This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/CBD4FE1208B611EDACE57065C4F9AE02.roa File: CBD4FE1208B611EDACE57065C4F9AE02.roa (raw, json) Hash identifier: oyCtMje9lcYf2wr513hrmeca1vFWbCB0GW1U6axyanE= Subject key identifier: E1:75:42:E1:5A:9D:1D:0F:37:5B:2C:EC:71:42:DB:62:E1:BA:16:56 Certificate issuer: /CN=A91C5CB1/serialNumber=00A10083FDB016C303D4E619EC61AB6583800D27 Certificate serial: 02AC Authority key identifier: 00:A1:00:83:FD:B0:16:C3:03:D4:E6:19:EC:61:AB:65:83:80:0D:27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/CBD4FE1208B611EDACE57065C4F9AE02.roa Signing time: Tue 05 Aug 2025 02:09:41 +0000 ROA not before: Tue 05 Aug 2025 02:09:41 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 136513 IP address blocks: 103.152.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:39:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 684 (0x2ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5CB1, serialNumber=00A10083FDB016C303D4E619EC61AB6583800D27 Validity Not Before: Aug 5 02:09:41 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=689167e5-11c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:69:e7:ba:ea:5f:0a:03:71:0a:81:96:2e:eb: 60:1f:1f:ec:1b:83:5c:99:c4:3c:20:10:87:3d:ee: a6:45:9e:3b:ed:e8:cd:6a:8a:56:af:41:02:de:84: 62:44:35:9e:69:8c:52:69:db:2b:3e:c8:67:ae:52: 1c:11:a6:73:c0:99:8c:78:e6:50:e6:32:ef:47:3e: 20:1a:98:78:60:30:2c:23:65:7f:8a:80:91:e3:c6: 01:3f:ac:cb:e7:01:7f:07:c0:36:b3:69:d1:e0:ed: e9:01:c7:6e:be:94:65:a1:23:9d:c8:39:ab:c3:8d: f5:79:82:7e:50:dc:16:fa:ca:9c:f3:2d:d1:eb:a8: 93:88:a1:d4:fa:03:98:14:ac:a2:69:bb:56:b4:ab: 69:a3:af:d2:51:0f:80:11:5f:d6:28:cf:6a:43:77: 61:2e:9e:30:a7:98:9a:cf:cc:3d:a8:ed:ed:ac:b9: ee:56:ea:78:21:27:c9:ce:ed:ce:4a:7f:4c:94:39: bc:72:3b:42:39:1e:57:c2:5a:0a:ac:99:76:bb:1c: 71:a1:7d:12:8a:4d:5b:83:d9:ad:36:a7:7d:69:39: 97:3e:26:a0:04:93:8c:84:63:10:ce:9b:06:76:49: 96:e5:b3:57:df:90:26:6f:96:1a:73:62:01:fc:a7: 8c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:75:42:E1:5A:9D:1D:0F:37:5B:2C:EC:71:42:DB:62:E1:BA:16:56 X509v3 Authority Key Identifier: keyid:00:A1:00:83:FD:B0:16:C3:03:D4:E6:19:EC:61:AB:65:83:80:0D:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/CBD4FE1208B611EDACE57065C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.152.86.0/23 Signature Algorithm: sha256WithRSAEncryption 51:1e:a2:09:0b:7a:c0:4a:ed:ac:82:be:40:fe:66:9d:d9:29: 