This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/AA14EED2BDE911EFB07EE682C4F9AE02.roa File: AA14EED2BDE911EFB07EE682C4F9AE02.roa (raw, json) Hash identifier: F2TN6kUJp2zCGS7Pi3gV30XU9jGgecUfxw0pY7QFhrE= Subject key identifier: 3B:BE:24:BA:A7:37:C9:FA:B0:C3:FD:2B:18:9E:6C:63:D5:5B:E7:D8 Certificate issuer: /CN=A9144F34/serialNumber=4B3108BC5758843D63DFF6FC64097F2B1644CB8A Certificate serial: CD Authority key identifier: 4B:31:08:BC:57:58:84:3D:63:DF:F6:FC:64:09:7F:2B:16:44:CB:8A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/AA14EED2BDE911EFB07EE682C4F9AE02.roa Signing time: Thu 15 Jan 2026 06:23:58 +0000 ROA not before: Thu 15 Jan 2026 06:23:58 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 137921 IP address blocks: 160.250.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.crl rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144F34, serialNumber=4B3108BC5758843D63DFF6FC64097F2B1644CB8A Validity Not Before: Jan 15 06:23:58 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=696887fe-80c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b3:a9:4f:9b:8c:93:ed:b9:e5:e4:31:7f:22: 64:b9:26:cb:f9:7d:16:6d:5c:86:60:4a:cd:85:cf: 14:6a:c4:91:44:a7:bf:b1:14:68:de:92:d5:33:98: f0:12:1e:18:44:fc:28:a1:d6:2a:ce:82:57:38:5f: 18:22:db:b1:9c:9b:34:f7:9b:7e:c7:f9:19:87:5d: 2f:d1:89:e0:32:49:a3:c9:fd:10:bb:4a:81:38:35: 1f:66:29:ea:2d:e2:e0:e6:ee:ae:aa:9d:e5:5e:da: 5b:31:b5:cf:ff:ae:ef:91:3f:b0:b5:5d:b2:4a:47: f4:e0:35:20:e2:b6:77:ef:95:23:96:c2:6f:a2:ac: 4f:fb:c8:2b:a4:58:92:26:50:08:ee:2e:76:c0:d8: 5a:09:e8:34:bd:69:e0:89:fb:e2:69:d7:48:aa:29: 33:bb:7d:06:94:e0:e1:84:21:20:d7:22:f4:97:9a: fc:e8:b8:55:ba:fd:a0:5f:00:6f:29:87:f8:6c:44: 35:ce:5e:3c:0b:3c:04:61:5a:55:f6:75:73:dd:8d: bb:d8:2c:88:59:74:d1:b8:ec:ac:c8:1c:a3:34:9f: a6:dc:b2:32:90:06:8e:6d:39:e6:d0:bc:ad:c9:d7: 91:d6:e8:48:c9:c2:1b:91:6b:14:7a:1a:48:d4:16: 9e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:BE:24:BA:A7:37:C9:FA:B0:C3:FD:2B:18:9E:6C:63:D5:5B:E7:D8 X509v3 Authority Key Identifier: keyid:4B:31:08:BC:57:58:84:3D:63:DF:F6:FC:64:09:7F:2B:16:44:CB:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/AA14EED2BDE911EFB07EE682C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.250.222.0/24 Signature Algorithm: sha256WithRSAEncryption 34:03:1f:f5:1a:09:62:88:56:ad:5f:cd:60:de:7c:04:7c:4e: