This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/6337963E4C3D11ECB5FF844FC4F9AE02.roa File: 6337963E4C3D11ECB5FF844FC4F9AE02.roa (raw, json) Hash identifier: aTXEi1LzXTl0g2LyujQDHdlXFvir0+qlzsPxrUIKoNA= Subject key identifier: 58:19:C5:64:C2:9C:6E:7B:C5:32:81:8E:57:00:C8:B8:F2:AA:A6:6A Certificate issuer: /CN=A9167CC5/serialNumber=5D2785B54D163ED01EA5418BCFA34F1B7456B713 Certificate serial: 04F4 Authority key identifier: 5D:27:85:B5:4D:16:3E:D0:1E:A5:41:8B:CF:A3:4F:1B:74:56:B7:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XSeFtU0WPtAepUGLz6NPG3RWtxM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/6337963E4C3D11ECB5FF844FC4F9AE02.roa Signing time: Fri 28 Nov 2025 22:54:40 +0000 ROA not before: Fri 28 Nov 2025 22:54:40 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 6453 IP address blocks: 103.23.24.0/24 maxlen: 24 103.23.25.0/24 maxlen: 24 103.23.26.0/24 maxlen: 24 103.23.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.crl rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XSeFtU0WPtAepUGLz6NPG3RWtxM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:21:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1268 (0x4f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167CC5, serialNumber=5D2785B54D163ED01EA5418BCFA34F1B7456B713 Validity Not Before: Nov 28 22:54:40 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=692a2830-b032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3f:60:74:40:fd:24:cc:7c:f5:8b:bf:3b:e2: 1a:5f:f9:da:1a:6b:47:fd:53:f5:67:a1:e6:47:b2: 0c:55:67:a8:71:c8:aa:a5:20:57:51:4b:38:cd:27: 3f:58:60:cd:90:ab:62:18:ac:b0:2f:e6:93:7e:d4: 78:9c:1c:d1:87:49:f8:92:2e:b3:88:69:20:fb:d7: 87:5e:33:8b:7a:ab:b3:71:1b:77:12:ff:db:73:c2: e7:ed:d8:83:96:94:d1:71:e0:30:76:1d:44:98:21: 78:b3:3f:6d:6c:63:92:b3:d5:12:45:d1:2e:48:83: 4b:5b:02:ce:01:22:eb:b0:8e:77:ab:1f:08:68:c5: 11:15:f8:2c:99:ee:fb:af:14:b3:37:25:42:1a:5c: ac:9a:69:f5:0b:b1:1f:1f:ba:c8:7e:35:7d:12:26: b3:a0:02:2f:a6:30:e2:0a:f1:ff:6d:9a:a7:35:b9: 9c:87:0d:80:d0:51:b1:7e:90:51:e3:6e:4f:bc:77: ae:ce:cf:10:05:b4:b1:94:74:51:5d:9c:59:f0:4c: c7:e8:66:f5:3d:ba:3f:17:13:8d:7a:40:04:a5:ec: 79:1f:59:6c:9d:cb:eb:d2:0c:16:d0:48:17:0c:af: 2c:c2:83:f4:3d:42:d3:0c:80:11:14:42:c0:f8:e8: cd:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:19:C5:64:C2:9C:6E:7B:C5:32:81:8E:57:00:C8:B8:F2:AA:A6:6A X509v3 Authority Key Identifier: keyid:5D:27:85:B5:4D:16:3E:D0:1E:A5:41:8B:CF:A3:4F:1B:74:56:B7:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XSeFtU0WPtAepUGLz6NPG3RWtxM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/6337963E4C3D11ECB5FF844FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.23.24.0/22 