This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913EF9C/C4FEC288D3EA11EFA66C4760C4F9AE02/08476846D3EC11EFBFE6E864C4F9AE02.roa File: 08476846D3EC11EFBFE6E864C4F9AE02.roa (raw, json) Hash identifier: CFufiNumM1YO+49BKTkz7Mf+0vtxR/6TVCiVsrubjN8= Subject key identifier: D3:1D:45:DD:5B:7C:41:D2:FD:AE:E5:10:17:28:84:4C:67:E7:91:FF Certificate issuer: /CN=A913EF9C/serialNumber=B880B8DBD7082CD918B6217BDEA097584591DBDD Certificate serial: B2 Authority key identifier: B8:80:B8:DB:D7:08:2C:D9:18:B6:21:7B:DE:A0:97:58:45:91:DB:DD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uIC429cILNkYtiF73qCXWEWR290.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EF9C/C4FEC288D3EA11EFA66C4760C4F9AE02/08476846D3EC11EFBFE6E864C4F9AE02.roa Signing time: Fri 19 Dec 2025 05:25:47 +0000 ROA not before: Fri 19 Dec 2025 05:25:47 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 153390 IP address blocks: 160.191.158.0/23 maxlen: 23 160.191.158.0/24 maxlen: 24 160.191.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EF9C/C4FEC288D3EA11EFA66C4760C4F9AE02/uIC429cILNkYtiF73qCXWEWR290.crl rsync://rpki.apnic.net/member_repository/A913EF9C/C4FEC288D3EA11EFA66C4760C4F9AE02/uIC429cILNkYtiF73qCXWEWR290.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uIC429cILNkYtiF73qCXWEWR290.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 05:25:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EF9C, serialNumber=B880B8DBD7082CD918B6217BDEA097584591DBDD Validity Not Before: Dec 19 05:25:47 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6944e1db-e688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a6:94:c2:a9:53:95:fe:5a:59:51:e9:6f:b7: 15:2e:97:7b:b3:3d:cc:cd:3b:41:92:b5:1d:7c:dc: b4:d7:ee:39:a8:e5:47:8b:a2:44:e8:62:33:ad:a6: 7a:87:89:92:39:bd:d6:d7:ac:ed:d8:b4:6b:34:02: 45:49:e1:d6:f5:29:d6:ad:62:ff:79:e0:69:6c:97: f0:83:b3:e5:86:c9:8b:80:ea:3c:33:55:c7:e0:91: 5a:5b:ce:4c:3d:76:97:18:4b:be:3f:ac:76:f4:45: 19:11:60:dc:e0:5b:df:53:21:ad:f5:e4:ab:86:cf: a7:94:db:32:19:64:d4:12:fd:5d:26:7e:3b:cf:44: 14:54:4d:5d:d7:d7:ca:cb:8d:1f:e5:24:45:91:e8: 4e:db:44:f2:88:2a:b6:a0:69:dd:86:d1:fe:a1:3c: 98:e6:3c:17:c4:1c:ea:3b:a2:64:e8:99:b6:9e:ea: cb:97:74:12:33:26:6e:a4:dc:bb:ad:ad:f7:61:a2: e0:f0:68:a7:ad:ae:d3:3b:97:2a:e7:b5:f3:e0:bb: 5e:fc:ca:71:41:b5:a5:af:d8:a9:f3:a5:07:ee:84: 2a:6b:91:bc:e5:1a:87:63:74:4e:7a:fa:13:84:3b: f9:03:7e:e4:ba:21:59:e3:59:9c:34:c4:f7:16:14: 89:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:1D:45:DD:5B:7C:41:D2:FD:AE:E5:10:17:28:84:4C:67:E7:91:FF X509v3 Authority Key Identifier: keyid:B8:80:B8:DB:D7:08:2C:D9:18:B6:21:7B:DE:A0:97:58:45:91:DB:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EF9C/C4FEC288D3EA11EFA66C4760C4F9AE02/uIC429cILNkYtiF73qCXWEWR290.