This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/31D56A8E06C711EF9A0E1D0AC4F9AE02.roa File: 31D56A8E06C711EF9A0E1D0AC4F9AE02.roa (raw, json) Hash identifier: 5+KD/HbUpLkpcs6HV5lJJIsrRNB6iK/DXAWMFWpmA48= Subject key identifier: E2:0F:0F:62:0F:33:F4:6C:3C:C8:E3:4F:70:BC:90:30:95:6E:09:76 Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34 Certificate serial: 3694 Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/31D56A8E06C711EF9A0E1D0AC4F9AE02.roa Signing time: Fri 12 Dec 2025 14:30:37 +0000 ROA not before: Fri 12 Dec 2025 14:30:37 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 140607 IP address blocks: 103.207.85.0/24 maxlen: 24 116.90.118.0/24 maxlen: 24 116.90.121.0/24 maxlen: 24 116.90.122.0/24 maxlen: 24 202.142.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 14:28:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13972 (0x3694) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5D7E, serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34 Validity Not Before: Dec 12 14:30:37 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=693c270d-73d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6d:f8:68:42:4a:1c:3d:2c:3f:56:86:e4:f1: 1f:b7:63:5a:e1:0c:26:e0:ea:61:a0:53:bc:9e:a3: 56:f0:cb:d8:89:95:ae:de:96:55:15:c7:42:d8:92: 97:96:83:11:c9:00:d6:64:e3:0d:81:92:0b:b2:0e: 53:7e:d0:6f:ee:47:33:76:6a:3c:59:a9:c7:38:a9: 3e:3f:1a:bd:31:e4:2f:77:0f:17:61:d1:5e:42:27: d8:68:01:d2:c2:5b:f1:ee:a3:9f:3d:1e:7a:69:93: aa:5a:d8:7c:70:aa:ba:a1:e7:25:18:f7:de:76:cc: d6:ed:eb:a4:ef:8e:0c:47:fe:c4:67:d8:ad:40:93: 3f:ef:d7:ff:a5:f1:9d:fb:48:3a:c1:05:bb:0c:16: 9c:f9:6c:58:e2:8b:56:00:46:7f:d7:d8:8f:aa:87: c5:16:f6:65:b6:5e:83:05:e5:b6:0f:7d:11:78:3a: 06:c3:4d:8c:bc:67:99:ba:ae:83:6a:8b:7b:ec:27: 89:45:83:89:c1:c7:fa:22:ee:1b:1c:ad:ef:8c:7c: 23:88:ae:6c:87:59:5d:61:55:7f:68:35:e2:48:db: 9a:bf:1b:a6:14:d0:3e:4e:8b:61:17:72:22:4c:41: 02:b0:0d:c5:e6:96:a8:9f:c4:50:3a:58:0c:27:2a: 25:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:0F:0F:62:0F:33:F4:6C:3C:C8:E3:4F:70:BC:90:30:95:6E:09:76 X509v3 Authority Key Identifier: keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/31D56A8E06C711EF9A0E1D0AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.207.85.0/24 116.90.118.0/24 116.90.121.0-116.90.122.255 202.142.151.0/24 Signature Algorithm: sha256WithRSAEncryption 74:25:52:4b:cf:34:cf:60:c8:dc:6f:6f:24:ca:f0:a7:01:97: 