This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/CD1C75D8B98A11F0A26C3854C4F9AE02.roa File: CD1C75D8B98A11F0A26C3854C4F9AE02.roa (raw, json) Hash identifier: sHy0AwVAJBGq/EKm3rJjAjZHwe3udG3yQF07jGTCj2A= Subject key identifier: DB:9A:72:45:A4:65:2B:30:53:78:44:2D:63:3F:56:69:C8:E7:02:A1 Certificate issuer: /CN=A91A5CC3/serialNumber=DE55A369AED918698C2D63C32EF61BDBC5980596 Certificate serial: 01CA Authority key identifier: DE:55:A3:69:AE:D9:18:69:8C:2D:63:C3:2E:F6:1B:DB:C5:98:05:96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/CD1C75D8B98A11F0A26C3854C4F9AE02.roa Signing time: Wed 19 Nov 2025 07:07:11 +0000 ROA not before: Wed 19 Nov 2025 07:07:11 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 147314 IP address blocks: 103.228.10.0/24 maxlen: 24 103.228.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:10:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 458 (0x1ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5CC3, serialNumber=DE55A369AED918698C2D63C32EF61BDBC5980596 Validity Not Before: Nov 19 07:07:11 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=691d6c9f-c8d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e4:99:1e:85:cf:58:d6:da:1c:04:45:3d:87: 29:f8:7d:6f:22:33:df:48:c3:fa:aa:e9:dc:6e:da: 28:f9:a4:c3:fa:f6:09:11:8b:a1:29:41:20:d7:2c: af:f7:41:75:63:e2:ee:fc:74:3c:98:55:13:98:e3: 6b:70:9a:78:4d:f8:6a:a6:39:51:4f:73:fc:9b:ec: 29:7e:75:dd:32:b8:d0:e7:3b:22:99:3b:45:2b:00: f3:cd:cf:bf:88:18:08:c0:72:80:03:34:2f:97:b4: 75:ce:24:48:e7:40:20:52:7e:e6:93:e0:d7:bd:a0: 2c:c4:9d:80:ff:6f:81:ad:08:34:aa:b2:82:ca:3e: 7b:31:51:a2:ea:fc:94:e1:22:bf:99:8e:00:8e:31: 46:7e:45:3a:7f:e2:36:dd:c0:29:06:08:d4:36:82: ae:e2:55:8b:35:14:ad:75:3d:b7:0a:e1:8a:77:e3: 4f:4d:14:cb:16:82:04:0e:2f:a9:c9:58:87:41:00: 08:48:88:78:b8:50:bd:04:9a:6a:bb:8b:2c:9a:8f: 5d:a6:8a:79:0a:08:b8:7c:53:83:44:c6:63:6d:8a: d9:c9:6d:c8:39:50:86:04:da:66:82:09:5b:06:19: 59:88:39:ec:8e:ac:a2:d5:18:07:c7:f8:fa:cf:45: eb:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:9A:72:45:A4:65:2B:30:53:78:44:2D:63:3F:56:69:C8:E7:02:A1 X509v3 Authority Key Identifier: keyid:DE:55:A3:69:AE:D9:18:69:8C:2D:63:C3:2E:F6:1B:DB:C5:98:05:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/CD1C75D8B98A11F0A26C3854C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.228.10.0/23 Signature Algorithm: sha256WithRSAEncryption 