This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/1D9F5104C99B11F092A1C310C4F9AE02.roa File: 1D9F5104C99B11F092A1C310C4F9AE02.roa (raw, json) Hash identifier: evldymlGQQ93kubL9WmbF3u0cvNdxXaSZqcfpd5v03k= Subject key identifier: EC:F0:19:7F:F4:5A:17:BB:81:ED:F2:A5:05:D2:BA:08:BE:FC:4B:43 Certificate issuer: /CN=A91C68AD/serialNumber=D10C2096FB5DB304ABD2F99F45A29488292D3721 Certificate serial: E0 Authority key identifier: D1:0C:20:96:FB:5D:B3:04:AB:D2:F9:9F:45:A2:94:88:29:2D:37:21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/1D9F5104C99B11F092A1C310C4F9AE02.roa Signing time: Tue 09 Dec 2025 03:42:58 +0000 ROA not before: Tue 09 Dec 2025 03:42:58 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 139005 IP address blocks: 103.138.130.0/24 maxlen: 24 2405:e40::/45 maxlen: 45 2405:e40:100::/45 maxlen: 45 2405:e40:108::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.crl rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:36:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C68AD, serialNumber=D10C2096FB5DB304ABD2F99F45A29488292D3721 Validity Not Before: Dec 9 03:42:58 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69379ac2-f209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:79:6a:8d:62:b6:bd:d4:c0:a2:37:54:7f:72: 1d:26:f2:53:84:a9:c3:29:e5:50:3f:5e:ed:79:6f: 4c:5a:b3:f1:f6:a6:ce:2b:a5:fe:b1:f8:73:78:71: 8a:b6:c2:b4:59:25:ba:e8:4b:11:5a:b9:e3:f6:09: 74:d0:e3:b4:10:8c:0d:95:c0:f2:94:94:d7:7a:a0: 12:15:66:5c:f4:e8:f0:1d:4f:67:ca:9f:78:b2:7e: a1:98:36:32:9f:fb:60:5b:27:55:8b:07:1f:8f:4d: 35:d2:55:07:80:80:82:95:ab:62:94:36:9c:78:69: c8:ef:79:c6:e7:c6:60:16:c9:08:bd:9c:46:e5:7c: 7b:82:ed:21:b0:c8:71:0a:9d:d3:be:01:1d:c6:e4: 30:5c:e8:2a:23:61:a2:52:bb:31:fe:8e:81:59:97: 70:3e:b8:5b:b3:09:88:be:80:0a:e9:1c:46:56:f2: 96:7e:dd:3e:33:24:fa:ec:aa:a0:8c:a1:1f:b1:0d: 41:01:5c:ea:71:3b:36:6e:fa:41:90:23:0c:de:e4: 3c:aa:ac:8b:bb:06:cc:f1:d8:c4:8f:5a:4b:6a:4b: 5c:9f:88:b4:59:cf:61:c9:b5:ed:00:fd:48:14:41: ac:df:32:4c:2d:95:29:e6:cb:bb:17:51:ed:39:ea: ed:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:F0:19:7F:F4:5A:17:BB:81:ED:F2:A5:05:D2:BA:08:BE:FC:4B:43 X509v3 Authority Key Identifier: keyid:D1:0C:20:96:FB:5D:B3:04:AB:D2:F9:9F:45:A2:94:88:29:2D:37:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/1D9F5104C99B11F092A1C310C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.138.130.0/24 IPv6: 2405:e40::/45 2405:e40:100::-2405:e40:108:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 