This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/BA4B22643AC911EBB83D7F0EC4F9AE02.roa File: BA4B22643AC911EBB83D7F0EC4F9AE02.roa (raw, json) Hash identifier: jLprJlYDgAu74jqVf0KhRr49j5tKUoWp/CVQN/GM+MQ= Subject key identifier: C5:10:C6:FB:BE:F9:65:46:E2:B5:F7:F1:ED:F7:0C:C4:C5:9B:F1:D7 Certificate issuer: /CN=A917C23C/serialNumber=AC32E99CB092E62E3ACA187463DA99E73D5AAF3E Certificate serial: 0790 Authority key identifier: AC:32:E9:9C:B0:92:E6:2E:3A:CA:18:74:63:DA:99:E7:3D:5A:AF:3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/BA4B22643AC911EBB83D7F0EC4F9AE02.roa Signing time: Fri 14 Nov 2025 20:41:29 +0000 ROA not before: Fri 14 Nov 2025 20:41:29 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 24323 IP address blocks: 116.206.44.0/22 maxlen: 22 116.206.44.0/24 maxlen: 24 116.206.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 21:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1936 (0x790) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C23C, serialNumber=AC32E99CB092E62E3ACA187463DA99E73D5AAF3E Validity Not Before: Nov 14 20:41:29 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=691793f9-f61a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fe:85:c5:d7:a6:56:03:ba:af:7f:8b:22:13: 96:4e:8e:dc:c2:05:bf:86:1b:20:3e:3e:d9:62:b6: fa:a8:f9:d7:a9:d0:76:a6:0a:86:26:91:96:c8:3f: 76:08:a5:9b:3e:f5:71:a2:63:39:85:2e:e2:eb:80: 3c:08:be:f1:07:9c:86:48:f9:7c:e8:38:ab:ac:fd: 1a:78:97:fa:8b:d5:9a:bb:f1:d1:1d:85:2f:9f:4d: 84:c1:80:99:38:5f:fb:e0:c4:c2:01:83:ae:c2:62: 50:13:dc:57:f2:36:a9:d2:bc:26:d9:53:ba:f4:b2: f6:9e:26:77:06:f3:8a:dd:cc:39:57:30:5d:5c:10: 9c:51:23:48:52:d1:2f:c8:e1:4a:77:ba:55:21:77: 6d:20:cf:20:b8:7a:5a:34:9e:f5:f0:47:a5:d0:5d: b5:64:d6:f8:d8:1e:39:aa:07:a3:9c:0e:1c:2c:0e: 9b:d9:ee:ca:ae:c4:28:94:0e:e9:02:86:81:30:94: 93:56:dd:a3:25:50:c7:36:15:3b:cf:e7:5c:a3:d9: ee:eb:96:65:0f:12:fe:9b:d6:07:d5:2a:ae:23:e7: c4:ec:d0:5b:8f:15:cf:25:ed:93:82:af:9a:7d:a2: 04:fb:88:ea:f8:14:81:5d:c7:2d:20:e6:cb:af:b8: 16:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:10:C6:FB:BE:F9:65:46:E2:B5:F7:F1:ED:F7:0C:C4:C5:9B:F1:D7 X509v3 Authority Key Identifier: keyid:AC:32:E9:9C:B0:92:E6:2E:3A:CA:18:74:63:DA:99:E7:3D:5A:AF:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/BA4B22643AC911EBB83D7F0EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.206.44.0/22 Signature Algorithm: sha256WithRSAEncryption 