This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/CE988D80FB7311EC97CD7F85C4F9AE02.roa File: CE988D80FB7311EC97CD7F85C4F9AE02.roa (raw, json) Hash identifier: HJPBn4wWH9435slQdCcvd//C2eehlQjgPBpSjm2F4Lc= Subject key identifier: 53:F8:36:62:B2:CA:EE:16:2B:54:EE:3F:64:86:74:0F:88:EB:6F:8D Certificate issuer: /CN=A91ACD72/serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B Certificate serial: 0599 Authority key identifier: 2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/CE988D80FB7311EC97CD7F85C4F9AE02.roa Signing time: Thu 04 Dec 2025 23:06:39 +0000 ROA not before: Thu 04 Dec 2025 23:06:39 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 395092 IP address blocks: 43.230.160.0/22 maxlen: 24 103.20.234.0/23 maxlen: 24 103.27.132.0/23 maxlen: 23 103.27.134.0/23 maxlen: 23 103.159.64.0/23 maxlen: 24 117.55.192.0/23 maxlen: 24 117.55.194.0/23 maxlen: 24 203.96.176.0/22 maxlen: 24 210.16.64.0/22 maxlen: 24 2406:cb40::/48 maxlen: 48 2406:cb40:1::/48 maxlen: 48 2406:cb41::/48 maxlen: 48 2406:cb42::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:36:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1433 (0x599) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACD72, serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B Validity Not Before: Dec 4 23:06:39 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=693213fe-2f62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:03:56:17:0b:79:a9:bd:a6:55:b5:4e:40:d1: 04:2b:68:b8:0d:12:c3:fe:8b:14:ea:09:1f:29:23: 2f:2c:a7:3b:5f:b6:6b:23:b6:00:d4:ae:d4:59:7b: 00:12:36:0c:43:1d:b1:53:da:c8:8a:28:75:0e:60: 41:2b:40:3a:14:e0:a9:6e:9c:50:32:e6:a0:4f:18: a8:5e:33:da:4c:9f:b1:95:d8:15:29:e1:a8:63:6d: a9:e0:05:1c:fe:94:9a:ff:dd:da:4b:5c:4d:ea:3d: 2d:c9:8f:6b:4e:81:00:db:41:b7:ce:a5:79:db:1b: 49:d6:4a:ec:86:da:25:83:2d:82:a3:86:ec:d2:73: f7:c1:75:6f:9f:84:71:13:23:30:93:cc:30:f8:e4: f0:b2:50:0f:eb:a2:ce:e5:30:8c:69:8d:83:93:00: 1d:1b:db:dc:c3:7e:87:a9:5f:cf:0b:59:6a:18:16: 16:1c:14:97:e8:55:70:6f:c8:d5:64:4a:73:97:3a: 1f:ca:6a:19:71:2a:c3:87:f9:39:dd:bc:7d:54:3c: 0c:ca:31:22:ef:31:de:7a:63:bd:cb:6a:30:a3:61: 57:7e:ca:5c:c1:f2:ed:d6:34:6f:7f:a7:28:c6:7b: 3c:96:41:a2:91:90:f9:ef:e5:fc:e4:be:20:8e:3e: f8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:F8:36:62:B2:CA:EE:16:2B:54:EE:3F:64:86:74:0F:88:EB:6F:8D X509v3 Authority Key Identifier: keyid:2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/CE988D80FB7311EC97CD7F85C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.230.160.0/22 103.20.234.0/23 103.27.132.0/22 103.159.64.0/23 117.55.192.0/22 203.96.176.0/22 210.16.64.0/22 IPv6: 2406:cb40::/47 2406:cb41::/48 