32:f5:0d:42:96:da:c8:28:cb:1e:62:a5:a1:36:4f:5b:de:68: 63:1f:53:6c:11:15:99:d6:7a:83:be:19:03:c9:6a:dd:33:ba: f1:f2:bd:b0:45:ad:a1:ac:24:ac:35:e3:aa:fc:4a:f8:df:18: 0a:02:1a:a6:7e:18:a0:65:f8:63:93:00:14:fb:ba:22:99:54: 74:cf:14:e9:70:b6:65:9e:a1:e2:e7:c7:dd:5f:65:b2:ab:8f: 49:59:9e:3d:c2:c7:db:5b:ee:00:97:04:e6:6d:99:62:1d:8d: d5:8f:ce:e8:d3:8b:6c:01:d6:39:15:dc:cb:b5:ba:ac:6c:ff: 96:1c:d9:50:1f:d5:3e:d3:9a:73:e3:02:3c:08:c4:4e:fe:4f: 04:99:50:87:ea:ef:22:fe:c9:98:0d:2e:a5:b9:c4:1a:35:bf: 2e:3a:49:f6:38:13:8d:5b:9f:6f:30:6e:db:43:b9:1c:7f:93: 18:9f:31:86:1b:bc:32:03:fa:c5:d7:f7:6f:57:61:c9:02:df: 60:7d:5f:85:01:3b:8d:3e:e6:92:25:62:0f:21:bc:ad:9d:12: 85:c6:5a:99:5f:23:e7:9a:82:fc:36:d2:df:c2:f4:ff:7d:4e: 8d:9e:42:a0:9b:5f:5a:39:96:de:6a:ae:99:62:0a:da:92:57: 95:0e:eb:18 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY4QUQxMTAvBgNVBAUTKEQxMEMyMDk2RkI1REIzMDRBQkQyRjk5RjQ1QTI5NDg4 MjkyRDM3MjEwHhcNMjUxMjA5MDM0MjU4WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTM3OWFjMi1mMjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHlqjWK2vdTAojdUf3IdJvJThKnDKeVQP17teW9MWrPx9qbOK6X+sfhzeHGK tsK0WSW66EsRWrnj9gl00OO0EIwNlcDylJTXeqASFWZc9OjwHU9nyp94sn6hmDYy n/tgWydViwcfj0010lUHgICClatilDaceGnI73nG58ZgFskIvZxG5Xx7gu0hsMhx Cp3TvgEdxuQwXOgqI2GiUrsx/o6BWZdwPrhbswmIvoAK6RxGVvKWft0+MyT67Kqg jKEfsQ1BAVzqcTs2bvpBkCMM3uQ8qqyLuwbM8djEj1pLaktcn4i0Wc9hybXtAP1I FEGs3zJMLZUp5su7F1HtOertawIDAQABo4ICuTCCArUwHQYDVR0OBBYEFOzwGX/0 Whe7ge3ypQXSugi+/EtDMB8GA1UdIwQYMBaAFNEMIJb7XbMEq9L5n0WilIgpLTch MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjhBRC9ERUJBMjM4MDg2 QTAxMUVGQjM2RTMwMEVDNEY5QUUwMi8wUXdnbHZ0ZHN3U3Iwdm1mUmFLVWlDa3RO eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBRd2dsdnRkc3dTcjB2bWZSYUtVaUNrdE55RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzY4QUQvREVCQTIzODA4NkEwMTFFRkIzNkUzMDBFQzRGOUFFMDIvMUQ5RjUxMDRD OTlCMTFGMDkyQTFDMzEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQwYIKwYBBQUHAQcBAf8E NDAyMAwEAgABMAYDBABnioIwIgQCAAIwHAMHAyQFDkAAADARAwYAJAUOQAEDBwAk BQ5AAQgwDQYJKoZIhvcNAQELBQADggEBADL1DUKW2sgoyx5ipaE2T1veaGMfU2wR FZnWeoO+GQPJat0zuvHyvbBFraGsJKw146r8SvjfGAoCGqZ+GKBl+GOTABT7uiKZ VHTPFOlwtmWeoeLnx91fZbKrj0lZnj3Cx9tb7gCXBOZtmWIdjdWPzujTi2wB1jkV 3Mu1uqxs/5Yc2VAf1T7TmnPjAjwIxE7+TwSZUIfq7yL+yZgNLqW5xBo1vy46SfY4 E41bn28wbttDuRx/kxifMYYbvDID+sXX929XYckC32B9X4UBO40+5pIlYg8hvK2d EoXGWplfI+eagvw20t/C9P99To2eQqCbX1o5lt5qrpliCtqSV5UO6xg= -----END CERTIFICATE-----Generated at Fri Dec 19 12:08:46 2025 by rpki-client