This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/17613044905F11EF8B4BC46BC4F9AE02.roa File: 17613044905F11EF8B4BC46BC4F9AE02.roa (raw, json) Hash identifier: ++LVGRxofYEX6I3wU8GpWTit5dMqqug/RxXZrZLIN/Q= Subject key identifier: 42:39:9A:9D:79:63:71:DA:D5:5E:62:CF:E4:BE:20:D2:9E:2F:A7:4D Certificate issuer: /CN=A919D88F/serialNumber=B815CF8505368BA7F97674E9BB1A140095B4FF9B Certificate serial: DA Authority key identifier: B8:15:CF:85:05:36:8B:A7:F9:76:74:E9:BB:1A:14:00:95:B4:FF:9B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uBXPhQU2i6f5dnTpuxoUAJW0_5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/17613044905F11EF8B4BC46BC4F9AE02.roa Signing time: Mon 01 Dec 2025 04:32:04 +0000 ROA not before: Mon 01 Dec 2025 04:32:04 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 153359 IP address blocks: 160.187.220.0/23 maxlen: 23 160.187.220.0/24 maxlen: 24 160.187.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.crl rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uBXPhQU2i6f5dnTpuxoUAJW0_5s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 03:54:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D88F, serialNumber=B815CF8505368BA7F97674E9BB1A140095B4FF9B Validity Not Before: Dec 1 04:32:04 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=692d1a44-c132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1e:89:20:ec:a8:12:01:4a:24:cd:be:f1:ea: 0b:12:bc:b6:89:37:e8:1e:72:0b:88:5e:49:99:cf: 52:5f:5a:a7:e9:06:0d:6d:7f:b7:99:8e:d6:66:55: e5:b3:33:ba:3d:fb:51:17:cc:bc:aa:78:71:81:cb: ff:a7:a0:e9:b1:cb:1d:1f:11:50:af:52:72:8b:db: 10:47:51:c5:6b:3c:df:c4:81:09:e4:e8:89:65:8a: 16:ed:ec:ab:38:84:61:3d:dc:81:7f:1c:5d:15:41: e4:b3:7a:37:01:0c:68:45:3e:62:ff:94:6b:ed:6c: ae:24:98:9b:f3:38:00:98:14:9d:6b:d3:91:c5:06: d0:ee:ac:23:48:eb:8c:94:f6:32:09:b0:05:68:6d: 09:d2:2a:b2:7f:5e:29:c6:35:62:e0:58:fb:2f:24: 90:3c:08:8d:89:ac:c8:54:9a:6e:d9:b9:48:a5:a5: 94:1e:e8:7e:21:0b:84:9f:0e:71:92:9e:0d:1e:6c: 9e:c7:18:31:81:b1:81:68:dd:58:8a:7b:c9:0d:55: f7:99:00:75:19:68:c8:b7:f4:7f:c2:16:1a:30:9d: 50:5f:d4:c4:66:3b:c2:f1:4a:04:fb:e7:52:62:93: 75:f4:03:83:19:de:00:8a:a6:ab:c9:6c:9d:c5:a6: e5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:39:9A:9D:79:63:71:DA:D5:5E:62:CF:E4:BE:20:D2:9E:2F:A7:4D X509v3 Authority Key Identifier: keyid:B8:15:CF:85:05:36:8B:A7:F9:76:74:E9:BB:1A:14:00:95:B4:FF:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uBXPhQU2i6f5dnTpuxoUAJW0_5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/17613044905F11EF8B4BC46BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.187.220.0/23 