This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/B0B587222FC911F0938FE136C4F9AE02.roa File: B0B587222FC911F0938FE136C4F9AE02.roa (raw, json) Hash identifier: U0nalOiOtuUPs+ZNE9vz6uJAGl5jCeilRyMtxAjY7ks= Subject key identifier: 87:F1:21:3F:AC:E7:93:A2:79:94:04:8D:0D:F3:15:9F:5B:D1:72:BA Certificate issuer: /CN=A91EBDB8/serialNumber=E88B3B23E09675B437A8328963C5CD3CE3E95FEE Certificate serial: 65 Authority key identifier: E8:8B:3B:23:E0:96:75:B4:37:A8:32:89:63:C5:CD:3C:E3:E9:5F:EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/B0B587222FC911F0938FE136C4F9AE02.roa Signing time: Mon 17 Nov 2025 04:53:06 +0000 ROA not before: Mon 17 Nov 2025 04:53:06 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 139785 IP address blocks: 103.40.224.0/24 maxlen: 25 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.crl rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 05:46:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBDB8, serialNumber=E88B3B23E09675B437A8328963C5CD3CE3E95FEE Validity Not Before: Nov 17 04:53:06 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=691aaa32-07cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:62:17:4c:d7:c2:4f:d3:2a:cc:c3:06:32:f5: dd:7d:ae:da:31:43:4c:ab:a0:19:00:cb:85:40:53: 98:b2:0c:79:5a:2a:83:7e:77:b4:91:26:f8:e9:03: 61:30:bd:d3:2b:5a:bd:d0:35:dc:fa:ab:18:fc:9c: 32:16:a9:cd:78:4d:ab:72:7c:aa:71:e0:d0:74:ba: 3d:50:63:8b:97:27:01:41:76:d4:ca:0f:00:0e:2b: 52:e3:16:ef:09:05:38:92:f1:6b:61:bd:87:d0:e9: 32:8a:6d:40:1e:55:1b:2f:c1:4e:c3:12:69:1e:2e: ea:d3:c9:8a:00:79:80:10:76:b3:b2:c3:5f:af:33: ba:4a:cb:ea:6a:5b:8e:66:b6:57:fb:b1:c3:32:97: aa:de:90:1a:ee:bc:62:10:14:8a:78:df:37:7a:f8: 8c:1f:da:ea:3a:81:31:83:cd:2f:2f:44:90:b6:d2: d8:0f:f8:59:37:21:f7:f5:6a:7e:78:66:2f:eb:b8: 7b:41:09:bc:2b:4a:5e:1f:34:8e:db:d4:6e:74:e8: f6:bc:4a:49:14:e4:b1:f1:5f:0b:65:bc:8a:29:dc: 67:05:cf:43:d1:9f:f5:cf:1a:4f:7a:ed:01:7c:c8: 8e:ee:41:ec:f5:6a:b7:d9:5b:6d:3d:4b:ec:0e:61: 7a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:F1:21:3F:AC:E7:93:A2:79:94:04:8D:0D:F3:15:9F:5B:D1:72:BA X509v3 Authority Key Identifier: keyid:E8:8B:3B:23:E0:96:75:B4:37:A8:32:89:63:C5:CD:3C:E3:E9:5F:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/B0B587222FC911F0938FE136C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.40.224.0/24 Signature Algorithm: sha256WithRSAEncryption 77:24:ca:b4:0a:5d:89:27:8d:22:48:c8:85:5a:50:20:cb:57: 