This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/E047F204A4CC11F0AE32440DC4F9AE02.roa File: E047F204A4CC11F0AE32440DC4F9AE02.roa (raw, json) Hash identifier: bsswt5Kcg+fxuknNjqjwX13M9eBfiP+BWvrA8HzsOHI= Subject key identifier: B1:7D:80:3A:BC:61:25:83:BB:A6:D2:93:45:4D:DB:07:10:35:5A:74 Certificate issuer: /CN=A9196F7C/serialNumber=6EF8FECEF339EA6DE9698CC2C5F58645CF65EFDE Certificate serial: 28 Authority key identifier: 6E:F8:FE:CE:F3:39:EA:6D:E9:69:8C:C2:C5:F5:86:45:CF:65:EF:DE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bvj-zvM56m3paYzCxfWGRc9l794.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/E047F204A4CC11F0AE32440DC4F9AE02.roa Signing time: Fri 05 Dec 2025 03:19:45 +0000 ROA not before: Fri 05 Dec 2025 03:19:45 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 152699 IP address blocks: 157.85.88.0/24 maxlen: 24 157.85.89.0/24 maxlen: 24 157.85.90.0/24 maxlen: 24 157.85.91.0/24 maxlen: 24 157.85.92.0/24 maxlen: 24 157.85.93.0/24 maxlen: 24 157.85.94.0/24 maxlen: 24 157.85.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/bvj-zvM56m3paYzCxfWGRc9l794.crl rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/bvj-zvM56m3paYzCxfWGRc9l794.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bvj-zvM56m3paYzCxfWGRc9l794.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:42:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196F7C, serialNumber=6EF8FECEF339EA6DE9698CC2C5F58645CF65EFDE Validity Not Before: Dec 5 03:19:45 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69324f51-ca62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6a:bc:fb:9c:35:cf:c4:c6:73:59:90:52:38: 53:d0:de:9b:85:b4:8a:43:84:fd:27:9a:31:2f:09: 7b:9c:97:dd:64:3b:1a:d6:95:98:9c:51:73:fe:26: 01:39:77:5a:56:31:38:94:c9:4c:55:1d:81:c0:cf: 66:3c:e7:1a:96:f1:32:f0:71:47:72:a4:26:9d:26: 10:cb:5c:8d:3d:ec:50:a2:fe:5c:11:1d:06:f7:6e: 51:cc:97:93:26:15:f9:d4:a8:4c:c7:d5:0f:46:75: b6:e9:0e:5e:41:8e:48:f9:70:fe:82:e3:22:51:cc: c4:c7:93:44:86:c3:47:3c:07:24:bd:dc:27:74:22: 45:6d:2d:cd:c0:46:f2:c4:9a:ad:f8:3d:ee:13:3d: 5b:40:7c:ef:b8:1f:69:8d:cf:f7:c7:03:27:92:2e: 23:d0:c2:2a:ea:3d:8f:9b:65:1e:d9:f3:66:93:f5: 23:25:c4:8f:7a:42:b5:4d:5e:c3:5a:db:03:2f:b9: 3f:82:c3:9a:16:70:3f:6e:ee:3a:96:67:ee:bc:9f: af:a6:89:58:23:57:c9:ba:01:55:46:49:0f:36:25: 65:fa:3c:04:88:6e:ce:41:fd:41:d0:88:65:89:3b: c0:fc:f6:bf:b0:49:10:7f:ca:0a:f7:cf:17:df:5d: 04:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:7D:80:3A:BC:61:25:83:BB:A6:D2:93:45:4D:DB:07:10:35:5A:74 X509v3 Authority Key Identifier: keyid:6E:F8:FE:CE:F3:39:EA:6D:E9:69:8C:C2:C5:F5:86:45:CF:65:EF:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/bvj-zvM56m3paYzCxfWGRc9l794.