This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/6B724CC6DB0011F0AC29E8F57ED3641D.roa File: 6B724CC6DB0011F0AC29E8F57ED3641D.roa (raw, json) Hash identifier: 7rL0FBSKkznrl2udj8uNlQFyPTeXQMYsE1y8QdItuVo= Subject key identifier: 86:C9:2B:26:EF:77:34:7A:80:D4:62:D1:DF:06:80:99:3A:C3:5D:95 Certificate issuer: /CN=A91CB21D/serialNumber=9B1E8188CE64397E8B4241E6758D429DA0FF2E70 Certificate serial: 0220 Authority key identifier: 9B:1E:81:88:CE:64:39:7E:8B:42:41:E6:75:8D:42:9D:A0:FF:2E:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/6B724CC6DB0011F0AC29E8F57ED3641D.roa Signing time: Wed 17 Dec 2025 04:26:23 +0000 ROA not before: Wed 17 Dec 2025 04:26:23 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 9423 IP address blocks: 103.31.116.0/24 maxlen: 24 103.31.117.0/24 maxlen: 24 2001:df1:7f40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:25:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 544 (0x220) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB21D, serialNumber=9B1E8188CE64397E8B4241E6758D429DA0FF2E70 Validity Not Before: Dec 17 04:26:23 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=694230ef-8ff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:51:a7:4a:78:72:33:14:f8:6f:34:3c:14:83: 9c:3e:1b:2a:a9:28:a7:a1:87:32:31:14:d9:9a:c5: a2:48:02:8d:70:8f:90:c6:b9:c8:9f:ff:7c:da:01: 90:78:96:2c:3f:18:f2:80:5c:58:73:de:ba:6a:93: 57:ba:6b:01:06:b0:a2:98:0a:3c:a0:88:ef:f5:2d: ba:03:20:8c:7d:97:27:c4:4d:0d:e1:5f:58:62:8c: 22:f4:c7:8d:f3:69:2b:3c:bf:84:62:2d:73:58:62: 89:06:d2:c1:93:f2:b5:78:a1:12:5a:ca:c4:0d:37: e1:53:78:11:03:f5:42:92:54:f7:41:2e:1e:c0:65: 2b:a5:29:d5:9d:b3:be:f4:56:c8:cd:56:10:10:fe: 3d:8d:78:c0:d5:a3:24:53:db:e8:51:35:ae:83:09: 49:45:3c:41:19:88:43:3c:08:c5:dc:2b:db:db:bc: 4f:20:8c:ff:24:90:e2:ca:e2:0f:b2:f8:c0:0e:78: 66:11:d5:8d:1f:19:62:2d:51:c4:61:11:1f:f6:ed: a5:c2:1f:58:ee:95:ce:ab:55:19:b5:66:af:d7:e7: ef:f8:73:b8:5f:d7:8d:7d:8f:4a:bb:d8:5e:21:c3: 80:52:2e:10:6b:ea:c3:fd:41:d7:69:92:33:de:0e: 3b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C9:2B:26:EF:77:34:7A:80:D4:62:D1:DF:06:80:99:3A:C3:5D:95 X509v3 Authority Key Identifier: keyid:9B:1E:81:88:CE:64:39:7E:8B:42:41:E6:75:8D:42:9D:A0:FF:2E:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/6B724CC6DB0011F0AC29E8F57ED3641D.