This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6814/0967C798B92411F0BFD5A56EC4F9AE02/A2B684F8BA0911F0B073056FC4F9AE02.roa File: A2B684F8BA0911F0B073056FC4F9AE02.roa (raw, json) Hash identifier: 2FqlaCiVX3a2ipQmGdcIWBAoDMoVl6GTYc397ABLRMw= Subject key identifier: 9E:5B:E9:7B:18:B8:9D:51:FE:CD:20:10:6C:E9:32:65:23:AF:CD:D1 Certificate issuer: /CN=A91B6814/serialNumber=F63C46422912B45A9186E445C5A9DEA7BBA3428B Certificate serial: 3F Authority key identifier: F6:3C:46:42:29:12:B4:5A:91:86:E4:45:C5:A9:DE:A7:BB:A3:42:8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jxGQikStFqRhuRFxanep7ujQos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6814/0967C798B92411F0BFD5A56EC4F9AE02/A2B684F8BA0911F0B073056FC4F9AE02.roa Signing time: Fri 19 Dec 2025 11:10:38 +0000 ROA not before: Fri 19 Dec 2025 11:10:38 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 136160 IP address blocks: 43.251.100.0/22 maxlen: 22 43.251.100.0/23 maxlen: 23 43.251.100.0/24 maxlen: 24 43.251.101.0/24 maxlen: 24 43.251.102.0/23 maxlen: 23 43.251.102.0/24 maxlen: 24 43.251.103.0/24 maxlen: 24 103.82.52.0/22 maxlen: 22 103.82.52.0/23 maxlen: 23 103.82.52.0/24 maxlen: 24 103.82.53.0/24 maxlen: 24 103.82.54.0/23 maxlen: 23 103.82.54.0/24 maxlen: 24 103.82.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6814/0967C798B92411F0BFD5A56EC4F9AE02/9jxGQikStFqRhuRFxanep7ujQos.crl rsync://rpki.apnic.net/member_repository/A91B6814/0967C798B92411F0BFD5A56EC4F9AE02/9jxGQikStFqRhuRFxanep7ujQos.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jxGQikStFqRhuRFxanep7ujQos.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 06:49:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6814, serialNumber=F63C46422912B45A9186E445C5A9DEA7BBA3428B Validity Not Before: Dec 19 11:10:38 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=694532ad-d5a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3d:36:e0:aa:a7:18:57:55:f1:3f:cf:05:c7: 06:9f:8d:9d:e6:9e:49:72:42:79:c9:60:1b:67:30: 0b:f4:74:a4:5d:59:5e:59:5c:a7:56:49:de:c7:0c: ca:fd:bc:ef:c1:1c:74:67:02:20:ac:3d:5c:66:bf: 35:2f:8e:92:55:e3:df:7f:10:cb:98:03:a0:22:cf: 1e:6a:91:97:e2:94:5b:21:23:ce:fd:11:c2:d0:1b: a9:73:ec:65:d9:9b:ab:77:b0:b0:24:10:ca:8a:39: 67:e2:e1:48:d6:e8:83:94:ac:36:c8:2d:b5:40:19: f3:c4:32:54:57:22:9a:a1:fe:6a:a0:48:42:f5:01: 66:41:5e:1a:dd:e3:98:8d:e5:f4:38:c0:13:03:70: 0b:12:d9:83:7a:25:96:d0:e5:67:2c:49:fd:8a:a7: 2f:9e:90:11:66:10:0a:88:7e:07:d6:f5:58:d7:78: 90:e1:42:67:ef:a5:d0:3e:c9:ad:df:6a:44:c7:1b: e7:4d:0b:43:12:65:b7:c1:08:93:78:7d:ee:06:77: a1:d9:64:75:d9:d7:83:9f:21:83:a3:5f:c4:92:ae: cb:fa:7e:1b:9d:b7:6c:c1:f3:56:d5:8c:1b:61:51: f9:57:15:96:4b:13:25:84:99:75:60:01:33:46:4b: 61:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:5B:E9:7B:18:B8:9D:51:FE:CD:20:10:6C:E9:32:65:23:AF:CD:D1 X509v3 Authority Key Identifier: