This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/807CB298903A11EBA9783756C4F9AE02.roa File: 807CB298903A11EBA9783756C4F9AE02.roa (raw, json) Hash identifier: Q95/nW6cBcg6eSxuqekACSAFlF9Gvg9OiOnkTSpqx38= Subject key identifier: A8:7E:46:61:5A:A0:98:C4:87:4B:49:08:A7:D8:43:C9:43:77:81:5F Certificate issuer: /CN=A9157B66/serialNumber=C455B086BAB8647CD2510CA83241E70014CD8A44 Certificate serial: 06A3 Authority key identifier: C4:55:B0:86:BA:B8:64:7C:D2:51:0C:A8:32:41:E7:00:14:CD:8A:44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xFWwhrq4ZHzSUQyoMkHnABTNikQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/807CB298903A11EBA9783756C4F9AE02.roa Signing time: Thu 04 Dec 2025 21:34:32 +0000 ROA not before: Thu 04 Dec 2025 21:34:32 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 132102 IP address blocks: 103.28.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.crl rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xFWwhrq4ZHzSUQyoMkHnABTNikQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:14:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1699 (0x6a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157B66, serialNumber=C455B086BAB8647CD2510CA83241E70014CD8A44 Validity Not Before: Dec 4 21:34:32 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6931fe68-7a3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:1c:aa:91:0a:84:75:83:38:6e:e2:8a:f9:23: 36:e1:e1:17:39:14:3d:96:cc:ed:19:d3:ec:11:d9: fa:86:74:41:aa:94:2b:44:f8:9a:d9:85:75:b0:67: 72:81:e9:bd:26:c3:bc:2c:c3:df:01:a4:02:e8:7b: e4:36:b5:38:12:14:20:77:d3:9d:03:13:83:a9:06: 84:dc:39:0a:c6:b6:a9:5d:12:e1:9d:7a:93:21:fb: 16:be:ce:d9:49:a9:53:aa:6c:67:77:92:f8:fd:24: 67:ad:c8:5b:8d:a0:ec:f4:6f:57:67:d8:d4:9a:95: 8d:bd:f7:da:1a:68:57:01:24:c9:57:46:03:72:07: 33:f9:c1:12:67:c1:5d:62:8e:12:68:a5:fd:77:bc: 7d:07:f2:67:ea:3c:a6:b5:75:3a:43:06:34:88:5b: d4:1f:ed:2c:55:78:a7:f0:29:bc:ac:aa:64:a2:4b: 2c:7b:ac:4b:b6:32:18:f4:ac:46:b6:2d:1e:f7:02: 77:f3:9d:05:3b:e8:32:37:ab:07:d2:5f:17:db:3d: 90:b4:f3:cb:a4:3e:dd:c9:93:90:6a:a7:ef:a1:1a: 95:fa:18:0a:03:f4:4f:db:df:44:3e:9c:5e:d1:61: 80:b8:84:03:d5:e9:0a:bf:38:d4:16:47:12:b5:eb: 66:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:7E:46:61:5A:A0:98:C4:87:4B:49:08:A7:D8:43:C9:43:77:81:5F X509v3 Authority Key Identifier: keyid:C4:55:B0:86:BA:B8:64:7C:D2:51:0C:A8:32:41:E7:00:14:CD:8A:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xFWwhrq4ZHzSUQyoMkHnABTNikQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/807CB298903A11EBA9783756C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.28.20.