12:ad:7d:41:aa:11:7a:ed:1a:3d:d9:db:2a:fe:d1:49:48: 1e:82:f8:75:eb:c8:43:fc:c3:37:74:8f:ed:c5:77:16:09:73: 61:d4:87:df:a4:23:ac:29:02:3e:0f:62:81:8e:eb:a6:92:71: db:75:73:3e:d3:7b:eb:0d:78:4e:7c:7e:ea:c7:8a:55:59:73: 89:2d:d5:db:15:5d:f2:9b:a1:a8:4d:21:04:7f:f2:24:98:85: 75:6b:1c:c2:4f:f2:a0:32:91:55:54:83:89:51:5c:4e:10:f8: 86:58:2e:6e:32:c7:25:f8:c1:6b:80:a2:39:47:80:e9:50:ff: 0f:9e:81:ac:17:e9:c9:cc:7b:41:48:dd:a9:91:c9:ca:0a:37: 05:ea:94:89:7b:91:82:b7:0c:6b:12:84:56:cb:6b:36:fc:b4: 53:be:bc:4c:bd:77:cf:84:e8:f6:f2:33:97:91:6c:bf:91:ea: d7:52:68:7a:cf:6b:a7:f0:49:15:37:b2:2d:64:77:bd:8d:0b: 87:e8:ba:d7:63:1f:85:00:fc:d7:af:2c:92:9c:99:70:a0:03: 6e:32:b7:99:53:1c:e4:24:e1:8c:3f:9d:1d:78:03:08:fb:e0: 20:58:b8:14:d4:1d:ba:09:3a:af:87:8a:74:c9:6e:55:6a:41: a1:c2:a6:73 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICDPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI1RjIxMTAvBgNVBAUTKEI2Qzg3QkI1ODcyOEY3NkY2RjkwQTA5REZENkJBQTFB RDRFNzNCQ0EwHhcNMjUxMjA5MTQwNTMxWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTM4MmNhYi0xOTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1wIXSB9gO35Szwdb3gU30Y8a+6WaI+H+O8nSQlANxd0uSn4gcFSoMlrJioI1 u5Yu5ITdj358VjXruWK8yc0QGr6QQZfqHOLt/eZ2MUeC/XvUsj2BKnmCTbRl4QpM roc/qWe5gXoteM0BfOAzoLiE0x7MZ0n33NwKa8qVt5eVDrErP8cysxkIA7zOMhJ1 ViBq3btPiCxl5EIvNbwprlNct7dskyYMLMG03jWv8/I/gBlTZKUtKx6FInDkE8g4 aMntcPFiZzlulKoZheml+R819E4TzgFxFSzpWaGzP8oWtHOKIZfFpTTDHJeul+R+ gDivcy/mFBi/axCNGpytkIB3VQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFCQrJTFs 4pkRJghVBRl+BSZkZRJXMB8GA1UdIwQYMBaAFLbIe7WHKPdvb5Cgnf1rqhrU5zvK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjVGMi9FRjkwQ0Q0RTAz QjAxMUVBODVGMDI5MzRDNEY5QUUwMi90c2g3dFljbzkyOXZrS0NkX1d1cUd0VG5P OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RzaDd0WWNvOTI5dmtLQ2RfV3VxR3RUbk84by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjI1RjIvRUY5MENENEUwM0IwMTFFQTg1RjAyOTM0QzRGOUFFMDIvOEM5MTk0QTZE NTA3MTFGMEEwNTE4MzBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAAr5tMDBAJnTuAwDQQCAAIwBwMFACQH/4AwDQYJKoZIhvcN AQELBQADggEBAB8SrX1BqhF67Ro92dsq/tFJSB6C+HXryEP8wzd0j+3FdxYJc2HU h9+kI6wpAj4PYoGO66aScdt1cz7Te+sNeE58furHilVZc4kt1dsVXfKboahNIQR/ 8iSYhXVrHMJP8qAykVVUg4lRXE4Q+IZYLm4yxyX4wWuAojlHgOlQ/w+egawX6cnM e0FI3amRycoKNwXqlIl7kYK3DGsShFbLazb8tFO+vEy9d8+E6PbyM5eRbL+R6tdS aHrPa6fwSRU3si1kd72NC4foutdjH4UA/NevLJKcmXCgA24yt5lTHOQk4Yw/nR14 Awj74CBYuBTUHboJOq+HinTJblVqQaHCpnM= -----END CERTIFICATE-----Generated at Fri Dec 19 18:43:51 2025 by rpki-client