This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/CF0AE642EBA711EA8980FC11C4F9AE02.roa File: CF0AE642EBA711EA8980FC11C4F9AE02.roa (raw, json) Hash identifier: 325+Q5b9bGMNFjpY1dytCT5yzU1HW8KiWlyU6/c5X5o= Subject key identifier: 81:CB:B6:77:DA:73:4E:39:6D:39:85:D7:E4:6A:26:C3:DE:17:67:12 Certificate issuer: /CN=A91B8CA6/serialNumber=96F817BD4070B5CC19A0B5393D55BE773980A810 Certificate serial: 0BCA Authority key identifier: 96:F8:17:BD:40:70:B5:CC:19:A0:B5:39:3D:55:BE:77:39:80:A8:10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/CF0AE642EBA711EA8980FC11C4F9AE02.roa Signing time: Fri 14 Nov 2025 18:38:17 +0000 ROA not before: Fri 14 Nov 2025 18:38:17 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 17412 IP address blocks: 103.102.36.0/23 maxlen: 24 2001:def:8000::/48 maxlen: 48 2001:def:8001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 18:14:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3018 (0xbca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8CA6, serialNumber=96F817BD4070B5CC19A0B5393D55BE773980A810 Validity Not Before: Nov 14 18:38:17 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69177718-6073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ac:25:69:49:42:31:d2:64:24:af:e0:cc:0e: 10:31:8e:c3:e5:d3:82:ac:8f:b9:49:45:0b:6c:07: 57:0c:aa:9a:b7:a6:fe:9c:d3:c8:18:32:0d:93:73: b2:b5:46:4d:c7:b8:11:98:65:e9:89:e5:fc:fc:50: ce:65:2b:40:94:bd:78:6f:38:98:70:f2:a4:18:73: 50:a1:a1:97:3e:e5:3e:70:cf:a0:be:12:c7:9c:06: cd:b9:d7:ee:d9:60:5a:60:ab:ed:60:0e:be:cd:b2: a4:e6:82:0e:ef:44:e7:70:22:d0:84:48:62:b8:66: 4a:f1:19:49:4e:dd:74:8c:37:0a:79:a3:f7:d2:38: 59:99:4d:f0:33:00:09:65:a2:78:97:47:27:78:00: ae:e6:c0:7d:2d:67:66:bd:8b:25:69:83:89:ab:22: 49:c9:38:a5:9c:2b:ca:21:70:ea:61:19:ac:4c:56: 9c:72:83:94:c2:1b:28:3a:e0:ce:55:fd:b8:1a:ff: 6c:7f:dd:38:a0:c3:71:0f:06:e8:a8:cc:b2:ed:9b: 43:16:fb:f0:41:07:56:30:84:cf:19:4e:64:91:d9: f9:f8:e5:c0:74:1c:ba:82:28:1e:ff:ef:04:a0:55: 2d:b4:d7:8d:0c:78:d7:8c:e0:4d:37:6a:61:5c:0d: 78:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:CB:B6:77:DA:73:4E:39:6D:39:85:D7:E4:6A:26:C3:DE:17:67:12 X509v3 Authority Key Identifier: keyid:96:F8:17:BD:40:70:B5:CC:19:A0:B5:39:3D:55:BE:77:39:80:A8:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/CF0AE642EBA711EA8980FC11C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.102.36.0/23 IPv6: 2001:def:8000::/47 Signature Algorithm: sha256WithRSAEncryption a3:d8:a7:cd:d6:38:d6:ed:58:46:9e:6b:f4:65:fa:83:84:53: 