This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/2DDAF496ABD811F08750DA6CC4F9AE02.roa File: 2DDAF496ABD811F08750DA6CC4F9AE02.roa (raw, json) Hash identifier: yqFNpSSmaxdNadip8sVOPzWdAXABErfvh2vCh2L72xg= Subject key identifier: 73:10:6A:6E:99:62:5D:A6:FA:A3:4D:A3:31:A4:9F:BB:89:F7:42:30 Certificate issuer: /CN=A91B6E73/serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271 Certificate serial: 1290 Authority key identifier: 4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/2DDAF496ABD811F08750DA6CC4F9AE02.roa Signing time: Tue 09 Dec 2025 03:39:36 +0000 ROA not before: Tue 09 Dec 2025 03:39:36 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 132110 IP address blocks: 103.200.114.0/24 maxlen: 24 103.200.115.0/24 maxlen: 24 124.108.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 16:52:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4752 (0x1290) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6E73, serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271 Validity Not Before: Dec 9 03:39:36 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=693799f7-da67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:15:2a:2f:e5:01:d9:3d:b5:44:85:58:1f:5d: 8c:da:6b:3f:cd:7a:bc:43:77:d4:fa:36:b7:7d:9a: 19:83:7f:6f:51:ec:13:3c:ad:07:6a:d9:fc:d6:12: b0:b4:35:2f:61:61:81:c3:fd:e5:af:86:12:63:d8: 10:a7:b7:25:94:e7:f0:47:0d:80:cb:b3:14:70:33: 4e:9f:7e:0d:34:c3:f9:85:4f:a9:6b:be:10:83:66: 20:dd:35:b3:9f:4c:3c:0d:7b:2e:ec:5a:83:2d:e9: 4e:43:e7:ed:2f:b7:b8:a7:f5:e6:0b:e4:76:cc:6d: cd:66:99:90:3b:8d:81:e0:d2:a0:b3:9f:c4:6d:2b: a7:e4:85:ba:c5:c4:f5:a0:3f:5a:fa:e3:91:6a:8b: 46:cd:ae:ad:06:89:af:54:14:dc:d9:15:bb:09:d1: c3:b2:40:9e:05:ce:23:99:93:02:06:cc:45:6b:aa: 54:2c:c8:6f:ce:d7:80:a3:ca:f7:ea:a4:88:22:7f: 8f:77:c8:f5:75:b9:01:4b:1a:95:b7:36:46:42:74: 97:1f:e1:08:29:3b:28:f5:56:0b:9a:10:bf:95:8f: f5:d8:61:5f:e9:bd:93:e0:08:1a:4a:25:6f:7c:13: 2a:88:97:66:6d:e4:6c:d8:47:0d:cc:99:22:d2:a1: 3b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:10:6A:6E:99:62:5D:A6:FA:A3:4D:A3:31:A4:9F:BB:89:F7:42:30 X509v3 Authority Key Identifier: keyid:4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/2DDAF496ABD811F08750DA6CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.200.114.0/23 124.108.21.0/24 Signature Algorithm: sha256WithRSAEncryption 65:cf:17:36:34:2e:c7:2e:74:24:c5:94:83:a0:ef:cd:a4:66: a1:ba:81:c4:20:9c:91:73:d3:d9:dd:fd:19:b0:c0:5a:cc:19: 87:5d:0e:18:f3:58:ee:46:b2:5b:d2:52:61:ea:4f:26:6b:89: 05:95:51:e5:72:74:85:fc:1a:ce:77:2d:87:1d:fb:ec:77:2e: 65:10:2b:ae:c8:a9:a9:be:e0:df:a3:a3:0b:2a:03:9a:cf:f3: 41:9f:0c:89:12:94:d0:8b:09:93:65:af:55:38:98:04:60:04: 7a:8c:5a:74:3d:a1:fb:aa:a9:6e:a2:6a:ec:38:cb:26:e9:0c: bc:8e:ed:3e:56:4e:e6:a0:1d:5d:9e:9b:9d:7e:05:ed:3e:fb: df:6e:37:1c:c4:d3:47:84:1a:2d:f5:66:c7:00:6c:2b:b4:a9: 99:a9:68:71:61:d3:b2:6a:8a:5d:1e:1f:ed:7b:7d:30:db:e4: 06:58:66:40:35:70:2b:7b:46:ec:16:f2:b3:c4:b9:04:f3:cf: b0:93:be:d9:d6:5e:f2:b7:1e:2d:fd:9b:87:e0:a1:bf:ba:1e: 30:68:e1:25:14:ae:90:40:9f:2a:bc:ad:32:a6:f3:38:b2:3b: aa:01:c8:30:d7:56:97:1a:d4:e2:56:70:4d:aa:d5:08:04:80: 94:5a:6b:a3 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICEpAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZFNzMxMTAvBgNVBAUTKDRBMTdBRjY2QTA0OEZDODFEQUU4NTQ1RjdFMzVEOURB QUJENDAyNzEwHhcNMjUxMjA5MDMzOTM2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTM3OTlmNy1kYTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsRUqL+UB2T21RIVYH12M2ms/zXq8Q3fU+ja3fZoZg39vUewTPK0Hatn81hKw tDUvYWGBw/3lr4YSY9gQp7cllOfwRw2Ay7MUcDNOn34NNMP5hU+pa74Qg2Yg3TWz n0w8DXsu7FqDLelOQ+ftL7e4p/XmC+R2zG3NZpmQO42B4NKgs5/EbSun5IW6xcT1 oD9a+uORaotGza6tBomvVBTc2RW7CdHDskCeBc4jmZMCBsxFa6pULMhvzteAo8r3 6qSIIn+Pd8j1dbkBSxqVtzZGQnSXH+EIKTso9VYLmhC/lY/12GFf6b2T4AgaSiVv fBMqiJdmbeRs2EcNzJki0qE7tQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHMQam6Z Yl2m+qNNozGkn7uJ90IwMB8GA1UdIwQYMBaAFEoXr2agSPyB2uhUX3412dqr1AJx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkU3My9GNDFENDBGMkVB MDkxMUU4QURBMkVEMENDNEY5QUUwMi9TaGV2WnFCSV9JSGE2RlJmZmpYWjJxdlVB bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NoZXZacUJJX0lIYTZGUmZmalhaMnF2VUFuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjZFNzMvRjQxRDQwRjJFQTA5MTFFOEFEQTJFRDBDQzRGOUFFMDIvMkREQUY0OTZB QkQ4MTFGMDg3NTBEQTZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnyHIDBAB8bBUwDQYJKoZIhvcNAQELBQADggEBAGXPFzY0 LscudCTFlIOg782kZqG6gcQgnJFz09nd/RmwwFrMGYddDhjzWO5GslvSUmHqTyZr iQWVUeVydIX8Gs53LYcd++x3LmUQK67Iqam+4N+jowsqA5rP80GfDIkSlNCLCZNl r1U4mARgBHqMWnQ9ofuqqW6iauw4yybpDLyO7T5WTuagHV2em51+Be0++99uNxzE 00eEGi31ZscAbCu0qZmpaHFh07Jqil0eH+17fTDb5AZYZkA1cCt7RuwW8rPEuQTz z7CTvtnWXvK3Hi39m4fgob+6HjBo4SUUrpBAnyq8rTKm8ziyO6oByDDXVpca1OJW cE2q1QgEgJRaa6M= -----END CERTIFICATE-----Generated at Sun Dec 21 09:04:21 2025 by rpki-client