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:89:24:03:e8:b6:c1:0b:6e:c5:80:f1:34:99:39:53:45:1d: 46:21:70:78:d0:98:e4:97:9e:41:a0:bd:61:bd:6d:1d:7e:10: 3c:69:5a:46:5d:24:63:01:00:07:5b:82:6a:c5:7f:71:c3:38: 2a:1a:a6:f2:90:e1:5d:09:5a:df:e7:aa:f2:9d:03:86:df:01: ea:1c:92:f4:4c:c6:76:09:49:69:bf:ff:5f:76:21:da:a6:ce: 01:d3:d9:a6:00:67:4a:03:43:b2:8b:04:d1:eb:2d:55:44:d9: e1:8c:5c:1f:98:60:4e:30:c3:32:e9:61:b7:8e:3c:bb:36:af: 34:32:e9:37:89:7e:2f:57:6d:c4:b6:56:a0:36:da:88:f0:ff: 44:e4:dc:62:88:1a:26:78:10:98:27:d7:03:ca:ed:b1:41:5d: 8a:ad:3b:12:3f:22:8d:d7:67:e9:78:79:d6:db:11:de:ea:c2: 18:7e:af:44:42:2b:11:3c:1d:fd:f1:ea:63:6a:4d:e2:ae:ed: 43:f1:32:3e:c6:8b:ce:c5:78:46:8d:51:95:18:a5:ec:61:1b: ad:6d:e2:17:64:5f:f6:ed:92:a8:fb:fb:80:b5:78:b9:4d:c9: bd:32:9d:f5:73:d3:ca:60:68:75:f6:4e:ba:7f:35:7a:d2:f2: d7:fa:59:22 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdCNjYxMTAvBgNVBAUTKEM0NTVCMDg2QkFCODY0N0NEMjUxMENBODMyNDFFNzAw MTRDRDhBNDQwHhcNMjUxMjA0MjEzNDMyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTMxZmU2OC03YTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5xyqkQqEdYM4buKK+SM24eEXORQ9lsztGdPsEdn6hnRBqpQrRPia2YV1sGdy gem9JsO8LMPfAaQC6HvkNrU4EhQgd9OdAxODqQaE3DkKxrapXRLhnXqTIfsWvs7Z SalTqmxnd5L4/SRnrchbjaDs9G9XZ9jUmpWNvffaGmhXASTJV0YDcgcz+cESZ8Fd Yo4SaKX9d7x9B/Jn6jymtXU6QwY0iFvUH+0sVXin8Cm8rKpkoksse6xLtjIY9KxG ti0e9wJ3850FO+gyN6sH0l8X2z2QtPPLpD7dyZOQaqfvoRqV+hgKA/RP299EPpxe 0WGAuIQD1ekKvzjUFkcStetmKwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKh+RmFa oJjEh0tJCKfYQ8lDd4FfMB8GA1UdIwQYMBaAFMRVsIa6uGR80lEMqDJB5wAUzYpE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0I2Ni9FNUM0RDMyNjkw MzgxMUVCQTREQzVBNTRDNEY5QUUwMi94Rld3aHJxNFpIelNVUXlvTWtIbkFCVE5p a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hGV3docnE0Wkh6U1VReW9Na0huQUJUTmlrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdCNjYvRTVDNEQzMjY5MDM4MTFFQkE0REM1QTU0QzRGOUFFMDIvODA3Q0IyOTg5 MDNBMTFFQkE5NzgzNzU2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnHBQwDQYJKoZIhvcNAQELBQADggEBAA6JJAPotsELbsWA 8TSZOVNFHUYhcHjQmOSXnkGgvWG9bR1+EDxpWkZdJGMBAAdbgmrFf3HDOCoapvKQ 4V0JWt/nqvKdA4bfAeockvRMxnYJSWm//192IdqmzgHT2aYAZ0oDQ7KLBNHrLVVE 2eGMXB+YYE4wwzLpYbeOPLs2rzQy6TeJfi9XbcS2VqA22ojw/0Tk3GKIGiZ4EJgn 1wPK7bFBXYqtOxI/Io3XZ+l4edbbEd7qwhh+r0RCKxE8Hf3x6mNqTeKu7UPxMj7G i87FeEaNUZUYpexhG61t4hdkX/btkqj7+4C1eLlNyb0ynfVz08pgaHX2Trp/NXrS 8tf6WSI= -----END CERTIFICATE-----Generated at Sun Dec 7 03:38:48 2025 by rpki-client