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.31.116.0/23 IPv6: 2001:df1:7f40::/48 Signature Algorithm: sha256WithRSAEncryption 04:69:4a:20:2d:7c:6d:66:8b:cd:57:84:4d:c1:f4:77:f6:f5: 54:a2:19:31:b9:89:f1:74:8d:0f:f4:05:9a:18:1c:b8:f6:1c: 75:01:24:89:96:54:ff:07:fe:1f:2e:72:41:7c:31:0b:09:35: e8:bc:9d:c4:e3:89:90:55:ee:28:c5:a3:c7:53:d7:0a:9e:c3: b1:d5:cb:47:2d:99:88:47:e6:fa:a7:25:73:23:45:20:4f:d4: 91:ae:50:99:f5:8b:3d:ee:e9:fc:26:90:f1:ec:e8:2f:48:28: 06:8c:a1:67:f0:1f:c1:86:34:19:1d:84:ad:d3:60:0b:29:8c: 62:f8:47:cf:fc:ef:87:77:82:3a:31:0a:cd:5f:72:54:9f:70: 1c:41:94:a1:0c:0b:b8:c3:68:09:28:98:f7:40:0b:1c:66:ad: 05:8d:15:12:41:6d:5f:17:63:35:1e:94:57:a8:57:5d:61:6b: f1:7a:57:41:ad:bb:5e:c5:d7:9d:d4:3b:b4:f7:29:e1:0b:65: 24:c5:b4:86:02:f3:53:83:68:6e:e0:9f:20:27:7a:c8:c1:c5: 8e:8b:79:b0:2a:75:42:65:cb:8a:35:cd:cc:20:d0:2e:d1:61: 52:df:6f:85:48:48:f9:f2:8d:41:06:a6:8f:81:ad:5b:75:9f: 62:fb:71:d8 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IyMUQxMTAvBgNVBAUTKDlCMUU4MTg4Q0U2NDM5N0U4QjQyNDFFNjc1OEQ0MjlE QTBGRjJFNzAwHhcNMjUxMjE3MDQyNjIzWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTQyMzBlZi04ZmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA11GnSnhyMxT4bzQ8FIOcPhsqqSinoYcyMRTZmsWiSAKNcI+QxrnIn/982gGQ eJYsPxjygFxYc966apNXumsBBrCimAo8oIjv9S26AyCMfZcnxE0N4V9YYowi9MeN 82krPL+EYi1zWGKJBtLBk/K1eKESWsrEDTfhU3gRA/VCklT3QS4ewGUrpSnVnbO+ 9FbIzVYQEP49jXjA1aMkU9voUTWugwlJRTxBGYhDPAjF3Cvb27xPIIz/JJDiyuIP svjADnhmEdWNHxliLVHEYREf9u2lwh9Y7pXOq1UZtWav1+fv+HO4X9eNfY9Ku9he IcOAUi4Qa+rD/UHXaZIz3g47AQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFIbJKybv dzR6gNRi0d8GgJk6w12VMB8GA1UdIwQYMBaAFJsegYjOZDl+i0JB5nWNQp2g/y5w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjIxRC82MzJDRDNFNkE3 RjYxMUVEQjlENjBDNDNDNEY5QUUwMi9teDZCaU01a09YNkxRa0htZFkxQ25hRF9M bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL214NkJpTTVrT1g2TFFrSG1kWTFDbmFEX0xuQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0IyMUQvNjMyQ0QzRTZBN0Y2MTFFREI5RDYwQzQzQzRGOUFFMDIvNkI3MjRDQzZE QjAwMTFGMEFDMjlFOEY1N0VEMzY0MUQucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnH3QwDwQCAAIwCQMHACABDfF/QDANBgkqhkiG9w0BAQsF AAOCAQEABGlKIC18bWaLzVeETcH0d/b1VKIZMbmJ8XSND/QFmhgcuPYcdQEkiZZU /wf+Hy5yQXwxCwk16LydxOOJkFXuKMWjx1PXCp7DsdXLRy2ZiEfm+qclcyNFIE/U ka5QmfWLPe7p/CaQ8ezoL0goBoyhZ/AfwYY0GR2ErdNgCymMYvhHz/zvh3eCOjEK zV9yVJ9wHEGUoQwLuMNoCSiY90ALHGatBY0VEkFtXxdjNR6UV6hXXWFr8XpXQa27 XsXXndQ7tPcp4QtlJMW0hgLzU4NobuCfICd6yMHFjot5sCp1QmXLijXNzCDQLtFh Ut9vhUhI+fKNQQamj4GtW3WfYvtx2A== -----END CERTIFICATE-----Generated at Fri Dec 19 20:24:28 2025 by rpki-client