This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/11600CECBA8E11F09FE88B46C4F9AE02.roa File: 11600CECBA8E11F09FE88B46C4F9AE02.roa (raw, json) Hash identifier: arvR+VfB5fxBjJ8WptxMyVsFJiGGZaQvn5Kv4Mcr+ow= Subject key identifier: 53:6E:7E:66:DF:D7:AA:7E:9F:E2:B3:E0:7C:39:DB:9F:41:60:DC:46 Certificate issuer: /CN=A91168B5/serialNumber=BF45D47E7F8FD177D4592C434BCF962BC0A8C669 Certificate serial: 1C27 Authority key identifier: BF:45:D4:7E:7F:8F:D1:77:D4:59:2C:43:4B:CF:96:2B:C0:A8:C6:69 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/11600CECBA8E11F09FE88B46C4F9AE02.roa Signing time: Wed 05 Nov 2025 21:26:19 +0000 ROA not before: Wed 05 Nov 2025 21:26:19 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 9432 IP address blocks: 132.181.0.0/18 maxlen: 18 132.181.64.0/19 maxlen: 19 132.181.96.0/19 maxlen: 19 132.181.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7207 (0x1c27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91168B5, serialNumber=BF45D47E7F8FD177D4592C434BCF962BC0A8C669 Validity Not Before: Nov 5 21:26:19 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=690bc0fb-ce3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d0:20:67:c8:2d:41:6e:c1:59:c9:95:1e:98: 1d:c9:29:b6:da:df:1c:f5:f1:9a:2a:34:41:f2:b9: 9a:e5:3b:77:d8:3a:64:b6:b1:9c:56:d2:1e:d1:a0: 70:ce:e9:d4:4d:0c:15:01:3a:a6:7d:ca:e4:33:04: 02:3c:36:52:9b:fc:c7:f1:03:f5:ae:37:46:fc:1f: a7:e7:cc:4f:5c:ab:2d:d1:56:23:2e:c4:70:e4:a4: 02:56:e8:78:80:ec:89:57:b0:42:dc:6e:42:54:aa: 7a:1f:47:6b:3c:ff:93:c6:f8:67:52:3b:21:35:bb: e4:38:a8:32:1e:a8:7e:49:03:b1:c6:4b:94:9c:24: f6:c6:26:66:4e:a4:29:9c:88:7f:04:4c:18:1c:a8: 36:a4:5e:66:b8:11:87:fa:f7:c9:90:c0:57:07:9f: f8:e8:72:7a:2f:33:5f:4a:28:3b:27:79:e3:aa:7c: ec:1b:6c:d8:91:39:54:6f:56:ca:23:31:37:0b:b6: f9:16:fe:fb:38:b8:34:d1:f3:0d:79:37:17:ec:96: 87:4c:2a:b3:71:b5:ae:a4:8f:6e:a1:eb:92:12:a6: 0d:86:9f:d9:c8:3c:1c:03:e4:52:f0:d8:76:04:42: 49:13:6e:f8:9a:b8:d6:17:1b:63:55:b3:62:4d:57: 4a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:6E:7E:66:DF:D7:AA:7E:9F:E2:B3:E0:7C:39:DB:9F:41:60:DC:46 X509v3 Authority Key Identifier: keyid:BF:45:D4:7E:7F:8F:D1:77:D4:59:2C:43:4B:CF:96:2B:C0:A8:C6:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/11600CECBA8E11F09FE88B46C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 132.181.0.0-132.181.159.255 Signature Algorithm: sha256WithRSAEncryption 79:5f:27:44:8b:2c:fd:72:cc:c7:c7:b2:2e:31:37:7e:d7:fd: a4:17:67:d6:57:95:6d:9a:5f:57:ac:4d:83:b3:bd:53:63:26: 94:a6:59:0d:1a:1b:c0:cd:d7:e9:00:de:0a:ae:a9:65:79:19: 5c:40:3f:d2:63:72:03:8f:06:7c:91:99:86:88:15:e3:92:b9: 4b:6d:ea:ad:bd:5c:b4:f8:b0:21:ad:56:77:16:53:90:ee:52: 07:63:e8:30:ee:74:b6:58:b3:06:91:dd:f5:47:be:4a:f9:bf: 68:f8:c2:3d:3b:35:5a:d0:01:aa:9e:bb:5f:63:b2:2b:2b:5b: 3a:29:ba:f2:15:41:9e:84:55:c9:db:ee:96:87:b7:e3:f6:b6: 2e:cb:df:76:8b:48:62:ec:d1:ad:c4:03:85:c0:62:40:93:c8: ed:20:7c:61:a8:ba:b7:73:e3:a0:2e:57:46:9e:87:69:df:5d: 27:44:ec:ea:fc:67:92:a5:e8:e5:03:2d:3c:39:87:7d:dd:9c: 29:48:ed:38:94:f2:76:e1:4e:86:dc:9e:ba:5b:44:59:0d:74: 8a:f4:a5:63:f7:67:ae:6e:02:28:92:81:ed:c5:9a:64:ab:3d: 1e:dd:10:43:35:75:5c:43:39:13:4a:bc:bf:a4:e2:2a:fa:b8: 00:3c:44:7c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgICHCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY4QjUxMTAvBgNVBAUTKEJGNDVENDdFN0Y4RkQxNzdENDU5MkM0MzRCQ0Y5NjJC QzBBOEM2NjkwHhcNMjUxMTA1MjEyNjE5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTBiYzBmYi1jZTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4NAgZ8gtQW7BWcmVHpgdySm22t8c9fGaKjRB8rma5Tt32DpktrGcVtIe0aBw zunUTQwVATqmfcrkMwQCPDZSm/zH8QP1rjdG/B+n58xPXKst0VYjLsRw5KQCVuh4 gOyJV7BC3G5CVKp6H0drPP+TxvhnUjshNbvkOKgyHqh+SQOxxkuUnCT2xiZmTqQp nIh/BEwYHKg2pF5muBGH+vfJkMBXB5/46HJ6LzNfSig7J3njqnzsG2zYkTlUb1bK IzE3C7b5Fv77OLg00fMNeTcX7JaHTCqzcbWupI9uoeuSEqYNhp/ZyDwcA+RS8Nh2 BEJJE274mrjWFxtjVbNiTVdKjQIDAQABo4ICnDCCApgwHQYDVR0OBBYEFFNufmbf 16p+n+Kz4Hw5259BYNxGMB8GA1UdIwQYMBaAFL9F1H5/j9F31FksQ0vPlivAqMZp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjhCNS8yQjBCRkQ5OEY2 RTAxMUU2OTJBMjBCODdDNEY5QUUwMi92MFhVZm4tUDBYZlVXU3hEUzgtV0s4Q294 bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3YwWFVmbi1QMFhmVVdTeERTOC1XSzhDb3htay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTY4QjUvMkIwQkZEOThGNkUwMTFFNjkyQTIwQjg3QzRGOUFFMDIvMTE2MDBDRUNC QThFMTFGMDlGRTg4QjQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJgYIKwYBBQUHAQcBAf8E FzAVMBMEAgABMA0wCwMDAIS1AwQFhLWAMA0GCSqGSIb3DQEBCwUAA4IBAQB5XydE iyz9cszHx7IuMTd+1/2kF2fWV5Vtml9XrE2Ds71TYyaUplkNGhvAzdfpAN4Krqll eRlcQD/SY3IDjwZ8kZmGiBXjkrlLbeqtvVy0+LAhrVZ3FlOQ7lIHY+gw7nS2WLMG kd31R75K+b9o+MI9OzVa0AGqnrtfY7IrK1s6KbryFUGehFXJ2+6Wh7fj9rYuy992 i0hi7NGtxAOFwGJAk8jtIHxhqLq3c+OgLldGnodp310nROzq/GeSpejlAy08OYd9 3ZwpSO04lPJ24U6G3J66W0RZDXSK9KVj92eubgIokoHtxZpkqz0e3RBDNXVcQzkT Sry/pOIq+rgAPER8 -----END CERTIFICATE-----Generated at Sun Dec 7 01:48:16 2025 by rpki-client