This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/B05F386E3B9911F09DE90D79C4F9AE02.roa File: B05F386E3B9911F09DE90D79C4F9AE02.roa (raw, json) Hash identifier: GIHBXBl2pD21pCNcWV3u/+IbfxIubhK1MF7gCF8syoI= Subject key identifier: 08:F8:72:28:25:59:F4:FC:F0:D5:D2:4D:50:D4:AF:D1:0E:01:2E:10 Certificate issuer: /CN=A91583E2/serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958 Certificate serial: 62 Authority key identifier: 5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/B05F386E3B9911F09DE90D79C4F9AE02.roa Signing time: Tue 25 Nov 2025 05:23:11 +0000 ROA not before: Tue 25 Nov 2025 05:23:11 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 153380 IP address blocks: 160.191.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:56:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91583E2, serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958 Validity Not Before: Nov 25 05:23:11 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69253d3f-1f15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:7c:b1:ad:47:7b:5d:cb:29:8b:c3:2c:a2:ca: 31:aa:e5:ba:8d:38:49:7b:c9:8c:06:94:b7:2f:c8: 1d:f8:f7:a7:4e:c9:d5:fa:91:50:2b:f3:ec:4b:08: 11:9d:47:8f:fd:28:98:04:fa:dc:29:b4:5b:97:5b: 32:63:1c:e0:fa:9a:8a:dd:f3:af:46:90:23:27:c9: 7a:02:7d:24:97:5d:62:7c:a7:59:5b:57:84:a7:98: 42:bb:c8:67:36:28:4b:ce:bf:40:62:ce:8d:ad:0f: 07:c9:75:d3:96:97:7f:32:37:c3:c7:24:a9:f2:6c: 42:d9:36:4c:e4:8a:ac:db:77:4f:22:09:84:c9:f5: f3:76:a3:61:2b:39:c7:94:78:71:4f:6e:84:77:46: 82:db:d4:41:de:01:4e:b7:52:a1:8c:7a:bd:ce:f1: 16:5d:68:76:c1:bf:a8:07:58:40:f8:20:32:98:8d: 43:87:83:0e:88:9a:8c:d2:db:42:86:7a:41:7b:74: 2a:32:60:89:71:24:83:98:49:cc:c2:ad:b8:45:65: 35:7e:39:86:bf:5c:ca:42:e6:03:98:ef:28:fb:ba: c1:77:f7:6d:dc:b2:ec:dd:e2:1e:aa:8b:a2:53:ca: 46:96:12:f1:8d:60:1f:a7:94:a8:66:a6:5e:00:80: 9a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:F8:72:28:25:59:F4:FC:F0:D5:D2:4D:50:D4:AF:D1:0E:01:2E:10 X509v3 Authority Key Identifier: keyid:5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/B05F386E3B9911F09DE90D79C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.102.0/23 Signature Algorithm: sha256WithRSAEncryption 48:2e:9c:c2:86:ce:c2:98:5f:9c:d6:52:bd:cf:d6:ec:b2:da: f8:83:6b:a7:37:7b:f7:83:17:9c:d5:0e:30:df:e0:2b:68:67: 95:61:2d:e6:ba:4f:b3:2d:a2:61:46:30:c8:e8:ba:65:5e:aa: db:13:a4:5c:57:a8:54:36:16:c8:c6:41:46:43:59:44:43:f0: 08:4e:29:d3:37:8a:c3:71:df:a1:f9:f2:05:bd:03:c8:52:23: 88:c2:6a:ef:b8:1f:d3:8a:6b:71:71:b7:d7:98:78:2c:dd:64: 64:58:d1:85:32:16:9a:04:03:af:9e:e7:73:cb:54:5b:c8:07: 54:04:37:d2:50:11:6f:d3:1f:fd:cd:db:85:ae:c0:f4:43:bf: a1:e2:c8:0d:f5:ab:83:92:f5:ff:76:f1:14:64:5a:7a:3c:7a: 5a:f1:c8:00:1e:67:6f:cd:04:9d:b4:1b:ce:4c:46:1e:6d:dc: 1b:05:d4:cd:74:99:46:8f:66:ef:0a:61:67:49:5d:5b:50:b5: c3:f0:5f:26:11:85:2c:f0:36:15:96:a2:14:68:0b:3e:31:e0: 0f:e5:af:ba:8b:3c:6a:79:25:c4:4f:2a:ec:a7:33:ed:44:55: 00:4a:19:7e:6c:43:e2:61:81:4a:97:0d:9d:cd:49:47:80:85: ff:b0:2f:fe -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 ODNFMjExMC8GA1UEBRMoNUQ2RjI2N0I3QUEzQ0MzNjQ3QzkzMTNCOUVFQzdENjlB MTY3Mzk1ODAeFw0yNTExMjUwNTIzMTFaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MjUzZDNmLTFmMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDlfLGtR3tdyymLwyyiyjGq5bqNOEl7yYwGlLcvyB3496dOydX6kVAr8+xLCBGd R4/9KJgE+twptFuXWzJjHOD6mord869GkCMnyXoCfSSXXWJ8p1lbV4SnmEK7yGc2 KEvOv0Bizo2tDwfJddOWl38yN8PHJKnybELZNkzkiqzbd08iCYTJ9fN2o2ErOceU eHFPboR3RoLb1EHeAU63UqGMer3O8RZdaHbBv6gHWED4IDKYjUOHgw6ImozS20KG ekF7dCoyYIlxJIOYSczCrbhFZTV+OYa/XMpC5gOY7yj7usF3923csuzd4h6qi6JT ykaWEvGNYB+nlKhmpl4AgJofAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUCPhyKCVZ 9Pzw1dJNUNSv0Q4BLhAwHwYDVR0jBBgwFoAUXW8me3qjzDZHyTE7nux9aaFnOVgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4M0UyLzQzRkI3ODdDM0I5 OTExRjBBMENDNTk3OEM0RjlBRTAyL1hXOG1lM3FqekRaSHlURTdudXg5YWFGbk9W Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWFc4bWUzcWp6RFpIeVRFN251eDlhYUZuT1ZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODNFMi80M0ZCNzg3QzNCOTkxMUYwQTBDQzU5NzhDNEY5QUUwMi9CMDVGMzg2RTNC OTkxMUYwOURFOTBENzlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaC/ZjANBgkqhkiG9w0BAQsFAAOCAQEASC6cwobOwphfnNZS vc/W7LLa+INrpzd794MXnNUOMN/gK2hnlWEt5rpPsy2iYUYwyOi6ZV6q2xOkXFeo VDYWyMZBRkNZREPwCE4p0zeKw3HfofnyBb0DyFIjiMJq77gf04prcXG315h4LN1k ZFjRhTIWmgQDr57nc8tUW8gHVAQ30lARb9Mf/c3bha7A9EO/oeLIDfWrg5L1/3bx FGRaejx6WvHIAB5nb80EnbQbzkxGHm3cGwXUzXSZRo9m7wphZ0ldW1C1w/BfJhGF LPA2FZaiFGgLPjHgD+Wvuos8anklxE8q7Kcz7URVAEoZfmxD4mGBSpcNnc1JR4CF /7Av/g== -----END CERTIFICATE-----Generated at Sat Dec 6 23:42:38 2025 by rpki-client