This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/FBDFC922CB6B11F0B7DCE06BC4F9AE02.roa File: FBDFC922CB6B11F0B7DCE06BC4F9AE02.roa (raw, json) Hash identifier: M37H2JmgHdsk+dohnmA6/Rm2x95nLDcBvWVOZQwW0K8= Subject key identifier: B0:FA:FE:39:D8:2B:97:AB:5D:AD:A1:50:0F:A9:C1:87:C5:E4:D6:8C Certificate issuer: /CN=A9168494/serialNumber=B13EA4934F41FC4834CD2A6FF8218D40F7A97789 Certificate serial: 02FC Authority key identifier: B1:3E:A4:93:4F:41:FC:48:34:CD:2A:6F:F8:21:8D:40:F7:A9:77:89 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/FBDFC922CB6B11F0B7DCE06BC4F9AE02.roa Signing time: Tue 16 Dec 2025 08:00:10 +0000 ROA not before: Tue 16 Dec 2025 08:00:10 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 3550 IP address blocks: 165.220.0.0/21 maxlen: 21 165.220.16.0/21 maxlen: 21 165.220.32.0/19 maxlen: 19 165.220.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.crl rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:30:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 764 (0x2fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168494, serialNumber=B13EA4934F41FC4834CD2A6FF8218D40F7A97789 Validity Not Before: Dec 16 08:00:10 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6941118a-d547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:52:21:a2:48:b0:a0:e6:0c:20:5b:1d:e9:45: 9b:50:b9:23:a1:de:3f:20:42:16:97:c8:90:1b:10: 02:4c:36:8a:18:98:21:f0:f4:22:20:2b:7f:bf:c0: 4d:7f:6f:1a:61:fd:37:b1:fc:f3:46:fb:a8:ef:2f: 33:28:a8:38:48:6c:c8:84:ca:13:09:37:b8:99:e9: b5:7e:6d:64:da:53:2e:88:39:d8:76:72:13:45:80: 41:3d:d8:6a:3b:6f:6f:f4:fa:32:dc:42:1f:08:6b: 3b:b0:26:78:be:76:d1:b8:c4:f4:e5:0f:e8:5d:1a: 1c:06:d1:b4:31:b7:c9:8f:b9:14:4c:96:12:00:a9: 4d:4d:93:93:af:7b:ac:37:75:55:52:5a:9e:b1:bb: 59:7b:de:8e:e3:b4:d6:52:f3:fd:d3:b0:86:5a:a6: ab:71:40:52:82:26:ae:41:59:c7:59:fc:bb:5e:9d: 66:54:1d:db:47:13:4c:f2:fc:20:71:f4:93:b5:d7: 02:8b:96:4b:3c:9c:98:e3:f4:29:ab:9b:66:0c:4f: ab:61:f8:be:fb:a3:c6:29:f8:a3:b9:42:6b:10:99: f5:4e:9f:2d:55:66:f6:74:47:5a:d3:1c:4b:af:18: c2:36:97:58:fc:47:e0:4e:21:64:13:15:0c:16:be: 74:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:FA:FE:39:D8:2B:97:AB:5D:AD:A1:50:0F:A9:C1:87:C5:E4:D6:8C X509v3 Authority Key Identifier: keyid:B1:3E:A4:93:4F:41:FC:48:34:CD:2A:6F:F8:21:8D:40:F7:A9:77:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/FBDFC922CB6B11F0B7DCE06BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 165.220.0.0/21 165.220.16.0/21 165.220.32.0-165.220.127.255 Signature Algorithm: sha256WithRSAEncryption 