This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/F4B92E1C05A111F082D17325C4F9AE02.roa File: F4B92E1C05A111F082D17325C4F9AE02.roa (raw, json) Hash identifier: OEoPCQ7v8dhaZUZAQWtAZvLcy6AT9dOCnH1/iJjA3qs= Subject key identifier: EC:D8:E3:F5:89:4D:D9:C0:B6:EC:19:55:B2:89:DF:B7:A8:ED:3A:8D Certificate issuer: /CN=A9167FBA/serialNumber=B0341C343FE1525F76C9299610CA0E78E93E87C3 Certificate serial: 8B Authority key identifier: B0:34:1C:34:3F:E1:52:5F:76:C9:29:96:10:CA:0E:78:E9:3E:87:C3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sDQcND_hUl92ySmWEMoOeOk-h8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/F4B92E1C05A111F082D17325C4F9AE02.roa Signing time: Tue 09 Dec 2025 04:43:49 +0000 ROA not before: Tue 09 Dec 2025 04:43:49 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 153469 IP address blocks: 160.250.158.0/23 maxlen: 23 160.250.158.0/24 maxlen: 24 160.250.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.crl rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sDQcND_hUl92ySmWEMoOeOk-h8M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 05:33:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167FBA, serialNumber=B0341C343FE1525F76C9299610CA0E78E93E87C3 Validity Not Before: Dec 9 04:43:49 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6937a905-d5e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bb:39:50:c9:96:6e:57:31:14:7b:b2:46:01: c7:a2:9b:7e:74:85:93:86:1b:88:9c:41:aa:ab:ae: 4c:b7:e7:84:35:90:b8:c2:f9:d4:91:2a:2f:79:5c: eb:0c:19:16:04:15:9c:a1:b9:ae:18:b9:fb:34:f0: ab:c9:90:61:07:4c:bd:de:e2:47:d9:0b:ae:63:90: 37:8f:a9:4e:a8:ed:47:b0:8d:43:2b:6a:a7:9e:72: 20:d9:4c:ab:9c:02:75:e3:9c:0c:07:b5:7f:4b:fb: be:32:d3:f4:f6:2b:8b:87:40:41:62:66:fb:5e:5c: 3f:d0:01:c2:6e:8c:b5:aa:23:c2:25:f5:cb:88:89: b7:21:d2:26:f2:4e:53:d6:2e:fc:19:b9:ca:13:1c: 59:4c:71:81:4b:b3:62:ad:28:51:77:9a:ef:e8:d4: 08:89:48:79:2e:39:ee:5b:17:45:5d:6c:da:3e:63: c5:59:00:09:a5:28:6a:a9:b3:88:b9:59:41:f5:bd: 1c:6d:dc:d3:70:c5:57:95:6e:22:85:1c:ae:af:9b: 47:f5:2c:33:64:b4:c6:80:60:4e:bb:9b:ea:c7:09: 54:ad:91:78:b6:59:f5:60:65:2d:e1:07:a5:ec:a6: 43:c8:7e:94:12:56:59:c0:2c:a8:4d:70:b7:64:63: 1d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:D8:E3:F5:89:4D:D9:C0:B6:EC:19:55:B2:89:DF:B7:A8:ED:3A:8D X509v3 Authority Key Identifier: keyid:B0:34:1C:34:3F:E1:52:5F:76:C9:29:96:10:CA:0E:78:E9:3E:87:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sDQcND_hUl92ySmWEMoOeOk-h8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/F4B92E1C05A111F082D17325C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.250.158.0/23 