keyid:F6:3C:46:42:29:12:B4:5A:91:86:E4:45:C5:A9:DE:A7:BB:A3:42:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6814/0967C798B92411F0BFD5A56EC4F9AE02/9jxGQikStFqRhuRFxanep7ujQos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jxGQikStFqRhuRFxanep7ujQos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6814/0967C798B92411F0BFD5A56EC4F9AE02/A2B684F8BA0911F0B073056FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.251.100.0/22 103.82.52.0/22 Signature Algorithm: sha256WithRSAEncryption 39:d8:7c:f9:c5:0e:2c:c1:e7:ee:e4:f3:bb:5b:e5:e0:c5:ab: 73:1f:9d:71:49:d0:4d:ff:dd:1c:de:ac:e3:65:b7:83:14:a7: e1:48:c7:79:3d:27:25:a3:87:a1:f9:8d:55:83:6e:6a:e9:9a: db:9c:12:1a:26:9f:88:c5:90:b5:19:bc:4e:47:5e:98:e4:8d: bf:6c:af:2a:c5:e7:bb:9b:c3:51:0d:35:bd:53:1e:d4:82:75: 34:d2:b1:a1:e4:74:15:04:e7:9d:85:d3:eb:10:34:36:15:6b: 92:ac:b9:f1:ba:60:c7:5b:c3:3d:0f:65:be:97:56:17:15:df: e7:83:95:e1:d4:56:78:c3:03:f0:ae:1d:03:71:c6:dc:0f:ff: 39:46:c2:57:45:bb:ef:92:db:32:67:63:e4:85:13:cc:f4:9b: 89:88:b5:a5:cd:d5:c4:09:51:33:80:b5:8c:f4:5b:bb:51:92: 8a:cf:2e:cf:2b:a1:1e:d0:30:38:76:38:e9:2f:14:85:c2:1f: b3:14:57:4b:0e:c1:8e:0c:10:64:32:06:0a:eb:2f:74:fb:e1: 19:ff:12:48:32:e9:ec:3b:43:25:f3:3b:d6:42:d9:7a:e3:af: dd:47:7a:28:4c:e5:f3:53:d7:38:37:1f:58:15:8d:79:8d:6c: 58:48:8e:d1 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NjgxNDExMC8GA1UEBRMoRjYzQzQ2NDIyOTEyQjQ1QTkxODZFNDQ1QzVBOURFQTdC QkEzNDI4QjAeFw0yNTEyMTkxMTEwMzhaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMMDTY5NDUzMmFkLWQ1YTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQPTbgqqcYV1XxP88FxwafjZ3mnklyQnnJYBtnMAv0dKRdWV5ZXKdWSd7HDMr9 vO/BHHRnAiCsPVxmvzUvjpJV499/EMuYA6Aizx5qkZfilFshI879EcLQG6lz7GXZ m6t3sLAkEMqKOWfi4UjW6IOUrDbILbVAGfPEMlRXIpqh/mqgSEL1AWZBXhrd45iN 5fQ4wBMDcAsS2YN6JZbQ5WcsSf2Kpy+ekBFmEAqIfgfW9VjXeJDhQmfvpdA+ya3f akTHG+dNC0MSZbfBCJN4fe4Gd6HZZHXZ14OfIYOjX8SSrsv6fhudt2zB81bVjBth UflXFZZLEyWEmXVgATNGS2GDAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUnlvpexi4 nVH+zSAQbOkyZSOvzdEwHwYDVR0jBBgwFoAU9jxGQikStFqRhuRFxanep7ujQosw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2ODE0LzA5NjdDNzk4Qjky NDExRjBCRkQ1QTU2RUM0RjlBRTAyLzlqeEdRaWtTdEZxUmh1UkZ4YW5lcDd1alFv cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOWp4R1Fpa1N0RnFSaHVSRnhhbmVwN3VqUW9zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjgxNC8wOTY3Qzc5OEI5MjQxMUYwQkZENUE1NkVDNEY5QUUwMi9BMkI2ODRGOEJB MDkxMUYwQjA3MzA1NkZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAiv7ZAMEAmdSNDANBgkqhkiG9w0BAQsFAAOCAQEAOdh8+cUO LMHn7uTzu1vl4MWrcx+dcUnQTf/dHN6s42W3gxSn4UjHeT0nJaOHofmNVYNuauma 25wSGiafiMWQtRm8TkdemOSNv2yvKsXnu5vDUQ01vVMe1IJ1NNKxoeR0FQTnnYXT 6xA0NhVrkqy58bpgx1vDPQ9lvpdWFxXf54OV4dRWeMMD8K4dA3HG3A//OUbCV0W7 75LbMmdj5IUTzPSbiYi1pc3VxAlRM4C1jPRbu1GSis8uzyuhHtAwOHY46S8UhcIf sxRXSw7BjgwQZDIGCusvdPvhGf8SSDLp7DtDJfM71kLZeuOv3Ud6KEzl81PXODcf WBWNeY1sWEiO0Q== -----END CERTIFICATE-----Generated at Sun Dec 21 12:27:38 2025 by rpki-client