This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/020D49E0283211ED9E29FA70C4F9AE02.roa File: 020D49E0283211ED9E29FA70C4F9AE02.roa (raw, json) Hash identifier: n4GQURkQPmTfwV8TLFN5U8XOYAl5Wab+Sk4x39wADhA= Subject key identifier: 22:8F:07:7E:03:D5:01:87:C6:A3:8E:62:E4:23:33:3C:C5:26:33:27 Certificate issuer: /CN=A91C97F5/serialNumber=368733FDC560C5EB89E45240DF7D4039CB2F6108 Certificate serial: 02A2 Authority key identifier: 36:87:33:FD:C5:60:C5:EB:89:E4:52:40:DF:7D:40:39:CB:2F:61:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/020D49E0283211ED9E29FA70C4F9AE02.roa Signing time: Tue 09 Dec 2025 00:08:02 +0000 ROA not before: Tue 09 Dec 2025 00:08:02 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 45481 IP address blocks: 103.242.32.0/22 maxlen: 22 113.52.0.0/20 maxlen: 20 113.52.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.crl rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 674 (0x2a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C97F5, serialNumber=368733FDC560C5EB89E45240DF7D4039CB2F6108 Validity Not Before: Dec 9 00:08:02 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69376862-321c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f2:1c:29:89:b9:c0:32:b8:83:45:90:ea:5f: 3a:b5:9f:5c:53:2d:8e:d9:7b:48:30:e5:3a:c8:0a: 17:25:53:66:2c:61:d7:04:5b:29:5b:4e:5f:84:c2: d7:98:04:4a:cd:6e:2f:51:cd:aa:44:35:08:bb:36: f8:82:41:e5:c7:d7:59:6c:f5:3c:90:9e:8b:05:f2: 82:ef:53:0c:9f:22:ef:56:95:52:8e:04:b1:0d:60: bd:4f:70:ec:b6:d2:2f:d9:16:5b:12:99:4d:84:1c: 51:f5:ea:f2:5f:73:a0:fa:ea:5a:14:78:b3:89:7e: 79:34:a4:11:c7:2b:78:bc:4d:1e:71:16:19:59:47: c8:4c:be:0f:a4:cc:cf:1b:39:28:ca:fc:e8:06:6e: d2:86:31:18:6e:f6:22:54:52:7d:af:7f:2c:1d:80: ab:35:7a:04:f5:42:ce:aa:59:3d:5b:04:04:41:98: f3:a5:68:62:10:6f:e8:9b:48:d4:5f:59:25:68:90: 1e:f9:99:39:db:41:fc:58:0b:e9:3a:01:1d:62:bc: b6:c7:80:7b:1b:18:55:78:89:ba:f9:89:6d:39:75: 34:05:e3:5f:5e:a5:5b:ad:87:b4:53:2f:cf:8c:09: 34:ff:d2:ba:8f:2d:4e:17:4d:cc:b7:5a:8f:e6:b0: 9b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:8F:07:7E:03:D5:01:87:C6:A3:8E:62:E4:23:33:3C:C5:26:33:27 X509v3 Authority Key Identifier: keyid:36:87:33:FD:C5:60:C5:EB:89:E4:52:40:DF:7D:40:39:CB:2F:61:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/020D49E0283211ED9E29FA70C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.242.32.0/22 113.52.0.0/20 Signature Algorithm: sha256WithRSAEncryption 