This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/CBEBC99A622B11F09AC60265C4F9AE02.roa File: CBEBC99A622B11F09AC60265C4F9AE02.roa (raw, json) Hash identifier: 7qxBjFWfjtxDzJZ+ee8N6Gvag8T/oRihev17oCbY5DY= Subject key identifier: 51:E1:39:D0:42:E3:60:DD:DE:72:1D:CC:47:15:40:F2:D9:8E:D4:E6 Certificate issuer: /CN=A913DD09/serialNumber=ABFDA9EE4B4F4E1BD9EA47BBFF85AE93549103E7 Certificate serial: 5A Authority key identifier: AB:FD:A9:EE:4B:4F:4E:1B:D9:EA:47:BB:FF:85:AE:93:54:91:03:E7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/CBEBC99A622B11F09AC60265C4F9AE02.roa Signing time: Wed 31 Dec 2025 06:24:15 +0000 ROA not before: Wed 31 Dec 2025 06:24:15 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 135158 IP address blocks: 160.250.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.crl rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 06:09:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DD09, serialNumber=ABFDA9EE4B4F4E1BD9EA47BBFF85AE93549103E7 Validity Not Before: Dec 31 06:24:15 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6954c18f-0673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f7:21:83:ac:38:d8:59:7c:04:8b:ee:2e:c4: 64:d4:3f:23:c1:1a:3f:1e:75:ba:0f:3c:ed:bd:0c: c0:d7:eb:cd:1d:1d:77:dc:00:cd:eb:20:5c:9d:9c: ff:76:df:42:e0:4c:3c:8e:5a:62:71:14:b6:5d:54: b9:b8:45:45:d8:31:77:a0:01:07:c6:34:9d:3b:63: b4:30:1f:43:d8:36:06:d2:ba:c6:c4:ad:37:cd:08: e3:20:10:b7:3c:0c:57:e0:50:54:70:69:5b:fc:bf: fd:7f:3f:de:2b:de:03:e0:f9:78:e4:5c:10:26:cc: 33:f6:fa:6a:0a:d8:8c:6f:52:9b:b7:f5:ce:ce:fd: f6:46:0e:5e:8e:3b:98:e4:aa:9b:7e:ea:0e:40:f6: 92:16:92:9a:87:00:8d:e5:72:70:2c:2b:3f:ee:72: 88:67:5c:41:aa:47:2c:e7:c6:bd:98:c7:1e:ed:b0: 7b:fa:e7:39:8e:18:8c:5a:6b:79:3e:b3:c4:23:55: a0:c7:6d:1b:04:d6:83:f3:0d:3e:5a:a1:e8:27:f6: ea:d8:71:e3:f7:d5:39:57:bb:4d:79:3f:e3:97:2f: e7:b8:92:6b:4a:99:ff:3d:11:5e:93:87:66:f5:ec: 75:f9:5a:12:b6:af:fc:60:92:a3:0c:4b:7a:73:79: db:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E1:39:D0:42:E3:60:DD:DE:72:1D:CC:47:15:40:F2:D9:8E:D4:E6 X509v3 Authority Key Identifier: keyid:AB:FD:A9:EE:4B:4F:4E:1B:D9:EA:47:BB:FF:85:AE:93:54:91:03:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/CBEBC99A622B11F09AC60265C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.250.174.0/24 Signature Algorithm: sha256WithRSAEncryption 53:1b:1f:f2:a1:6e:70:87:7d:8d:dd:fa:81:a8:a3:f5:bf:19: 