This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/61D8F6CCDC8D11F0969601B93D6F56BC.roa File: 61D8F6CCDC8D11F0969601B93D6F56BC.roa (raw, json) Hash identifier: NyIoFFnNbfwo9o2cOO+dAaDD78bAuKHqc1arnmJuZ9o= Subject key identifier: A3:2C:C7:67:EB:8B:06:FD:A6:F7:C9:4C:78:3D:3D:E8:27:14:C9:A3 Certificate issuer: /CN=A917DEA4/serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8 Certificate serial: 079F Authority key identifier: B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/61D8F6CCDC8D11F0969601B93D6F56BC.roa Signing time: Fri 19 Dec 2025 03:47:04 +0000 ROA not before: Fri 19 Dec 2025 03:47:04 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 55740 IP address blocks: 14.96.183.0/24 maxlen: 24 14.97.20.0/24 maxlen: 24 14.97.48.0/24 maxlen: 24 2406:e00:800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:18:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1951 (0x79f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DEA4, serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8 Validity Not Before: Dec 19 03:47:04 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=6944cab8-488a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c5:59:6f:27:d3:2c:87:e5:6a:d2:7c:a2:4a: 51:f9:ff:d3:49:75:d2:3e:bb:7a:d5:a0:d0:55:cc: c3:0c:7b:18:55:10:3c:21:6e:00:7d:c0:f5:71:b3: f5:6e:62:e7:1f:49:2a:bf:f3:b6:eb:bc:3b:c8:d3: 56:84:bb:80:29:da:b1:b1:d1:a5:6a:65:e0:45:a1: fd:64:8f:62:97:33:59:ed:d3:ad:48:30:0c:cd:e9: ab:f1:0e:db:7d:4e:1c:0f:86:b2:cd:60:ba:41:af: ad:e9:32:bc:2c:10:f7:14:c9:02:da:b6:0e:dc:40: 04:77:ea:cd:5d:43:61:52:f1:de:89:f3:f5:f2:77: 8c:01:a7:5d:5a:fc:a1:1d:c3:4f:39:b0:7c:c8:b4: 89:ef:9a:46:fc:8a:9c:96:ea:b8:88:59:16:97:b3: 3c:9f:fa:26:2e:c5:cf:45:aa:6a:dc:f8:6f:c3:46: 78:f3:b7:1d:cd:77:b3:27:ba:1d:60:ea:85:e3:07: e5:37:a8:c2:74:34:24:bc:3b:76:f4:65:f3:86:5c: 9f:ba:9f:c3:86:d6:d7:26:10:1a:29:ea:b1:a5:88: e0:e2:13:02:1c:90:c3:37:29:6d:51:51:4f:dd:ca: c8:7b:f1:53:dc:74:85:32:9a:f2:07:e7:e0:48:85: f6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:2C:C7:67:EB:8B:06:FD:A6:F7:C9:4C:78:3D:3D:E8:27:14:C9:A3 X509v3 Authority Key Identifier: keyid:B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/61D8F6CCDC8D11F0969601B93D6F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.96.183.0/24 14.97.20.0/24 14.97.48.0/24 IPv6: 2406:e00:800::/48 Signature Algorithm: sha256WithRSAEncryption 70:fc:76:4e:34:74:5a:e5:80:4f:0a:96:82:38:80:f0:5d:c3: 91:b0:1a:a1:74:9f:b8:82:eb:16:5b:46:9e:98:ca:a6:f8:b0: 