This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/16C36C48B92B11EF98BB2E81C4F9AE02.roa File: 16C36C48B92B11EF98BB2E81C4F9AE02.roa (raw, json) Hash identifier: xu8411Lw3Fv7aOL+jWlqB5r1DdbIEYXsVeZpQJTANf4= Subject key identifier: 0A:F9:83:D1:BF:15:1E:DC:6A:CE:C6:68:76:30:12:7B:22:E9:94:6A Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2051 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/16C36C48B92B11EF98BB2E81C4F9AE02.roa Signing time: Tue 02 Dec 2025 07:12:54 +0000 ROA not before: Tue 02 Dec 2025 07:12:54 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 137085 IP address blocks: 157.10.57.0/24 maxlen: 24 157.66.74.0/24 maxlen: 24 157.66.102.0/24 maxlen: 24 157.66.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8273 (0x2051) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Dec 2 07:12:54 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=692e9175-860a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:82:30:cc:7e:89:c4:41:09:b1:0d:dd:96:9b: 81:d4:87:94:d9:02:51:35:74:67:9a:bb:3e:ea:b5: ec:56:f3:a3:c1:94:9d:55:c2:ec:2e:ae:e7:55:4d: 53:37:df:43:6e:6d:a5:b7:ec:d6:f5:16:5b:e0:a0: ac:2b:be:be:b5:98:e8:d6:77:6c:ea:ed:b2:75:d1: 07:14:f5:2f:89:dd:5a:a6:1a:b9:f9:5d:47:04:63: 3c:78:cb:65:01:04:e0:75:85:37:cb:76:2c:7c:d9: 33:50:b8:83:d0:80:8f:17:3c:01:fa:d2:3a:85:ad: 1e:8a:1f:cf:0a:c1:87:da:1a:16:cc:81:b8:08:49: fc:88:38:1e:0c:fe:bf:f1:81:c3:48:4b:d9:a4:ef: 6d:9e:cb:0e:41:9b:f5:a2:47:28:64:7d:fe:21:19: 52:f6:9f:08:17:95:55:0e:8b:df:7b:b8:75:6d:85: 89:fc:3a:87:f4:11:f8:1f:0b:6a:b3:bb:31:ea:f6: ee:d5:ab:54:24:e6:af:eb:43:69:a3:82:c9:fe:df: e7:0a:20:4b:7e:02:9f:f4:4c:09:e0:da:e4:3a:b4: ef:be:14:08:a6:1f:ab:75:3b:d4:d2:ef:54:b0:cb: fb:5b:04:f0:c0:4b:68:8a:79:52:4a:38:57:5a:06: 7e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F9:83:D1:BF:15:1E:DC:6A:CE:C6:68:76:30:12:7B:22:E9:94:6A X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/16C36C48B92B11EF98BB2E81C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.10.57.0/24 157.66.74.0/24 157.66.102.0/23 Signature Algorithm: sha256WithRSAEncryption 6e:be:79:d4:b2:79:49:1a:13:ed:5b:d3:41:ad:7c:2d:44:9f: 86:dc:c4:23:d0:2e:f6:4c:b4:f0:26:f2:32:30:c4:b9:a2:4f: e3:71:75:bf:06:24:28:e6:cc:0a:4c:c0:79:2a:3e:b9:b4:0e: 1c:6b:34:ff:23:a1:33:7e:2f:aa:80:19:bb:24:20:1b:d1:fd: 4a:37:df:59:0c:5e:b7:16:94:99:72:86:bc:2a:b1:cb:70:d8: 70:37:b7:35:4b:3b:a5:67:8a:76:0b:d7:16:57:be:32:74:1b: db:0a:ee:c0:90:28:8c:ed:42:08:ff:f8:a2:21:94:9c:ba:4c: 5c:f2:60:55:24:ac:fc:d2:9e:4d:45:89:d1:af:b0:cc:e5:07: d9:bb:aa:10:02:93:29:6b:46:ab:d8:ab:fb:37:20:82:28:e2: 28:f6:6b:e8:76:b3:48:04:bc:ba:cb:e7:0b:8d:d3:5b:ba:c9: e7:75:ea:c2:ce:17:2f:9d:f9:1e:bc:52:df:71:2e:f7:ab:27: 2e:d8:78:9a:03:bb:73:07:34:c8:96:11:15:2c:a4:d8:f1:23: dd:ac:cc:94:d4:d6:9f:02:82:e1:ed:1f:19:2e:ba:36:16:41: b8:9f:ad:db:3a:4a:d7:77:b0:29:dd:df:92:3e:c2:cc:9f:af: a7:bc:8f:45 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICIFEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUxMjAyMDcxMjU0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJlOTE3NS04NjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4IwzH6JxEEJsQ3dlpuB1IeU2QJRNXRnmrs+6rXsVvOjwZSdVcLsLq7nVU1T N99Dbm2lt+zW9RZb4KCsK76+tZjo1nds6u2yddEHFPUvid1aphq5+V1HBGM8eMtl AQTgdYU3y3YsfNkzULiD0ICPFzwB+tI6ha0eih/PCsGH2hoWzIG4CEn8iDgeDP6/ 8YHDSEvZpO9tnssOQZv1okcoZH3+IRlS9p8IF5VVDovfe7h1bYWJ/DqH9BH4Hwtq s7sx6vbu1atUJOav60Npo4LJ/t/nCiBLfgKf9EwJ4NrkOrTvvhQIph+rdTvU0u9U sMv7WwTwwEtoinlSSjhXWgZ+YwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFAr5g9G/ FR7cas7GaHYwEnsi6ZRqMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMTZDMzZDNDhC OTJCMTFFRjk4QkIyRTgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBACdCjkDBACdQkoDBAGdQmYwDQYJKoZIhvcNAQELBQADggEB AG6+edSyeUkaE+1b00GtfC1En4bcxCPQLvZMtPAm8jIwxLmiT+Nxdb8GJCjmzApM wHkqPrm0DhxrNP8joTN+L6qAGbskIBvR/Uo331kMXrcWlJlyhrwqsctw2HA3tzVL O6VninYL1xZXvjJ0G9sK7sCQKIztQgj/+KIhlJy6TFzyYFUkrPzSnk1FidGvsMzl B9m7qhACkylrRqvYq/s3IIIo4ij2a+h2s0gEvLrL5wuN01u6yed16sLOFy+d+R68 Ut9xLverJy7YeJoDu3MHNMiWERUspNjxI92szJTU1p8CguHtHxkuujYWQbifrds6 Std3sCnd35I+wsyfr6e8j0U= -----END CERTIFICATE-----Generated at Sat Dec 6 20:42:42 2025 by rpki-client