Signature Algorithm: sha256WithRSAEncryption 75:a9:22:04:18:6a:2d:bd:26:b0:8b:47:2b:d1:55:c3:2c:90: 98:ff:7b:94:ad:3f:4a:74:45:2b:56:4d:dc:0c:f0:d9:9f:e1: 13:b8:08:63:03:bf:00:a8:62:a1:91:12:e6:18:7a:49:61:82: aa:d3:ac:23:be:b7:33:f3:36:32:2b:c6:95:9b:15:0f:81:72: 1e:9d:38:cb:3e:73:68:43:5d:4e:42:27:63:44:c6:1b:03:76: 47:f7:e2:9d:50:e2:5c:cc:71:81:70:33:97:2f:e4:27:28:4d: 0a:b1:90:f9:7f:04:a5:4b:2b:05:7c:0f:19:6c:84:8f:ad:32: a1:af:0b:e8:ad:00:76:49:63:31:99:23:6e:d4:21:ba:04:f3: 57:15:40:0b:da:e2:ac:0c:7a:30:96:38:58:52:2d:2e:7b:05: 03:e1:c5:b7:50:9d:e3:35:12:1c:8e:99:ba:6f:fa:b8:ff:03: 18:e2:5e:2e:3e:97:b1:ff:d3:70:b9:e0:fc:b5:0c:0a:56:ca: 56:67:de:67:95:3e:d0:05:99:a4:43:32:e0:7b:35:74:0a:c1: 36:75:38:04:9e:82:a0:ca:bd:01:5f:d8:bf:56:00:c6:88:cf: e1:6c:5c:54:17:90:b3:f7:72:67:81:27:c5:f4:70:54:36:b9: 1b:d2:f1:21 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGQkExMTAvBgNVBAUTKEIwMzQxQzM0M0ZFMTUyNUY3NkM5Mjk5NjEwQ0EwRTc4 RTkzRTg3QzMwHhcNMjUxMjA5MDQ0MzQ5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTM3YTkwNS1kNWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0bs5UMmWblcxFHuyRgHHopt+dIWThhuInEGqq65Mt+eENZC4wvnUkSoveVzr DBkWBBWcobmuGLn7NPCryZBhB0y93uJH2QuuY5A3j6lOqO1HsI1DK2qnnnIg2Uyr nAJ145wMB7V/S/u+MtP09iuLh0BBYmb7Xlw/0AHCboy1qiPCJfXLiIm3IdIm8k5T 1i78GbnKExxZTHGBS7NirShRd5rv6NQIiUh5LjnuWxdFXWzaPmPFWQAJpShqqbOI uVlB9b0cbdzTcMVXlW4ihRyur5tH9SwzZLTGgGBOu5vqxwlUrZF4tln1YGUt4Qel 7KZDyH6UElZZwCyoTXC3ZGMdywIDAQABo4IClTCCApEwHQYDVR0OBBYEFOzY4/WJ TdnAtuwZVbKJ37eo7TqNMB8GA1UdIwQYMBaAFLA0HDQ/4VJfdskplhDKDnjpPofD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0ZCQS80MkZDM0Q4QTA0 OEYxMUYwODcyRTg1NDdDNEY5QUUwMi9zRFFjTkRfaFVsOTJ5U21XRU1vT2VPay1o OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3NEUWNORF9oVWw5MnlTbVdFTW9PZU9rLWg4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjdGQkEvNDJGQzNEOEEwNDhGMTFGMDg3MkU4NTQ3QzRGOUFFMDIvRjRCOTJFMUMw NUExMTFGMDgyRDE3MzI1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGg+p4wDQYJKoZIhvcNAQELBQADggEBAHWpIgQYai29JrCL RyvRVcMskJj/e5StP0p0RStWTdwM8Nmf4RO4CGMDvwCoYqGREuYYeklhgqrTrCO+ tzPzNjIrxpWbFQ+Bch6dOMs+c2hDXU5CJ2NExhsDdkf34p1Q4lzMcYFwM5cv5Cco TQqxkPl/BKVLKwV8DxlshI+tMqGvC+itAHZJYzGZI27UIboE81cVQAva4qwMejCW OFhSLS57BQPhxbdQneM1EhyOmbpv+rj/AxjiXi4+l7H/03C54Py1DApWylZn3meV PtAFmaRDMuB7NXQKwTZ1OASegqDKvQFf2L9WAMaIz+FsXFQXkLP3cmeBJ8X0cFQ2 uRvS8SE= -----END CERTIFICATE-----Generated at Wed Dec 31 05:21:25 2025 by rpki-client