17:10:b4:21:e7:b8:88:b4:26:83:a3:78:e5:ae:06:e4:3b:3a: bd:1f:c1:de:6e:58:11:28:f6:11:51:01:31:30:30:31:97:ec: cd:59:e0:f1:3b:b2:7a:aa:86:ba:86:63:60:18:d0:87:09:bc: 50:41:73:90:7c:44:c7:59:40:66:9f:40:97:7e:53:8f:2b:d0: ff:2a:af:0c:04:f4:57:68:2e:d2:65:3b:2c:c8:77:ea:66:ee: 22:27:2e:46:5c:04:c0:c8:44:fc:dd:b1:2b:25:c8:fd:fa:c4: 9f:64:38:6c:10:a2:1f:4d:b7:b1:6d:87:aa:49:f5:76:32:30: f5:35:18:ea:eb:48:63:d5:8a:a8:e5:17:81:5a:cc:4e:ad:69: 10:33:f6:1f:a8:52:17:39:e4:7f:e7:fc:39:fc:49:14:88:20: 50:2b:6f:ff:2c:0f:27:6b:fb:39:a3:09:2a:66:c0:66:aa:cf: b8:8c:e3:58:1f:a9:79:42:b5:74:a6:c1:27:ce:da:23:5f:b4: 5a:d9:0c:32:26:f0:81:2c:15:35:eb:b2:25:dd:8b:5b:3b:32: b3:6e:91:18 -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICB58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RFQTQxMTAvBgNVBAUTKEI0RDZGRkQ1REZGOUVBQzQxM0FCNDQwOEUwOTYzN0Iw OTQ5NERCQzgwHhcNMjUxMjE5MDM0NzA0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTQ0Y2FiOC00ODhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAocVZbyfTLIflatJ8okpR+f/TSXXSPrt61aDQVczDDHsYVRA8IW4AfcD1cbP1 bmLnH0kqv/O267w7yNNWhLuAKdqxsdGlamXgRaH9ZI9ilzNZ7dOtSDAMzemr8Q7b fU4cD4ayzWC6Qa+t6TK8LBD3FMkC2rYO3EAEd+rNXUNhUvHeifP18neMAaddWvyh HcNPObB8yLSJ75pG/Iqcluq4iFkWl7M8n/omLsXPRapq3Phvw0Z487cdzXezJ7od YOqF4wflN6jCdDQkvDt29GXzhlyfup/DhtbXJhAaKeqxpYjg4hMCHJDDNyltUVFP 3crIe/FT3HSFMpryB+fgSIX2+QIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFKMsx2fr iwb9pvfJTHg9PegnFMmjMB8GA1UdIwQYMBaAFLTW/9Xf+erEE6tECOCWN7CUlNvI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REVBNC9BMjQyNkI2MDk4 MjkxMUVCQjc4ODIwODFDNEY5QUUwMi90TmJfMWRfNTZzUVRxMFFJNEpZM3NKU1Uy OGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ROYl8xZF81NnNRVHEwUUk0Slkzc0pTVTI4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0RFQTQvQTI0MjZCNjA5ODI5MTFFQkI3ODgyMDgxQzRGOUFFMDIvNjFEOEY2Q0NE QzhEMTFGMDk2OTYwMUI5M0Q2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E LTArMBgEAgABMBIDBAAOYLcDBAAOYRQDBAAOYTAwDwQCAAIwCQMHACQGDgAIADAN BgkqhkiG9w0BAQsFAAOCAQEAcPx2TjR0WuWATwqWgjiA8F3DkbAaoXSfuILrFltG npjKpviwFxC0Iee4iLQmg6N45a4G5Ds6vR/B3m5YESj2EVEBMTAwMZfszVng8Tuy eqqGuoZjYBjQhwm8UEFzkHxEx1lAZp9Al35TjyvQ/yqvDAT0V2gu0mU7LMh36mbu IicuRlwEwMhE/N2xKyXI/frEn2Q4bBCiH023sW2Hqkn1djIw9TUY6utIY9WKqOUX gVrMTq1pEDP2H6hSFznkf+f8OfxJFIggUCtv/ywPJ2v7OaMJKmbAZqrPuIzjWB+p eUK1dKbBJ87aI1+0WtkMMibwgSwVNeuyJd2LWzsys26RGA== -----END CERTIFICATE-----Generated at Fri Dec 19 13:27:54 2025 by rpki-client