This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/CD2AE9AE71B611F0A1F6DD29C4F9AE02.roa File: CD2AE9AE71B611F0A1F6DD29C4F9AE02.roa (raw, json) Hash identifier: NT+izqotwg/NJV9ByOvL7ba8EHK8ZG+Vz+H0g7ogIMc= Subject key identifier: E1:B3:4E:83:90:19:DC:75:87:DB:9C:0D:CE:3E:E7:00:0E:B3:A5:F8 Certificate issuer: /CN=A91B88CA/serialNumber=F625E6CC039026FF5BC9D6BDC42D8D1C18ABF33B Certificate serial: 0158 Authority key identifier: F6:25:E6:CC:03:90:26:FF:5B:C9:D6:BD:C4:2D:8D:1C:18:AB:F3:3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/CD2AE9AE71B611F0A1F6DD29C4F9AE02.roa Signing time: Tue 25 Nov 2025 03:20:54 +0000 ROA not before: Tue 25 Nov 2025 03:20:54 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 401371 IP address blocks: 103.67.52.0/23 maxlen: 23 103.67.52.0/24 maxlen: 24 103.67.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.crl rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 344 (0x158) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B88CA, serialNumber=F625E6CC039026FF5BC9D6BDC42D8D1C18ABF33B Validity Not Before: Nov 25 03:20:54 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69252095-c87b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8d:e3:ff:02:a5:79:e4:0d:57:2e:7a:d8:ea: d7:e7:5c:c0:84:40:85:d9:3e:79:a8:bf:fb:91:70: 4c:01:02:17:15:65:75:55:a3:4b:c6:3c:9a:5a:c1: 14:c6:2d:fc:55:0c:f5:c3:e9:74:5b:88:b3:4c:c8: b4:40:1b:a5:e0:3a:10:fc:90:11:80:14:16:0a:cd: f1:6f:a9:38:fb:d1:26:a8:19:06:b4:92:24:63:f3: e7:43:b3:29:00:6e:80:ab:98:f0:14:11:65:27:7b: 2a:44:e8:44:eb:3c:0c:d0:01:ac:e3:9f:79:63:78: 6a:c8:bb:9d:fc:de:79:d6:2c:0b:10:52:c6:41:69: e9:c2:83:b5:78:2f:a2:be:00:7b:47:8e:59:c6:3e: dd:45:1c:d0:36:8e:bc:e2:46:7d:4a:b0:01:ef:d0: ce:22:57:3c:b0:5c:e4:0d:9b:b7:67:ad:79:77:ca: b9:91:2e:d0:d9:95:57:2d:4c:b5:76:86:75:03:db: d2:33:f8:72:2e:fb:e4:44:09:b2:8a:70:c4:dc:6e: b6:8c:67:6f:7c:d4:35:d4:da:f9:43:e1:3e:3d:87: 8a:c0:4a:d0:0e:4b:5d:d0:6b:26:b8:5f:17:22:18: 88:20:f4:3b:8d:fc:ed:b8:29:3d:02:87:e9:0d:28: 6d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B3:4E:83:90:19:DC:75:87:DB:9C:0D:CE:3E:E7:00:0E:B3:A5:F8 X509v3 Authority Key Identifier: keyid:F6:25:E6:CC:03:90:26:FF:5B:C9:D6:BD:C4:2D:8D:1C:18:AB:F3:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/CD2AE9AE71B611F0A1F6DD29C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.67.52.0/23 Signature Algorithm: sha256WithRSAEncryption 