This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/408104A8C3E011F0A31AE55EC4F9AE02.roa
File: 408104A8C3E011F0A31AE55EC4F9AE02.roa (raw, json)
Hash identifier: mUltdiFtSdwvKJ1/UtAog12GOcFsnhuiRfLmih/4Qqs=
Subject key identifier: 75:2F:FD:29:3E:60:2B:DE:0C:E0:35:AC:D6:B4:B3:79:71:FA:A1:6F
Certificate issuer: /CN=A912E87E/serialNumber=04C79A4DD24FFA03FA8F9296766F82A0385CE293
Certificate serial: D9
Authority key identifier: 04:C7:9A:4D:D2:4F:FA:03:FA:8F:92:96:76:6F:82:A0:38:5C:E2:93
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/408104A8C3E011F0A31AE55EC4F9AE02.roa
Signing time: Thu 27 Nov 2025 04:21:57 +0000
ROA not before: Thu 27 Nov 2025 04:21:57 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 141988
IP address blocks: 160.191.128.0/23 maxlen: 23
160.191.128.0/24 maxlen: 24
160.191.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.crl
rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:49:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217 (0xd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E87E, serialNumber=04C79A4DD24FFA03FA8F9296766F82A0385CE293
Validity
Not Before: Nov 27 04:21:57 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6927d1e4-586d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bd:db:d6:ba:a6:d5:37:75:5a:7c:8c:9b:4b:
5e:5f:be:fa:33:ea:00:1d:5e:b6:1c:eb:10:23:81:
7b:11:7b:ab:fd:36:c5:f6:32:f9:27:84:ca:9f:77:
a2:2b:a7:23:b4:c0:48:9b:07:4a:38:87:0c:42:c5:
87:df:56:7d:5f:7f:7e:ed:a0:4f:c4:92:e1:fb:b2:
71:6d:5c:7b:99:02:dc:06:62:7f:b2:f0:0c:33:37:
e8:a6:f5:10:c2:1e:95:af:04:18:15:36:ca:e0:54:
d5:ed:f7:08:eb:51:c3:f0:03:d0:e0:54:6f:8f:65:
1a:8b:b0:59:41:d6:da:4e:9a:84:07:bf:73:04:4c:
34:0c:5c:1f:26:2e:9d:e0:21:57:cc:af:b8:6a:a4:
67:16:4c:67:65:92:ec:77:32:cb:74:5c:3a:7f:ac:
92:56:97:f5:c6:84:f0:04:23:c0:5c:a6:5e:b4:e9:
43:fd:ca:f2:66:fd:d4:bb:5d:46:2f:42:88:f5:03:
ea:f0:8d:fc:a2:40:c7:de:70:ae:45:bd:fc:7a:5f:
74:75:4e:20:85:f4:cd:56:18:de:81:8a:71:1b:b4:
b2:e1:89:73:63:d6:9a:92:d8:61:f0:62:65:c9:ee:
2d:53:ee:87:04:43:37:b7:80:f7:f2:6a:3f:6a:05:
8e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2F:FD:29:3E:60:2B:DE:0C:E0:35:AC:D6:B4:B3:79:71:FA:A1:6F
X509v3 Authority Key Identifier:
keyid:04:C7:9A:4D:D2:4F:FA:03:FA:8F:92:96:76:6F:82:A0:38:5C:E2:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/408104A8C3E011F0A31AE55EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.191.128.0/23
Signature Algorithm: sha256WithRSAEncryption
49:e4:d9:2c:63:df:14:ee:f1:2a:a7:73:56:4d:30:13:ca:1d:
a4:78:d2:c1:b4:70:79:95:fe:e8:38:ed:21:6c:4f:14:40:49:
17:32:48:be:e9:f5:65:9a:aa:85:8b:a3:83:c0:bb:81:84:3e:
18:3e:e4:71:88:a1:ad:84:2d:c1:d8:b0:aa:f8:b7:63:d0:87:
64:34:29:6b:d8:38:9c:f4:1d:1c:21:1c:69:a2:f8:31:25:4a:
a3:b4:32:98:7f:c0:69:ad:79:64:3f:14:93:a6:a4:8e:92:fc:
7b:ef:ed:de:37:d9:f6:eb:92:52:36:65:b7:8f:9c:00:7d:75:
58:fb:13:db:02:a1:3b:89:88:ef:5a:c4:0c:ed:d1:72:74:c6:
90:db:1e:36:e0:5b:75:aa:e0:38:cf:cf:d2:12:a7:3c:90:64:
00:f7:a3:bb:61:1f:2f:91:43:d2:4e:86:b1:53:a6:53:fe:c2:
fd:7d:94:35:b6:fd:02:f6:f6:bc:35:c7:4c:f9:fd:11:94:51:
90:74:9a:d9:b5:50:cd:3c:33:70:6a:82:27:6a:02:55:5b:46:
d3:13:a0:f7:8f:31:d9:c5:42:5b:78:4f:44:a2:d7:06:ef:03:
bf:98:68:12:a7:85:11:b9:9b:ef:ec:7b:b5:95:d8:ea:d5:60:
86:d0:67:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:14:24 2025 by rpki-client