48:d3:a2:3b:b9:4f:3e:28:80:61:d1:b8:1c:1d:47:23:26:a6: a5:01:c7:97:d1:1d:04:63:24:7b:bf:97:5e:e6:d8:32:89:8f: 4c:6a:90:e6:f2:03:43:f6:e5:43:f8:15:60:7a:a6:8f:a6:e5: ba:44:c8:df:8b:cf:6c:36:f6:54:27:5b:aa:4d:32:54:37:c4: 89:af:1b:b0:7c:8c:7c:d3:03:61:a6:c2:a3:01:c0:16:dc:72: 3c:36:85:fe:b9:c4:49:b0:0d:af:94:ba:e5:f7:c2:47:eb:2a: 0f:5d:58:05:44:72:73:27:56:29:a4:bd:49:cb:b6:fb:4c:67: 31:14:9b:84:5c:59:02:fa:b7:25:a6:74:8c:ed:75:b7:08:fd: 65:3a:af:f2:28:ae:f0:4c:45:65:00:ed:71:21:bf:ff:4c:5c: aa:4d:a3:90:ce:06:0e:d0:22:24:5d:e9:94:f0:fa:be:99:3d: 08:d3:4d:43:a0:3d:9a:96:1b:fe:ff:16:8a:f3:7d:44:53:d5: 97:72:4f:f9:5c:e2:b5:11:c0:96:e6:cc:b5:93:b7:e1:e4:a0: dd:21:7c:b1:cd:6b:18:08:11:e6:3d:ab:7e:6f:be:3b:5c:60: b4:c7:86:d2:18:33:a3:de:f3:8f:5d:a3:72:2a:d9:cf:11:fa: ae:24:ad:fc -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk3RjUxMTAvBgNVBAUTKDM2ODczM0ZEQzU2MEM1RUI4OUU0NTI0MERGN0Q0MDM5 Q0IyRjYxMDgwHhcNMjUxMjA5MDAwODAyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTM3Njg2Mi0zMjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/IcKYm5wDK4g0WQ6l86tZ9cUy2O2XtIMOU6yAoXJVNmLGHXBFspW05fhMLX mARKzW4vUc2qRDUIuzb4gkHlx9dZbPU8kJ6LBfKC71MMnyLvVpVSjgSxDWC9T3Ds ttIv2RZbEplNhBxR9eryX3Og+upaFHiziX55NKQRxyt4vE0ecRYZWUfITL4PpMzP GzkoyvzoBm7ShjEYbvYiVFJ9r38sHYCrNXoE9ULOqlk9WwQEQZjzpWhiEG/om0jU X1klaJAe+Zk520H8WAvpOgEdYry2x4B7GxhVeIm6+YltOXU0BeNfXqVbrYe0Uy/P jAk0/9K6jy1OF03Mt1qP5rCbcQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFCKPB34D 1QGHxqOOYuQjMzzFJjMnMB8GA1UdIwQYMBaAFDaHM/3FYMXrieRSQN99QDnLL2EI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTdGNS85MTcwQzQyQTI3 NDQxMUVEOEMxMzlCNTFDNEY5QUUwMi9Ob2N6X2NWZ3hldUo1RkpBMzMxQU9jc3ZZ UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05vY3pfY1ZneGV1SjVGSkEzMzFBT2NzdllRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qzk3RjUvOTE3MEM0MkEyNzQ0MTFFRDhDMTM5QjUxQzRGOUFFMDIvMDIwRDQ5RTAy ODMyMTFFRDlFMjlGQTcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJn8iADBARxNAAwDQYJKoZIhvcNAQELBQADggEBAEjToju5 Tz4ogGHRuBwdRyMmpqUBx5fRHQRjJHu/l17m2DKJj0xqkObyA0P25UP4FWB6po+m 5bpEyN+Lz2w29lQnW6pNMlQ3xImvG7B8jHzTA2GmwqMBwBbccjw2hf65xEmwDa+U uuX3wkfrKg9dWAVEcnMnVimkvUnLtvtMZzEUm4RcWQL6tyWmdIztdbcI/WU6r/Io rvBMRWUA7XEhv/9MXKpNo5DOBg7QIiRd6ZTw+r6ZPQjTTUOgPZqWG/7/ForzfURT 1ZdyT/lc4rURwJbmzLWTt+HkoN0hfLHNaxgIEeY9q35vvjtcYLTHhtIYM6Pe849d o3Iq2c8R+q4krfw= -----END CERTIFICATE-----Generated at Sat Dec 20 04:59:55 2025 by rpki-client