This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/3A748F0E9C1211EF80DB437DC4F9AE02.roa File: 3A748F0E9C1211EF80DB437DC4F9AE02.roa (raw, json) Hash identifier: /aYnenzkWhxgHnjrJebloivwTxhunUMYerI1b4cTKW4= Subject key identifier: DD:B7:AB:00:71:12:24:C9:ED:1C:A7:DF:F1:95:6C:40:8A:1A:C4:CD Certificate issuer: /CN=A915EA46/serialNumber=8B15440AE226C990FC9E55915FE8C9509BCB6676 Certificate serial: D0 Authority key identifier: 8B:15:44:0A:E2:26:C9:90:FC:9E:55:91:5F:E8:C9:50:9B:CB:66:76 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixVECuImyZD8nlWRX-jJUJvLZnY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/3A748F0E9C1211EF80DB437DC4F9AE02.roa Signing time: Wed 03 Dec 2025 04:33:59 +0000 ROA not before: Wed 03 Dec 2025 04:33:59 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 153392 IP address blocks: 160.191.188.0/23 maxlen: 23 160.191.188.0/24 maxlen: 24 160.191.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.crl rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixVECuImyZD8nlWRX-jJUJvLZnY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:46:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EA46, serialNumber=8B15440AE226C990FC9E55915FE8C9509BCB6676 Validity Not Before: Dec 3 04:33:59 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=692fbdb6-cca4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6f:b4:b5:f9:4d:28:d7:52:da:80:22:20:46: fe:6e:eb:d3:be:02:cb:1c:d6:71:9f:b2:27:68:19: ae:af:25:97:57:f5:62:77:26:6f:3b:3c:93:06:33: 9e:7a:be:83:b4:ca:56:6a:a1:47:a2:87:30:b3:e0: b7:39:cd:32:d6:4b:50:ea:00:94:38:d0:7f:c5:79: 0e:f9:d7:e2:77:59:b9:5e:b7:b1:56:d6:88:bd:82: 1f:a8:3f:49:26:61:76:e0:82:c2:ff:9e:82:55:da: b7:bf:bc:f6:65:c3:76:76:1d:86:99:c0:dc:21:32: e2:c2:04:c0:43:ff:7f:b6:70:30:85:b9:c2:d8:8d: 27:d7:f3:0c:b5:6c:1a:e0:c6:90:b3:50:c2:3a:bf: 07:f4:26:ef:c2:12:f7:d6:3c:8b:83:1a:c7:ba:b7: f3:96:75:a1:1b:55:cf:5a:28:f7:b6:e8:5c:9b:6c: 33:ed:2d:8a:44:34:24:7a:1d:31:96:3b:bf:9d:d0: 63:6f:0b:0a:8c:54:b2:19:a2:bb:79:76:1f:0d:45: 2a:9c:f0:a6:37:a1:73:a6:79:a2:ad:b9:25:a3:65: 31:15:61:b5:24:9b:dd:fc:33:19:47:6e:4a:42:7f: 29:0a:71:03:05:6b:17:6f:7b:18:98:d8:cd:39:cf: 65:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B7:AB:00:71:12:24:C9:ED:1C:A7:DF:F1:95:6C:40:8A:1A:C4:CD X509v3 Authority Key Identifier: keyid:8B:15:44:0A:E2:26:C9:90:FC:9E:55:91:5F:E8:C9:50:9B:CB:66:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixVECuImyZD8nlWRX-jJUJvLZnY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/3A748F0E9C1211EF80DB437DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.188.0/23 