This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/CB91083CA63511EA900DB923C4F9AE02.roa File: CB91083CA63511EA900DB923C4F9AE02.roa (raw, json) Hash identifier: KRP5pleElBDwvDaskptjChfjzDrOYjS3S4C7zIP+PUA= Subject key identifier: D6:B9:BE:F4:A1:E2:D5:EF:C0:97:E3:E2:45:4D:34:7F:9C:5E:37:1C Certificate issuer: /CN=A917C185/serialNumber=AE4718E5F32F004A0312FEB869ADCBBCC4EEE516 Certificate serial: 09AC Authority key identifier: AE:47:18:E5:F3:2F:00:4A:03:12:FE:B8:69:AD:CB:BC:C4:EE:E5:16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/CB91083CA63511EA900DB923C4F9AE02.roa Signing time: Mon 08 Dec 2025 19:30:32 +0000 ROA not before: Mon 08 Dec 2025 19:30:32 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 45559 IP address blocks: 103.10.200.0/22 maxlen: 24 116.206.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.crl rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 19:34:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2476 (0x9ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C185, serialNumber=AE4718E5F32F004A0312FEB869ADCBBCC4EEE516 Validity Not Before: Dec 8 19:30:32 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69372757-90cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ac:51:73:c0:1f:18:c7:f5:95:f9:8e:52:a5: 55:63:b7:72:cb:e9:8f:11:9b:9c:4c:d0:6a:19:0b: 10:74:07:ae:64:c3:19:68:59:a0:5d:88:ae:07:d2: f2:61:0b:01:ef:45:1e:dd:90:8c:0e:e1:f1:0a:ca: b8:ea:e7:46:36:4d:84:07:de:92:f3:df:d5:aa:bb: 39:c7:c8:96:95:93:63:bb:74:3a:61:be:ed:90:36: e0:89:d8:0b:62:c8:2d:7a:eb:61:55:59:f2:8a:e9: be:10:c4:57:16:4b:b3:11:6e:47:c0:b9:4b:73:4c: 95:13:74:c3:a8:e3:e6:69:ec:c2:76:b5:ee:b7:bc: c3:13:bd:84:29:1d:13:86:60:49:a4:4b:ab:c2:3b: 9d:a9:79:8a:d5:65:75:0a:af:99:0b:bc:fb:c6:11: fe:95:00:ae:72:5f:e6:1f:ba:6a:d4:87:dc:d2:62: e8:21:64:a1:19:ed:3a:9a:6a:44:12:3a:ad:3f:0a: 94:47:25:5d:5c:b7:3c:73:ec:15:04:56:07:c9:03: 99:ae:8c:73:f3:e0:69:34:b1:64:05:bc:57:1d:78: 37:49:77:73:5d:27:12:4b:36:a6:45:00:1d:92:be: 0f:dc:f0:dc:c0:6f:d8:1a:c2:88:9d:63:c5:e1:d8: 8c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:B9:BE:F4:A1:E2:D5:EF:C0:97:E3:E2:45:4D:34:7F:9C:5E:37:1C X509v3 Authority Key Identifier: keyid:AE:47:18:E5:F3:2F:00:4A:03:12:FE:B8:69:AD:CB:BC:C4:EE:E5:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/CB91083CA63511EA900DB923C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.10.200.0/22 116.206.108.0/22 Signature Algorithm: sha256WithRSAEncryption 