This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/2D215B32584111EDBE50107CC4F9AE02.roa File: 2D215B32584111EDBE50107CC4F9AE02.roa (raw, json) Hash identifier: L2qGwoUMYn6rd/ufU42ohM+hjJVs2JbRIKZiZfIpRkg= Subject key identifier: 19:61:8F:27:69:F0:3A:16:10:7B:EB:FF:82:99:51:58:57:CC:E2:F4 Certificate issuer: /CN=A91FB8C9/serialNumber=253800ED16ED0FF337F7040D0E3DF1141C16161C Certificate serial: 0260 Authority key identifier: 25:38:00:ED:16:ED:0F:F3:37:F7:04:0D:0E:3D:F1:14:1C:16:16:1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/2D215B32584111EDBE50107CC4F9AE02.roa Signing time: Thu 11 Dec 2025 00:09:47 +0000 ROA not before: Thu 11 Dec 2025 00:09:47 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 142592 IP address blocks: 103.104.244.0/24 maxlen: 24 2402:20c0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.crl rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 00:59:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 608 (0x260) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB8C9, serialNumber=253800ED16ED0FF337F7040D0E3DF1141C16161C Validity Not Before: Dec 11 00:09:47 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=693a0bcb-13ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b4:00:d1:a2:34:59:73:49:07:31:06:d6:09: 25:07:6e:3d:4a:f1:98:8c:18:a4:64:e4:04:8c:a4: 88:6a:aa:8e:dc:47:be:e4:98:97:2f:d7:13:bc:48: b9:6f:4f:16:0e:cf:f2:7e:0c:9c:80:c6:16:d0:3a: c4:da:57:56:d3:a0:32:73:0c:5f:9c:78:d2:39:07: de:e0:23:37:85:bc:3e:a3:11:f3:f9:97:06:b6:a1: 40:83:8a:7f:a8:6f:e9:1c:a0:2f:8f:61:5d:67:45: d7:d1:23:0a:69:9f:3f:2d:37:2d:f2:8a:f4:87:e6: c1:22:3d:bb:af:2c:a2:9d:25:8c:e4:af:79:f3:b4: 8e:d5:cf:d8:d9:22:2f:40:76:9a:54:85:70:70:cb: 8d:b2:ef:28:8d:81:1b:1b:30:53:1a:54:44:5a:89: 6e:be:c6:1e:78:6c:fe:70:d0:16:7e:c4:4b:25:39: 40:ac:65:90:c5:cc:66:4a:61:a8:ed:be:c0:3e:ea: ed:04:3e:b7:a6:17:d0:67:39:04:93:fb:de:eb:56: b8:5c:8c:d5:80:43:f3:02:99:c3:b7:1a:01:c7:f0: 50:5f:9a:c5:d6:11:f3:aa:03:6f:ec:b5:da:ab:4f: 85:d3:b8:26:69:e6:23:b1:33:18:b7:d1:e1:65:ac: 5d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:61:8F:27:69:F0:3A:16:10:7B:EB:FF:82:99:51:58:57:CC:E2:F4 X509v3 Authority Key Identifier: keyid:25:38:00:ED:16:ED:0F:F3:37:F7:04:0D:0E:3D:F1:14:1C:16:16:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/2D215B32584111EDBE50107CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.104.244.0/24 IPv6: 2402:20c0:1::/48 Signature Algorithm: sha256WithRSAEncryption