This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/CAD00992C9C611F09C9EF018C4F9AE02.roa File: CAD00992C9C611F09C9EF018C4F9AE02.roa (raw, json) Hash identifier: ReD45q5RkEAZzOqO7G9hg/fTrgFRDlSbU1Y1kh6RTWw= Subject key identifier: CA:91:BA:61:A0:EC:04:D4:28:E7:31:C1:7A:DB:14:AB:70:C2:37:DE Certificate issuer: /CN=A91A98E5/serialNumber=03C8560034E917F48406B40469500B23F3956B5D Certificate serial: 02 Authority key identifier: 03:C8:56:00:34:E9:17:F4:84:06:B4:04:69:50:0B:23:F3:95:6B:5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8hWADTpF_SEBrQEaVALI_OVa10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/CAD00992C9C611F09C9EF018C4F9AE02.roa Signing time: Tue 25 Nov 2025 06:20:09 +0000 ROA not before: Tue 25 Nov 2025 06:20:09 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 151615 IP address blocks: 103.238.154.0/23 maxlen: 24 2401:1920::/32 maxlen: 34 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/A8hWADTpF_SEBrQEaVALI_OVa10.crl rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/A8hWADTpF_SEBrQEaVALI_OVa10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8hWADTpF_SEBrQEaVALI_OVa10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 01:38:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A98E5, serialNumber=03C8560034E917F48406B40469500B23F3956B5D Validity Not Before: Nov 25 06:20:09 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69254a99-3f2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ea:c8:09:91:44:20:c1:f5:64:ea:53:46:77: 8c:9c:51:50:69:a4:e2:ed:97:8c:42:8c:e5:81:ca: 8d:d8:06:91:11:1d:0f:07:9a:ee:a0:f9:c4:5c:6c: 75:15:5b:32:30:1e:7f:81:35:50:d8:88:2c:70:07: 6c:81:3d:ce:3a:17:60:90:f1:32:09:da:13:ba:a2: d3:dd:6b:b8:82:a0:5b:0b:88:d5:f8:d5:1f:26:4c: f2:a8:82:08:3d:83:44:04:6b:f6:ce:bc:a5:4c:52: 5f:a9:3e:69:d0:90:81:1a:92:13:af:e5:66:c6:0b: a9:75:fa:d8:cf:b7:c8:03:c1:4a:6c:97:40:a3:95: 1b:6e:f9:d7:e7:07:fd:51:d6:fd:12:4f:9c:1e:7c: 18:b5:a1:c5:6a:ae:76:2c:bf:17:11:27:86:70:42: 41:25:7f:f6:fd:1b:95:70:bf:cb:fc:d7:f1:70:89: 0a:68:c8:19:57:ea:61:6b:67:41:10:b5:47:6f:4a: 43:ce:00:a8:9f:68:6e:6f:6c:6f:12:fe:d7:c7:36: 38:07:eb:a4:cc:b7:7e:ca:fe:a4:8e:c1:1f:fe:41: 1c:81:ee:66:06:00:bd:23:94:21:1a:9e:50:c4:a9: 8b:fd:97:21:a3:67:d0:bc:34:4c:e8:28:d9:fa:a0: 3d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:91:BA:61:A0:EC:04:D4:28:E7:31:C1:7A:DB:14:AB:70:C2:37:DE X509v3 Authority Key Identifier: keyid:03:C8:56:00:34:E9:17:F4:84:06:B4:04:69:50:0B:23:F3:95:6B:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/A8hWADTpF_SEBrQEaVALI_OVa10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8hWADTpF_SEBrQEaVALI_OVa10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/CAD00992C9C611F09C9EF018C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.238.154.0/23 