99:7c:35:e5:84:54:27:29:c4:88:db:31:8a:72:5a:62:94:e4: 04:b4:87:8c:24:85:12:d8:15:8e:de:d5:0e:76:5a:8c:c8:e4: e2:46:2e:5d:ad:1d:bd:42:0f:1b:32:f1:c2:e3:b0:9d:49:42: c1:41:a6:c1:d1:ef:92:cd:b3:da:f0:aa:a1:1a:3f:92:93:66: f0:70:53:8e:7d:2b:7c:b1:48:83:d1:45:0e:b3:bd:7a:7d:89: b2:6f:f0:1a:64:dc:8b:7e:93:75:93:f4:0e:fc:bc:42:0d:15: 7d:17:1f:c9:d4:53:a9:68:d8:10:49:ba:5b:37:46:bc:a0:94: 60:db:0a:2c:3a:05:57:89:ed:d6:ad:91:98:ae:91:6e:52:71: 86:97:34:8f:5d:46:81:f2:41:c6:36:fa:3f:86:3d:8e:55:c1: 30:4c:f5:7d:ee:8b:e5:ef:ef:01:e8:1e:ee:11:28:9c:6d:72: 17:c0:2e:1d:eb:de:03:d3:8a:a6:9a:e9:0b:90:73:84:f0:93: ac:78:b8:ca:93:06:48:26:09:be:5a:21:25:21:42:c3:9b:47: 1f:76:c8:4a:d3:c0:d2:a8:27:c7:21:46:d7:d3:c9:e6:f5:e1: f4:32:27:74:ad:e9:c7:1c:55:12:e7:fd:48:48:49:92:79:a9: ab:c9:4a:11 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICCawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MxODUxMTAvBgNVBAUTKEFFNDcxOEU1RjMyRjAwNEEwMzEyRkVCODY5QURDQkJD QzRFRUU1MTYwHhcNMjUxMjA4MTkzMDMyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTM3Mjc1Ny05MGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvKxRc8AfGMf1lfmOUqVVY7dyy+mPEZucTNBqGQsQdAeuZMMZaFmgXYiuB9Ly YQsB70Ue3ZCMDuHxCsq46udGNk2EB96S89/Vqrs5x8iWlZNju3Q6Yb7tkDbgidgL YsgteuthVVnyium+EMRXFkuzEW5HwLlLc0yVE3TDqOPmaezCdrXut7zDE72EKR0T hmBJpEurwjudqXmK1WV1Cq+ZC7z7xhH+lQCucl/mH7pq1Ifc0mLoIWShGe06mmpE EjqtPwqURyVdXLc8c+wVBFYHyQOZroxz8+BpNLFkBbxXHXg3SXdzXScSSzamRQAd kr4P3PDcwG/YGsKInWPF4diMewIDAQABo4ICmzCCApcwHQYDVR0OBBYEFNa5vvSh 4tXvwJfj4kVNNH+cXjccMB8GA1UdIwQYMBaAFK5HGOXzLwBKAxL+uGmty7zE7uUW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzE4NS8yMDIyNzZCQTlC RkYxMUVBODQzNkZDNDVDNEY5QUUwMi9ya2NZNWZNdkFFb0RFdjY0YWEzTHZNVHU1 UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JrY1k1Zk12QUVvREV2NjRhYTNMdk1UdTVSWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0MxODUvMjAyMjc2QkE5QkZGMTFFQTg0MzZGQzQ1QzRGOUFFMDIvQ0I5MTA4M0NB NjM1MTFFQTkwMERCOTIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnCsgDBAJ0zmwwDQYJKoZIhvcNAQELBQADggEBAJl8NeWE VCcpxIjbMYpyWmKU5AS0h4wkhRLYFY7e1Q52WozI5OJGLl2tHb1CDxsy8cLjsJ1J QsFBpsHR75LNs9rwqqEaP5KTZvBwU459K3yxSIPRRQ6zvXp9ibJv8Bpk3It+k3WT 9A78vEINFX0XH8nUU6lo2BBJuls3RryglGDbCiw6BVeJ7datkZiukW5ScYaXNI9d RoHyQcY2+j+GPY5VwTBM9X3ui+Xv7wHoHu4RKJxtchfALh3r3gPTiqaa6QuQc4Tw k6x4uMqTBkgmCb5aISUhQsObRx92yErTwNKoJ8chRtfTyeb14fQyJ3St6cccVRLn /UhISZJ5qavJShE= -----END CERTIFICATE-----Generated at Fri Dec 19 00:56:07 2025 by rpki-client