42:d5:5d:87:75:f7:36:c6:fa:bd:1e:93:d1:64:02:01:27:ac: e3:f7:da:5b:74:e8:22:a1:76:8d:78:7a:51:4f:93:52:f6:9a: 2e:16:6a:ad:2b:ac:2b:81:2f:d0:d1:20:02:96:86:ca:d1:b2: 27:d2:9d:22:b7:8f:ff:8f:2c:2a:99:f4:09:5e:d5:8b:b3:0e: ed:3b:6b:a4:53:3f:f3:97:2b:90:10:6c:cb:65:71:d6:24:eb: 04:c0:e1:89:a1:99:b8:50:aa:4a:d0:59:79:e0:cc:09:85:20: 18:86:fc:23:c5:e4:07:37:6a:89:dd:b7:fb:fa:0c:a6:7c:08: 0b:26:75:fb:a1:da:cf:cc:e4:87:32:bf:ac:9e:a3:65:f0:cb: 82:b1:2d:98:7f:07:c9:b7:e6:2c:ca:09:ad:a5:0b:fe:4e:8a: c7:ef:aa:bf:12:31:a7:df:d6:a0:72:5d:1d:23:e2:f1:e7:01: ec:5f:99:f5:23:b2:72:f3:3d:0e:5b:d1:2d:0f:4a:46:74:72: da:1e:d3:dc:b1:99:17:48:23:c6:c5:68:9d:8c:f2:71:e2:8e: 01:92:9b:38:03:a4:c7:3a:e9:f9:05:bb:a1:23:0b:4f:fa:43: da:23:c0:c2:bf:cd:56:4c:d4:c6:3a:2b:98:4f:bd:da:2f:00: 4d:12:db:fb -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICAvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg0OTQxMTAvBgNVBAUTKEIxM0VBNDkzNEY0MUZDNDgzNENEMkE2RkY4MjE4RDQw RjdBOTc3ODkwHhcNMjUxMjE2MDgwMDEwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDDA02OTQxMTE4YS1kNTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyVIhokiwoOYMIFsd6UWbULkjod4/IEIWl8iQGxACTDaKGJgh8PQiICt/v8BN f28aYf03sfzzRvuo7y8zKKg4SGzIhMoTCTe4mem1fm1k2lMuiDnYdnITRYBBPdhq O29v9Poy3EIfCGs7sCZ4vnbRuMT05Q/oXRocBtG0MbfJj7kUTJYSAKlNTZOTr3us N3VVUlqesbtZe96O47TWUvP907CGWqarcUBSgiauQVnHWfy7Xp1mVB3bRxNM8vwg cfSTtdcCi5ZLPJyY4/Qpq5tmDE+rYfi++6PGKfijuUJrEJn1Tp8tVWb2dEda0xxL rxjCNpdY/EfgTiFkExUMFr502QIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFLD6/jnY K5erXa2hUA+pwYfF5NaMMB8GA1UdIwQYMBaAFLE+pJNPQfxINM0qb/ghjUD3qXeJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODQ5NC8zMUI4MjYzQzA5 OTMxMUVEQjIxQzlCNEJDNEY5QUUwMi9zVDZrazA5Ql9FZzB6U3B2LUNHTlFQZXBk NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3NUNmtrMDlCX0VnMHpTcHYtQ0dOUVBlcGQ0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njg0OTQvMzFCODI2M0MwOTkzMTFFREIyMUM5QjRCQzRGOUFFMDIvRkJERkM5MjJD QjZCMTFGMEI3RENFMDZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMwYIKwYBBQUHAQcBAf8E JDAiMCAEAgABMBoDBAOl3AADBAOl3BAwDAMEBaXcIAMEB6XcADANBgkqhkiG9w0B AQsFAAOCAQEAQtVdh3X3Nsb6vR6T0WQCASes4/faW3ToIqF2jXh6UU+TUvaaLhZq rSusK4Ev0NEgApaGytGyJ9KdIreP/48sKpn0CV7Vi7MO7TtrpFM/85crkBBsy2Vx 1iTrBMDhiaGZuFCqStBZeeDMCYUgGIb8I8XkBzdqid23+/oMpnwICyZ1+6Haz8zk hzK/rJ6jZfDLgrEtmH8HybfmLMoJraUL/k6Kx++qvxIxp9/WoHJdHSPi8ecB7F+Z 9SOycvM9DlvRLQ9KRnRy2h7T3LGZF0gjxsVonYzyceKOAZKbOAOkxzrp+QW7oSML T/pD2iPAwr/NVkzUxjormE+92i8ATRLb+w== -----END CERTIFICATE-----Generated at Fri Dec 19 11:32:40 2025 by rpki-client