c4:0d:a3:f2:35:40:74:ea:10:eb:6a:cc:53:b2:f5:64:9e:d5: 4b:86:51:b9:6c:c9:fd:95:80:f1:7c:d4:1e:4f:ac:ae:39:f0: 7c:51:1c:2f:56:8e:7c:c3:e1:4e:2f:8b:07:08:a2:53:48:30: 5b:98:06:c7:8d:6f:10:b8:b1:f1:af:ca:a8:c7:be:4b:06:21: 95:76:70:d1:10:36:35:c2:28:c3:34:4f:e0:32:b0:a1:1f:56: 69:81:20:b3:3d:0d:14:94:d6:a1:3e:13:cb:44:4f:1b:fd:8e: 1c:44:9f:15:ad:7e:c2:89:34:ef:f3:a9:26:04:94:14:78:42: 13:f0:eb:4d:19:5b:f5:03:82:33:de:73:4d:aa:de:30:3b:87: ef:cd:bb:8a:7c:8d:75:b0:fd:3a:53:75:c1:87:46:27:0c:c9: 5c:67:73:40:dc:cb:78:d4:3d:c2:2e:85:71:71:30:26:d1:b6: 43:9e:b2:a8:af:6b:e9:17:47:61:fa:51:bc:03:d7:93:6e:de: 19:d7:b8:b4:04:4e:06:2b:43:1d:03:b5:70:b2:91:ce:ee:b1: 1e:db:60:77:52:b3:04:48:d4:0c:cc:c7:f6:33:e9:ff:00:51: bf:8a:3b:5d:46:99:02:f6:e8:cf:6d:ae:7f:41:de:24:6b:7f: 0f:0c:64:c9 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI4QzkxMTAvBgNVBAUTKDI1MzgwMEVEMTZFRDBGRjMzN0Y3MDQwRDBFM0RGMTE0 MUMxNjE2MUMwHhcNMjUxMjExMDAwOTQ3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTNhMGJjYi0xM2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2rQA0aI0WXNJBzEG1gklB249SvGYjBikZOQEjKSIaqqO3Ee+5JiXL9cTvEi5 b08WDs/yfgycgMYW0DrE2ldW06AycwxfnHjSOQfe4CM3hbw+oxHz+ZcGtqFAg4p/ qG/pHKAvj2FdZ0XX0SMKaZ8/LTct8or0h+bBIj27ryyinSWM5K9587SO1c/Y2SIv QHaaVIVwcMuNsu8ojYEbGzBTGlREWoluvsYeeGz+cNAWfsRLJTlArGWQxcxmSmGo 7b7APurtBD63phfQZzkEk/ve61a4XIzVgEPzApnDtxoBx/BQX5rF1hHzqgNv7LXa q0+F07gmaeYjsTMYt9HhZaxdywIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFBlhjydp 8DoWEHvr/4KZUVhXzOL0MB8GA1UdIwQYMBaAFCU4AO0W7Q/zN/cEDQ498RQcFhYc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjhDOS8yMTk3QjA5MjU4 M0YxMUVEODE4MUU1N0JDNEY5QUUwMi9KVGdBN1JidERfTTM5d1FORGozeEZCd1dG aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pUZ0E3UmJ0RF9NMzl3UU5EajN4RkJ3V0Zody5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkI4QzkvMjE5N0IwOTI1ODNGMTFFRDgxODFFNTdCQzRGOUFFMDIvMkQyMTVCMzI1 ODQxMTFFREJFNTAxMDdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnaPQwDwQCAAIwCQMHACQCIMAAATANBgkqhkiG9w0BAQsF AAOCAQEAxA2j8jVAdOoQ62rMU7L1ZJ7VS4ZRuWzJ/ZWA8XzUHk+srjnwfFEcL1aO fMPhTi+LBwiiU0gwW5gGx41vELix8a/KqMe+SwYhlXZw0RA2NcIowzRP4DKwoR9W aYEgsz0NFJTWoT4Ty0RPG/2OHESfFa1+wok07/OpJgSUFHhCE/DrTRlb9QOCM95z TareMDuH7827inyNdbD9OlN1wYdGJwzJXGdzQNzLeNQ9wi6FcXEwJtG2Q56yqK9r 6RdHYfpRvAPXk27eGde4tAROBitDHQO1cLKRzu6xHttgd1KzBEjUDMzH9jPp/wBR v4o7XUaZAvboz22uf0HeJGt/DwxkyQ== -----END CERTIFICATE-----Generated at Sun Dec 21 09:46:38 2025 by rpki-client