This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/8E018B30D05611F0A517D12AC4F9AE02.roa
File: 8E018B30D05611F0A517D12AC4F9AE02.roa (raw, json)
Hash identifier: sV/z+J9M1vomeBwWCL+sac3AZUuwIvVbej3W8i6aPqQ=
Subject key identifier: BA:55:9A:C9:CB:F9:C1:DD:2B:A8:CC:82:87:18:72:63:A8:F2:48:64
Certificate issuer: /CN=A91100B2/serialNumber=BC42188A48A7A99F96D6AFB2011E7DC9DEEE22A5
Certificate serial: 56
Authority key identifier: BC:42:18:8A:48:A7:A9:9F:96:D6:AF:B2:01:1E:7D:C9:DE:EE:22:A5
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/8E018B30D05611F0A517D12AC4F9AE02.roa
Signing time: Thu 04 Dec 2025 03:37:29 +0000
ROA not before: Thu 04 Dec 2025 03:37:29 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 3491
IP address blocks: 79.109.232.0/22 maxlen: 22
79.109.232.0/24 maxlen: 24
79.109.233.0/24 maxlen: 24
79.109.234.0/24 maxlen: 24
79.109.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.crl
rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 18:55:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91100B2, serialNumber=BC42188A48A7A99F96D6AFB2011E7DC9DEEE22A5
Validity
Not Before: Dec 4 03:37:29 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=693101f9-56d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a3:d4:db:39:6e:4d:49:25:b6:17:d8:8b:38:
a2:45:5b:60:d9:2a:4c:f2:d3:c6:e5:65:5f:a7:54:
ae:e5:fe:c7:2d:f2:5f:89:b7:a8:b8:85:c7:01:e9:
13:30:f1:63:ce:15:ba:7a:da:b0:43:7f:85:37:8b:
ce:9c:b9:9b:ee:92:da:6a:04:dd:fa:bc:6e:3a:be:
7b:41:d1:68:30:1e:f7:61:e5:0d:9b:6a:87:9c:fe:
7c:e1:dd:44:48:52:48:89:43:6a:dd:e9:8a:66:3a:
46:55:c7:99:61:cc:81:40:31:60:8a:54:c9:18:c4:
30:89:f9:5f:36:eb:a1:61:65:b6:e6:5a:1e:f8:4a:
1c:a0:58:72:2b:f8:d3:f3:2c:98:a8:ff:6d:c6:02:
22:59:aa:78:13:a9:62:3c:11:d4:91:03:59:d9:4c:
27:0f:49:f2:ef:d1:e3:31:66:44:c5:70:08:66:87:
cc:bc:e9:d1:4f:4d:30:8a:e4:b0:28:23:0f:dc:39:
f0:de:c1:f6:35:f3:e4:39:27:af:fe:9f:e8:d5:cf:
f9:3b:c3:06:9c:18:4a:8f:00:16:4e:03:49:74:c2:
54:42:92:94:c2:87:a2:cd:f3:57:3c:a3:a8:68:17:
0b:a9:ba:c2:0c:b8:24:fd:58:e4:35:ed:8e:a4:ce:
54:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:55:9A:C9:CB:F9:C1:DD:2B:A8:CC:82:87:18:72:63:A8:F2:48:64
X509v3 Authority Key Identifier:
keyid:BC:42:18:8A:48:A7:A9:9F:96:D6:AF:B2:01:1E:7D:C9:DE:EE:22:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/8E018B30D05611F0A517D12AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
79.109.232.0/22
Signature Algorithm: sha256WithRSAEncryption