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bvj-zvM56m3paYzCxfWGRc9l794.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/E047F204A4CC11F0AE32440DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.85.88.0/21 Signature Algorithm: sha256WithRSAEncryption c8:2a:c5:c1:98:72:d2:9e:63:76:17:9f:30:32:8d:7b:77:18: c2:b1:8b:7f:77:3f:05:eb:d6:ac:cc:ba:09:f8:9f:e6:79:a6: 0d:bb:d4:8b:20:9f:59:ba:5c:60:7b:f0:f6:6c:83:5b:7b:f6: aa:f1:11:20:74:3d:88:9a:4a:fd:b3:cc:b9:ce:bb:a0:22:5c: bb:f1:0f:e6:06:36:05:97:8d:af:d4:12:93:a2:aa:18:60:66: 33:7f:94:3a:31:c2:96:36:3d:eb:42:fe:e9:65:39:28:f8:cb: 4d:15:0b:c7:48:c8:8f:da:9c:d0:88:b2:9f:5f:74:31:10:36: 8f:5e:bd:ec:c4:4e:e1:f7:c4:05:c4:54:f0:84:3c:83:d8:45: 8d:7c:2e:4b:d4:e4:82:7b:74:46:36:27:67:52:4a:60:37:98: f4:f0:c6:32:b9:3d:2a:bb:d9:4f:24:b7:4a:7b:f4:ee:f5:d1: d9:60:a6:f1:39:0b:21:1a:68:2a:83:81:43:b2:3e:a8:07:57: c2:ed:d3:42:b8:45:e5:19:5b:7c:5b:78:03:b3:48:69:7f:f8: 45:9c:6c:ce:85:82:3d:24:3e:05:46:73:2f:d8:70:71:17:da: 59:5c:33:40:af:43:b6:15:a8:88:36:c0:93:2d:d5:3e:f3:a4: 48:44:20:8e -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NkY3QzExMC8GA1UEBRMoNkVGOEZFQ0VGMzM5RUE2REU5Njk4Q0MyQzVGNTg2NDVD RjY1RUZERTAeFw0yNTEyMDUwMzE5NDVaFw0yNjA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MzI0ZjUxLWNhNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxarz7nDXPxMZzWZBSOFPQ3puFtIpDhP0nmjEvCXucl91kOxrWlZicUXP+JgE5 d1pWMTiUyUxVHYHAz2Y85xqW8TLwcUdypCadJhDLXI097FCi/lwRHQb3blHMl5Mm FfnUqEzH1Q9GdbbpDl5Bjkj5cP6C4yJRzMTHk0SGw0c8ByS93Cd0IkVtLc3ARvLE mq34Pe4TPVtAfO+4H2mNz/fHAyeSLiPQwirqPY+bZR7Z82aT9SMlxI96QrVNXsNa 2wMvuT+Cw5oWcD9u7jqWZ+68n6+miVgjV8m6AVVGSQ82JWX6PASIbs5B/UHQiGWJ O8D89r+wSRB/ygr3zxffXQT/AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUsX2AOrxh JYO7ptKTRU3bBxA1WnQwHwYDVR0jBBgwFoAUbvj+zvM56m3paYzCxfWGRc9l794w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2RjdDLzA3RjM0RjA4QTRC MjExRjBCODRDMTM0M0M0RjlBRTAyL2J2ai16dk01Nm0zcGFZekN4ZldHUmM5bDc5 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYnZqLXp2TTU2bTNwYVl6Q3hmV0dSYzlsNzk0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkY3Qy8wN0YzNEYwOEE0QjIxMUYwQjg0QzEzNDNDNEY5QUUwMi9FMDQ3RjIwNEE0 Q0MxMUYwQUUzMjQ0MERDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEA51VWDANBgkqhkiG9w0BAQsFAAOCAQEAyCrFwZhy0p5jdhef MDKNe3cYwrGLf3c/BevWrMy6Cfif5nmmDbvUiyCfWbpcYHvw9myDW3v2qvERIHQ9 iJpK/bPMuc67oCJcu/EP5gY2BZeNr9QSk6KqGGBmM3+UOjHCljY960L+6WU5KPjL TRULx0jIj9qc0Iiyn190MRA2j1697MRO4ffEBcRU8IQ8g9hFjXwuS9Tkgnt0RjYn Z1JKYDeY9PDGMrk9KrvZTyS3Snv07vXR2WCm8TkLIRpoKoOBQ7I+qAdXwu3TQrhF 5RlbfFt4A7NIaX/4RZxszoWCPSQ+BUZzL9hwcRfaWVwzQK9DthWoiDbAky3VPvOk SEQgjg== -----END CERTIFICATE-----Generated at Sun Dec 7 01:54:48 2025 by rpki-client