This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/20978DD270E411F08F40242AC4F9AE02.roa File: 20978DD270E411F08F40242AC4F9AE02.roa (raw, json) Hash identifier: Xywp8ZPlZw5lHn8S1gza1fHTHQ7Q5agAOBQDfYDUkqA= Subject key identifier: E5:6B:BB:A5:A3:F9:5B:65:AD:13:EB:55:3A:F7:8C:36:7A:06:BE:F9 Certificate issuer: /CN=A91EB2B8/serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F Certificate serial: 0354 Authority key identifier: A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/20978DD270E411F08F40242AC4F9AE02.roa Signing time: Wed 17 Dec 2025 09:03:09 +0000 ROA not before: Wed 17 Dec 2025 09:03:09 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 139057 IP address blocks: 103.137.168.0/24 maxlen: 24 103.137.169.0/24 maxlen: 24 103.137.170.0/24 maxlen: 24 103.137.171.0/24 maxlen: 24 103.138.247.0/24 maxlen: 24 103.189.255.0/24 maxlen: 24 103.243.92.0/24 maxlen: 24 103.243.93.0/24 maxlen: 24 103.243.94.0/24 maxlen: 24 103.243.95.0/24 maxlen: 24 123.108.72.0/24 maxlen: 24 123.108.73.0/24 maxlen: 24 2407:2440:1::/48 maxlen: 48 2407:2440:2::/48 maxlen: 48 2407:2440:3::/48 maxlen: 48 2407:2440:4::/48 maxlen: 48 2407:2440:5::/48 maxlen: 48 2407:2440:6::/48 maxlen: 48 2407:2440:7::/48 maxlen: 48 2407:2440:8::/48 maxlen: 48 2407:2440:9::/48 maxlen: 48 2407:2440:a::/48 maxlen: 48 2407:2440:b::/48 maxlen: 48 2407:2440:c::/48 maxlen: 48 2407:2440:d::/48 maxlen: 48 2407:2440:e::/48 maxlen: 48 2407:2440:f::/48 maxlen: 48 2407:2440:10::/48 maxlen: 48 2407:2440:11::/48 maxlen: 48 2407:2440:12::/48 maxlen: 48 2407:2440:13::/48 maxlen: 48 2407:2440:14::/48 maxlen: 48 2407:2440:15::/48 maxlen: 48 2407:2440:16::/48 maxlen: 48 2407:2440:17::/48 maxlen: 48 2407:2440:18::/48 maxlen: 48 2407:2440:19::/48 maxlen: 48 2407:2440:1e::/48 maxlen: 48 2407:2440:1f::/48 maxlen: 48 2407:2440:20::/48 maxlen: 48 2407:2440:22::/48 maxlen: 48 2407:2440:23::/48 maxlen: 48 2407:2440:25::/48 maxlen: 48 2407:2440:28::/48 maxlen: 48 2407:2440:2a::/48 maxlen: 48 2407:2440:2b::/48 maxlen: 48 2407:2440:2c::/48 maxlen: 48 2407:2440:2d::/48 maxlen: 48 2407:2440:a001::/48 maxlen: 48 2407:2440:a002::/48 maxlen: 48 2407:2440:a003::/48 maxlen: 48 2407:2440:a004::/48 maxlen: 48 2407:2440:a005::/48 maxlen: 48 2407:2440:a007::/48 maxlen: 48 2407:2440:a008::/48 maxlen: 48 2407:2440:a009::/48 maxlen: 48 2407:2440:b001::/48 maxlen: 48 2407:2440:b002::/48 maxlen: 48 2407:2440:b003::/48 maxlen: 48 2407:2440:b004::/48 maxlen: 48 2407:2440:b005::/48 maxlen: 48 2407:2440:c001::/48 maxlen: 48 2407:2440:d001::/48 maxlen: 48 2407:2440:e001::/48 maxlen: 48 2407:2440:e002::/48 maxlen: 48 2407:2440:e003::/48 maxlen: 48 