This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/CD0ACC3AD9CE11EFA393BC6AC4F9AE02.roa File: CD0ACC3AD9CE11EFA393BC6AC4F9AE02.roa (raw, json) Hash identifier: duvvU3RUwkrsIo0/zHzxCyo+TK7pJnD32sQeSK2L5Jk= Subject key identifier: 95:8F:85:E1:9D:53:92:22:9F:27:67:A4:AB:37:B1:29:0D:6F:37:01 Certificate issuer: /CN=A91658EF/serialNumber=DDD53F5225ED2F8DA8D09E7AAD982C80B6CEADA8 Certificate serial: 07FD Authority key identifier: DD:D5:3F:52:25:ED:2F:8D:A8:D0:9E:7A:AD:98:2C:80:B6:CE:AD:A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/CD0ACC3AD9CE11EFA393BC6AC4F9AE02.roa Signing time: Mon 08 Dec 2025 06:42:13 +0000 ROA not before: Mon 08 Dec 2025 06:42:13 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 153038 IP address blocks: 103.83.233.0/24 maxlen: 24 203.89.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.crl rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 16:32:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2045 (0x7fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91658EF, serialNumber=DDD53F5225ED2F8DA8D09E7AAD982C80B6CEADA8 Validity Not Before: Dec 8 06:42:13 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69367345-9a58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a2:23:b8:28:3d:11:77:c8:c9:74:bd:8b:ec: 25:b0:8f:90:d7:8c:ea:71:33:d6:fc:38:02:fe:16: a6:a1:ba:ab:6e:e5:c0:9a:44:63:87:ad:6c:b9:df: c8:21:99:78:d4:57:ab:8c:5f:19:f2:0b:29:70:88: 2f:ae:64:fc:22:74:4a:96:13:7d:aa:ef:a6:db:07: 86:60:0a:05:15:b4:00:31:94:9a:ea:9e:42:bb:d7: fc:10:9e:e6:61:63:28:9c:e9:ca:3c:54:8b:9c:7f: 78:30:b9:24:a7:11:10:0c:10:7e:99:bd:a1:7e:c6: 21:ec:c0:de:0a:22:fc:ed:9b:de:5f:9e:7e:79:ed: b3:2a:07:61:7c:0d:71:a3:e4:44:66:f6:b0:fd:92: 1f:29:14:17:e6:b8:6e:e4:be:45:95:75:5b:c9:e1: 1b:e5:9d:6f:24:23:19:3d:c0:3d:28:db:34:e6:ca: 93:83:91:40:d8:8b:c1:6d:3d:d5:33:33:c5:e9:3f: 8c:4d:85:3c:82:48:8f:f5:da:62:c2:b4:84:27:6d: 3b:e9:2c:2e:5d:9b:97:50:06:97:00:c0:37:83:e2: a9:d4:2c:c2:e8:58:c6:c2:4e:6d:b2:e6:f0:b9:90: 22:44:0f:d8:84:10:a5:a6:ea:7a:88:14:df:8a:bd: 73:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:8F:85:E1:9D:53:92:22:9F:27:67:A4:AB:37:B1:29:0D:6F:37:01 X509v3 Authority Key Identifier: keyid:DD:D5:3F:52:25:ED:2F:8D:A8:D0:9E:7A:AD:98:2C:80:B6:CE:AD:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/CD0ACC3AD9CE11EFA393BC6AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.83.233.0/24 203.89.126.0/24 Signature Algorithm: sha256WithRSAEncryption 