7a:df:43:61:73:02:1a:43:60:9c:90:03:9e:7e:c4:bc:5e:b3: 64:56:19:a2:de:b0:5e:87:16:a2:e2:7e:19:80:c3:d3:5e:a8: 1f:22:e6:77:73:37:a8:33:d0:8c:f1:53:52:5a:ef:de:73:e2: 85:10:e7:63:99:75:10:2b:bd:bc:19:82:ac:7b:ce:46:5b:b3: 8c:1f:c0:fa:c5:2a:2b:e3:53:8e:74:10:da:7a:19:8e:a9:36: 59:f7:88:eb:25:19:91:15:e9:5b:7a:b1:1e:99:3d:8a:ae:b7: 10:55:e2:62:c4:c6:4e:97:00:d1:f4:2b:11:ad:7a:e6:89:b5: 19:96:aa:14:dd:c1:b9:11:c3:6f:2c:25:5d:52:f1:55:78:d4: c9:2e:cd:db:59:1c:e0:b3:8c:76:27:85:8f:d9:9c:bf:a2:81: ee:21:ac:2e:7c:26:ff:71:24:a6:bc:43:33:9f:fa:35:36:33: 47:e2:42:57:73:f6:79:d1:e5:7f:14:f4:06:8d:d1:15:5b:85: 33:0c:9e:6e:67:01:d4:63:9e:10:dd:e0:dd:4c:2f:ff:97:fd: fb:b1:ec:33:38:a7:d4:5a:0e:78:3e:a7:64:1a:e4:01:0d:c1: 61:10:bb:65:94:0f:1f:d3:c8:73:5f:b3:8d:f7:7e:59:7e:8d: 84:64:6e:c2 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVDQzMxMTAvBgNVBAUTKERFNTVBMzY5QUVEOTE4Njk4QzJENjNDMzJFRjYxQkRC QzU5ODA1OTYwHhcNMjUxMTE5MDcwNzExWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTFkNmM5Zi1jOGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAruSZHoXPWNbaHARFPYcp+H1vIjPfSMP6quncbtoo+aTD+vYJEYuhKUEg1yyv 90F1Y+Lu/HQ8mFUTmONrcJp4TfhqpjlRT3P8m+wpfnXdMrjQ5zsimTtFKwDzzc+/ iBgIwHKAAzQvl7R1ziRI50AgUn7mk+DXvaAsxJ2A/2+BrQg0qrKCyj57MVGi6vyU 4SK/mY4AjjFGfkU6f+I23cApBgjUNoKu4lWLNRStdT23CuGKd+NPTRTLFoIEDi+p yViHQQAISIh4uFC9BJpqu4ssmo9dpop5Cgi4fFODRMZjbYrZyW3IOVCGBNpmgglb BhlZiDnsjqyi1RgHx/j6z0Xr9QIDAQABo4IClTCCApEwHQYDVR0OBBYEFNuackWk ZSswU3hELWM/VmnI5wKhMB8GA1UdIwQYMBaAFN5Vo2mu2RhpjC1jwy72G9vFmAWW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUNDMy82NDE2RDgzODE0 QzAxMUVFOTZFQTU0MjFDNEY5QUUwMi8zbFdqYWE3WkdHbU1MV1BETHZZYjI4V1lC WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNsV2phYTdaR0dtTUxXUERMdlliMjhXWUJaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTVDQzMvNjQxNkQ4MzgxNEMwMTFFRTk2RUE1NDIxQzRGOUFFMDIvQ0QxQzc1RDhC OThBMTFGMEEyNkMzODU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFn5AowDQYJKoZIhvcNAQELBQADggEBAHrfQ2FzAhpDYJyQ A55+xLxes2RWGaLesF6HFqLifhmAw9NeqB8i5ndzN6gz0IzxU1Ja795z4oUQ52OZ dRArvbwZgqx7zkZbs4wfwPrFKivjU450ENp6GY6pNln3iOslGZEV6Vt6sR6ZPYqu txBV4mLExk6XANH0KxGteuaJtRmWqhTdwbkRw28sJV1S8VV41MkuzdtZHOCzjHYn hY/ZnL+ige4hrC58Jv9xJKa8QzOf+jU2M0fiQldz9nnR5X8U9AaN0RVbhTMMnm5n AdRjnhDd4N1ML/+X/fux7DM4p9RaDng+p2Qa5AENwWEQu2WUDx/TyHNfs433fll+ jYRkbsI= -----END CERTIFICATE-----Generated at Sat Dec 6 20:58:08 2025 by rpki-client