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uIC429cILNkYtiF73qCXWEWR290.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EF9C/C4FEC288D3EA11EFA66C4760C4F9AE02/08476846D3EC11EFBFE6E864C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.158.0/23 Signature Algorithm: sha256WithRSAEncryption 65:de:cd:6c:59:bb:4f:a5:8f:8e:c1:b3:a9:39:39:a5:95:bd: fb:dd:e7:72:08:c2:1e:40:10:29:d5:03:15:94:70:27:3e:7d: d7:0d:25:75:79:db:17:0e:c6:71:67:3f:62:1d:ee:5b:ae:a9: dd:9b:93:93:d4:7a:a0:0f:ac:3e:6f:92:17:93:09:2b:24:02: 9f:5c:a0:bd:3d:88:80:c5:2e:b6:28:cd:91:af:4f:b5:12:64: e9:3a:93:4e:aa:d7:46:cd:8c:a7:b0:ab:cc:57:46:06:c9:96: aa:df:78:e2:bd:7d:c9:90:95:c6:e3:ed:19:13:22:b4:0e:d6: 00:01:52:d8:ba:2b:9c:e1:f0:04:18:fc:01:da:4c:df:7b:9f: 55:f9:33:5f:9b:99:5e:d0:2a:be:66:dc:15:85:4a:d7:93:b5: 21:6e:89:fa:dc:bd:f4:42:01:c5:83:a1:39:47:71:b2:16:14: 6d:59:63:18:63:bb:91:13:51:dd:ce:41:fe:9a:71:1b:f7:ef: d2:92:59:94:10:71:16:9e:55:86:4d:4f:df:a1:1a:15:2b:5a: 89:d3:a9:80:0d:13:ce:f7:1a:ad:84:4d:9c:a3:e0:40:56:4b: 38:19:f9:86:02:4c:d2:cc:93:3f:21:73:57:ae:82:c0:04:28: 36:a4:89:48 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx M0VGOUMxMTAvBgNVBAUTKEI4ODBCOERCRDcwODJDRDkxOEI2MjE3QkRFQTA5NzU4 NDU5MURCREQwHhcNMjUxMjE5MDUyNTQ3WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTQ0ZTFkYi1lNjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlqaUwqlTlf5aWVHpb7cVLpd7sz3MzTtBkrUdfNy01+45qOVHi6JE6GIzraZ6 h4mSOb3W16zt2LRrNAJFSeHW9SnWrWL/eeBpbJfwg7PlhsmLgOo8M1XH4JFaW85M PXaXGEu+P6x29EUZEWDc4FvfUyGt9eSrhs+nlNsyGWTUEv1dJn47z0QUVE1d19fK y40f5SRFkehO20TyiCq2oGndhtH+oTyY5jwXxBzqO6Jk6Jm2nurLl3QSMyZupNy7 ra33YaLg8Ginra7TO5cq57Xz4Lte/MpxQbWlr9ip86UH7oQqa5G85RqHY3ROevoT hDv5A37kuiFZ41mcNMT3FhSJfQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNMdRd1b fEHS/a7lEBcohExn55H/MB8GA1UdIwQYMBaAFLiAuNvXCCzZGLYhe96gl1hFkdvd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUY5Qy9DNEZFQzI4OEQz RUExMUVGQTY2QzQ3NjBDNEY5QUUwMi91SUM0MjljSUxOa1l0aUY3M3FDWFdFV1Iy OTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3VJQzQyOWNJTE5rWXRpRjczcUNYV0VXUjI5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0VGOUMvQzRGRUMyODhEM0VBMTFFRkE2NkM0NzYwQzRGOUFFMDIvMDg0NzY4NDZE M0VDMTFFRkJGRTZFODY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgv54wDQYJKoZIhvcNAQELBQADggEBAGXezWxZu0+lj47B s6k5OaWVvfvd53IIwh5AECnVAxWUcCc+fdcNJXV52xcOxnFnP2Id7luuqd2bk5PU eqAPrD5vkheTCSskAp9coL09iIDFLrYozZGvT7USZOk6k06q10bNjKewq8xXRgbJ lqrfeOK9fcmQlcbj7RkTIrQO1gABUti6K5zh8AQY/AHaTN97n1X5M1+bmV7QKr5m 3BWFSteTtSFuifrcvfRCAcWDoTlHcbIWFG1ZYxhju5ETUd3OQf6acRv379KSWZQQ cRaeVYZNT9+hGhUrWonTqYANE873Gq2ETZyj4EBWSzgZ+YYCTNLMkz8hc1eugsAE KDakiUg= -----END CERTIFICATE-----Generated at Sat Dec 20 23:09:59 2025 by rpki-client