This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/CEDD71FAE48811F09BEEC367446F56BC.roa File: CEDD71FAE48811F09BEEC367446F56BC.roa (raw, json) Hash identifier: WkbEE1SygwzG6hEBI/Jx/kCZUdDk1hDRWUUjeETzz8Q= Subject key identifier: 38:B4:7B:6E:1C:70:25:1E:85:30:90:DF:E6:53:63:B0:EB:A4:E3:47 Certificate issuer: /CN=A91F85CD/serialNumber=E211CD85E072550E33E4CC86A63FBCDFAD1D3532 Certificate serial: 0882 Authority key identifier: E2:11:CD:85:E0:72:55:0E:33:E4:CC:86:A6:3F:BC:DF:AD:1D:35:32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4hHNheByVQ4z5MyGpj-8360dNTI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/CEDD71FAE48811F09BEEC367446F56BC.roa Signing time: Mon 29 Dec 2025 07:34:29 +0000 ROA not before: Mon 29 Dec 2025 07:34:28 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 15830 IP address blocks: 103.30.234.0/24 maxlen: 24 103.30.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/4hHNheByVQ4z5MyGpj-8360dNTI.crl rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/4hHNheByVQ4z5MyGpj-8360dNTI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4hHNheByVQ4z5MyGpj-8360dNTI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Jan 2026 20:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2178 (0x882) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F85CD, serialNumber=E211CD85E072550E33E4CC86A63FBCDFAD1D3532 Validity Not Before: Dec 29 07:34:28 2025 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69522f04-bf18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ed:06:a7:0c:ef:a6:6e:35:b1:1f:d6:8b:87: 15:af:ee:92:79:fd:50:8f:fd:e6:3c:e4:31:73:a2: 24:f5:b3:f4:de:3a:ef:aa:16:c8:04:a3:d5:af:69: 4b:f8:7c:bd:af:13:8b:ce:50:30:54:67:1d:56:f7: 3c:7c:d8:be:eb:e8:6e:62:a1:91:fe:0d:1b:8a:f6: 97:de:28:55:60:a1:f9:b6:28:35:a4:80:49:9e:9b: 6c:84:2b:6a:38:5a:bf:45:1e:84:f7:d1:3d:3e:58: b5:a8:c7:06:bc:68:8b:65:44:6d:3c:1f:07:56:f7: 97:85:e5:10:39:05:af:c1:a4:3f:3f:83:ce:a6:55: cc:fa:b1:60:37:7d:b0:b5:be:1f:4b:98:67:27:46: 52:36:4b:4f:40:28:29:8e:ce:cf:b3:d1:5f:ca:1d: 42:6e:59:a1:8c:01:be:46:03:50:e8:ea:22:72:95: 42:93:6b:29:45:cd:cd:a5:de:b2:2e:5a:de:e8:b7: f4:49:be:43:9f:ac:7c:09:d0:4d:6e:b7:13:f1:29: 8c:f3:e8:e8:6b:3a:43:b1:41:8c:de:09:b0:c0:e5: 50:65:db:1a:c2:c8:28:dc:9c:dd:e9:bb:8d:20:7f: 9b:58:b2:79:56:85:6b:22:9b:24:df:0c:be:78:16: c6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B4:7B:6E:1C:70:25:1E:85:30:90:DF:E6:53:63:B0:EB:A4:E3:47 X509v3 Authority Key Identifier: keyid:E2:11:CD:85:E0:72:55:0E:33:E4:CC:86:A6:3F:BC:DF:AD:1D:35:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/4hHNheByVQ4z5MyGpj-8360dNTI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4hHNheByVQ4z5MyGpj-8360dNTI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/CEDD71FAE48811F09BEEC367446F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.30.234.