ad:a2:10:05:cc:3d:bf:fd:81:00:3a:53:29:8a:11:4c:b5:dd: 5e:e1:49:3a:33:cc:39:63:e9:c6:ec:20:74:80:e4:2b:a9:5d: f8:6c:d5:03:42:b5:46:18:03:84:5a:29:b9:55:85:68:e7:f8: e9:3e:71:c5:f0:bc:3f:42:8d:1e:8b:0d:37:8a:9d:7d:7a:3f: d3:22:54:db:a7:1b:eb:cf:59:2c:fc:a5:c0:06:41:03:a7:34: 49:8b:cc:d9:06:ad:24:dd:a3:38:14:47:fc:73:dc:7c:b6:72: 05:2b:bd:c7:7a:fe:fb:e1:a3:ed:37:17:6d:66:1a:2c:82:a6: 54:98:a2:39:0b:fc:2c:cb:3c:d5:84:28:a3:1c:ca:15:d9:99: 89:e8:b4:03:5c:ad:0f:b5:f0:50:53:af:86:ab:1c:8d:64:79: 67:83:9c:bf:64:86:af:dc:f2:dd:80:e2:41:75:c6:d7:90:b2: fc:14:e6:f2:85:bb:9a:b6:7a:9d:ca:af:5b:b5:1f:19:8d:42: 85:f0:9f:00:f9:aa:9b:90:46:6a:d2:d7:ee:b2:5c:29:38:ac: 04:ba:80:64:cf:b9:42:ae:a5:f6:87:d9:46:fb:d1:bf:57:26: ed:89:88:1b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NDRGMzQxMTAvBgNVBAUTKDRCMzEwOEJDNTc1ODg0M0Q2M0RGRjZGQzY0MDk3RjJC MTY0NENCOEEwHhcNMjYwMTE1MDYyMzU4WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTY4ODdmZS04MGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxbOpT5uMk+255eQxfyJkuSbL+X0WbVyGYErNhc8UasSRRKe/sRRo3pLVM5jw Eh4YRPwoodYqzoJXOF8YItuxnJs095t+x/kZh10v0YngMkmjyf0Qu0qBODUfZinq LeLg5u6uqp3lXtpbMbXP/67vkT+wtV2ySkf04DUg4rZ375UjlsJvoqxP+8grpFiS JlAI7i52wNhaCeg0vWngifviaddIqikzu30GlODhhCEg1yL0l5r86LhVuv2gXwBv KYf4bEQ1zl48CzwEYVpV9nVz3Y272CyIWXTRuOysyByjNJ+m3LIykAaObTnm0Lyt ydeR1uhIycIbkWsUehpI1BaeiwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDu+JLqn N8n6sMP9KxiebGPVW+fYMB8GA1UdIwQYMBaAFEsxCLxXWIQ9Y9/2/GQJfysWRMuK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEYzNC80RDIyRUVFMEJE RTkxMUVGQkZENTM4ODJDNEY5QUUwMi9TekVJdkZkWWhEMWozX2I4WkFsX0t4WkV5 NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1N6RUl2RmRZaEQxajNfYjhaQWxfS3haRXk0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDRGMzQvNEQyMkVFRTBCREU5MTFFRkJGRDUzODgyQzRGOUFFMDIvQUExNEVFRDJC REU5MTFFRkIwN0VFNjgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACg+t4wDQYJKoZIhvcNAQELBQADggEBADQDH/UaCWKIVq1f zWDefAR8Tq2iEAXMPb/9gQA6UymKEUy13V7hSTozzDlj6cbsIHSA5CupXfhs1QNC tUYYA4RaKblVhWjn+Ok+ccXwvD9CjR6LDTeKnX16P9MiVNunG+vPWSz8pcAGQQOn NEmLzNkGrSTdozgUR/xz3Hy2cgUrvcd6/vvho+03F21mGiyCplSYojkL/CzLPNWE KKMcyhXZmYnotANcrQ+18FBTr4arHI1keWeDnL9khq/c8t2A4kF1xteQsvwU5vKF u5q2ep3Kr1u1HxmNQoXwnwD5qpuQRmrS1+6yXCk4rAS6gGTPuUKupfaH2Ub70b9X Ju2JiBs= -----END CERTIFICATE-----Generated at Sun Jan 25 21:43:39 2026 by rpki-client