93:31:a5:31:a9:c9:ef:8e:02:10:ac:a9:f2:82:10:f2:50:8f: 04:89:4e:74:58:4a:a2:25:35:52:4a:95:f5:c0:0e:fe:91:12: 64:11:6a:93:eb:85:75:64:d1:6c:c6:6e:20:78:f3:99:64:9f: e7:1f:c0:be:6e:96:a5:79:3b:c4:fb:bc:19:8b:7a:2b:0f:36: 9a:d1:d3:cb:f0:1c:23:a1:7b:67:bf:f4:28:a7:10:43:1c:02: ac:44:51:3c:e8:17:76:a5:67:c0:f5:8e:55:fe:46:50:24:d9: e7:5a:a2:4b:d7:4d:c9:9b:33:a1:db:1b:fa:52:1a:33:39:33: cb:01:89:c0:73:32:fc:e7:8b:0e:e4:cc:91:e2:40:cf:9a:ae: 17:e4:67:45:36:cd:dc:3e:06:14:40:77:07:a9:f7:23:35:e4: 40:06:ee:57:07:e6:b3:26:0c:16:7e:e1:75:48:3d:a8:02:9d: 47:17:c6:cc:43:e7:26:28:9e:cd:77:3d:80:a2:0a:79:17:cb: 3a:1d:2c:20:80:3f:93:ad:c4:32:3a:64:b5:70:16:25:99:7c: 4b:af:87:d7:32:1e:6c:7d:2f:7b:7a:ad:a1:9c:0e:f7:5b:a3: fd:90:13:cc -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICC8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhDQTYxMTAvBgNVBAUTKDk2RjgxN0JENDA3MEI1Q0MxOUEwQjUzOTNENTVCRTc3 Mzk4MEE4MTAwHhcNMjUxMTE0MTgzODE3WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTE3NzcxOC02MDczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmawlaUlCMdJkJK/gzA4QMY7D5dOCrI+5SUULbAdXDKqat6b+nNPIGDINk3Oy tUZNx7gRmGXpieX8/FDOZStAlL14bziYcPKkGHNQoaGXPuU+cM+gvhLHnAbNudfu 2WBaYKvtYA6+zbKk5oIO70TncCLQhEhiuGZK8RlJTt10jDcKeaP30jhZmU3wMwAJ ZaJ4l0cneACu5sB9LWdmvYslaYOJqyJJyTilnCvKIXDqYRmsTFaccoOUwhsoOuDO Vf24Gv9sf904oMNxDwboqMyy7ZtDFvvwQQdWMITPGU5kkdn5+OXAdBy6gige/+8E oFUttNeNDHjXjOBNN2phXA14PwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFIHLtnfa c045bTmF1+RqJsPeF2cSMB8GA1UdIwQYMBaAFJb4F71AcLXMGaC1OT1Vvnc5gKgQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOENBNi85QkQ2NDA1NjMy MDYxMUVBQTJGNkIzMzJDNEY5QUUwMi9sdmdYdlVCd3Rjd1pvTFU1UFZXLWR6bUFx QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x2Z1h2VUJ3dGN3Wm9MVTVQVlctZHptQXFCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjhDQTYvOUJENjQwNTYzMjA2MTFFQUEyRjZCMzMyQzRGOUFFMDIvQ0YwQUU2NDJF QkE3MTFFQTg5ODBGQzExQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnZiQwDwQCAAIwCQMHASABDe+AADANBgkqhkiG9w0BAQsF AAOCAQEAo9inzdY41u1YRp5r9GX6g4RTkzGlManJ744CEKyp8oIQ8lCPBIlOdFhK oiU1UkqV9cAO/pESZBFqk+uFdWTRbMZuIHjzmWSf5x/Avm6WpXk7xPu8GYt6Kw82 mtHTy/AcI6F7Z7/0KKcQQxwCrERRPOgXdqVnwPWOVf5GUCTZ51qiS9dNyZszodsb +lIaMzkzywGJwHMy/OeLDuTMkeJAz5quF+RnRTbN3D4GFEB3B6n3IzXkQAbuVwfm syYMFn7hdUg9qAKdRxfGzEPnJiiezXc9gKIKeRfLOh0sIIA/k63EMjpktXAWJZl8 S6+H1zIebH0ve3qtoZwO91uj/ZATzA== -----END CERTIFICATE-----Generated at Sun Dec 7 01:56:56 2025 by rpki-client