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:73:1a:fd:7d:94:41:21:22:a4:fe:10:f2:c0:e1:63:10:05: db:b8:da:e1:35:b1:5f:91:2e:67:53:3a:55:ad:63:b0:92:e2: 6d:fd:03:e1:a3:a7:62:b2:a9:67:6c:bd:5d:96:03:13:b9:05: d3:9a:07:eb:68:22:41:8a:8b:79:0c:ef:73:79:0d:12:66:f0: 3d:a9:de:ae:1b:c0:4a:ec:6a:79:eb:76:a0:bc:83:82:54:69: 10:df:6f:58:1f:03:96:5c:56:f2:00:90:16:7a:f0:c0:db:c9: 11:5a:24:1a:d5:27:f8:5f:0f:3e:86:3e:7b:aa:35:0d:49:36: 4d:12:19:57:9f:83:32:88:80:d8:8a:f0:5d:7f:65:30:c0:2a: 10:45:fe:4a:43:49:ea:b8:26:49:49:65:f7:d3:ec:b1:41:c7: bd:85:16:f7:4c:86:ab:6c:68:3b:f8:b2:d0:05:55:36:7d:b3: cb:39:2f:74:0b:0c:f1:e5:ea:22:24:71:06:28:27:c0:3d:da: 93:a9:33:84:8b:7d:83:be:78:10:1f:fc:cf:0a:bc:2d:f7:0e: 70:c9:c4:85:db:f9:f7:1d:d6:c3:72:8b:7b:0f:ad:72:f6:85: 68:47:38:ed:39:e4:be:4f:f0:94:f3:7d:6b:65:e9:e8:51:54: 22:4f:98:fe -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx Rjg1Q0QxMTAvBgNVBAUTKEUyMTFDRDg1RTA3MjU1MEUzM0U0Q0M4NkE2M0ZCQ0RG QUQxRDM1MzIwHhcNMjUxMjI5MDczNDI4WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDDA02OTUyMmYwNC1iZjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2+0Gpwzvpm41sR/Wi4cVr+6Sef1Qj/3mPOQxc6Ik9bP03jrvqhbIBKPVr2lL +Hy9rxOLzlAwVGcdVvc8fNi+6+huYqGR/g0bivaX3ihVYKH5tig1pIBJnptshCtq OFq/RR6E99E9Pli1qMcGvGiLZURtPB8HVveXheUQOQWvwaQ/P4POplXM+rFgN32w tb4fS5hnJ0ZSNktPQCgpjs7Ps9Ffyh1CblmhjAG+RgNQ6OoicpVCk2spRc3Npd6y Llre6Lf0Sb5Dn6x8CdBNbrcT8SmM8+joazpDsUGM3gmwwOVQZdsawsgo3Jzd6buN IH+bWLJ5VoVrIpsk3wy+eBbG2QIDAQABo4IClTCCApEwHQYDVR0OBBYEFDi0e24c cCUehTCQ3+ZTY7DrpONHMB8GA1UdIwQYMBaAFOIRzYXgclUOM+TMhqY/vN+tHTUy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODVDRC84QTUwNTU4OERE MTkxMUVBOTREMjYwMTFDNEY5QUUwMi80aEhOaGVCeVZRNHo1TXlHcGotODM2MGRO VEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRoSE5oZUJ5VlE0ejVNeUdwai04MzYwZE5USS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Rjg1Q0QvOEE1MDU1ODhERDE5MTFFQTk0RDI2MDExQzRGOUFFMDIvQ0VERDcxRkFF NDg4MTFGMDlCRUVDMzY3NDQ2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnHuowDQYJKoZIhvcNAQELBQADggEBAF1zGv19lEEhIqT+ EPLA4WMQBdu42uE1sV+RLmdTOlWtY7CS4m39A+Gjp2KyqWdsvV2WAxO5BdOaB+to IkGKi3kM73N5DRJm8D2p3q4bwErsannrdqC8g4JUaRDfb1gfA5ZcVvIAkBZ68MDb yRFaJBrVJ/hfDz6GPnuqNQ1JNk0SGVefgzKIgNiK8F1/ZTDAKhBF/kpDSeq4JklJ ZffT7LFBx72FFvdMhqtsaDv4stAFVTZ9s8s5L3QLDPHl6iIkcQYoJ8A92pOpM4SL fYO+eBAf/M8KvC33DnDJxIXb+fcd1sNyi3sPrXL2hWhHOO055L5P8JTzfWtl6ehR VCJPmP4= -----END CERTIFICATE-----Generated at Sat Jan 3 04:53:26 2026 by rpki-client