This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/CC08667A7A6011EB9BC9937BC4F9AE02.roa File: CC08667A7A6011EB9BC9937BC4F9AE02.roa (raw, json) Hash identifier: k76lBVsDkbC4/kvkdx6eL3+7hTUl8oC4n6OD1pUFm20= Subject key identifier: EE:FA:84:36:52:A4:29:44:B9:1F:78:54:37:F5:DB:3E:B6:63:EF:E2 Certificate issuer: /CN=A91F3AF8/serialNumber=530D29ADC0FB1CF2837D39BB86343486C1C71682 Certificate serial: 0827 Authority key identifier: 53:0D:29:AD:C0:FB:1C:F2:83:7D:39:BB:86:34:34:86:C1:C7:16:82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/CC08667A7A6011EB9BC9937BC4F9AE02.roa Signing time: Wed 31 Dec 2025 21:16:57 +0000 ROA not before: Wed 31 Dec 2025 21:16:57 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 38477 IP address blocks: 103.254.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.crl rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 20:18:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2087 (0x827) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3AF8, serialNumber=530D29ADC0FB1CF2837D39BB86343486C1C71682 Validity Not Before: Dec 31 21:16:57 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=695592c9-5d9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ec:85:74:90:9b:24:11:d0:88:37:a9:47:68: bd:8f:0d:98:d7:fa:f1:aa:fd:fa:6c:c8:95:cd:31: 84:fa:28:d9:65:4a:88:d2:c7:d5:1e:d1:2c:7b:24: f2:e6:64:b2:dd:a3:b0:7e:9f:ab:f2:fc:69:d0:6f: 69:a5:f4:c5:8a:03:50:cd:ba:12:c4:09:8f:cd:7d: 4a:67:92:ae:7f:cc:33:57:dd:ab:59:1b:39:c3:78: 73:c7:d9:43:43:8a:75:06:24:4d:2e:b6:43:c6:95: b9:d7:4b:3d:1a:05:8b:6a:b4:cc:17:5b:48:ad:3b: 48:8c:e8:5a:7c:25:70:2a:cf:f2:bc:84:73:ab:d2: 8c:33:4b:31:d3:13:90:de:7f:7c:47:98:3e:17:48: d2:a4:7f:e9:81:ee:57:c6:08:e4:37:29:37:a6:86: d2:eb:da:6b:6f:f1:0e:0f:97:e5:1b:a4:71:35:bb: 24:09:e8:a2:2a:dd:78:27:53:91:d1:62:04:13:4d: d3:5c:8c:82:57:83:b0:46:b3:34:c1:e5:68:86:75: b2:0c:72:42:8f:59:0a:10:86:8a:20:c3:43:c3:58: 03:d1:af:c6:bc:23:9a:ed:53:35:98:df:64:48:32: 94:61:5f:1a:0e:85:be:80:4d:13:2d:84:ae:84:89: 62:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:FA:84:36:52:A4:29:44:B9:1F:78:54:37:F5:DB:3E:B6:63:EF:E2 X509v3 Authority Key Identifier: keyid:53:0D:29:AD:C0:FB:1C:F2:83:7D:39:BB:86:34:34:86:C1:C7:16:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/CC08667A7A6011EB9BC9937BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.254.195.