This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/9E4987668C7F11EFB4290976C4F9AE02.roa File: 9E4987668C7F11EFB4290976C4F9AE02.roa (raw, json) Hash identifier: p2gyBS69XXDIgLCd40czO4O+CF2ezvi2SVAYuyIvCP0= Subject key identifier: 66:56:1F:83:75:7B:9A:3F:6D:87:0E:8D:D5:B5:88:F1:AC:6B:D7:B2 Certificate issuer: /CN=A91DBF0C/serialNumber=AE0E4BEC568FE6FEE492F72E4D3ACB928D9C1E4F Certificate serial: CD Authority key identifier: AE:0E:4B:EC:56:8F:E6:FE:E4:92:F7:2E:4D:3A:CB:92:8D:9C:1E:4F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rg5L7FaP5v7kkvcuTTrLko2cHk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/9E4987668C7F11EFB4290976C4F9AE02.roa Signing time: Wed 05 Nov 2025 06:20:43 +0000 ROA not before: Wed 05 Nov 2025 06:20:43 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 153312 IP address blocks: 160.30.240.0/23 maxlen: 23 160.30.240.0/24 maxlen: 32 160.30.241.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.crl rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rg5L7FaP5v7kkvcuTTrLko2cHk8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:39:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBF0C, serialNumber=AE0E4BEC568FE6FEE492F72E4D3ACB928D9C1E4F Validity Not Before: Nov 5 06:20:43 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=690aecbb-45a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c9:62:23:f9:39:ab:74:3c:96:cd:34:3d:cf: 9d:2f:1c:13:d4:51:51:57:39:03:3c:8d:c7:d5:60: 4d:c7:ac:45:31:1c:3e:6e:fe:50:82:1e:d6:8e:90: b9:ee:74:74:34:d7:54:c3:ad:c0:b7:b3:00:0d:1b: 8a:f0:6b:f0:5a:c0:80:3b:05:45:ef:30:0e:f6:17: 73:77:65:fb:d2:c3:47:61:f6:87:ae:c9:e4:13:ad: 74:b4:13:91:79:97:72:ed:c3:f7:ea:85:db:01:41: 4f:e7:a9:02:49:9a:cf:d3:44:01:02:61:9c:2f:85: b5:2b:25:cc:0f:5a:ab:2c:d3:2d:a2:67:41:0b:1f: de:fb:60:22:4f:3b:cb:61:a6:05:82:8c:a3:f8:91: b2:2e:03:63:30:88:9a:4c:45:c3:97:fc:73:31:8b: 52:e5:53:7a:b4:5b:71:d9:76:40:5d:64:51:f9:02: 88:37:00:f2:ef:fc:8d:09:9a:73:9c:5d:1d:0f:d6: f8:88:42:d4:0a:82:08:6f:40:c9:d0:52:01:cf:01: 0d:6b:b9:49:69:db:02:a8:ea:a7:13:95:1b:c5:6b: c3:ed:cc:cb:36:85:c5:cd:d4:8c:9a:88:4d:5c:57: 09:93:dc:86:00:99:e7:51:3a:46:8a:19:37:db:b3: 5d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:56:1F:83:75:7B:9A:3F:6D:87:0E:8D:D5:B5:88:F1:AC:6B:D7:B2 X509v3 Authority Key Identifier: keyid:AE:0E:4B:EC:56:8F:E6:FE:E4:92:F7:2E:4D:3A:CB:92:8D:9C:1E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rg5L7FaP5v7kkvcuTTrLko2cHk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/9E4987668C7F11EFB4290976C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.30.240.0/23 