This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/CDD96B60B78911EF9BD3EF80C4F9AE02.roa File: CDD96B60B78911EF9BD3EF80C4F9AE02.roa (raw, json) Hash identifier: B5nwJ+mLBFnNT/8YSuFnlodEj+j6B/8srfS67vX0m7c= Subject key identifier: BA:97:E4:D3:39:51:D6:04:60:89:3F:00:8D:FE:BC:87:98:80:6E:A9 Certificate issuer: /CN=A9172C8D/serialNumber=E714A81497C8177868CBB4CDB338C3EF6CE9E953 Certificate serial: 0AA9 Authority key identifier: E7:14:A8:14:97:C8:17:78:68:CB:B4:CD:B3:38:C3:EF:6C:E9:E9:53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/CDD96B60B78911EF9BD3EF80C4F9AE02.roa Signing time: Fri 28 Nov 2025 18:52:04 +0000 ROA not before: Fri 28 Nov 2025 18:52:04 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 150371 IP address blocks: 103.102.158.0/24 maxlen: 24 103.102.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.crl rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 18:47:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2729 (0xaa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172C8D, serialNumber=E714A81497C8177868CBB4CDB338C3EF6CE9E953 Validity Not Before: Nov 28 18:52:04 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6929ef54-a9bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:fa:a9:4d:1b:70:ab:ad:14:24:9c:69:c9:24: 7e:41:49:d3:24:eb:25:0c:a2:89:7c:10:b9:b1:65: 65:c3:d1:6f:b6:1b:1b:7d:b6:bc:1a:5c:db:2b:1c: 06:ad:47:8c:5d:56:44:14:67:01:48:ce:1f:d3:cb: 62:ff:5b:88:3e:26:a3:43:1a:5f:2d:67:63:44:50: 5c:02:b7:c4:63:ce:a7:5c:b3:94:a8:b6:9c:89:a1: dc:2d:51:0f:04:d3:cf:4a:1b:bd:31:35:ce:82:4e: 9c:8b:fd:42:13:ef:a1:04:6c:1b:45:e0:f3:41:44: db:3f:24:ca:9f:13:3c:ca:83:a3:55:b7:0a:6a:e0: 2b:48:03:6b:94:2c:52:5f:56:8a:cd:d7:87:25:3e: d1:15:bb:ae:ca:fa:47:97:8e:43:d3:43:72:ec:38: a0:4e:d8:dc:b5:77:dc:ab:de:ec:5b:b2:a7:6b:4b: 24:a3:70:e6:ae:79:f5:7c:57:e9:a3:72:3e:11:d8: 16:9a:25:ac:3b:90:b8:36:55:9b:6e:b4:2f:41:11: d7:4e:e8:50:e6:6e:35:40:12:55:24:4f:e6:4f:7b: ca:ea:36:c8:fb:59:d0:cd:47:5b:ad:12:4e:2f:e1: 69:9e:da:b9:67:3c:60:e1:2c:8a:12:4f:28:97:fb: c4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:97:E4:D3:39:51:D6:04:60:89:3F:00:8D:FE:BC:87:98:80:6E:A9 X509v3 Authority Key Identifier: keyid:E7:14:A8:14:97:C8:17:78:68:CB:B4:CD:B3:38:C3:EF:6C:E9:E9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/CDD96B60B78911EF9BD3EF80C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.102.158.0/23 Signature Algorithm: sha256WithRSAEncryption 14:f0:f3:84:70:22:f3:9b:66:07:9b:91:a4:6e:68:00:35:5c: d3:3a:c5:50:4d:02:8f:bb:fe:1f:74:41:2a:c5:c5:a4:0d:d4: fd:7b:13:c9:f0:4a:98:52:15:7f:ca:ae:5a:14:d9:ba:f5:b9: ac:c4:a6:2e:b2:82:b2:e9:3b:14:f9:35:68:4e:3c:25:17:cd: 91:be:70:9c:93:a3:d6:59:ac:24:70:96:93:a5:90:86:bb:b0: 74:83:c2:23:a5:16:85:78:5e:11:05:13:27:d5:3d:28:cd:68: 5f:e1:36:da:f6:8d:c7:87:29:00:f2:a0:bc:f3:ee:da:e2:e8: d0:5f:d5:dd:90:a3:bb:d0:40:f8:12:f5:98:b3:bd:39:00:f4: bc:bf:54:b8:22:2f:c0:a2:59:03:6f:3e:c5:3b:3a:67:af:83: ec:d8:e6:d8:d4:2e:5b:e4:a1:10:1f:2b:c4:c8:05:fd:fe:30: 6c:c9:b2:33:bf:50:c1:7d:90:74:2a:92:9e:fc:da:9c:c4:19: ab:3d:99:3f:c5:ed:ff:3c:af:ec:9e:3e:ae:e6:bc:8e:56:cb: b1:27:ef:cb:a3:c4:c9:ce:3c:8b:9d:64:70:96:9e:ca:b8:1f: f8:b8:6a:6b:bd:1b:ca:dc:ec:bf:79:13:d1:b4:fb:4b:2e:65: 90:60:2e:7f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJDOEQxMTAvBgNVBAUTKEU3MTRBODE0OTdDODE3Nzg2OENCQjRDREIzMzhDM0VG NkNFOUU5NTMwHhcNMjUxMTI4MTg1MjA0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTI5ZWY1NC1hOWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7PqpTRtwq60UJJxpySR+QUnTJOslDKKJfBC5sWVlw9Fvthsbfba8GlzbKxwG rUeMXVZEFGcBSM4f08ti/1uIPiajQxpfLWdjRFBcArfEY86nXLOUqLaciaHcLVEP BNPPShu9MTXOgk6ci/1CE++hBGwbReDzQUTbPyTKnxM8yoOjVbcKauArSANrlCxS X1aKzdeHJT7RFbuuyvpHl45D00Ny7DigTtjctXfcq97sW7Kna0sko3Dmrnn1fFfp o3I+EdgWmiWsO5C4NlWbbrQvQRHXTuhQ5m41QBJVJE/mT3vK6jbI+1nQzUdbrRJO L+Fpntq5Zzxg4SyKEk8ol/vEEQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLqX5NM5 UdYEYIk/AI3+vIeYgG6pMB8GA1UdIwQYMBaAFOcUqBSXyBd4aMu0zbM4w+9s6elT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkM4RC85QTExMDg2NDY5 QkExMUVBQkMwQkQ4NjNDNEY5QUUwMi81eFNvRkpmSUYzaG95N1ROc3pqRDcyenA2 Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV4U29GSmZJRjNob3k3VE5zempENzJ6cDZWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzJDOEQvOUExMTA4NjQ2OUJBMTFFQUJDMEJEODYzQzRGOUFFMDIvQ0REOTZCNjBC Nzg5MTFFRjlCRDNFRjgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnZp4wDQYJKoZIhvcNAQELBQADggEBABTw84RwIvObZgeb kaRuaAA1XNM6xVBNAo+7/h90QSrFxaQN1P17E8nwSphSFX/KrloU2br1uazEpi6y grLpOxT5NWhOPCUXzZG+cJyTo9ZZrCRwlpOlkIa7sHSDwiOlFoV4XhEFEyfVPSjN aF/hNtr2jceHKQDyoLzz7tri6NBf1d2Qo7vQQPgS9ZizvTkA9Ly/VLgiL8CiWQNv PsU7Omevg+zY5tjULlvkoRAfK8TIBf3+MGzJsjO/UMF9kHQqkp782pzEGas9mT/F 7f88r+yePq7mvI5Wy7En78ujxMnOPIudZHCWnsq4H/i4amu9G8rc7L95E9G0+0su ZZBgLn8= -----END CERTIFICATE-----Generated at Sun Dec 7 02:39:47 2025 by rpki-client