18:aa:04:ae:be:3b:8d:86:64:88:0f:3a:10:dd:07:54:b0:fc: dd:16:88:21:4d:ab:9b:59:a0:b1:6b:e6:0c:fb:9d:09:74:2c: c9:9d:b4:57:e8:c4:fa:13:46:2f:4d:60:ac:de:39:5d:1e:8c: 80:4e:ee:93:4b:ef:f0:45:3c:a3:28:b1:d8:c0:cb:e1:3c:3b: ed:d1:0b:bd:7c:9b:3d:72:d6:ed:a8:48:6f:57:d1:41:72:3a: 1e:43:21:b0:22:92:31:d8:06:fd:87:92:1e:f7:b5:8f:bb:dd: 05:2f:71:28:1f:5d:5a:47:1f:57:ab:e0:9d:22:22:7e:df:a8: c5:4c:89:50:83:b5:a1:e6:32:61:ae:4f:c4:64:2c:08:48:86: 12:4e:6b:27:00:71:b3:0b:56:81:84:f5:8d:97:48:f1:2e:46: 32:e1:af:d4:bc:07:4f:97:b5:b7:c3:37:6c:80:a7:fa:86:de: 9f:07:1e:e2:70:66:99:08:ac:2f:e0:b2:55:a4:b4:9a:ab:ca: 3e:45:bf:8f:2f:5f:24:e9:f9:9e:fc:fa:44:0a:4e:df:d9:4d: dc:52:3d:0e:dd:3a:f0:fc:66:92:e7:a5:17:52:09:6a:12:49: d4:00:28:76:3e:f2:ed:d4:bf:aa:f5:2c:1a:b4:de:7d:ac:13: 6f:61:f2:b0 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICB/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU4RUYxMTAvBgNVBAUTKERERDUzRjUyMjVFRDJGOERBOEQwOUU3QUFEOTgyQzgw QjZDRUFEQTgwHhcNMjUxMjA4MDY0MjEzWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTM2NzM0NS05YTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxKIjuCg9EXfIyXS9i+wlsI+Q14zqcTPW/DgC/hamobqrbuXAmkRjh61sud/I IZl41FerjF8Z8gspcIgvrmT8InRKlhN9qu+m2weGYAoFFbQAMZSa6p5Cu9f8EJ7m YWMonOnKPFSLnH94MLkkpxEQDBB+mb2hfsYh7MDeCiL87ZveX55+ee2zKgdhfA1x o+REZvaw/ZIfKRQX5rhu5L5FlXVbyeEb5Z1vJCMZPcA9KNs05sqTg5FA2IvBbT3V MzPF6T+MTYU8gkiP9dpiwrSEJ2076SwuXZuXUAaXAMA3g+Kp1CzC6FjGwk5tsubw uZAiRA/YhBClpup6iBTfir1zYQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJWPheGd U5IinydnpKs3sSkNbzcBMB8GA1UdIwQYMBaAFN3VP1Il7S+NqNCeeq2YLIC2zq2o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NThFRi9EMjQzMzc5NjRB RUMxMUU4ODQxN0YzNEFDNEY5QUUwMi8zZFVfVWlYdEw0Mm8wSjU2clpnc2dMYk9y YWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNkVV9VaVh0TDQybzBKNTZyWmdzZ0xiT3JhZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjU4RUYvRDI0MzM3OTY0QUVDMTFFODg0MTdGMzRBQzRGOUFFMDIvQ0QwQUNDM0FE OUNFMTFFRkEzOTNCQzZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABnU+kDBADLWX4wDQYJKoZIhvcNAQELBQADggEBABiqBK6+ O42GZIgPOhDdB1Sw/N0WiCFNq5tZoLFr5gz7nQl0LMmdtFfoxPoTRi9NYKzeOV0e jIBO7pNL7/BFPKMosdjAy+E8O+3RC718mz1y1u2oSG9X0UFyOh5DIbAikjHYBv2H kh73tY+73QUvcSgfXVpHH1er4J0iIn7fqMVMiVCDtaHmMmGuT8RkLAhIhhJOaycA cbMLVoGE9Y2XSPEuRjLhr9S8B0+XtbfDN2yAp/qG3p8HHuJwZpkIrC/gslWktJqr yj5Fv48vXyTp+Z78+kQKTt/ZTdxSPQ7dOvD8ZpLnpRdSCWoSSdQAKHY+8u3Uv6r1 LBq03n2sE29h8rA= -----END CERTIFICATE-----Generated at Sun Dec 21 14:41:08 2025 by rpki-client