2406:cb42::/48 Signature Algorithm: sha256WithRSAEncryption 30:a1:c7:8e:0b:5e:6c:31:77:df:63:bf:bc:7a:b6:08:75:a9: bc:4e:b1:49:b6:7f:2c:35:0d:9a:bd:78:1f:e6:c5:ed:73:87: 7b:27:c3:53:28:9f:a9:82:f3:c6:e8:20:be:92:e1:01:7b:63: c5:dc:48:de:42:63:5f:79:05:c6:94:82:39:39:9d:b7:24:a9: 2f:71:f3:75:25:68:62:0d:27:58:e2:cd:67:a4:8a:92:d4:14: 94:29:ae:4f:e2:5e:0e:ce:b2:b2:37:da:6b:62:a8:2e:d9:8d: c8:5b:38:bf:4e:3c:d9:a2:b6:3f:6d:5c:07:9a:c2:d9:2d:d1: 63:b4:7c:15:e7:95:af:f9:bd:6f:d0:a5:52:a2:16:ce:81:cf: b9:62:fe:1f:84:63:7c:0b:40:57:87:27:93:d0:c5:e2:57:de: 98:f3:b4:9c:a6:42:6b:b9:be:4b:80:bf:bf:7a:a0:22:44:c2: cf:b4:97:f4:a6:24:d1:21:18:2c:78:68:6a:2e:bf:fe:e0:74: 40:89:c6:4e:4f:66:92:87:90:1c:d4:37:34:cd:80:7e:cb:b6: 4e:9c:82:08:12:54:e7:5d:2f:fa:40:f8:52:04:19:00:ee:a0: 46:c4:fa:a2:3f:b8:53:2c:2c:c5:ad:c9:4e:db:e6:45:9b:28: df:fb:41:c6 -----BEGIN CERTIFICATE----- MIIFuDCCBKCgAwIBAgICBZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNENzIxMTAvBgNVBAUTKDJDMTkxNzUzMjVBNUYzNkMwQkI1OEY5MjExOUU2NTgy MEM4RkQ1N0IwHhcNMjUxMjA0MjMwNjM5WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTMyMTNmZS0yZjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4QNWFwt5qb2mVbVOQNEEK2i4DRLD/osU6gkfKSMvLKc7X7ZrI7YA1K7UWXsA EjYMQx2xU9rIiih1DmBBK0A6FOCpbpxQMuagTxioXjPaTJ+xldgVKeGoY22p4AUc /pSa/93aS1xN6j0tyY9rToEA20G3zqV52xtJ1krshtolgy2Co4bs0nP3wXVvn4Rx EyMwk8ww+OTwslAP66LO5TCMaY2DkwAdG9vcw36HqV/PC1lqGBYWHBSX6FVwb8jV ZEpzlzofymoZcSrDh/k53bx9VDwMyjEi7zHeemO9y2owo2FXfspcwfLt1jRvf6co xns8lkGikZD57+X85L4gjj74UwIDAQABo4IC3DCCAtgwHQYDVR0OBBYEFFP4NmKy yu4WK1TuP2SGdA+I62+NMB8GA1UdIwQYMBaAFCwZF1MlpfNsC7WPkhGeZYIMj9V7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0Q3Mi80NTc2QTY3MjI2 MTIxMUVDQjkzMTk5NDJDNEY5QUUwMi9MQmtYVXlXbDgyd0x0WS1TRVo1bGdneVAx WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xCa1hVeVdsODJ3THRZLVNFWjVsZ2d5UDFYcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUNENzIvNDU3NkE2NzIyNjEyMTFFQ0I5MzE5OTQyQzRGOUFFMDIvQ0U5ODhEODBG QjczMTFFQzk3Q0Q3Rjg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwZgYIKwYBBQUHAQcBAf8E VzBVMDAEAgABMCoDBAIr5qADBAFnFOoDBAJnG4QDBAFnn0ADBAJ1N8ADBALLYLAD BALSEEAwIQQCAAIwGwMHASQGy0AAAAMHACQGy0EAAAMHACQGy0IAADANBgkqhkiG 9w0BAQsFAAOCAQEAMKHHjgtebDF332O/vHq2CHWpvE6xSbZ/LDUNmr14H+bF7XOH eyfDUyifqYLzxuggvpLhAXtjxdxI3kJjX3kFxpSCOTmdtySpL3HzdSVoYg0nWOLN Z6SKktQUlCmuT+JeDs6ysjfaa2KoLtmNyFs4v0482aK2P21cB5rC2S3RY7R8FeeV r/m9b9ClUqIWzoHPuWL+H4RjfAtAV4cnk9DF4lfemPO0nKZCa7m+S4C/v3qgIkTC z7SX9KYk0SEYLHhoai6//uB0QInGTk9mkoeQHNQ3NM2Afsu2TpyCCBJU510v+kD4 UgQZAO6gRsT6oj+4Uywsxa3JTtvmRZso3/tBxg== -----END CERTIFICATE-----Generated at Sat Dec 6 23:02:03 2025 by rpki-client