97:1e:00:56:f6:2b:1d:2e:fd:9e:47:05:d5:19:69:e5:b3:77: 10:f6:3e:e2:c8:3d:3c:f6:3b:5f:4a:90:04:1a:cf:f2:14:e2: de:97:b8:36:e3:8a:1e:98:6c:86:13:d4:62:08:e6:4d:59:c2: 9d:2e:b8:e9:b0:54:71:ec:7d:e1:2e:da:ee:72:61:6f:fd:85: 00:fa:b8:20:61:bd:01:5f:72:2b:46:0b:6f:92:a9:d8:59:7f: 1d:c8:b8:02:62:02:a6:2b:65:90:75:91:34:b0:6e:51:54:55: e7:ed:9d:b4:cb:d4:38:08:fe:53:e1:ca:94:bc:42:74:21:6e: 1c:db:5e:00:4a:ea:c7:1c:d6:b9:9c:31:90:ea:e4:66:f0:72: ac:94:3f:c1:44:ab:5e:a5:5d:32:c6:c6:c8:e9:f1:ad:dc:40: 64:cf:48:27:6d:a6:e5:a4:c5:06:6e:d1:7d:1b:41:b8:7e:2d: 95:29:97:93:a1:e5:07:71:64:8f:7b:df:e3:e9:a9:04:df:31: 7e:f6:cc:68:94:88:44:55:3d:ea:a7:4e:6f:47:c0:89:1b:82: 52:99:3c:1a:b7:47:36:9d:4c:c3:78:6b:4d:c9:39:5d:82:3c: 34:de:85:17 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVDQjExMTAvBgNVBAUTKDAwQTEwMDgzRkRCMDE2QzMwM0Q0RTYxOUVDNjFBQjY1 ODM4MDBEMjcwHhcNMjUwODA1MDIwOTQxWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODkxNjdlNS0xMWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGnnuupfCgNxCoGWLutgHx/sG4NcmcQ8IBCHPe6mRZ477ejNaopWr0EC3oRi RDWeaYxSadsrPshnrlIcEaZzwJmMeOZQ5jLvRz4gGph4YDAsI2V/ioCR48YBP6zL 5wF/B8A2s2nR4O3pAcduvpRloSOdyDmrw431eYJ+UNwW+sqc8y3R66iTiKHU+gOY FKyiabtWtKtpo6/SUQ+AEV/WKM9qQ3dhLp4wp5iaz8w9qO3trLnuVup4ISfJzu3O Sn9MlDm8cjtCOR5XwloKrJl2uxxxoX0Sik1bg9mtNqd9aTmXPiagBJOMhGMQzpsG dkmW5bNX35Amb5Yac2IB/KeMpwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOF1QuFa nR0PN1ss7HFC22LhuhZWMB8GA1UdIwQYMBaAFAChAIP9sBbDA9TmGexhq2WDgA0n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUNCMS8xMTY3MkMyMDA3 RjkxMUVEODIyN0U1NzJDNEY5QUUwMi9BS0VBZ18yd0ZzTUQxT1laN0dHclpZT0FE U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FLRUFnXzJ3RnNNRDFPWVo3R0dyWllPQURTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzVDQjEvMTE2NzJDMjAwN0Y5MTFFRDgyMjdFNTcyQzRGOUFFMDIvQ0JENEZFMTIw OEI2MTFFREFDRTU3MDY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnmFYwDQYJKoZIhvcNAQELBQADggEBAFEeogkLesBK7ayC vkD+Zp3ZKZceAFb2Kx0u/Z5HBdUZaeWzdxD2PuLIPTz2O19KkAQaz/IU4t6XuDbj ih6YbIYT1GII5k1Zwp0uuOmwVHHsfeEu2u5yYW/9hQD6uCBhvQFfcitGC2+SqdhZ fx3IuAJiAqYrZZB1kTSwblFUVeftnbTL1DgI/lPhypS8QnQhbhzbXgBK6scc1rmc MZDq5GbwcqyUP8FEq16lXTLGxsjp8a3cQGTPSCdtpuWkxQZu0X0bQbh+LZUpl5Oh 5QdxZI973+PpqQTfMX72zGiUiERVPeqnTm9HwIkbglKZPBq3RzadTMN4a03JOV2C PDTehRc= -----END CERTIFICATE-----Generated at Sat Dec 6 23:00:10 2025 by rpki-client