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:cb:b4:ab:6f:ff:8a:e4:cb:d2:1c:b6:0c:fb:14:b5:81:c8: c5:c2:7b:cc:b7:15:f6:6d:5c:9d:9d:47:4d:09:fe:ff:b3:c4: f9:d1:a8:e4:c7:1f:c4:98:92:81:4f:77:17:54:ae:b0:d5:43: 89:b1:23:28:bf:e0:d9:d6:0f:5b:27:7d:29:ca:c5:41:2e:ac: c9:53:1f:55:c2:3e:56:55:0d:ea:65:d1:b2:42:1f:e1:26:ed: 9a:a0:73:09:7b:77:23:0a:3e:46:a8:c7:17:ed:04:f7:14:24: 99:15:6e:ca:81:89:23:0e:83:9f:a5:32:41:c8:e1:7f:78:2e: 83:a3:92:4e:62:f9:5b:fc:43:85:36:f8:fa:fa:21:76:0a:cb: 0e:97:50:3c:49:b9:11:36:bc:af:12:b6:61:60:5d:4d:e1:6a: 26:50:74:d9:eb:dc:3f:00:42:fa:39:9a:8b:58:c8:40:0a:0b: 87:5b:37:04:15:36:3a:08:51:95:af:03:60:d2:51:04:99:a8: c1:01:85:69:0c:4e:89:a1:e3:ce:6f:18:be:6f:df:ae:75:f6: 8f:3e:92:1e:76:34:9f:82:0e:b5:fb:3f:2b:38:28:65:62:1f: a6:99:78:83:ce:8b:a9:87:77:91:a7:5a:46:c8:0b:79:f9:0c: 2b:48:c5:78 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx RjNBRjgxMTAvBgNVBAUTKDUzMEQyOUFEQzBGQjFDRjI4MzdEMzlCQjg2MzQzNDg2 QzFDNzE2ODIwHhcNMjUxMjMxMjExNjU3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU1OTJjOS01ZDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6eyFdJCbJBHQiDepR2i9jw2Y1/rxqv36bMiVzTGE+ijZZUqI0sfVHtEseyTy 5mSy3aOwfp+r8vxp0G9ppfTFigNQzboSxAmPzX1KZ5Kuf8wzV92rWRs5w3hzx9lD Q4p1BiRNLrZDxpW510s9GgWLarTMF1tIrTtIjOhafCVwKs/yvIRzq9KMM0sx0xOQ 3n98R5g+F0jSpH/pge5XxgjkNyk3pobS69prb/EOD5flG6RxNbskCeiiKt14J1OR 0WIEE03TXIyCV4OwRrM0weVohnWyDHJCj1kKEIaKIMNDw1gD0a/GvCOa7VM1mN9k SDKUYV8aDoW+gE0TLYSuhIliZQIDAQABo4IClTCCApEwHQYDVR0OBBYEFO76hDZS pClEuR94VDf12z62Y+/iMB8GA1UdIwQYMBaAFFMNKa3A+xzyg305u4Y0NIbBxxaC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0FGOC80ODI5N0ZFRTAy RkUxMUVCQjcwNjY0M0VDNEY5QUUwMi9VdzBwcmNEN0hQS0RmVG03aGpRMGhzSEhG b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V3MHByY0Q3SFBLRGZUbTdoalEwaHNISEZvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjNBRjgvNDgyOTdGRUUwMkZFMTFFQkI3MDY2NDNFQzRGOUFFMDIvQ0MwODY2N0E3 QTYwMTFFQjlCQzk5MzdCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABn/sMwDQYJKoZIhvcNAQELBQADggEBAJ/LtKtv/4rky9Ic tgz7FLWByMXCe8y3FfZtXJ2dR00J/v+zxPnRqOTHH8SYkoFPdxdUrrDVQ4mxIyi/ 4NnWD1snfSnKxUEurMlTH1XCPlZVDepl0bJCH+Em7Zqgcwl7dyMKPkaoxxftBPcU JJkVbsqBiSMOg5+lMkHI4X94LoOjkk5i+Vv8Q4U2+Pr6IXYKyw6XUDxJuRE2vK8S tmFgXU3haiZQdNnr3D8AQvo5motYyEAKC4dbNwQVNjoIUZWvA2DSUQSZqMEBhWkM Tomh485vGL5v36519o8+kh52NJ+CDrX7Pys4KGViH6aZeIPOi6mHd5GnWkbIC3n5 DCtIxXg= -----END CERTIFICATE-----Generated at Sun Jan 25 09:21:26 2026 by rpki-client