Signature Algorithm: sha256WithRSAEncryption 87:52:8f:5e:a5:b6:12:35:49:48:6e:75:86:e2:e3:2e:23:35: a2:21:d6:8b:20:1e:54:47:58:f5:16:ba:5c:9d:af:42:4b:c5: 08:5c:c6:11:17:3f:80:ca:f1:bd:1b:06:69:7a:c4:7a:6d:a6: f2:81:7d:dc:7f:bc:d0:8e:f7:a5:92:7d:8b:c8:38:56:34:44: ee:c2:93:b2:77:1e:12:7f:94:78:09:63:01:6b:64:60:66:7b: bb:68:79:fa:e2:af:fb:d6:39:95:e6:ea:97:32:84:2d:da:c0: 0c:1d:f7:c0:24:dc:2a:93:10:24:86:a6:d0:37:be:bf:a3:8a: ac:3c:7a:0b:32:19:c6:2e:d5:fa:e7:01:0a:0a:2e:d0:a2:d8: 49:48:15:bf:cd:38:47:14:fb:ca:c3:34:ba:a1:85:79:fa:4a: 2f:5d:6f:b2:e4:72:35:fb:53:4c:98:10:2a:d4:f7:ce:2f:ea: a4:cd:38:c2:e4:af:43:0a:85:0f:f2:36:9f:4e:32:cb:31:f8: f1:c5:54:ae:f7:10:0b:9a:1c:55:02:13:c7:b3:cd:3c:fd:57: ed:bd:15:19:6c:ae:34:d1:22:6a:a7:da:2c:c5:68:2c:a5:80: 9c:75:52:e6:05:48:3f:be:b7:66:cc:8b:97:88:b0:ea:3a:f3: 00:af:08:74 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVBNDYxMTAvBgNVBAUTKDhCMTU0NDBBRTIyNkM5OTBGQzlFNTU5MTVGRThDOTUw OUJDQjY2NzYwHhcNMjUxMjAzMDQzMzU5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJmYmRiNi1jY2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2m+0tflNKNdS2oAiIEb+buvTvgLLHNZxn7InaBmuryWXV/VidyZvOzyTBjOe er6DtMpWaqFHoocws+C3Oc0y1ktQ6gCUONB/xXkO+dfid1m5XrexVtaIvYIfqD9J JmF24ILC/56CVdq3v7z2ZcN2dh2GmcDcITLiwgTAQ/9/tnAwhbnC2I0n1/MMtWwa 4MaQs1DCOr8H9CbvwhL31jyLgxrHurfzlnWhG1XPWij3tuhcm2wz7S2KRDQkeh0x lju/ndBjbwsKjFSyGaK7eXYfDUUqnPCmN6Fzpnmirbklo2UxFWG1JJvd/DMZR25K Qn8pCnEDBWsXb3sYmNjNOc9lfwIDAQABo4IClTCCApEwHQYDVR0OBBYEFN23qwBx EiTJ7Ryn3/GVbECKGsTNMB8GA1UdIwQYMBaAFIsVRAriJsmQ/J5VkV/oyVCby2Z2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUE0Ni9ENDM3MTExMjlD MTExMUVGOTJGQkE5N0NDNEY5QUUwMi9peFZFQ3VJbXlaRDhubFdSWC1qSlVKdkxa blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2l4VkVDdUlteVpEOG5sV1JYLWpKVUp2TFpuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUVBNDYvRDQzNzExMTI5QzExMTFFRjkyRkJBOTdDQzRGOUFFMDIvM0E3NDhGMEU5 QzEyMTFFRjgwREI0MzdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgv7wwDQYJKoZIhvcNAQELBQADggEBAIdSj16lthI1SUhu dYbi4y4jNaIh1osgHlRHWPUWulydr0JLxQhcxhEXP4DK8b0bBml6xHptpvKBfdx/ vNCO96WSfYvIOFY0RO7Ck7J3HhJ/lHgJYwFrZGBme7toefrir/vWOZXm6pcyhC3a wAwd98Ak3CqTECSGptA3vr+jiqw8egsyGcYu1frnAQoKLtCi2ElIFb/NOEcU+8rD NLqhhXn6Si9db7LkcjX7U0yYECrU984v6qTNOMLkr0MKhQ/yNp9OMssx+PHFVK73 EAuaHFUCE8ezzTz9V+29FRlsrjTRImqn2izFaCylgJx1UuYFSD++t2bMi5eIsOo6 8wCvCHQ= -----END CERTIFICATE-----Generated at Sun Dec 7 03:57:11 2025 by rpki-client