8e:8a:7e:60:9e:34:f8:d1:14:e4:30:d1:22:5f:3d:30:d8:58: 85:e8:70:4a:b3:30:fb:b3:b8:68:91:cb:31:c1:3f:ca:c2:c2: 5c:a9:85:9c:f3:3c:24:a6:1c:71:17:e2:fd:13:cb:25:a4:bf: 84:cd:7e:97:cd:ad:cb:f0:5d:ad:ef:4c:ce:e4:12:65:e0:64: 31:05:70:4e:7a:c8:e6:d3:de:82:50:08:c2:3c:55:59:79:3c: f2:45:6e:9a:12:bb:14:0a:66:ed:a8:a5:82:14:53:15:c2:4c: 48:17:5f:51:57:01:d7:68:fc:9a:46:b7:73:68:f7:cd:a8:90: cf:46:77:70:3a:31:2a:36:a1:e3:66:98:67:ea:8f:95:aa:36: a7:ae:c6:07:44:23:c4:9e:4b:55:ed:22:d1:54:0d:2c:25:f4: 76:a6:09:5a:55:fd:98:4c:d4:2f:b8:92:28:6d:20:28:51:fc: da:70:5e:7c:dc:9b:8c:8a:c1:8b:55:f8:64:1c:d2:d8:9e:42: f1:95:c5:3f:18:66:75:3c:75:62:5f:f4:c6:6b:d8:6f:9b:20: 6c:73:df:e4:e9:d3:c9:95:78:45:4f:b2:71:cc:98:83:8f:7b: ba:90:16:64:86:ca:e9:2f:45:bd:f5:66:ff:a5:79:02:c0:f4: 13:48:1e:5b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg4Q0ExMTAvBgNVBAUTKEY2MjVFNkNDMDM5MDI2RkY1QkM5RDZCREM0MkQ4RDFD MThBQkYzM0IwHhcNMjUxMTI1MDMyMDU0WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTI1MjA5NS1jODdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAso3j/wKleeQNVy562OrX51zAhECF2T55qL/7kXBMAQIXFWV1VaNLxjyaWsEU xi38VQz1w+l0W4izTMi0QBul4DoQ/JARgBQWCs3xb6k4+9EmqBkGtJIkY/PnQ7Mp AG6Aq5jwFBFlJ3sqROhE6zwM0AGs4595Y3hqyLud/N551iwLEFLGQWnpwoO1eC+i vgB7R45Zxj7dRRzQNo684kZ9SrAB79DOIlc8sFzkDZu3Z615d8q5kS7Q2ZVXLUy1 doZ1A9vSM/hyLvvkRAmyinDE3G62jGdvfNQ11Nr5Q+E+PYeKwErQDktd0GsmuF8X IhiIIPQ7jfztuCk9AofpDShtwQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOGzToOQ Gdx1h9ucDc4+5wAOs6X4MB8GA1UdIwQYMBaAFPYl5swDkCb/W8nWvcQtjRwYq/M7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODhDQS81Njk2RTc0NjM0 NjUxMUVGQUY2REVCNEVDNEY5QUUwMi85aVhtekFPUUp2OWJ5ZGE5eEMyTkhCaXI4 enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlpWG16QU9RSnY5YnlkYTl4QzJOSEJpcjh6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qjg4Q0EvNTY5NkU3NDYzNDY1MTFFRkFGNkRFQjRFQzRGOUFFMDIvQ0QyQUU5QUU3 MUI2MTFGMEExRjZERDI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnQzQwDQYJKoZIhvcNAQELBQADggEBAI6KfmCeNPjRFOQw 0SJfPTDYWIXocEqzMPuzuGiRyzHBP8rCwlyphZzzPCSmHHEX4v0TyyWkv4TNfpfN rcvwXa3vTM7kEmXgZDEFcE56yObT3oJQCMI8VVl5PPJFbpoSuxQKZu2opYIUUxXC TEgXX1FXAddo/JpGt3No982okM9Gd3A6MSo2oeNmmGfqj5WqNqeuxgdEI8SeS1Xt ItFUDSwl9HamCVpV/ZhM1C+4kihtIChR/NpwXnzcm4yKwYtV+GQc0tieQvGVxT8Y ZnU8dWJf9MZr2G+bIGxz3+Tp08mVeEVPsnHMmIOPe7qQFmSGyukvRb31Zv+leQLA 9BNIHls= -----END CERTIFICATE-----Generated at Sun Dec 7 00:04:02 2025 by rpki-client