IPv6: 2401:1920::/32 Signature Algorithm: sha256WithRSAEncryption 9b:b8:97:fe:dd:df:59:78:25:50:93:a2:5d:83:1c:b1:96:73: 71:fd:6f:12:cd:ec:fe:e8:aa:75:be:96:4a:d9:40:82:19:fe: 1a:ac:b6:2c:e8:4f:92:22:10:7c:31:4d:03:47:24:dc:00:c8: fe:b7:61:1b:5e:80:ac:1e:00:c4:c2:a7:63:d6:33:63:b4:28: f4:0f:59:9b:64:d6:0e:ed:70:98:12:e8:a9:bf:17:99:14:30: 56:a3:a9:cc:07:0e:06:fa:49:54:0c:8d:6f:53:79:99:7e:f3: 48:21:a0:ad:4c:31:a5:5f:4d:3f:10:83:89:96:91:fd:5c:4e: da:a9:dc:13:f6:91:e1:02:20:68:70:90:f7:d4:1e:71:25:d1: ce:0a:0d:ae:3d:88:14:d8:2a:2e:f4:0c:b4:e9:b2:27:07:14: 5a:67:71:b8:e3:bd:b6:90:d2:ed:cf:85:96:d2:1c:84:27:61: 9b:bc:8d:22:9f:47:f7:a0:a4:64:f3:65:24:a4:a9:ed:bc:08: 4f:0e:00:1a:2a:1b:fe:9a:f7:7f:48:10:92:f0:1f:f8:92:16: 37:c7:e7:c7:63:58:c7:86:ee:59:8f:d0:cc:f4:dd:ec:2d:00: 5f:3b:17:97:96:5b:e0:63:e9:68:24:57:2c:44:2b:ad:e8:10: 56:28:b8:2f -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OThFNTExMC8GA1UEBRMoMDNDODU2MDAzNEU5MTdGNDg0MDZCNDA0Njk1MDBCMjNG Mzk1NkI1RDAeFw0yNTExMjUwNjIwMDlaFw0yNjA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MjU0YTk5LTNmMmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDM6sgJkUQgwfVk6lNGd4ycUVBppOLtl4xCjOWByo3YBpERHQ8Hmu6g+cRcbHUV WzIwHn+BNVDYiCxwB2yBPc46F2CQ8TIJ2hO6otPda7iCoFsLiNX41R8mTPKoggg9 g0QEa/bOvKVMUl+pPmnQkIEakhOv5WbGC6l1+tjPt8gDwUpsl0CjlRtu+dfnB/1R 1v0ST5wefBi1ocVqrnYsvxcRJ4ZwQkElf/b9G5Vwv8v81/FwiQpoyBlX6mFrZ0EQ tUdvSkPOAKifaG5vbG8S/tfHNjgH66TMt37K/qSOwR/+QRyB7mYGAL0jlCEanlDE qYv9lyGjZ9C8NEzoKNn6oD3pAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUypG6YaDs BNQo5zHBetsUq3DCN94wHwYDVR0jBBgwFoAUA8hWADTpF/SEBrQEaVALI/OVa10w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5OEU1LzE2ODRDMDc4NDA0 NzExRUVBQkMwRTI0Q0M0RjlBRTAyL0E4aFdBRFRwRl9TRUJyUUVhVkFMSV9PVmEx MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQThoV0FEVHBGX1NFQnJRRWFWQUxJX09WYTEwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OThFNS8xNjg0QzA3ODQwNDcxMUVFQUJDMEUyNENDNEY5QUUwMi9DQUQwMDk5MkM5 QzYxMUYwOUM5RUYwMThDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAWfumjANBAIAAjAHAwUAJAEZIDANBgkqhkiG9w0BAQsFAAOC AQEAm7iX/t3fWXglUJOiXYMcsZZzcf1vEs3s/uiqdb6WStlAghn+Gqy2LOhPkiIQ fDFNA0ck3ADI/rdhG16ArB4AxMKnY9YzY7Qo9A9Zm2TWDu1wmBLoqb8XmRQwVqOp zAcOBvpJVAyNb1N5mX7zSCGgrUwxpV9NPxCDiZaR/VxO2qncE/aR4QIgaHCQ99Qe cSXRzgoNrj2IFNgqLvQMtOmyJwcUWmdxuOO9tpDS7c+FltIchCdhm7yNIp9H96Ck ZPNlJKSp7bwITw4AGiob/pr3f0gQkvAf+JIWN8fnx2NYx4buWY/QzPTd7C0AXzsX l5Zb4GPpaCRXLEQrregQVii4Lw== -----END CERTIFICATE-----Generated at Mon Dec 8 09:26:23 2025 by rpki-client