2407:2440:e004::/48 maxlen: 48 2407:2440:e007::/48 maxlen: 48 2407:2440:e008::/48 maxlen: 48 2407:2440:e009::/48 maxlen: 48 2407:2440:e00a::/48 maxlen: 48 2407:2440:e00b::/48 maxlen: 48 2407:2440:e00c::/48 maxlen: 48 2407:2440:e00d::/48 maxlen: 48 2407:2440:e00e::/48 maxlen: 48 2407:2440:e00f::/48 maxlen: 48 2407:2440:f001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 852 (0x354) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB2B8, serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F Validity Not Before: Dec 17 09:03:09 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=694271cd-37c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a6:5b:1e:3a:7a:15:d5:66:5a:d7:8f:91:cc: ba:75:53:29:f5:3d:bb:21:7c:29:36:0b:c1:0e:25: 9d:50:96:c0:38:0b:04:c5:ec:59:73:5f:a9:84:17: 68:19:1e:f7:f8:a1:42:e7:80:d0:83:41:9c:ea:95: 63:69:d5:49:0e:f8:a6:2f:b0:0e:51:33:e5:c5:94: a7:06:5b:32:85:b9:a8:7d:2b:87:47:d1:03:22:4a: 65:59:84:17:24:24:d7:28:22:4f:ba:07:e9:37:4e: 1c:a3:eb:3c:5c:b9:84:a9:84:ed:75:d7:9f:53:67: 05:3c:32:30:62:8b:f4:ee:c6:63:25:8e:a5:13:08: 6d:b3:2b:3f:e4:b8:15:a5:73:59:50:9c:b0:bc:8b: 1f:9d:93:11:a2:10:45:1b:c3:7e:7c:66:95:aa:5f: 50:dd:90:0d:73:4d:c5:4b:79:a7:fb:3a:24:b4:c9: eb:48:6d:44:d1:ff:4e:6c:e5:b6:ce:de:3c:a6:14: 8c:c6:f9:70:03:f3:d7:f6:ef:28:18:35:e4:04:c5: ce:84:14:4f:d1:49:8e:b1:6d:6c:94:12:00:03:c6: ab:01:ac:05:aa:33:c2:03:de:42:81:d3:bf:aa:ab: 07:80:41:af:dd:95:9a:27:ef:b7:be:e7:f3:fd:4b: 34:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:6B:BB:A5:A3:F9:5B:65:AD:13:EB:55:3A:F7:8C:36:7A:06:BE:F9 X509v3 Authority Key Identifier: keyid:A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/20978DD270E411F08F40242AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.137.168.0/22 103.138.247.0/24 103.189.255.0/24 103.243.92.0/22 123.108.72.0/23 IPv6: 2407:2440:1::-2407:2440:19:ffff:ffff:ffff:ffff:ffff 2407:2440:1e::-2407:2440:20:ffff:ffff:ffff:ffff:ffff 2407:2440:22::/47 2407:2440:25::/48 2407:2440:28::/48 2407:2440:2a::-2407:2440:2d:ffff:ffff:ffff:ffff:ffff 2407:2440:a001::-2407:2440:a005:ffff:ffff:ffff:ffff:ffff 2407:2440:a007::-2407:2440:a009:ffff:ffff:ffff:ffff:ffff 2407:2440:b001::-2407:2440:b005:ffff:ffff:ffff:ffff:ffff 2407:2440:c001::/48 2407:2440:d001::/48 2407:2440:e001::-2407:2440:e004:ffff:ffff:ffff:ffff:ffff 2407:2440:e007::-2407:2440:e00f:ffff:ffff:ffff:ffff:ffff 2407:2440:f001::/48 Signature Algorithm: sha256WithRSAEncryption 44:e5:9a:4d:89:35:7f:ec:64:1f:e8:7e:25:80:c0:c9:d6:58: 08:90:b4:79:12:31:72:4c:1e:03:20:fe:35:fc:e9:5a:24:74: e0:f9:d0:48:dc:1f:64:73:f1:d6:14:53:fb:69:39:75:48:47: 46:19:f5:92:40:04:53:85:06:33:62:ed:50:e8:52:ac:92:20: fa:67:98:95:74:e8:bf:1d:29:cc:b8:a2:7a:8d:d4:61:a1:5a: c1:b5:37:54:23:9e:73:b3:56:8b:94:80:df:50:25:c5:62:ce: a9:90:47:42:fb:7e:3c:78:ff:0b:b2:8a:76:cb:b9:3d:60:1f: 10:b5:b1:b2:11:f8:f0:2a:b8:c3:a9:95:cc:96:17:d8:21:09: 1e:51:cd:87:4e:f3:46:bd:2f:3e:96:66:73:67:d8:9b:97:53: ad:4a:8a:57:09:40:6c:25:e6:f1:7c:37:e6:aa:d0:87:b5:31: 5f:5f:cf:a3:fe:97:d9:d7:9f:35:f5:e1:f9:4f:b0:08:9a:b8: 53:7a:c8:ce:d9:3e:62:f2:95:b2:66:dc:39:8b:02:56:f7:67: fe:53:f1:c5:8b:4d:11:cf:1d:d8:70:b3:9f:d5:3a:42:2a:f0: 39:14:25:71:bd:56:59:f4:1a:02:cd:81:09:d6:a3:29:84:5c: a9:5a:2d:38 -----BEGIN CERTIFICATE----- MIIGbzCCBVegAwIBAgICA1QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIyQjgxMTAvBgNVBAUTKEE2OTcwMEU3OEQwQzgxMkFEMkUyQzExNEM4MkM2NTVB MEFDRDQ0N0YwHhcNMjUxMjE3MDkwMzA5WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTQyNzFjZC0zN2M0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvKZbHjp6FdVmWtePkcy6dVMp9T27IXwpNgvBDiWdUJbAOAsExexZc1+phBdo GR73+KFC54DQg0Gc6pVjadVJDvimL7AOUTPlxZSnBlsyhbmofSuHR9EDIkplWYQX JCTXKCJPugfpN04co+s8XLmEqYTtddefU2cFPDIwYov07sZjJY6lEwhtsys/5LgV pXNZUJywvIsfnZMRohBFG8N+fGaVql9Q3ZANc03FS3mn+zoktMnrSG1E0f9ObOW2 zt48phSMxvlwA/PX9u8oGDXkBMXOhBRP0UmOsW1slBIAA8arAawFqjPCA95CgdO/ qqsHgEGv3ZWaJ++3vufz/Us0VQIDAQABo4IDkzCCA48wHQYDVR0OBBYEFOVru6Wj +VtlrRPrVTr3jDZ6Br75MB8GA1UdIwQYMBaAFKaXAOeNDIEq0uLBFMgsZVoKzUR/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjJCOC8zRjQ0Q0JBRTJG NEQxMUVEOEY1QTZBNjRDNEY5QUUwMi9wcGNBNTQwTWdTclM0c0VVeUN4bFdnck5S SDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BwY0E1NDBNZ1NyUzRzRVV5Q3hsV2dyTlJIOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUIyQjgvM0Y0NENCQUUyRjREMTFFRDhGNUE2QTY0QzRGOUFFMDIvMjA5NzhERDI3 MEU0MTFGMDhGNDAyNDJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwggEbBggrBgEFBQcBBwEB /wSCAQowggEGMCQEAgABMB4DBAJniagDBABnivcDBABnvf8DBAJn81wDBAF7bEgw gd0EAgACMIHWMBIDBwAkByRAAAEDBwEkByRAABgwEgMHASQHJEAAHgMHACQHJEAA IAMHASQHJEAAIgMHACQHJEAAJQMHACQHJEAAKDASAwcBJAckQAAqAwcBJAckQAAs MBIDBwAkByRAoAEDBwEkByRAoAQwEgMHACQHJECgBwMHASQHJECgCDASAwcAJAck QLABAwcBJAckQLAEAwcAJAckQMABAwcAJAckQNABMBIDBwAkByRA4AEDBwAkByRA 4AQwEgMHACQHJEDgBwMHBCQHJEDgAAMHACQHJEDwATANBgkqhkiG9w0BAQsFAAOC AQEAROWaTYk1f+xkH+h+JYDAydZYCJC0eRIxckweAyD+NfzpWiR04PnQSNwfZHPx 1hRT+2k5dUhHRhn1kkAEU4UGM2LtUOhSrJIg+meYlXTovx0pzLiieo3UYaFawbU3 VCOec7NWi5SA31AlxWLOqZBHQvt+PHj/C7KKdsu5PWAfELWxshH48Cq4w6mVzJYX 2CEJHlHNh07zRr0vPpZmc2fYm5dTrUqKVwlAbCXm8Xw35qrQh7UxX1/Po/6X2def NfXh+U+wCJq4U3rIztk+YvKVsmbcOYsCVvdn/lPxxYtNEc8d2HCzn9U6QirwORQl cb1WWfQaAs2BCdajKYRcqVotOA== -----END CERTIFICATE-----Generated at Fri Dec 19 20:51:58 2025 by rpki-client