This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B67D0D22AF1911F0BAE74926C4F9AE02.roa File: B67D0D22AF1911F0BAE74926C4F9AE02.roa (raw, json) Hash identifier: 4dJ3Lo+Z2A3KO7mXa0uonTKb34ltFU82i0N6TmxAcYk= Subject key identifier: A3:DF:32:F1:39:64:C0:C0:8A:40:03:38:9C:1A:3F:B8:10:40:43:D4 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1FBF Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B67D0D22AF1911F0BAE74926C4F9AE02.roa Signing time: Wed 22 Oct 2025 07:35:42 +0000 ROA not before: Wed 22 Oct 2025 07:35:42 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 150584 IP address blocks: 157.15.88.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8127 (0x1fbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Oct 22 07:35:42 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68f8894e-06e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ed:3c:75:04:6c:95:85:57:15:38:05:68:cf: 3b:34:cb:99:e1:cf:15:a5:4d:c3:05:6f:32:d4:1e: 1b:34:34:3a:fb:2d:a2:fc:d6:af:4b:b3:1c:96:ab: b1:7d:e5:4d:7c:96:84:80:be:6a:e3:a3:79:37:d8: 90:aa:32:e2:87:8b:36:b7:05:f3:af:46:4d:11:21: 18:81:3d:5b:50:ea:1d:c2:47:9e:08:8a:dc:a7:39: c7:6e:dc:c5:39:59:a3:22:2e:8e:40:49:9c:0d:13: 2b:ab:aa:c4:fe:54:18:2b:f3:f0:bf:55:2d:66:10: 40:06:48:7d:1a:bc:31:63:4e:97:11:12:86:19:f3: d8:79:01:ed:43:1e:9f:ad:aa:93:3f:ae:68:9d:bc: 8c:b4:5d:4f:a8:e1:db:87:7f:8e:95:cf:c1:cd:de: 48:3b:29:e7:cc:5f:1e:ce:cf:2d:08:ae:dc:b3:a3: 30:f6:c0:a9:52:90:52:e5:8d:2b:28:6c:17:06:41: dc:c7:2a:92:c5:32:d1:24:b1:c8:59:6e:3a:a8:64: aa:f1:19:33:7f:11:b0:48:3f:b1:9c:7f:92:f8:f5: da:32:94:c6:7d:4a:7d:4e:23:c2:01:50:78:79:a8: 35:da:49:7d:57:ae:4b:7d:1a:a6:aa:02:6d:3b:c7: c7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:DF:32:F1:39:64:C0:C0:8A:40:03:38:9C:1A:3F:B8:10:40:43:D4 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B67D0D22AF1911F0BAE74926C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.15.88.0/23 Signature Algorithm: sha256WithRSAEncryption c2:2b:23:62:25:9b:6d:a9:30:10:e3:a6:dc:2b:c5:c2:dc:b2: 73:29:f0:16:9c:52:a3:d4:e5:b8:39:9c:80:45:7d:27:4a:60: 0c:e3:e9:f2:c1:97:88:51:e3:d8:82:b8:43:67:1f:1c:f9:d5: b5:f7:37:11:3d:78:95:9f:01:ff:11:4a:90:55:fa:1b:68:70: 5a:f8:d5:44:b8:3c:4e:44:56:ed:fd:da:d2:7e:d3:07:e3:d6: 9a:14:05:a1:29:8f:e5:1d:9a:a6:3b:6c:a2:c8:c1:8a:b1:e3: b4:34:02:98:0b:65:83:98:2e:50:5b:13:69:47:c4:62:27:95: fe:fe:e7:a5:dd:e0:26:f9:fe:ab:21:a8:c7:fc:5a:f8:12:ec: 4d:90:14:58:7a:3e:ea:52:6d:5b:e7:a2:89:0d:93:29:8b:91: 47:19:c3:37:dd:d7:db:59:7a:8f:22:fe:71:f1:4f:1d:4f:e7: b6:3b:da:4c:1b:ea:65:6c:48:40:fe:68:a0:fe:4f:99:00:5e: bf:53:6f:1c:97:f1:c7:0a:2d:6a:93:ba:ce:85:bb:25:6d:6d: 84:00:1f:28:83:fb:8c:e8:0d:3e:f1:42:54:2e:39:6c:eb:be: 21:33:96:0d:8c:d8:31:c7:a4:7b:6d:25:74:0b:df:1f:d1:05: f0:1f:64:fb -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICH78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUxMDIyMDczNTQyWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGY4ODk0ZS0wNmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyO08dQRslYVXFTgFaM87NMuZ4c8VpU3DBW8y1B4bNDQ6+y2i/NavS7Mclqux feVNfJaEgL5q46N5N9iQqjLih4s2twXzr0ZNESEYgT1bUOodwkeeCIrcpznHbtzF OVmjIi6OQEmcDRMrq6rE/lQYK/Pwv1UtZhBABkh9GrwxY06XERKGGfPYeQHtQx6f raqTP65onbyMtF1PqOHbh3+Olc/Bzd5IOynnzF8ezs8tCK7cs6Mw9sCpUpBS5Y0r KGwXBkHcxyqSxTLRJLHIWW46qGSq8RkzfxGwSD+xnH+S+PXaMpTGfUp9TiPCAVB4 eag12kl9V65LfRqmqgJtO8fH7QIDAQABo4IClTCCApEwHQYDVR0OBBYEFKPfMvE5 ZMDAikADOJwaP7gQQEPUMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQjY3RDBEMjJB RjE5MTFGMEJBRTc0OTI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdD1gwDQYJKoZIhvcNAQELBQADggEBAMIrI2Ilm22pMBDj ptwrxcLcsnMp8BacUqPU5bg5nIBFfSdKYAzj6fLBl4hR49iCuENnHxz51bX3NxE9 eJWfAf8RSpBV+htocFr41US4PE5EVu392tJ+0wfj1poUBaEpj+UdmqY7bKLIwYqx 47Q0ApgLZYOYLlBbE2lHxGInlf7+56Xd4Cb5/qshqMf8WvgS7E2QFFh6PupSbVvn ookNkymLkUcZwzfd19tZeo8i/nHxTx1P57Y72kwb6mVsSED+aKD+T5kAXr9TbxyX 8ccKLWqTus6FuyVtbYQAHyiD+4zoDT7xQlQuOWzrviEzlg2M2DHHpHttJXQL3x/R BfAfZPs= -----END CERTIFICATE-----Generated at Sat Dec 6 20:14:43 2025 by rpki-client