This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91972DF/27E3EDA4983311EF83189A57C4F9AE02/003589503F8311F0AA4DF254C4F9AE02.roa File: 003589503F8311F0AA4DF254C4F9AE02.roa (raw, json) Hash identifier: mFg/4qdLeiQ8AjEap32HrO7ldoixpAZaZ3NegxVi38A= Subject key identifier: 80:8E:C9:D4:5D:79:64:19:AC:21:01:3F:65:7D:CC:04:A2:58:FD:BB Certificate issuer: /CN=A91972DF/serialNumber=4720A2B78C78239926FDEE7344A3680DA0D8071D Certificate serial: E0 Authority key identifier: 47:20:A2:B7:8C:78:23:99:26:FD:EE:73:44:A3:68:0D:A0:D8:07:1D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RyCit4x4I5km_e5zRKNoDaDYBx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91972DF/27E3EDA4983311EF83189A57C4F9AE02/003589503F8311F0AA4DF254C4F9AE02.roa Signing time: Fri 05 Dec 2025 03:43:56 +0000 ROA not before: Fri 05 Dec 2025 03:43:56 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 7540 IP address blocks: 160.191.154.0/23 maxlen: 23 160.191.154.0/24 maxlen: 24 160.191.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91972DF/27E3EDA4983311EF83189A57C4F9AE02/RyCit4x4I5km_e5zRKNoDaDYBx0.crl rsync://rpki.apnic.net/member_repository/A91972DF/27E3EDA4983311EF83189A57C4F9AE02/RyCit4x4I5km_e5zRKNoDaDYBx0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RyCit4x4I5km_e5zRKNoDaDYBx0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:43:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91972DF, serialNumber=4720A2B78C78239926FDEE7344A3680DA0D8071D Validity Not Before: Dec 5 03:43:56 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=693254fb-f423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:0a:18:96:5d:3d:9a:78:7f:fc:6e:9c:89:0c: a0:0d:98:67:fa:34:24:56:8a:04:02:fe:05:49:30: 2f:bc:77:85:ac:64:cb:94:ae:82:85:80:ea:a9:ea: 8f:6d:dd:97:40:5b:fa:1b:22:e9:0a:d1:d2:65:03: 47:08:6c:e6:71:de:7a:72:58:df:29:46:be:00:28: b8:7b:1d:e5:c3:65:25:fc:2f:0d:0a:2e:f2:d7:26: a9:c7:29:1e:e8:16:36:6b:81:1d:f7:7e:c5:28:60: e2:e2:7c:01:ff:5a:1f:42:69:d9:70:f3:3b:a0:db: d2:0f:6e:2d:b6:1a:64:20:68:53:20:e3:d3:d5:ae: 83:ef:a0:ae:83:cd:fa:8a:85:9a:01:33:7f:52:93: ba:1d:8d:2c:74:11:a6:2c:6d:43:d7:6a:b5:07:82: 16:99:5d:38:08:57:d9:d2:74:a4:f9:32:fc:20:0f: e6:91:95:a5:80:df:1a:20:9b:57:82:a5:43:14:70: 50:f4:e1:70:c2:63:9d:69:f2:48:ae:9a:dd:91:44: 73:72:ff:ac:55:a0:a5:d6:91:f4:ef:d8:e2:6e:85: 2c:c5:47:99:9d:fc:d1:1c:90:0f:1d:c8:f2:0f:9b: 45:ee:0e:82:55:13:90:91:61:48:60:0b:8d:d5:49: 83:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:8E:C9:D4:5D:79:64:19:AC:21:01:3F:65:7D:CC:04:A2:58:FD:BB X509v3 Authority Key Identifier: keyid:47:20:A2:B7:8C:78:23:99:26:FD:EE:73:44:A3:68:0D:A0:D8:07:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91972DF/27E3EDA4983311EF83189A57C4F9AE02/RyCit4x4I5km_e5zRKNoDaDYBx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RyCit4x4I5km_e5zRKNoDaDYBx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91972DF/27E3EDA4983311EF83189A57C4F9AE02/003589503F8311F0AA4DF254C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.154.0/23 Signature Algorithm: sha256WithRSAEncryption 21:ff:c9:4d:ac:3d:80:49:85:04:ad:ee:dc:a2:e5:e5:0f:26: 5b:29:f6:59:fd:ed:93:6f:9e:4b:97:e8:82:3e:7e:57:c7:21: 9a:60:0e:49:e6:eb:92:45:83:41:54:3a:50:5b:4f:e7:47:e5: f7:aa:c6:ba:f3:11:d3:de:d1:1e:c2:f7:75:e2:35:87:d2:d5: 91:22:d7:d3:62:51:4e:44:af:b7:fb:12:c4:4d:4b:db:58:cb: b1:18:0c:f0:de:de:76:d4:0d:9a:fc:6e:d7:29:4a:f8:c8:ea: 01:f1:eb:29:e9:51:23:98:6e:39:1a:c3:b8:ab:63:25:60:ec: 97:e8:42:96:1c:56:fc:85:97:cb:bb:f2:ef:26:ac:c4:f2:37: 53:fc:44:68:a7:54:67:c5:1a:0c:56:ec:57:86:4f:d6:4b:60: 31:f4:cd:f8:7e:fd:89:a2:fe:06:fc:44:09:38:26:74:4d:12: e2:41:80:46:20:eb:fa:fb:52:ad:95:ee:eb:81:ba:9a:36:62: 6b:36:8e:ae:4e:21:7b:6b:65:43:d0:95:aa:a0:4c:58:01:46: b7:94:1d:db:65:f8:35:81:cd:e2:87:d7:33:1d:b9:b4:a9:c7: 53:93:b1:0d:06:7b:0e:d1:dc:97:ad:9d:46:c8:81:8b:92:19: f9:3c:8d:74 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcyREYxMTAvBgNVBAUTKDQ3MjBBMkI3OEM3ODIzOTkyNkZERUU3MzQ0QTM2ODBE QTBEODA3MUQwHhcNMjUxMjA1MDM0MzU2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTMyNTRmYi1mNDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5goYll09mnh//G6ciQygDZhn+jQkVooEAv4FSTAvvHeFrGTLlK6ChYDqqeqP bd2XQFv6GyLpCtHSZQNHCGzmcd56cljfKUa+ACi4ex3lw2Ul/C8NCi7y1yapxyke 6BY2a4Ed937FKGDi4nwB/1ofQmnZcPM7oNvSD24tthpkIGhTIOPT1a6D76Cug836 ioWaATN/UpO6HY0sdBGmLG1D12q1B4IWmV04CFfZ0nSk+TL8IA/mkZWlgN8aIJtX gqVDFHBQ9OFwwmOdafJIrprdkURzcv+sVaCl1pH079jiboUsxUeZnfzRHJAPHcjy D5tF7g6CVROQkWFIYAuN1UmDWQIDAQABo4IClTCCApEwHQYDVR0OBBYEFICOydRd eWQZrCEBP2V9zASiWP27MB8GA1UdIwQYMBaAFEcgoreMeCOZJv3uc0SjaA2g2Acd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzJERi8yN0UzRURBNDk4 MzMxMUVGODMxODlBNTdDNEY5QUUwMi9SeUNpdDR4NEk1a21fZTV6UktOb0RhRFlC eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1J5Q2l0NHg0STVrbV9lNXpSS05vRGFEWUJ4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTcyREYvMjdFM0VEQTQ5ODMzMTFFRjgzMTg5QTU3QzRGOUFFMDIvMDAzNTg5NTAz RjgzMTFGMEFBNERGMjU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgv5owDQYJKoZIhvcNAQELBQADggEBACH/yU2sPYBJhQSt 7tyi5eUPJlsp9ln97ZNvnkuX6II+flfHIZpgDknm65JFg0FUOlBbT+dH5feqxrrz EdPe0R7C93XiNYfS1ZEi19NiUU5Er7f7EsRNS9tYy7EYDPDe3nbUDZr8btcpSvjI 6gHx6ynpUSOYbjkaw7irYyVg7JfoQpYcVvyFl8u78u8mrMTyN1P8RGinVGfFGgxW 7FeGT9ZLYDH0zfh+/Ymi/gb8RAk4JnRNEuJBgEYg6/r7Uq2V7uuBupo2Yms2jq5O IXtrZUPQlaqgTFgBRreUHdtl+DWBzeKH1zMdubSpx1OTsQ0Gew7R3JetnUbIgYuS Gfk8jXQ= -----END CERTIFICATE-----Generated at Sat Dec 6 20:29:41 2025 by rpki-client