This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/109B1A6AC14F11EFAE8F4B0BC4F9AE02.roa
File: 109B1A6AC14F11EFAE8F4B0BC4F9AE02.roa (raw, json)
Hash identifier: 09MXzznavjlAetc/kbL6e7wBd7J6MBKbry2jLeoSGiM=
Subject key identifier: D9:98:71:F3:0C:8A:3B:E5:D2:D3:F7:F8:29:F0:21:6D:D5:10:15:ED
Certificate issuer: /CN=A915825D/serialNumber=4CA02EC111874AE0E7D0555A25FF3302F912EB8C
Certificate serial: DD
Authority key identifier: 4C:A0:2E:C1:11:87:4A:E0:E7:D0:55:5A:25:FF:33:02:F9:12:EB:8C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TKAuwRGHSuDn0FVaJf8zAvkS64w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/109B1A6AC14F11EFAE8F4B0BC4F9AE02.roa
Signing time: Sat 27 Dec 2025 05:24:46 +0000
ROA not before: Sat 27 Dec 2025 05:24:46 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 136396
IP address blocks: 160.191.162.0/24 maxlen: 24
160.191.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.crl
rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TKAuwRGHSuDn0FVaJf8zAvkS64w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:45:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 221 (0xdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915825D, serialNumber=4CA02EC111874AE0E7D0555A25FF3302F912EB8C
Validity
Not Before: Dec 27 05:24:46 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=694f6d9d-b66a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5d:91:11:b9:14:02:b7:6c:b8:3f:1b:60:2e:
fc:ba:07:41:e2:ff:66:4f:80:2b:4d:58:fc:3c:20:
c1:13:90:48:ba:5d:56:cc:1d:99:2b:8e:79:b7:f1:
dd:a9:53:03:6c:05:c0:05:86:53:2a:c8:59:88:19:
98:3f:0b:50:00:d0:fe:8f:cd:1c:f9:61:e6:0b:85:
3c:51:fe:6f:46:4a:d9:54:b8:eb:71:e9:65:b0:29:
f3:11:d9:e9:0a:43:0f:e5:4e:e3:7e:a0:4a:de:07:
2b:ed:c8:8a:fb:9c:4b:85:3f:33:fe:bf:e7:ce:eb:
29:e2:62:24:58:68:03:a1:de:ea:7d:50:61:06:b1:
dc:f2:3f:cb:40:75:9d:14:cc:bd:9d:18:8e:e3:af:
fc:8f:64:e3:a5:26:33:9d:cf:41:b8:33:a2:27:b4:
1a:ea:36:47:36:1f:46:e7:09:f6:8b:2f:b7:01:f3:
e2:11:cf:60:65:57:20:2f:21:69:fe:5d:66:14:65:
e8:d0:10:38:0a:1e:8a:76:bb:48:68:eb:f2:fe:fe:
6e:2b:28:d1:f3:6a:4b:e4:8f:de:ed:3b:49:ff:81:
4b:d6:01:a4:74:dd:92:62:b2:c3:e3:f0:82:c0:11:
73:50:5e:f0:07:b3:78:ef:8a:c4:4f:41:db:d9:73:
36:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:98:71:F3:0C:8A:3B:E5:D2:D3:F7:F8:29:F0:21:6D:D5:10:15:ED
X509v3 Authority Key Identifier:
keyid:4C:A0:2E:C1:11:87:4A:E0:E7:D0:55:5A:25:FF:33:02:F9:12:EB:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TKAuwRGHSuDn0FVaJf8zAvkS64w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/109B1A6AC14F11EFAE8F4B0BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.191.162.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:ee:42:26:6d:ec:82:68:2f:f1:8f:2e:0b:21:df:43:fd:3a:
33:73:e8:97:4a:3a:ce:49:c5:be:02:8b:79:4c:79:3d:8d:f4:
e1:0c:6e:07:2c:68:22:5d:25:d1:e4:f7:cd:21:e7:81:ae:8f:
3f:36:26:4a:1e:e9:79:c0:4f:07:37:20:d7:85:82:21:6f:31:
36:59:5e:05:93:af:6c:b1:d7:ce:3b:f7:8e:1f:7a:65:f4:89:
f2:94:be:a4:4e:01:38:7c:74:cc:11:1e:35:c9:d1:ea:f6:d7:
1c:77:9d:fd:05:06:45:16:af:48:d9:2f:9e:6b:14:83:6c:99:
76:d2:0c:da:28:74:6e:73:01:9c:b5:68:31:b3:ad:34:de:93:
2e:73:c1:f2:c5:22:75:95:ad:9b:10:62:3a:fe:b3:10:6c:32:
d7:c7:c6:7e:5d:d6:1f:66:8b:3a:c3:53:4a:2e:55:02:33:bb:
3a:a1:1f:0d:e1:ec:e0:70:da:e4:f7:89:f8:91:40:ba:f2:22:
72:09:6d:91:08:a9:0f:1b:5b:c9:7c:18:c7:c9:62:8e:a6:fb:
04:72:0a:da:2e:5b:93:db:ed:bf:11:ed:f6:8c:0e:8e:c4:8d:
8f:f9:dc:37:94:b4:be:fb:9b:3d:bb:61:30:f8:4e:6b:e0:68:
12:63:e5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:12:42 2026 by rpki-client