This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/2A8244EEE1AB11F0A6B6CFD64A6F56BC.roa
File: 2A8244EEE1AB11F0A6B6CFD64A6F56BC.roa (raw, json)
Hash identifier: qXIrbZpx+nMIXxPB13YbBm5VVLpYWbDabD7TSj8LmXE=
Subject key identifier: 87:85:14:85:1B:73:B1:BB:D1:9B:DC:00:49:D0:2D:57:EC:17:D1:34
Certificate issuer: /CN=A914DCD4/serialNumber=CC376A68FCA3E09F0CEB5C2CB91B34DB14C3EBC9
Certificate serial: 02
Authority key identifier: CC:37:6A:68:FC:A3:E0:9F:0C:EB:5C:2C:B9:1B:34:DB:14:C3:EB:C9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zDdqaPyj4J8M61wsuRs02xTD68k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/2A8244EEE1AB11F0A6B6CFD64A6F56BC.roa
Signing time: Thu 25 Dec 2025 16:02:52 +0000
ROA not before: Thu 25 Dec 2025 16:02:52 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 141694
IP address blocks: 160.222.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.crl
rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zDdqaPyj4J8M61wsuRs02xTD68k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Jan 2026 06:55:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DCD4, serialNumber=CC376A68FCA3E09F0CEB5C2CB91B34DB14C3EBC9
Validity
Not Before: Dec 25 16:02:52 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=694d602c-f636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3f:2c:c2:12:da:26:3a:b2:a4:01:3c:f4:ba:
10:83:5f:d8:c2:a1:8c:92:68:51:68:a6:cd:5f:32:
cf:7a:a1:7d:37:8b:92:8d:3c:18:09:ea:e0:ea:16:
5e:93:3e:ad:a7:89:ba:c6:3a:b0:2a:ac:1b:52:21:
6b:28:f2:78:2d:90:04:15:ae:61:ed:92:37:9d:e5:
88:26:82:4b:fd:0d:5a:cf:ed:4b:7b:ab:5b:06:97:
93:6e:9c:3e:8d:38:6d:45:19:ed:3b:37:ce:bc:00:
a5:b8:76:18:73:44:32:b0:8c:cc:d7:19:d1:cf:b7:
e0:d7:91:7b:a9:15:be:d1:a0:10:e8:67:b9:5d:1e:
24:0c:e3:eb:99:05:88:4f:13:6e:1c:78:e1:03:2f:
0b:3b:60:6b:bd:d9:7c:36:68:39:a1:dc:39:bd:0c:
e6:c1:f1:fe:6e:14:0f:06:9a:6e:2f:ad:f3:63:36:
61:25:be:8e:d5:6f:f2:77:42:77:89:90:40:c8:46:
f5:83:7b:b0:76:02:8a:20:3d:2d:c5:77:3d:b2:cf:
ef:4a:5d:f7:d2:5e:eb:4f:1c:c1:43:a3:c8:88:a2:
28:59:0f:2a:d6:2e:22:34:1f:15:68:36:02:db:37:
3b:70:e2:2a:05:8a:2f:86:7d:3e:41:e0:38:8b:49:
02:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:85:14:85:1B:73:B1:BB:D1:9B:DC:00:49:D0:2D:57:EC:17:D1:34
X509v3 Authority Key Identifier:
keyid:CC:37:6A:68:FC:A3:E0:9F:0C:EB:5C:2C:B9:1B:34:DB:14:C3:EB:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zDdqaPyj4J8M61wsuRs02xTD68k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/2A8244EEE1AB11F0A6B6CFD64A6F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.222.193.0/24
Signature Algorithm: sha256WithRSAEncryption
68:3f:b4:28:84:5e:1e:1e:48:ca:df:a3:9f:b6:ca:8a:12:c0:
fe:7c:a0:ef:fd:88:44:0a:8a:82:b2:f9:eb:a3:65:d9:b8:5a:
ec:f2:6f:70:32:43:6b:3b:e7:64:c8:51:51:23:de:0d:af:40:
fb:b7:4c:20:69:c6:9e:78:d9:52:d5:28:09:e4:59:9a:9e:47:
ba:44:c7:cd:8d:74:86:7c:0a:20:c5:73:2b:17:e3:89:93:8c:
b6:7f:65:7f:77:b3:2e:76:6d:71:da:36:ef:5c:0d:92:41:1f:
5c:80:00:d6:2a:a3:17:4b:e2:0a:a5:32:55:55:c7:cc:71:6e:
cd:ee:eb:6b:4f:c1:21:e4:d8:ab:86:05:43:39:bd:76:21:c3:
e2:70:29:7f:38:a6:14:8e:c0:4b:ae:99:c0:d5:cd:fb:d9:90:
8a:df:d8:e8:c8:28:08:dd:2c:82:13:7a:9c:4a:74:3a:92:f7:
8d:79:88:6e:0f:37:ac:61:62:9d:6d:3f:ac:79:05:32:ef:4b:
e7:1d:0e:82:39:f5:af:7e:13:e4:64:62:67:38:7c:d6:a7:79:
25:e4:97:e2:84:d1:cd:9f:85:a1:a8:31:dc:14:d0:3d:ac:2a:
55:17:89:7e:e2:80:2c:21:73:67:70:3e:0c:57:a1:80:64:1b:
ef:87:6c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 05:20:36 2025 by rpki-client