This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/4AEB32A2D2F911EA93B2C659C4F9AE02.roa File: 4AEB32A2D2F911EA93B2C659C4F9AE02.roa (raw, json) Hash identifier: 6J1wxSYoL3P+B7UwAzcQWzjeuscd5R02PEFLAdLpYyc= Subject key identifier: 44:C4:CB:1B:31:98:EB:10:2B:2A:A8:BD:8A:8C:28:E4:A8:DE:FA:71 Certificate issuer: /CN=A91F6E7D/serialNumber=1613D6EBFCD849CFCC0A888DB97E6BBF5207ADB3 Certificate serial: 0A32 Authority key identifier: 16:13:D6:EB:FC:D8:49:CF:CC:0A:88:8D:B9:7E:6B:BF:52:07:AD:B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPW6_zYSc_MCoiNuX5rv1IHrbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/4AEB32A2D2F911EA93B2C659C4F9AE02.roa Signing time: Tue 30 Dec 2025 19:16:13 +0000 ROA not before: Tue 30 Dec 2025 19:16:13 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 14061 IP address blocks: 103.253.144.0/22 maxlen: 22 163.47.8.0/22 maxlen: 22 2400:6180::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.crl rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPW6_zYSc_MCoiNuX5rv1IHrbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 19:26:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2610 (0xa32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6E7D, serialNumber=1613D6EBFCD849CFCC0A888DB97E6BBF5207ADB3 Validity Not Before: Dec 30 19:16:13 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=695424fd-a25c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e4:c2:0b:19:33:fa:b6:c9:55:f6:a9:64:8c: 1f:9e:17:21:cc:91:05:6b:42:32:f8:9d:24:9d:b0: 9f:7e:c8:4f:d1:ad:f1:cb:f4:da:33:a0:6a:a6:4a: 4d:a2:b9:83:e0:61:b2:94:50:5d:5b:2e:67:0a:68: a2:ab:68:cf:8f:83:10:80:a6:d4:ca:cc:30:1d:3c: fe:e8:e3:de:b3:1f:80:66:5b:41:e5:52:6b:5a:a3: 43:a8:28:66:fe:ef:d9:b0:b7:4b:ef:02:7b:d8:d6: bf:85:bd:06:25:b6:a0:a4:c4:80:21:fb:95:a7:66: bd:41:e4:c8:3c:83:15:bf:7f:aa:8d:47:0c:0f:3e: 87:8a:15:8f:54:3a:0a:fb:75:73:5d:31:56:ce:ed: 3a:c0:a6:01:0d:40:72:56:67:61:fb:b7:6a:f1:3e: e2:7c:94:d5:1a:5a:cf:56:cd:38:5a:71:08:56:88: 7d:4e:5d:1e:a9:19:85:d1:b1:1f:71:13:15:21:8d: c6:df:05:a1:3d:7f:fb:52:de:40:c1:43:d7:fc:74: bf:3d:3f:79:b5:9c:f8:76:6e:9a:af:ab:34:cc:a1: 00:0e:e0:3b:a1:c0:61:f8:b7:8d:0b:b8:b2:97:9a: 85:25:93:fb:4a:23:f0:16:37:fb:e5:a8:c4:62:3f: c8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C4:CB:1B:31:98:EB:10:2B:2A:A8:BD:8A:8C:28:E4:A8:DE:FA:71 X509v3 Authority Key Identifier: keyid:16:13:D6:EB:FC:D8:49:CF:CC:0A:88:8D:B9:7E:6B:BF:52:07:AD:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPW6_zYSc_MCoiNuX5rv1IHrbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/4AEB32A2D2F911EA93B2C659C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.253.144.0/22 