98:32:71:7d:f1:69:8b:dd:dc:87:6e:29:8f:4a:98:e1:54:71: d9:58:a5:46:47:29:d9:59:8a:24:cc:97:a6:bd:77:eb:36:ee: b7:87:e9:cc:5d:0f:08:a9:ff:d1:d4:05:09:b8:ff:e5:66:9a: 54:3e:14:42:64:88:ab:33:2f:4e:af:0b:07:f1:73:cb:19:be: bc:70:8f:db:d0:00:68:aa:bb:58:19:30:54:1b:93:6d:be:13: 23:f7:6b:6d:da:6c:e5:55:67:59:74:ef:3a:d1:5c:6d:d4:19: 9a:b6:09:2a:fe:76:a2:e3:91:e8:27:70:ab:51:58:e5:a1:c3: 9b:11:0e:32:9e:ad:c0:a6:8f:c9:40:c8:1a:d9:22:9c:9b:79: 24:4c:a6:16:c2:28:86:df:bb:50:cd:61:f3:92:6f:e9:29:05: 2b:a7:bf:67:c7:f6:ee:4f:6f:9e:d2:ee:1c:60:69:cc:8a:63: 6f:c3:a1:0a:8c:15:62:60:0a:75:3d:2f:fa:df:27:c1:5e:3b: 36:07:93:d7:c9:eb:c3:d6:97:8d:84:2f:d3:78:f6:7d:ec:46: 19:32:83:67:2c:73:52:3a:c1:f5:27:c0:53:65:77:ec:02:1b: 95:fb:3a:87 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICNpQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVEN0UxMTAvBgNVBAUTKDRDQUUzQUVGQjFBQzhBQkREQjk5QkNDRUU0RkE1QTkx NkQxNTdCMzQwHhcNMjUxMjEyMTQzMDM3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTNjMjcwZC03M2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0m34aEJKHD0sP1aG5PEft2Na4Qwm4OphoFO8nqNW8MvYiZWu3pZVFcdC2JKX loMRyQDWZOMNgZILsg5TftBv7kczdmo8WanHOKk+Pxq9MeQvdw8XYdFeQifYaAHS wlvx7qOfPR56aZOqWth8cKq6oeclGPfedszW7euk744MR/7EZ9itQJM/79f/pfGd +0g6wQW7DBac+WxY4otWAEZ/19iPqofFFvZltl6DBeW2D30ReDoGw02MvGeZuq6D aot77CeJRYOJwcf6Iu4bHK3vjHwjiK5sh1ldYVV/aDXiSNuavxumFNA+TothF3Ii TEECsA3F5paon8RQOlgMJyolZQIDAQABo4ICrzCCAqswHQYDVR0OBBYEFOIPD2IP M/RsPMjjT3C8kDCVbgl2MB8GA1UdIwQYMBaAFEyuOu+xrIq925m8zuT6WpFtFXs0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUQ3RS9FQ0E2ODIzNDFE ODcxMUUyOTgzMjJERTAwOEIwMkNEMi9USzQ2NzdHc2lyM2JtYnpPNVBwYWtXMFZl elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLNDY3N0dzaXIzYm1iek81UHBha1cwVmV6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjVEN0UvRUNBNjgyMzQxRDg3MTFFMjk4MzIyREUwMDhCMDJDRDIvMzFENTZBOEUw NkM3MTFFRjlBMEUxRDBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E KjAoMCYEAgABMCADBABnz1UDBAB0WnYwDAMEAHRaeQMEAHRaegMEAMqOlzANBgkq hkiG9w0BAQsFAAOCAQEAdCVSS880z2DI3G9vJMrwpwGXmDJxffFpi93ch24pj0qY 4VRx2VilRkcp2VmKJMyXpr136zbut4fpzF0PCKn/0dQFCbj/5WaaVD4UQmSIqzMv Tq8LB/Fzyxm+vHCP29AAaKq7WBkwVBuTbb4TI/drbdps5VVnWXTvOtFcbdQZmrYJ Kv52ouOR6Cdwq1FY5aHDmxEOMp6twKaPyUDIGtkinJt5JEymFsIoht+7UM1h85Jv 6SkFK6e/Z8f27k9vntLuHGBpzIpjb8OhCowVYmAKdT0v+t8nwV47NgeT18nrw9aX jYQv03j2fexGGTKDZyxzUjrB9SfAU2V37AIblfs6hw== -----END CERTIFICATE-----Generated at Sat Dec 20 03:17:39 2025 by rpki-client