Signature Algorithm: sha256WithRSAEncryption 8b:1a:e6:1a:c1:ce:85:85:46:d0:81:f6:1f:82:8b:5a:e0:84: 62:5b:5e:62:09:aa:04:5a:30:4a:14:5c:77:0a:7f:dd:d2:0b: 19:8b:ca:f3:ea:d2:fe:9c:28:47:e5:00:c2:1b:36:22:40:6c: a6:a6:a2:86:76:23:8b:0c:21:9b:76:95:7b:52:65:7f:a3:ae: da:c7:65:2a:b7:b5:2b:a1:ca:09:f9:9f:62:3c:19:9c:e2:fd: 80:44:cb:ec:7b:2c:ce:86:7e:ea:ee:25:b3:fd:2f:92:8f:40: cd:f1:55:31:3d:3f:d1:50:0f:db:0d:e5:91:fe:a9:a9:81:4c: cd:1a:6a:a0:0f:81:0f:3f:98:3d:4f:fe:06:e0:bd:d7:11:62: b5:7c:d9:17:ac:15:5c:ee:f7:3d:74:14:20:5e:09:19:2b:ee: d7:a2:97:89:43:04:96:8b:24:70:79:30:27:e5:fe:ac:13:5a: c8:cb:ce:4b:87:e0:09:bb:4d:ce:eb:42:ef:2a:97:b5:52:a3: 08:61:ea:1f:ef:ec:2c:23:8e:d0:5f:2e:1a:c0:dc:2a:09:69: aa:34:f6:19:7b:23:54:2f:f1:a1:39:79:14:e5:7e:d6:4b:70: 1a:14:ca:00:9f:63:8b:74:8d:f7:e3:15:80:f3:d6:95:52:5b: bb:88:54:05 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ4OEYxMTAvBgNVBAUTKEI4MTVDRjg1MDUzNjhCQTdGOTc2NzRFOUJCMUExNDAw OTVCNEZGOUIwHhcNMjUxMjAxMDQzMjA0WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJkMWE0NC1jMTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvx6JIOyoEgFKJM2+8eoLEry2iTfoHnILiF5Jmc9SX1qn6QYNbX+3mY7WZlXl szO6PftRF8y8qnhxgcv/p6DpscsdHxFQr1Jyi9sQR1HFazzfxIEJ5OiJZYoW7eyr OIRhPdyBfxxdFUHks3o3AQxoRT5i/5Rr7WyuJJib8zgAmBSda9ORxQbQ7qwjSOuM lPYyCbAFaG0J0iqyf14pxjVi4Fj7LySQPAiNiazIVJpu2blIpaWUHuh+IQuEnw5x kp4NHmyexxgxgbGBaN1YinvJDVX3mQB1GWjIt/R/whYaMJ1QX9TEZjvC8UoE++dS YpN19AODGd4AiqaryWydxabljwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEI5mp15 Y3Ha1V5iz+S+INKeL6dNMB8GA1UdIwQYMBaAFLgVz4UFNoun+XZ06bsaFACVtP+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDg4Ri83QkI2RjIxMDkw NUQxMUVGQTRGMzFEMkVDNEY5QUUwMi91QlhQaFFVMmk2ZjVkblRwdXhvVUFKVzBf NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3VCWFBoUVUyaTZmNWRuVHB1eG9VQUpXMF81cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUQ4OEYvN0JCNkYyMTA5MDVEMTFFRkE0RjMxRDJFQzRGOUFFMDIvMTc2MTMwNDQ5 MDVGMTFFRjhCNEJDNDZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgu9wwDQYJKoZIhvcNAQELBQADggEBAIsa5hrBzoWFRtCB 9h+Ci1rghGJbXmIJqgRaMEoUXHcKf93SCxmLyvPq0v6cKEflAMIbNiJAbKamooZ2 I4sMIZt2lXtSZX+jrtrHZSq3tSuhygn5n2I8GZzi/YBEy+x7LM6GfuruJbP9L5KP QM3xVTE9P9FQD9sN5ZH+qamBTM0aaqAPgQ8/mD1P/gbgvdcRYrV82ResFVzu9z10 FCBeCRkr7teil4lDBJaLJHB5MCfl/qwTWsjLzkuH4Am7Tc7rQu8ql7VSowhh6h/v 7CwjjtBfLhrA3CoJaao09hl7I1Qv8aE5eRTlftZLcBoUygCfY4t0jffjFYDz1pVS W7uIVAU= -----END CERTIFICATE-----Generated at Sun Dec 7 09:24:36 2025 by rpki-client