This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/CFB0BEF68F7111EFBF50A331C4F9AE02.roa File: CFB0BEF68F7111EFBF50A331C4F9AE02.roa (raw, json) Hash identifier: gbdeW8ptNwaJpLtN8otNGwIuMn9t07L+3lBQeJnuSgY= Subject key identifier: C0:EC:0D:3F:B1:4D:F5:86:6F:20:DA:68:33:DF:CF:72:8F:8C:5C:1F Certificate issuer: /CN=A91C4E62/serialNumber=6580910B55FAE5FF60F71EB2070470A1262E343B Certificate serial: 0186 Authority key identifier: 65:80:91:0B:55:FA:E5:FF:60:F7:1E:B2:07:04:70:A1:26:2E:34:3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/CFB0BEF68F7111EFBF50A331C4F9AE02.roa Signing time: Mon 29 Dec 2025 03:23:31 +0000 ROA not before: Mon 29 Dec 2025 03:23:31 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 7545 IP address blocks: 103.42.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 03:10:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 390 (0x186) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4E62, serialNumber=6580910B55FAE5FF60F71EB2070470A1262E343B Validity Not Before: Dec 29 03:23:31 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6951f433-be0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2b:68:88:ed:9b:db:3f:90:1e:66:5f:06:fb: c5:eb:7a:42:19:8e:73:19:3e:c0:d1:60:e0:26:2e: 90:d1:e0:c7:c7:99:e8:36:a7:43:df:4a:a4:81:53: 30:66:2c:55:9e:f2:80:c1:63:4d:39:c6:3b:d1:bf: c7:69:b6:26:d2:8b:aa:64:9b:54:ae:55:60:77:50: e2:f6:ee:6a:58:80:b3:54:ba:b7:90:cd:90:51:77: 6f:c3:c0:a8:45:f6:8c:47:d1:97:1a:9c:64:f4:b4: 69:1d:cc:fd:e7:4a:9e:2c:56:ce:1e:a6:62:47:62: b6:b6:54:37:99:e4:46:eb:45:3b:c9:88:8a:4c:a2: 49:7d:fc:45:e4:73:aa:7d:06:ed:a7:b2:bc:40:99: 7f:18:de:c6:79:c2:bf:3b:a5:cd:c2:5d:c1:d4:2b: 98:ae:bd:c5:10:56:d0:36:0b:44:28:10:65:89:78: d4:e3:76:6c:2a:0d:62:95:c6:f0:24:a3:db:29:a0: b7:bb:ea:2b:58:27:25:4f:54:15:5b:5c:1e:02:e0: 0c:b2:30:ed:d7:38:6c:65:a0:0d:7e:df:75:b3:88: f1:eb:ad:10:9e:bf:81:fa:68:bc:a7:1e:c2:a7:15: 04:c9:1a:a1:be:17:ed:bf:b3:ee:36:e1:04:6e:33: 3b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:EC:0D:3F:B1:4D:F5:86:6F:20:DA:68:33:DF:CF:72:8F:8C:5C:1F X509v3 Authority Key Identifier: keyid:65:80:91:0B:55:FA:E5:FF:60:F7:1E:B2:07:04:70:A1:26:2E:34:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/CFB0BEF68F7111EFBF50A331C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.42.62.