This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/221824CCAE5811EFAFE7FF84C4F9AE02.roa
File: 221824CCAE5811EFAFE7FF84C4F9AE02.roa (raw, json)
Hash identifier: Khq58BRpOcFl6vAetWVmBYtt5+j7UZco7A8cXY4mwdg=
Subject key identifier: A4:22:C3:DB:76:7C:E4:A2:19:3B:FD:2E:D1:86:9C:99:86:4F:F5:7F
Certificate issuer: /CN=A912B12A/serialNumber=2722C5ABBEE63B76B9DA966C78D73A6657D244EB
Certificate serial: C9
Authority key identifier: 27:22:C5:AB:BE:E6:3B:76:B9:DA:96:6C:78:D7:3A:66:57:D2:44:EB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JyLFq77mO3a52pZseNc6ZlfSROs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/221824CCAE5811EFAFE7FF84C4F9AE02.roa
Signing time: Wed 17 Dec 2025 06:24:20 +0000
ROA not before: Wed 17 Dec 2025 06:24:20 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 137047
IP address blocks: 160.250.114.0/24 maxlen: 24
160.250.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.crl
rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JyLFq77mO3a52pZseNc6ZlfSROs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 04:58:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201 (0xc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B12A, serialNumber=2722C5ABBEE63B76B9DA966C78D73A6657D244EB
Validity
Not Before: Dec 17 06:24:20 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69424c94-fdcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:df:e4:83:9e:d6:aa:7a:68:03:fa:e6:f6:70:
3a:4a:2b:73:d9:e9:62:4b:33:81:3b:6b:c6:21:e0:
3b:b2:75:ab:a5:56:e7:1b:d7:15:e9:b5:50:24:48:
14:53:7f:a2:81:59:92:05:31:36:55:b7:20:0c:77:
f2:23:b1:4f:55:99:d4:2f:6e:71:88:0c:8c:8d:ee:
68:01:08:2b:c0:da:6a:4a:4d:3a:71:70:3e:5f:5e:
36:35:02:18:a6:20:bb:b7:e8:1f:f3:85:ae:26:4b:
90:18:81:fd:f7:e2:26:09:52:40:9d:a9:0b:a9:14:
e2:e1:cd:9b:82:2a:a2:3b:dd:13:b6:07:45:ea:c6:
9e:a6:43:d0:17:ad:72:9e:52:c1:6c:be:03:1a:40:
08:cd:c6:c5:2b:b9:01:66:cd:02:d4:42:29:45:ff:
d1:79:be:7f:ba:40:33:64:84:6f:ea:c4:63:36:46:
64:f1:3c:4d:12:83:92:01:2f:6b:5c:2b:bd:57:f8:
4c:ee:29:c9:76:17:b0:d5:95:51:1d:73:d7:6c:08:
79:c3:5c:c8:41:23:a8:d1:e7:7f:9c:22:70:90:4d:
d8:ef:76:ce:b3:bd:b9:24:4c:66:d2:18:7e:89:2d:
89:2f:fb:f9:3e:ca:97:c6:d0:07:c6:ed:21:a9:c6:
7d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:22:C3:DB:76:7C:E4:A2:19:3B:FD:2E:D1:86:9C:99:86:4F:F5:7F
X509v3 Authority Key Identifier:
keyid:27:22:C5:AB:BE:E6:3B:76:B9:DA:96:6C:78:D7:3A:66:57:D2:44:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JyLFq77mO3a52pZseNc6ZlfSROs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/221824CCAE5811EFAFE7FF84C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.114.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:e4:bb:8d:60:69:5a:2f:9e:be:4f:80:29:f0:65:b7:23:7b:
16:86:5d:e8:1a:0d:b7:db:41:0f:ed:f3:5f:ae:6c:fd:21:6c:
c5:cf:79:55:60:96:a2:53:a6:5e:12:fe:ea:fe:37:d1:28:dc:
a6:58:7c:33:6e:65:a6:88:67:a7:ba:72:3e:5f:d7:e7:b6:d5:
a6:8f:d1:59:6e:88:ca:d9:45:26:3c:e6:52:57:ad:5b:79:de:
68:3f:fe:d9:7e:ab:47:6d:6a:29:b5:23:f6:c8:35:75:54:4c:
6d:bc:9b:b9:92:fa:2d:ad:f2:52:d1:c4:68:c7:b8:51:4f:1d:
82:83:42:34:94:22:e1:66:6b:f7:5c:95:06:7d:3c:14:07:93:
50:27:a6:fc:a8:34:d5:e0:47:f4:4b:d2:a0:b8:dd:76:99:d2:
25:d6:5e:1c:ab:19:e1:59:24:3d:94:39:02:2e:84:5c:0b:e8:
6d:b5:ec:90:d4:51:24:0e:c7:54:01:f5:2c:03:e7:3e:ac:32:
7c:fc:d3:55:8f:60:77:3b:22:16:98:6f:a3:ce:93:23:1a:a5:
c9:2a:f9:0d:5a:40:57:e0:93:60:4f:fb:ee:c3:69:e0:7a:9c:
c8:43:1a:81:30:13:48:13:66:76:41:fa:1f:ee:95:68:c0:14:
df:e4:fe:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 16:05:28 2025 by rpki-client