This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/22D3C2B23B9E11F096AB407FC4F9AE02.roa File: 22D3C2B23B9E11F096AB407FC4F9AE02.roa (raw, json) Hash identifier: H/XGmOZJbxNUFS8Tcof2YjyntGMBezbzD9QlTVis80k= Subject key identifier: 14:1F:69:F6:CC:52:DF:DF:25:17:91:F7:A6:6F:FD:0A:54:1F:32:37 Certificate issuer: /CN=A91583E2/serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958 Certificate serial: 63 Authority key identifier: 5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/22D3C2B23B9E11F096AB407FC4F9AE02.roa Signing time: Tue 25 Nov 2025 05:23:13 +0000 ROA not before: Tue 25 Nov 2025 05:23:13 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 399861 IP address blocks: 160.191.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:56:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91583E2, serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958 Validity Not Before: Nov 25 05:23:13 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69253d41-3299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:34:4e:f7:f7:8a:74:52:6d:59:02:7c:c6:5c: fc:29:01:d1:e2:fa:22:f3:fb:e9:37:51:1e:03:30: f4:bf:01:ef:f5:40:a9:e1:f3:6d:88:43:d8:d8:ef: f6:b8:64:49:a8:47:84:2e:72:8a:00:ed:1a:cf:48: b1:86:5b:fc:d2:e4:df:7d:05:ab:62:e1:08:64:7d: eb:b5:61:e2:af:45:cf:fa:fa:5c:51:8e:79:5e:e3: cf:b0:06:e9:6e:db:a2:21:79:fe:a2:47:b0:bb:ff: de:f0:c7:d8:39:f9:b9:15:fd:74:f2:d3:5d:20:06: 65:08:89:76:04:59:87:ba:ba:3b:24:a7:d3:34:0b: 00:c1:40:fb:1b:c8:ae:75:b2:15:63:fb:96:50:fc: 13:36:35:04:dc:5d:60:34:58:8f:12:24:29:7f:86: 18:4f:20:83:26:0e:20:d0:33:18:66:84:5a:0e:f0: 3d:a6:e5:ea:bb:4f:eb:f4:36:b5:b9:3a:c0:d5:d3: 42:92:fd:8c:b9:59:bc:48:96:73:7c:46:40:20:50: a1:75:4b:af:f5:c4:04:48:7d:3b:9a:8a:f6:89:84: b6:30:20:e4:4d:75:0f:6c:79:25:75:06:75:ce:a5: db:c4:92:bd:2d:16:83:5c:9a:f3:4c:da:76:aa:8d: 67:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:1F:69:F6:CC:52:DF:DF:25:17:91:F7:A6:6F:FD:0A:54:1F:32:37 X509v3 Authority Key Identifier: keyid:5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/22D3C2B23B9E11F096AB407FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.102.0/23 Signature Algorithm: sha256WithRSAEncryption ba:58:1b:65:d2:03:8a:c4:a7:2d:68:43:12:9a:6a:24:6a:4e: bd:53:f2:a0:71:fc:2d:e4:13:91:38:6f:eb:5c:31:6d:4f:cb: e5:73:74:2c:03:0f:74:24:02:b9:e7:93:dd:e7:2d:0c:d2:60: 20:d6:69:77:58:22:1b:c1:8c:e2:a4:e4:52:cf:14:36:da:98: 7e:82:d8:d3:2b:f6:35:ae:e4:ab:ad:e0:dc:b2:63:5e:21:ea: b4:6e:4c:a1:43:e2:ef:aa:3e:ce:f1:27:34:6f:6b:60:67:c9: cb:21:bf:0b:f6:92:e3:3e:f1:e5:15:1c:dd:4d:38:1c:ea:74: da:c7:c4:4a:b9:83:e6:7f:13:8b:03:e2:4f:db:d0:cc:8f:96: 0a:86:2a:66:67:11:b2:94:9c:05:ce:86:43:0b:73:9a:40:e9: c3:0b:09:f1:f5:cb:14:79:d1:92:98:cf:0d:37:76:98:98:95: e4:ad:1e:f4:df:24:a5:c7:fd:a4:3b:46:62:5a:c4:f7:59:d3: 0e:f1:d4:4a:49:2e:10:fd:cf:d4:be:d0:fa:74:88:95:48:48: fc:a5:1e:f4:9b:1f:19:16:2c:d6:2f:91:0f:ad:c6:10:1a:bf: 63:89:0a:bd:9c:50:dc:3e:75:e0:8f:85:c4:25:ce:e1:dc:52: 3e:c0:50:70 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 ODNFMjExMC8GA1UEBRMoNUQ2RjI2N0I3QUEzQ0MzNjQ3QzkzMTNCOUVFQzdENjlB MTY3Mzk1ODAeFw0yNTExMjUwNTIzMTNaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MjUzZDQxLTMyOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvNE7394p0Um1ZAnzGXPwpAdHi+iLz++k3UR4DMPS/Ae/1QKnh822IQ9jY7/a4 ZEmoR4QucooA7RrPSLGGW/zS5N99Bati4Qhkfeu1YeKvRc/6+lxRjnle48+wBulu 26Ihef6iR7C7/97wx9g5+bkV/XTy010gBmUIiXYEWYe6ujskp9M0CwDBQPsbyK51 shVj+5ZQ/BM2NQTcXWA0WI8SJCl/hhhPIIMmDiDQMxhmhFoO8D2m5eq7T+v0NrW5 OsDV00KS/Yy5WbxIlnN8RkAgUKF1S6/1xARIfTuaivaJhLYwIORNdQ9seSV1BnXO pdvEkr0tFoNcmvNM2naqjWfFAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUFB9p9sxS 398lF5H3pm/9ClQfMjcwHwYDVR0jBBgwFoAUXW8me3qjzDZHyTE7nux9aaFnOVgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4M0UyLzQzRkI3ODdDM0I5 OTExRjBBMENDNTk3OEM0RjlBRTAyL1hXOG1lM3FqekRaSHlURTdudXg5YWFGbk9W Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWFc4bWUzcWp6RFpIeVRFN251eDlhYUZuT1ZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODNFMi80M0ZCNzg3QzNCOTkxMUYwQTBDQzU5NzhDNEY5QUUwMi8yMkQzQzJCMjNC OUUxMUYwOTZBQjQwN0ZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaC/ZjANBgkqhkiG9w0BAQsFAAOCAQEAulgbZdIDisSnLWhD EppqJGpOvVPyoHH8LeQTkThv61wxbU/L5XN0LAMPdCQCueeT3ectDNJgINZpd1gi G8GM4qTkUs8UNtqYfoLY0yv2Na7kq63g3LJjXiHqtG5MoUPi76o+zvEnNG9rYGfJ yyG/C/aS4z7x5RUc3U04HOp02sfESrmD5n8TiwPiT9vQzI+WCoYqZmcRspScBc6G QwtzmkDpwwsJ8fXLFHnRkpjPDTd2mJiV5K0e9N8kpcf9pDtGYlrE91nTDvHUSkku EP3P1L7Q+nSIlUhI/KUe9JsfGRYs1i+RD63GEBq/Y4kKvZxQ3D514I+FxCXO4dxS PsBQcA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:21:50 2025 by rpki-client