This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/451AF9F2E3DC11ECB9410B43C4F9AE02.roa File: 451AF9F2E3DC11ECB9410B43C4F9AE02.roa (raw, json) Hash identifier: T7qnsg29kUIKx5aoyS6i1HVQm+PLWaff0w3N6ENJB1s= Subject key identifier: B0:81:6F:8C:0B:46:B1:6F:11:16:A8:04:E7:BF:98:96:71:BC:56:01 Certificate issuer: /CN=A91F8E3D/serialNumber=3AAFFBB7EA4A60D77BB44284ACBF25C398BA9A6D Certificate serial: 04DA Authority key identifier: 3A:AF:FB:B7:EA:4A:60:D7:7B:B4:42:84:AC:BF:25:C3:98:BA:9A:6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq_7t-pKYNd7tEKErL8lw5i6mm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/451AF9F2E3DC11ECB9410B43C4F9AE02.roa Signing time: Thu 18 Dec 2025 23:20:08 +0000 ROA not before: Thu 18 Dec 2025 23:20:08 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 54197 IP address blocks: 103.177.136.0/24 maxlen: 24 103.177.137.0/24 maxlen: 24 2400:3f60::/32 maxlen: 32 2400:3f60:1::/48 maxlen: 48 2400:3f60:2::/48 maxlen: 48 2400:3f60:3::/48 maxlen: 48 2400:3f60:4::/48 maxlen: 48 2400:3f60:10::/44 maxlen: 44 2400:3f60:10::/48 maxlen: 48 2400:3f60:11::/48 maxlen: 48 2400:3f60:12::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.crl rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq_7t-pKYNd7tEKErL8lw5i6mm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 22:14:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1242 (0x4da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8E3D, serialNumber=3AAFFBB7EA4A60D77BB44284ACBF25C398BA9A6D Validity Not Before: Dec 18 23:20:08 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69448c28-5554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b2:aa:cf:74:1a:ad:f5:0f:f7:84:75:5b:6e: ca:00:b9:3b:b4:d3:88:82:f3:7a:dc:6e:79:d8:ee: 78:71:4b:1a:60:8a:69:1a:08:72:43:ae:22:fb:36: 15:55:ff:e2:35:f3:ea:b3:46:cd:b2:8c:95:16:0b: 39:20:f2:ba:27:22:e5:e8:3d:02:ef:e1:1e:22:3a: cf:75:83:e1:ea:05:39:f0:ce:1b:49:cc:21:91:1d: bc:a8:13:c1:04:7c:46:3e:3a:d3:4f:5e:65:85:4d: e3:20:6c:38:8e:9f:c5:7a:b4:35:f4:04:8c:b7:fa: d3:b3:59:0e:4c:f9:9b:ba:10:28:58:b4:43:55:12: 56:ab:1e:ed:46:fb:29:63:77:0a:ee:fe:8c:b8:81: da:7d:34:5c:4c:be:6b:46:61:8b:09:34:b5:ce:8e: 0f:e4:ce:61:d6:4b:ea:70:d7:55:e8:bc:0c:80:33: b5:bd:5d:ee:e3:16:6a:2a:59:09:52:2b:7c:f7:52: 2a:a6:2f:65:49:17:38:8d:c3:4c:67:4f:f8:70:e4: 93:54:bb:51:10:2e:dd:ef:cb:ba:6f:08:f4:b2:a4: b5:c8:3c:58:fd:51:5e:eb:c1:fa:61:97:1e:9d:7d: 4c:24:70:7a:dc:81:2a:41:cd:c0:9e:2e:11:d5:ca: 56:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:81:6F:8C:0B:46:B1:6F:11:16:A8:04:E7:BF:98:96:71:BC:56:01 X509v3 Authority Key Identifier: keyid:3A:AF:FB:B7:EA:4A:60:D7:7B:B4:42:84:AC:BF:25:C3:98:BA:9A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq_7t-pKYNd7tEKErL8lw5i6mm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/451AF9F2E3DC11ECB9410B43C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.177.136.0/23 IPv6: 2400:3f60::/32 Signature Algorithm: sha256WithRSAEncryption 56:1d:ae:ac:5e:c9:c2:ec:c5:57:b3:2a:e1:f3:11:bd:ce:81: 6c:7a:4e:ee:5a:0b:dd:6f:ba:c7:01:15:f8:bc:f8:39:75:13: 83:a7:44:d3:54:a7:e2:00:0a:90:8a:b8:db:af:e8:ff:6f:c3: f3:30:40:de:f3:8a:9a:3c:7a:02:8a:f2:fa:39:95:a5:6a:ad: a6:36:c2:c2:73:78:46:0b:f7:45:85:ba:6b:bd:5a:5d:ed:c3: 8f:89:ca:cd:0a:81:44:c8:f8:6a:18:b0:67:4c:9f:0b:15:a8: 3d:4f:6c:4f:d3:e0:ef:60:8b:e2:e3:f8:01:c3:1f:ba:25:63: a7:53:33:7f:47:35:72:d7:40:ca:b8:55:41:0d:03:ca:90:0f: 6a:2c:32:a3:0b:b6:2c:66:ee:26:c4:12:76:87:24:6e:95:b1: 2d:7b:00:ec:ed:2e:8f:96:20:29:87:9e:88:06:43:80:20:ae: 38:83:7c:7a:55:63:b5:27:34:ab:ca:1f:a3:1f:2d:c9:67:4d: bf:50:99:85:04:94:49:a2:53:15:6a:8a:73:cc:c6:e9:c0:a5: 0b:7d:40:d5:35:0f:49:d6:25:a6:bf:da:b4:9f:79:41:34:d9: 19:09:86:24:10:94:77:59:a4:5a:12:f0:37:5d:10:85:f2:e9: 9b:b0:f8:75 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBNowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx RjhFM0QxMTAvBgNVBAUTKDNBQUZGQkI3RUE0QTYwRDc3QkI0NDI4NEFDQkYyNUMz OThCQTlBNkQwHhcNMjUxMjE4MjMyMDA4WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTQ0OGMyOC01NTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArrKqz3QarfUP94R1W27KALk7tNOIgvN63G552O54cUsaYIppGghyQ64i+zYV Vf/iNfPqs0bNsoyVFgs5IPK6JyLl6D0C7+EeIjrPdYPh6gU58M4bScwhkR28qBPB BHxGPjrTT15lhU3jIGw4jp/FerQ19ASMt/rTs1kOTPmbuhAoWLRDVRJWqx7tRvsp Y3cK7v6MuIHafTRcTL5rRmGLCTS1zo4P5M5h1kvqcNdV6LwMgDO1vV3u4xZqKlkJ Uit891Iqpi9lSRc4jcNMZ0/4cOSTVLtREC7d78u6bwj0sqS1yDxY/VFe68H6YZce nX1MJHB63IEqQc3Ani4R1cpWlQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFLCBb4wL RrFvERaoBOe/mJZxvFYBMB8GA1UdIwQYMBaAFDqv+7fqSmDXe7RChKy/JcOYuppt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEUzRC8wQUI0Mzg2QTU4 NEUxMUVDOUZDRjE3NzlDNEY5QUUwMi9PcV83dC1wS1lOZDd0RUtFckw4bHc1aTZt bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09xXzd0LXBLWU5kN3RFS0VyTDhsdzVpNm1tMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjhFM0QvMEFCNDM4NkE1ODRFMTFFQzlGQ0YxNzc5QzRGOUFFMDIvNDUxQUY5RjJF M0RDMTFFQ0I5NDEwQjQzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnsYgwDQQCAAIwBwMFACQAP2AwDQYJKoZIhvcNAQELBQAD ggEBAFYdrqxeycLsxVezKuHzEb3OgWx6Tu5aC91vuscBFfi8+Dl1E4OnRNNUp+IA CpCKuNuv6P9vw/MwQN7zipo8egKK8vo5laVqraY2wsJzeEYL90WFumu9Wl3tw4+J ys0KgUTI+GoYsGdMnwsVqD1PbE/T4O9gi+Lj+AHDH7olY6dTM39HNXLXQMq4VUEN A8qQD2osMqMLtixm7ibEEnaHJG6VsS17AOztLo+WICmHnogGQ4AgrjiDfHpVY7Un NKvKH6MfLclnTb9QmYUElEmiUxVqinPMxunApQt9QNU1D0nWJaa/2rSfeUE02RkJ hiQQlHdZpFoS8DddEIXy6Zuw+HU= -----END CERTIFICATE-----Generated at Sun Dec 21 01:50:31 2025 by rpki-client