163.47.8.0/22 IPv6: 2400:6180::/32 Signature Algorithm: sha256WithRSAEncryption 34:26:41:e4:77:06:86:b7:d9:7a:c2:7d:ea:12:91:10:a6:ee: ac:46:5b:62:2a:5c:e7:e0:11:01:a7:50:ed:6a:f9:83:45:fd: d4:e4:03:c2:74:0a:42:9a:a8:97:2b:d1:42:64:b4:54:87:fd: 13:74:21:02:c5:35:2f:ed:fa:77:e3:6e:6d:18:b7:42:b3:e5: 09:94:8a:37:42:1c:01:b3:9e:96:26:e0:66:b6:c3:fd:8f:15: 51:2a:40:b1:ae:c6:ee:83:d6:ba:a4:dc:26:7a:18:9b:e6:6b: 13:46:92:38:34:17:08:c8:95:15:c8:8e:8d:24:01:11:05:9d: 7f:ed:f4:30:10:6a:4a:da:ef:0b:33:e4:ae:be:63:03:27:06: ba:cc:e2:75:ee:eb:2a:2f:15:6a:4f:58:62:82:84:87:32:02: 3e:60:9c:d9:fd:e7:3c:84:a8:67:4b:27:97:8c:83:70:6b:1e: 9e:f2:c9:b2:32:02:f2:e9:f5:a6:41:97:e8:10:2f:4a:6c:6e: 11:10:56:9e:4a:f6:bb:96:84:83:a4:d2:60:b5:47:15:30:80: 40:dd:37:a1:d0:b3:51:72:fd:cf:55:07:85:69:6d:17:51:93: d3:61:6b:df:b8:09:52:c9:af:a5:61:66:56:2e:91:61:9d:13: b3:5b:b9:8c -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICCjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx RjZFN0QxMTAvBgNVBAUTKDE2MTNENkVCRkNEODQ5Q0ZDQzBBODg4REI5N0U2QkJG NTIwN0FEQjMwHhcNMjUxMjMwMTkxNjEzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU0MjRmZC1hMjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2OTCCxkz+rbJVfapZIwfnhchzJEFa0Iy+J0knbCffshP0a3xy/TaM6BqpkpN ormD4GGylFBdWy5nCmiiq2jPj4MQgKbUyswwHTz+6OPesx+AZltB5VJrWqNDqChm /u/ZsLdL7wJ72Na/hb0GJbagpMSAIfuVp2a9QeTIPIMVv3+qjUcMDz6HihWPVDoK +3VzXTFWzu06wKYBDUByVmdh+7dq8T7ifJTVGlrPVs04WnEIVoh9Tl0eqRmF0bEf cRMVIY3G3wWhPX/7Ut5AwUPX/HS/PT95tZz4dm6ar6s0zKEADuA7ocBh+LeNC7iy l5qFJZP7SiPwFjf75ajEYj/IrQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFETEyxsx mOsQKyqovYqMKOSo3vpxMB8GA1UdIwQYMBaAFBYT1uv82EnPzAqIjbl+a79SB62z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkU3RC8xRTlBMTFDMjgz ODExMUVBQUNCOUJDMzBDNEY5QUUwMi9GaFBXNl96WVNjX01Db2lOdVg1cnYxSUhy Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZoUFc2X3pZU2NfTUNvaU51WDVydjFJSHJiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjZFN0QvMUU5QTExQzI4MzgxMTFFQUFDQjlCQzMwQzRGOUFFMDIvNEFFQjMyQTJE MkY5MTFFQTkzQjJDNjU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJn/ZADBAKjLwgwDQQCAAIwBwMFACQAYYAwDQYJKoZIhvcN AQELBQADggEBADQmQeR3Boa32XrCfeoSkRCm7qxGW2IqXOfgEQGnUO1q+YNF/dTk A8J0CkKaqJcr0UJktFSH/RN0IQLFNS/t+nfjbm0Yt0Kz5QmUijdCHAGznpYm4Ga2 w/2PFVEqQLGuxu6D1rqk3CZ6GJvmaxNGkjg0FwjIlRXIjo0kAREFnX/t9DAQakra 7wsz5K6+YwMnBrrM4nXu6yovFWpPWGKChIcyAj5gnNn95zyEqGdLJ5eMg3BrHp7y ybIyAvLp9aZBl+gQL0psbhEQVp5K9ruWhIOk0mC1RxUwgEDdN6HQs1Fy/c9VB4Vp bRdRk9Nha9+4CVLJr6VhZlYukWGdE7NbuYw= -----END CERTIFICATE-----Generated at Thu Jan 1 01:02:27 2026 by rpki-client