07:f0:da:41:b5:38:c4:f8:77:40:6f:20:ac:5c:cc:aa:34:e7: 07:ff:8a:3b:da:1a:92:17:8c:b1:d7:5e:f0:fc:b3:0b:22:c4: 9a:cc:97:70:76:50:2d:4f:9a:8b:d5:04:1b:88:37:39:24:4a: 9e:fd:5e:7e:55:e7:02:0b:ed:86:59:67:51:23:af:a3:ff:79: 16:fa:a4:22:29:ec:d3:10:99:0d:54:b2:f0:1a:19:61:0b:eb: 9e:31:be:09:06:f7:67:59:b9:2f:72:12:da:d9:ce:99:66:8a: 93:1c:74:bf:4b:e8:2e:8a:27:d0:5f:43:ad:23:1d:9c:7a:0a: c2:96:03:e7:97:b2:be:99:97:89:21:4c:5a:5f:d0:01:9e:c0: 00:f1:46:63:4b:fd:16:8f:5d:51:4b:af:4d:23:77:04:d2:45: 05:d6:a8:0a:d8:fe:5f:48:cf:d4:d5:ca:46:11:1c:20:36:c7: 69:a3:f2:9f:d5:56:df:21:d8:17:d2:78:05:39:0b:bd:26:d7: 45:84:2b:3d:b4:9f:04:25:1b:48:9a:5e:3d:96:01:47:20:f4: 7e:9e:78:68:f1:43:d6:cb:62:f7:0a:05:39:fe:ed:22:27:7b: e0:87:1e:6f:19:ca:33:bf:43:c6:72:05:3b:12:6c:65:4f:db: 4a:e9:eb:01 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MyM0MxMTAvBgNVBAUTKEFDMzJFOTlDQjA5MkU2MkUzQUNBMTg3NDYzREE5OUU3 M0Q1QUFGM0UwHhcNMjUxMTE0MjA0MTI5WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTE3OTNmOS1mNjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtP6FxdemVgO6r3+LIhOWTo7cwgW/hhsgPj7ZYrb6qPnXqdB2pgqGJpGWyD92 CKWbPvVxomM5hS7i64A8CL7xB5yGSPl86DirrP0aeJf6i9Wau/HRHYUvn02EwYCZ OF/74MTCAYOuwmJQE9xX8jap0rwm2VO69LL2niZ3BvOK3cw5VzBdXBCcUSNIUtEv yOFKd7pVIXdtIM8guHpaNJ718Eel0F21ZNb42B45qgejnA4cLA6b2e7KrsQolA7p AoaBMJSTVt2jJVDHNhU7z+dco9nu65ZlDxL+m9YH1SquI+fE7NBbjxXPJe2Tgq+a faIE+4jq+BSBXcctIObLr7gWjwIDAQABo4IClTCCApEwHQYDVR0OBBYEFMUQxvu+ +WVG4rX38e33DMTFm/HXMB8GA1UdIwQYMBaAFKwy6ZywkuYuOsoYdGPamec9Wq8+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzIzQy8wOTA3NDRDMjNB M0YxMUVCQjYzQjc1NTFDNEY5QUUwMi9yRExwbkxDUzVpNDZ5aGgwWTlxWjV6MWFy ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JETHBuTENTNWk0NnloaDBZOXFaNXoxYXJ6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0MyM0MvMDkwNzQ0QzIzQTNGMTFFQkI2M0I3NTUxQzRGOUFFMDIvQkE0QjIyNjQz QUM5MTFFQkI4M0Q3RjBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJ0ziwwDQYJKoZIhvcNAQELBQADggEBAAfw2kG1OMT4d0Bv IKxczKo05wf/ijvaGpIXjLHXXvD8swsixJrMl3B2UC1PmovVBBuINzkkSp79Xn5V 5wIL7YZZZ1Ejr6P/eRb6pCIp7NMQmQ1UsvAaGWEL654xvgkG92dZuS9yEtrZzplm ipMcdL9L6C6KJ9BfQ60jHZx6CsKWA+eXsr6Zl4khTFpf0AGewADxRmNL/RaPXVFL r00jdwTSRQXWqArY/l9Iz9TVykYRHCA2x2mj8p/VVt8h2BfSeAU5C70m10WEKz20 nwQlG0iaXj2WAUcg9H6eeGjxQ9bLYvcKBTn+7SIne+CHHm8ZyjO/Q8ZyBTsSbGVP 20rp6wE= -----END CERTIFICATE-----Generated at Sat Dec 20 08:23:28 2025 by rpki-client