Signature Algorithm: sha256WithRSAEncryption 5f:15:82:43:05:39:c4:3f:9d:6d:3d:64:f5:e3:77:5e:08:9d: bb:6b:ee:17:03:46:4b:1f:2e:3c:16:09:2e:4f:2a:51:df:61: 21:89:58:d0:76:41:32:6e:7a:23:74:9e:dc:82:98:f8:52:11: 79:59:70:b9:d8:8a:97:b6:77:37:a2:96:b2:58:c2:fe:ae:ef: e3:08:7f:d4:f1:aa:16:85:e2:1a:80:57:86:09:db:82:9d:b7: ea:19:64:53:b2:e2:cc:0f:1a:3a:9f:41:22:89:b3:0d:d7:48: 64:83:d9:4a:fb:ec:bf:52:36:91:c2:f8:e2:8a:70:0c:8f:1a: 42:5d:93:76:56:db:90:72:d3:a4:e1:7e:5b:a8:16:cc:f1:2b: 91:67:c2:fc:5f:a6:34:fd:8e:eb:46:71:6d:07:bd:cc:8d:66: 87:04:c6:12:d7:11:2f:f8:ee:f8:d6:e8:26:13:06:5e:d8:97: 3a:cf:d9:20:69:33:f0:65:8c:7b:04:a9:b4:b0:34:3b:ba:e4: 1b:a5:24:7a:79:ef:4f:d7:cb:26:a3:6f:ec:28:b5:9b:33:72: fe:57:c0:98:6a:bd:af:14:04:1f:bf:99:2a:8e:2f:51:b8:19: 15:4b:71:00:11:c5:22:5e:0e:f7:a1:3b:c8:5f:4a:d3:ca:db: 77:c6:cf:45 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJGMEMxMTAvBgNVBAUTKEFFMEU0QkVDNTY4RkU2RkVFNDkyRjcyRTREM0FDQjky OEQ5QzFFNEYwHhcNMjUxMTA1MDYyMDQzWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTBhZWNiYi00NWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvcliI/k5q3Q8ls00Pc+dLxwT1FFRVzkDPI3H1WBNx6xFMRw+bv5Qgh7WjpC5 7nR0NNdUw63At7MADRuK8GvwWsCAOwVF7zAO9hdzd2X70sNHYfaHrsnkE610tBOR eZdy7cP36oXbAUFP56kCSZrP00QBAmGcL4W1KyXMD1qrLNMtomdBCx/e+2AiTzvL YaYFgoyj+JGyLgNjMIiaTEXDl/xzMYtS5VN6tFtx2XZAXWRR+QKINwDy7/yNCZpz nF0dD9b4iELUCoIIb0DJ0FIBzwENa7lJadsCqOqnE5UbxWvD7czLNoXFzdSMmohN XFcJk9yGAJnnUTpGihk327NdYQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGZWH4N1 e5o/bYcOjdW1iPGsa9eyMB8GA1UdIwQYMBaAFK4OS+xWj+b+5JL3Lk06y5KNnB5P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkYwQy80MTQ4NTA3MDhD NUIxMUVGQTcwNjc1N0ZDNEY5QUUwMi9yZzVMN0ZhUDV2N2trdmN1VFRyTGtvMmNI azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JnNUw3RmFQNXY3a2t2Y3VUVHJMa28yY0hrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REJGMEMvNDE0ODUwNzA4QzVCMTFFRkE3MDY3NTdGQzRGOUFFMDIvOUU0OTg3NjY4 QzdGMTFFRkI0MjkwOTc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgHvAwDQYJKoZIhvcNAQELBQADggEBAF8VgkMFOcQ/nW09 ZPXjd14Inbtr7hcDRksfLjwWCS5PKlHfYSGJWNB2QTJueiN0ntyCmPhSEXlZcLnY ipe2dzeilrJYwv6u7+MIf9TxqhaF4hqAV4YJ24Kdt+oZZFOy4swPGjqfQSKJsw3X SGSD2Ur77L9SNpHC+OKKcAyPGkJdk3ZW25By06ThfluoFszxK5FnwvxfpjT9jutG cW0HvcyNZocExhLXES/47vjW6CYTBl7YlzrP2SBpM/BljHsEqbSwNDu65BulJHp5 70/Xyyajb+wotZszcv5XwJhqva8UBB+/mSqOL1G4GRVLcQARxSJeDvehO8hfStPK 23fGz0U= -----END CERTIFICATE-----Generated at Sat Dec 6 19:37:10 2025 by rpki-client