This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/CFBB0C48B28A11EBB4CE6E70C4F9AE02.roa File: CFBB0C48B28A11EBB4CE6E70C4F9AE02.roa (raw, json) Hash identifier: ijiCAPwBqro/NY/HWHS1Qe1Is15S0zP4v93++I4AYLE= Subject key identifier: 43:B8:5C:5F:66:90:0B:50:C4:BA:29:BB:43:F6:A0:DC:B0:89:85:EE Certificate issuer: /CN=A914C10B/serialNumber=109CB71B4F64166F1DDA422CEB721EE3ED196798 Certificate serial: 0647 Authority key identifier: 10:9C:B7:1B:4F:64:16:6F:1D:DA:42:2C:EB:72:1E:E3:ED:19:67:98 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/CFBB0C48B28A11EBB4CE6E70C4F9AE02.roa Signing time: Tue 04 Nov 2025 23:12:57 +0000 ROA not before: Tue 04 Nov 2025 23:12:57 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 54238 IP address blocks: 164.153.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:24:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1607 (0x647) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C10B, serialNumber=109CB71B4F64166F1DDA422CEB721EE3ED196798 Validity Not Before: Nov 4 23:12:57 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=690a8878-f24e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:14:81:9f:db:f8:9a:4b:aa:57:ed:9f:54:51: 8e:ff:82:a8:b7:71:c6:c7:32:76:2e:94:1b:fe:d4: 75:bb:2f:8d:03:75:67:6c:fc:12:ad:df:df:22:68: 96:07:a8:fb:35:5e:ea:4a:cb:02:d2:9e:e0:93:eb: b5:40:32:32:ac:65:54:64:97:4c:a3:4d:f2:4b:17: 49:a0:f2:4b:8b:07:d6:96:60:9b:63:b2:87:a5:b4: b9:73:57:cf:28:a3:7b:2b:fe:97:37:70:ac:b3:e7: 52:4c:cf:7c:bb:7f:1e:74:f4:75:b2:12:50:27:e2: 53:fa:26:1e:9b:33:f6:83:a8:46:f6:2c:47:91:e7: bc:e9:04:ef:a6:b7:6f:f4:fe:fd:04:b2:b3:c9:b1: 28:d5:8d:b7:a3:22:85:57:ba:3e:d9:8d:c3:1e:05: a0:16:1a:af:e9:db:70:29:cd:6b:68:0a:34:2d:b8: 5f:ac:cc:7f:e8:bf:88:d2:5e:16:46:2d:e3:eb:a6: 5b:f6:dc:e2:63:0a:0f:32:5e:c4:53:64:94:21:5e: e9:83:1c:7e:89:4f:08:2c:54:1b:00:ef:fa:f2:68: be:73:6c:96:b9:5a:37:10:4f:37:b2:fc:4f:93:46: a4:8a:38:cc:14:bd:e5:95:20:ca:c7:48:11:6d:78: 81:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:B8:5C:5F:66:90:0B:50:C4:BA:29:BB:43:F6:A0:DC:B0:89:85:EE X509v3 Authority Key Identifier: keyid:10:9C:B7:1B:4F:64:16:6F:1D:DA:42:2C:EB:72:1E:E3:ED:19:67:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/CFBB0C48B28A11EBB4CE6E70C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 164.153.28.0/22 Signature Algorithm: sha256WithRSAEncryption 73:6b:0c:af:26:5c:2b:cc:1f:20:55:1e:47:84:38:aa:e7:c1: f7:f5:ae:20:cf:41:aa:35:45:4e:c4:d4:f6:46:26:0a:81:2a: 51:be:33:b1:6b:a3:c0:3a:c4:36:f6:c3:cb:c9:8d:ff:bd:9d: ab:72:c9:78:cd:ba:91:85:08:49:7f:61:12:15:7a:5f:47:2c: fb:fc:8a:58:eb:1d:57:d2:aa:65:5d:ee:42:66:00:66:99:8f: bf:5f:66:c5:77:bf:07:47:18:dd:9c:5d:6c:89:6a:ed:91:6e: b6:2a:da:92:51:c5:4d:e7:5f:c1:0a:c3:ad:ae:cf:42:c4:63: 68:17:d9:b8:f2:c4:09:33:2f:e7:95:da:6c:e0:2a:5f:3f:7b: 4c:b2:df:84:b9:b8:af:d3:51:da:75:79:12:ce:db:23:eb:d4: f2:5b:14:1e:2c:f9:e4:95:3d:f2:fa:e9:ae:e7:cd:8c:09:50: f3:62:a3:08:d8:b7:29:55:6d:c7:06:6d:ef:be:13:1c:41:fb: 4b:29:cd:21:f2:89:08:e1:24:fc:b3:4f:66:02:2c:17:b8:9f: 21:52:50:19:5f:18:ef:34:48:d4:99:3a:cc:57:ed:0a:58:f9: 59:e1:6a:15:7d:53:6e:32:8d:7e:a5:a8:6e:b0:3e:f5:8d:52: 6b:1b:86:93 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMxMEIxMTAvBgNVBAUTKDEwOUNCNzFCNEY2NDE2NkYxRERBNDIyQ0VCNzIxRUUz RUQxOTY3OTgwHhcNMjUxMTA0MjMxMjU3WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTBhODg3OC1mMjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqRSBn9v4mkuqV+2fVFGO/4Kot3HGxzJ2LpQb/tR1uy+NA3VnbPwSrd/fImiW B6j7NV7qSssC0p7gk+u1QDIyrGVUZJdMo03ySxdJoPJLiwfWlmCbY7KHpbS5c1fP KKN7K/6XN3Css+dSTM98u38edPR1shJQJ+JT+iYemzP2g6hG9ixHkee86QTvprdv 9P79BLKzybEo1Y23oyKFV7o+2Y3DHgWgFhqv6dtwKc1raAo0LbhfrMx/6L+I0l4W Ri3j66Zb9tziYwoPMl7EU2SUIV7pgxx+iU8ILFQbAO/68mi+c2yWuVo3EE83svxP k0akijjMFL3llSDKx0gRbXiBwQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEO4XF9m kAtQxLopu0P2oNywiYXuMB8GA1UdIwQYMBaAFBCctxtPZBZvHdpCLOtyHuPtGWeY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzEwQi83MjMxQzNEQUFG NjIxMUVCOEJBMUY3MTRDNEY5QUUwMi9FSnkzRzA5a0ZtOGQya0lzNjNJZTQtMFpa NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VKeTNHMDlrRm04ZDJrSXM2M0llNC0wWlo1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEMxMEIvNzIzMUMzREFBRjYyMTFFQjhCQTFGNzE0QzRGOUFFMDIvQ0ZCQjBDNDhC MjhBMTFFQkI0Q0U2RTcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAKkmRwwDQYJKoZIhvcNAQELBQADggEBAHNrDK8mXCvMHyBV HkeEOKrnwff1riDPQao1RU7E1PZGJgqBKlG+M7Fro8A6xDb2w8vJjf+9natyyXjN upGFCEl/YRIVel9HLPv8iljrHVfSqmVd7kJmAGaZj79fZsV3vwdHGN2cXWyJau2R brYq2pJRxU3nX8EKw62uz0LEY2gX2bjyxAkzL+eV2mzgKl8/e0yy34S5uK/TUdp1 eRLO2yPr1PJbFB4s+eSVPfL66a7nzYwJUPNiowjYtylVbccGbe++ExxB+0spzSHy iQjhJPyzT2YCLBe4nyFSUBlfGO80SNSZOsxX7QpY+VnhahV9U24yjX6lqG6wPvWN UmsbhpM= -----END CERTIFICATE-----Generated at Sat Dec 6 19:30:15 2025 by rpki-client