84:de:f9:66:f0:2e:74:78:f6:d8:44:3d:2e:8b:39:49:4c:42: 1c:f9:95:cf:00:8a:d6:18:d9:b1:ca:bc:2a:53:49:97:55:77: f5:db:34:2e:6a:18:b0:2f:fc:b8:25:5a:9e:26:57:52:e8:a2: d3:33:13:39:c2:2d:05:83:98:12:6b:40:7c:43:98:7a:70:95: 43:b0:cb:ab:ad:59:0b:f4:c6:db:fb:13:0a:44:52:bf:b2:62: d1:27:68:c3:fa:51:d3:27:dc:fc:87:db:3a:1c:4e:7b:fd:2b: 26:a6:ca:66:8f:69:81:88:5b:31:70:b2:14:7e:be:dc:49:19: 68:0e:55:79:df:2d:bb:94:71:95:e3:42:15:2f:9f:28:2e:f4: b8:33:90:41:18:3a:57:be:fe:ed:73:65:10:c5:ce:9f:f0:d7: e5:3d:44:54:b4:e1:a1:56:bf:a8:d4:94:81:9e:80:a8:e8:0d: 5f:5c:a7:91:51:f2:8b:bf:0f:e8:79:22:42:8b:6d:4f:52:8f: 35:ca:25:64:7f:89:d0:6f:e9:2b:25:93:ca:38:cb:f9:43:8b: 49:47:df:64:16:b7:e2:31:ef:00:5d:f1:16:9b:85:e4:cf:78: b5:96:9e:b0 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTEz REQwOTExMC8GA1UEBRMoQUJGREE5RUU0QjRGNEUxQkQ5RUE0N0JCRkY4NUFFOTM1 NDkxMDNFNzAeFw0yNTEyMzEwNjI0MTVaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV BAMMDTY5NTRjMThmLTA2NzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZ9yGDrDjYWXwEi+4uxGTUPyPBGj8edboPPO29DMDX680dHXfcAM3rIFydnP92 30LgTDyOWmJxFLZdVLm4RUXYMXegAQfGNJ07Y7QwH0PYNgbSusbErTfNCOMgELc8 DFfgUFRwaVv8v/1/P94r3gPg+XjkXBAmzDP2+moK2IxvUpu39c7O/fZGDl6OO5jk qpt+6g5A9pIWkpqHAI3lcnAsKz/ucohnXEGqRyznxr2Yxx7tsHv65zmOGIxaa3k+ s8QjVaDHbRsE1oPzDT5aoegn9urYceP31TlXu015P+OXL+e4kmtKmf89EV6Th2b1 7HX5WhK2r/xgkqMMS3pzedvzAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUUeE50ELj YN3ech3MRxVA8tmO1OYwHwYDVR0jBBgwFoAUq/2p7ktPThvZ6ke7/4Wuk1SRA+cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNERDA5LzY3QjA5NDA2NjIy QjExRjBCRTUyOEIxRkM0RjlBRTAyL3FfMnA3a3RQVGh2WjZrZTdfNFd1azFTUkEt Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcV8ycDdrdFBUaHZaNmtlN180V3VrMVNSQS1jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REQwOS82N0IwOTQwNjYyMkIxMUYwQkU1MjhCMUZDNEY5QUUwMi9DQkVCQzk5QTYy MkIxMUYwOUFDNjAyNjVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKD6rjANBgkqhkiG9w0BAQsFAAOCAQEAUxsf8qFucId9jd36 gaij9b8ZhN75ZvAudHj22EQ9Los5SUxCHPmVzwCK1hjZscq8KlNJl1V39ds0LmoY sC/8uCVaniZXUuii0zMTOcItBYOYEmtAfEOYenCVQ7DLq61ZC/TG2/sTCkRSv7Ji 0Sdow/pR0yfc/IfbOhxOe/0rJqbKZo9pgYhbMXCyFH6+3EkZaA5Ved8tu5RxleNC FS+fKC70uDOQQRg6V77+7XNlEMXOn/DX5T1EVLThoVa/qNSUgZ6AqOgNX1ynkVHy i78P6HkiQottT1KPNcolZH+J0G/pKyWTyjjL+UOLSUffZBa34jHvAF3xFpuF5M94 tZaesA== -----END CERTIFICATE-----Generated at Sun Jan 25 21:10:42 2026 by rpki-client