86:ba:5e:21:b3:e7:74:de:12:8c:e2:76:90:13:29:b8:43:48: c0:4a:63:f2:d0:b4:17:c2:11:2f:31:a8:42:d0:15:64:47:19: e9:10:7f:f8:07:70:35:ae:70:43:25:bb:21:02:a6:7d:f8:4a: 5a:b0:68:c4:bd:a6:ca:d9:ac:a6:98:3d:21:50:22:38:fc:fe: 54:a2:35:fd:73:12:a4:61:e0:fd:51:73:46:3f:02:3a:bd:b0: ba:58:72:08:2d:c4:dd:e0:cc:c2:2f:a2:66:98:1d:b6:b4:38: a1:ba:60:b7:c3:4e:10:9d:0b:02:3d:dd:45:0e:0e:69:4c:bf: a3:6c:12:82:83:b8:b6:d6:24:f2:30:8e:8a:7a:07:21:03:8f: ee:ea:cb:63:37:05:c0:36:c6:78:7e:2c:08:d5:9b:d7:34:fc: 89:ad:b0:46:29:db:e1:02:f1:78:00:1c:da:97:71:5e:fd:1b: 61:4f:8a:de:aa:0c:13:74:d9:b3:66:f2:ed:ff:84:e8:9b:5e: 04:dd:34:ba:f3:61:28:ee:3c:c2:20:84:fe:e1:5d:1b:96:12: 6b:b0:9c:ea:f7:67:98:ec:c3:8d:e1:4d:29:6e:5b:20:d0:42: 15:31:a6:42 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QkRCODExMC8GA1UEBRMoRTg4QjNCMjNFMDk2NzVCNDM3QTgzMjg5NjNDNUNEM0NF M0U5NUZFRTAeFw0yNTExMTcwNDUzMDZaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MWFhYTMyLTA3Y2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6YhdM18JP0yrMwwYy9d19rtoxQ0yroBkAy4VAU5iyDHlaKoN+d7SRJvjpA2Ew vdMrWr3QNdz6qxj8nDIWqc14TatyfKpx4NB0uj1QY4uXJwFBdtTKDwAOK1LjFu8J BTiS8WthvYfQ6TKKbUAeVRsvwU7DEmkeLurTyYoAeYAQdrOyw1+vM7pKy+pqW45m tlf7scMyl6rekBruvGIQFIp43zd6+Iwf2uo6gTGDzS8vRJC20tgP+Fk3Iff1an54 Zi/ruHtBCbwrSl4fNI7b1G506Pa8SkkU5LHxXwtlvIop3GcFz0PRn/XPGk967QF8 yI7uQez1arfZW209S+wOYXptAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUh/EhP6zn k6J5lASNDfMVn1vRcrowHwYDVR0jBBgwFoAU6Is7I+CWdbQ3qDKJY8XNPOPpX+4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCREI4Lzk4MjMwQjJDMkVG QjExRjA5MEUzNjM4NUM0RjlBRTAyLzZJczdJLUNXZGJRM3FES0pZOFhOUE9QcFgt NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNklzN0ktQ1dkYlEzcURLSlk4WE5QT1BwWC00LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkRCOC85ODIzMEIyQzJFRkIxMUYwOTBFMzYzODVDNEY5QUUwMi9CMEI1ODcyMjJG QzkxMUYwOTM4RkUxMzZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGco4DANBgkqhkiG9w0BAQsFAAOCAQEAdyTKtApdiSeNIkjI hVpQIMtXhrpeIbPndN4SjOJ2kBMpuENIwEpj8tC0F8IRLzGoQtAVZEcZ6RB/+Adw Na5wQyW7IQKmffhKWrBoxL2mytmsppg9IVAiOPz+VKI1/XMSpGHg/VFzRj8COr2w ulhyCC3E3eDMwi+iZpgdtrQ4obpgt8NOEJ0LAj3dRQ4OaUy/o2wSgoO4ttYk8jCO inoHIQOP7urLYzcFwDbGeH4sCNWb1zT8ia2wRinb4QLxeAAc2pdxXv0bYU+K3qoM E3TZs2by7f+E6JteBN00uvNhKO48wiCE/uFdG5YSa7Cc6vdnmOzDjeFNKW5bINBC FTGmQg== -----END CERTIFICATE-----Generated at Thu Dec 25 09:19:37 2025 by rpki-client