Signature Algorithm: sha256WithRSAEncryption 48:2d:08:44:57:10:70:7d:c7:39:80:29:57:c8:68:70:46:1f: 64:fb:96:f0:46:c3:c3:8c:f9:76:d7:85:36:26:72:03:3f:09: c4:48:59:ba:4b:2f:60:e8:33:20:b0:18:a2:59:b7:78:15:3a: 1d:7f:79:92:19:ea:0c:77:d0:36:32:69:72:f1:a1:41:98:99: 9a:1d:45:48:a6:0c:53:2f:0a:58:da:cc:d8:ba:e2:bf:66:55: ef:9a:cc:2f:0b:5c:2a:1f:2f:1d:ce:b5:d6:17:66:36:6f:42: 9a:b1:1e:a6:68:27:5e:9e:08:d9:0e:c2:91:37:88:4b:87:19: ad:52:b2:2a:8e:a3:a6:ec:b0:1a:66:ec:77:66:26:56:49:a0: a8:1d:a0:4e:75:e2:75:ea:7b:01:dc:66:c0:c2:f2:c9:41:ed: a9:3a:e0:a9:8d:3f:54:05:99:0f:90:95:ec:47:c1:c0:d6:2b: dc:cf:12:81:ad:14:23:c2:8e:65:58:b4:89:bf:15:a3:bf:34: be:ca:d9:9d:89:9f:ca:24:5f:33:ce:aa:b1:70:3c:77:f3:0c: bc:7a:af:d3:d8:8c:40:01:1d:e1:ad:b2:8c:5c:0f:31:b0:2b: 17:87:74:74:12:3a:1c:3e:dc:b5:13:54:d0:e1:d6:30:af:6b: fe:d6:45:b6 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdDQzUxMTAvBgNVBAUTKDVEMjc4NUI1NEQxNjNFRDAxRUE1NDE4QkNGQTM0RjFC NzQ1NkI3MTMwHhcNMjUxMTI4MjI1NDQwWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJhMjgzMC1iMDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3T9gdED9JMx89Yu/O+IaX/naGmtH/VP1Z6HmR7IMVWeocciqpSBXUUs4zSc/ WGDNkKtiGKywL+aTftR4nBzRh0n4ki6ziGkg+9eHXjOLequzcRt3Ev/bc8Ln7diD lpTRceAwdh1EmCF4sz9tbGOSs9USRdEuSINLWwLOASLrsI53qx8IaMURFfgsme77 rxSzNyVCGlysmmn1C7EfH7rIfjV9EiazoAIvpjDiCvH/bZqnNbmchw2A0FGxfpBR 425PvHeuzs8QBbSxlHRRXZxZ8EzH6Gb1Pbo/FxONekAEpex5H1lsncvr0gwW0EgX DK8swoP0PULTDIARFELA+OjNSQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFgZxWTC nG57xTKBjlcAyLjyqqZqMB8GA1UdIwQYMBaAFF0nhbVNFj7QHqVBi8+jTxt0VrcT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0NDNS8yQUM0RDMzRTQ2 QjExMUVDOTQ1QjRGNTdDNEY5QUUwMi9YU2VGdFUwV1B0QWVwVUdMejZOUEczUld0 eE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hTZUZ0VTBXUHRBZXBVR0x6Nk5QRzNSV3R4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjdDQzUvMkFDNEQzM0U0NkIxMTFFQzk0NUI0RjU3QzRGOUFFMDIvNjMzNzk2M0U0 QzNEMTFFQ0I1RkY4NDRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnFxgwDQYJKoZIhvcNAQELBQADggEBAEgtCERXEHB9xzmA KVfIaHBGH2T7lvBGw8OM+XbXhTYmcgM/CcRIWbpLL2DoMyCwGKJZt3gVOh1/eZIZ 6gx30DYyaXLxoUGYmZodRUimDFMvCljazNi64r9mVe+azC8LXCofLx3OtdYXZjZv QpqxHqZoJ16eCNkOwpE3iEuHGa1SsiqOo6bssBpm7HdmJlZJoKgdoE514nXqewHc ZsDC8slB7ak64KmNP1QFmQ+QlexHwcDWK9zPEoGtFCPCjmVYtIm/FaO/NL7K2Z2J n8okXzPOqrFwPHfzDLx6r9PYjEABHeGtsoxcDzGwKxeHdHQSOhw+3LUTVNDh1jCv a/7WRbY= -----END CERTIFICATE-----Generated at Sat Dec 6 17:05:12 2025 by rpki-client