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:2e:8a:4d:65:cb:7d:6a:91:6d:de:ee:ef:6f:18:c9:1c:f6: 66:65:67:3e:6d:19:02:6d:9b:47:3c:42:43:f9:fa:94:14:db: b0:6f:dc:47:d3:2c:26:31:9e:18:3b:bf:d9:3d:a4:09:ff:9f: 1e:46:90:b4:c2:2d:41:29:fe:3e:ce:dd:ae:7c:e8:43:44:eb: 94:05:52:43:89:03:1f:02:b5:2e:66:5c:7c:22:89:51:8e:09: 65:27:46:9a:15:32:bc:95:0a:d6:5e:0f:2b:e1:aa:5c:1d:d6: 9a:d5:20:7f:34:43:21:f1:08:03:90:fa:95:f1:93:e6:4d:ff: 5e:d0:dc:c0:f3:e4:67:29:a7:f3:48:df:42:e6:db:5f:23:8a: e9:7b:04:5f:84:e1:5d:8f:ff:c9:b3:d8:80:f4:62:e7:ee:35: 0e:7c:d4:8d:18:6f:a9:1f:c8:8d:a0:75:41:98:00:da:f8:7c: c0:04:b7:c8:d4:31:df:1e:43:cc:66:cd:89:ca:fc:7c:e8:f1: 69:3c:ef:bd:38:c7:32:d6:d4:99:a8:46:3d:12:6d:fa:16:fe: d2:25:d0:3e:9e:b2:ba:4c:53:bb:73:77:3b:2f:85:14:36:a2: 4e:05:63:b0:93:4f:0d:38:ba:4e:b4:b4:18:96:51:8c:06:ea: e3:ba:1e:1a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QzRFNjIxMTAvBgNVBAUTKDY1ODA5MTBCNTVGQUU1RkY2MEY3MUVCMjA3MDQ3MEEx MjYyRTM0M0IwHhcNMjUxMjI5MDMyMzMxWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTUxZjQzMy1iZTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnitoiO2b2z+QHmZfBvvF63pCGY5zGT7A0WDgJi6Q0eDHx5noNqdD30qkgVMw ZixVnvKAwWNNOcY70b/HabYm0ouqZJtUrlVgd1Di9u5qWICzVLq3kM2QUXdvw8Co RfaMR9GXGpxk9LRpHcz950qeLFbOHqZiR2K2tlQ3meRG60U7yYiKTKJJffxF5HOq fQbtp7K8QJl/GN7GecK/O6XNwl3B1CuYrr3FEFbQNgtEKBBliXjU43ZsKg1ilcbw JKPbKaC3u+orWCclT1QVW1weAuAMsjDt1zhsZaANft91s4jx660Qnr+B+mi8px7C pxUEyRqhvhftv7PuNuEEbjM79QIDAQABo4IClTCCApEwHQYDVR0OBBYEFMDsDT+x TfWGbyDaaDPfz3KPjFwfMB8GA1UdIwQYMBaAFGWAkQtV+uX/YPcesgcEcKEmLjQ7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEU2Mi83MDJBMDI4Q0M5 OUYxMUVFQTgxNThFNzlDNEY5QUUwMi9aWUNSQzFYNjVmOWc5eDZ5QndSd29TWXVO RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pZQ1JDMVg2NWY5Zzl4NnlCd1J3b1NZdU5Ecy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzRFNjIvNzAyQTAyOENDOTlGMTFFRUE4MTU4RTc5QzRGOUFFMDIvQ0ZCMEJFRjY4 RjcxMTFFRkJGNTBBMzMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnKj4wDQYJKoZIhvcNAQELBQADggEBAHouik1ly31qkW3e 7u9vGMkc9mZlZz5tGQJtm0c8QkP5+pQU27Bv3EfTLCYxnhg7v9k9pAn/nx5GkLTC LUEp/j7O3a586ENE65QFUkOJAx8CtS5mXHwiiVGOCWUnRpoVMryVCtZeDyvhqlwd 1prVIH80QyHxCAOQ+pXxk+ZN/17Q3MDz5Gcpp/NI30Lm218jiul7BF+E4V2P/8mz 2ID0YufuNQ581I0Yb6kfyI2gdUGYANr4fMAEt8jUMd8eQ8xmzYnK/Hzo8Wk87704 xzLW1JmoRj0SbfoW/tIl0D6esrpMU7tzdzsvhRQ2ok4FY7CTTw04uk60tBiWUYwG 6uO6Hho= -----END CERTIFICATE-----Generated at Wed Jan 21 13:20:32 2026 by rpki-client