25:b8:ae:f4:ad:86:07:73:ce:a3:77:e1:3d:45:4b:53:c6:a4:
fd:6c:d3:f7:d0:b4:44:7b:b6:a8:6f:d5:26:44:92:fe:92:14:
90:71:31:0c:8a:17:0d:ab:62:af:a0:c7:fe:a2:af:aa:47:14:
dd:6e:ff:25:c0:35:23:c9:cc:c5:98:5e:f7:49:95:09:15:2b:
93:1b:25:4a:02:ff:ac:7a:5e:f7:d8:d2:4e:dc:db:54:58:54:
98:4c:f0:de:30:ca:0d:c9:55:8a:45:53:ce:b7:de:25:a0:50:
94:7e:80:ac:f6:c8:8d:a5:d2:3a:16:9d:5e:28:ac:eb:ae:7e:
fa:2d:21:5a:fe:ae:18:80:f1:de:07:4f:96:39:55:f7:dd:9a:
02:0d:78:08:6e:3d:3a:43:a0:41:bc:81:40:bf:14:7f:5e:f7:
66:fe:d3:95:cf:03:e9:ed:38:9f:72:bd:13:be:ec:7b:15:1c:
9d:c0:e9:64:b6:7b:cb:e0:5e:b4:11:1d:7e:64:ed:e9:94:76:
f7:46:c7:a7:8c:10:d7:9c:4e:ed:df:b8:3a:53:04:98:51:7d:
a5:e1:d0:62:c8:b4:ba:c7:cd:87:14:a2:1b:c9:ca:a8:a1:ce:
bb:10:a2:7b:42:07:8f:96:6c:b4:66:ec:31:52:6d:96:dc:07:
1e:19:de:b4
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
MDBCMjExMC8GA1UEBRMoQkM0MjE4OEE0OEE3QTk5Rjk2RDZBRkIyMDExRTdEQzlE
RUVFMjJBNTAeFw0yNTEyMDQwMzM3MjlaFw0yNjEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5MzEwMWY5LTU2ZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCYo9TbOW5NSSW2F9iLOKJFW2DZKkzy08blZV+nVK7l/sct8l+Jt6i4hccB6RMw
8WPOFbp62rBDf4U3i86cuZvuktpqBN36vG46vntB0WgwHvdh5Q2baoec/nzh3URI
UkiJQ2rd6YpmOkZVx5lhzIFAMWCKVMkYxDCJ+V8266FhZbbmWh74ShygWHIr+NPz
LJio/23GAiJZqngTqWI8EdSRA1nZTCcPSfLv0eMxZkTFcAhmh8y86dFPTTCK5LAo
Iw/cOfDewfY18+Q5J6/+n+jVz/k7wwacGEqPABZOA0l0wlRCkpTCh6LN81c8o6ho
FwupusIMuCT9WOQ17Y6kzlQLAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUulWaycv5
wd0rqMyChxhyY6jySGQwHwYDVR0jBBgwFoAUvEIYikinqZ+W1q+yAR59yd7uIqUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEwMEIyLzcyMUYzQzlDQTYx
QjExRjBBQzk5NTgzM0M0RjlBRTAyL3ZFSVlpa2lucVotVzFxLXlBUjU5eWQ3dUlx
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvdkVJWWlraW5xWi1XMXEteUFSNTl5ZDd1SXFVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MDBCMi83MjFGM0M5Q0E2MUIxMUYwQUM5OTU4MzNDNEY5QUUwMi84RTAxOEIzMEQw
NTYxMUYwQTUxN0QxMkFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAk9t6DANBgkqhkiG9w0BAQsFAAOCAQEAJbiu9K2GB3POo3fh
PUVLU8ak/WzT99C0RHu2qG/VJkSS/pIUkHExDIoXDatir6DH/qKvqkcU3W7/JcA1
I8nMxZhe90mVCRUrkxslSgL/rHpe99jSTtzbVFhUmEzw3jDKDclVikVTzrfeJaBQ
lH6ArPbIjaXSOhadXiis665++i0hWv6uGIDx3gdPljlV992aAg14CG49OkOgQbyB
QL8Uf173Zv7Tlc8D6e04n3K9E77sexUcncDpZLZ7y+BetBEdfmTt6ZR290bHp4wQ
15xO7d+4OlMEmFF9peHQYsi0usfNhxSiG8nKqKHOuxCie0IHj5ZstGbsMVJtltwH
HhnetA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:13:25 2025 by rpki-client