This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/912586FA7F4F11ED96FDE369C4F9AE02.roa File: 912586FA7F4F11ED96FDE369C4F9AE02.roa (raw, json) Hash identifier: 6JE0CpuqzhytoSjJ6WQfnw2PyEDyCfuYvVBRaPTy/O0= Subject key identifier: 98:75:A4:C1:B8:12:75:57:93:13:4C:12:C6:4B:4F:48:DC:62:BF:99 Certificate issuer: /CN=A91A3E3F/serialNumber=943D3E10B8BBE138B47734554B69053110D45BE3 Certificate serial: 024E Authority key identifier: 94:3D:3E:10:B8:BB:E1:38:B4:77:34:55:4B:69:05:31:10:D4:5B:E3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/912586FA7F4F11ED96FDE369C4F9AE02.roa Signing time: Wed 17 Dec 2025 02:21:23 +0000 ROA not before: Wed 17 Dec 2025 02:21:23 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 8071 IP address blocks: 167.220.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 01:11:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 590 (0x24e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3E3F, serialNumber=943D3E10B8BBE138B47734554B69053110D45BE3 Validity Not Before: Dec 17 02:21:23 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=694213a3-5b2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:67:8a:df:7d:00:27:9e:cb:6e:e8:ca:b9:56: ca:91:ff:15:64:bd:a3:28:e5:7d:09:18:55:b2:9f: c7:47:38:80:6e:e0:51:1f:27:d6:46:f1:50:95:0d: 23:82:9e:77:ad:f1:f5:e4:48:01:de:1b:bc:c2:97: fb:5a:b0:3f:d3:f8:5e:32:3f:a7:39:ac:c9:1c:2c: 5e:28:f4:98:e4:bf:18:3b:9a:a6:58:45:b0:95:4b: 3e:85:37:92:b5:57:f3:66:5c:dd:8d:52:4d:97:da: c8:19:40:bb:5a:ea:f8:cb:22:1d:b3:42:4f:9c:c9: 7a:aa:57:d4:2d:b7:3e:ee:62:4c:d6:61:9e:88:78: 0d:90:26:43:85:27:04:3e:24:09:84:6b:ea:1f:09: 9f:1e:f0:24:0b:cf:e4:2d:99:99:1b:00:ed:fa:2a: 76:06:f6:fd:1e:1b:76:db:6f:5b:f0:e9:bd:0e:c9: 15:0f:cb:a9:26:f0:2a:e3:db:ad:e1:6a:99:14:14: 0a:ad:d7:2b:3f:6d:b9:96:99:b2:c3:40:71:bd:21: e8:39:43:c5:05:b3:63:02:77:0a:4e:69:bf:87:89: 47:3e:13:0a:a6:44:4a:a6:0a:35:c5:e0:5f:48:84: 57:e0:39:13:c3:53:29:54:90:18:64:02:bf:09:44: 59:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:75:A4:C1:B8:12:75:57:93:13:4C:12:C6:4B:4F:48:DC:62:BF:99 X509v3 Authority Key Identifier: keyid:94:3D:3E:10:B8:BB:E1:38:B4:77:34:55:4B:69:05:31:10:D4:5B:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/912586FA7F4F11ED96FDE369C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 167.220.232.0/22 Signature Algorithm: sha256WithRSAEncryption 02:50:8f:0d:c7:58:3b:3a:0e:da:f2:60:9e:ad:c8:23:80:44: 2c:42:da:c3:de:b2:3e:17:35:d9:fd:f6:5c:e9:52:96:74:08: 23:96:54:6e:dd:e3:dc:ae:92:d6:c1:7b:5e:8d:8e:f4:c7:b2: db:ef:cd:0e:bc:c0:ed:c7:a2:06:af:0e:79:56:d7:e7:8f:da: 16:08:e9:b3:1e:9a:8d:62:d5:88:61:25:3a:a6:f9:4d:b9:92: ac:b2:c0:e7:17:8b:1a:38:7f:8c:f7:b3:22:d1:f6:4d:5f:d8: aa:ac:a8:1a:73:53:39:cb:98:3f:ab:6f:b2:f6:77:31:1d:9c: dd:14:91:6d:90:75:64:9a:2b:64:34:b8:9f:29:ba:3c:63:1a: 29:2f:ab:7b:04:39:a3:39:2c:84:5d:d8:39:be:eb:18:dc:25: 2b:8d:2b:5d:94:7d:87:b4:5a:8f:bc:2b:c0:2a:91:57:ee:81: 03:72:44:c9:e8:50:17:9a:df:7b:f1:4f:1f:d5:8d:34:16:70: 91:3a:02:1b:94:a7:2a:d2:6d:a5:68:d1:8f:56:fb:5c:c1:cf: 56:e7:7a:0f:8b:27:24:02:38:38:bc:c2:ed:18:ce:8d:46:1d: 5b:4e:fb:5d:bc:24:6f:6b:9f:15:e2:b3:3e:c4:31:a3:2e:ca: cd:3f:e9:66 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNFM0YxMTAvBgNVBAUTKDk0M0QzRTEwQjhCQkUxMzhCNDc3MzQ1NTRCNjkwNTMx MTBENDVCRTMwHhcNMjUxMjE3MDIyMTIzWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTQyMTNhMy01YjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1GeK330AJ57LbujKuVbKkf8VZL2jKOV9CRhVsp/HRziAbuBRHyfWRvFQlQ0j gp53rfH15EgB3hu8wpf7WrA/0/heMj+nOazJHCxeKPSY5L8YO5qmWEWwlUs+hTeS tVfzZlzdjVJNl9rIGUC7Wur4yyIds0JPnMl6qlfULbc+7mJM1mGeiHgNkCZDhScE PiQJhGvqHwmfHvAkC8/kLZmZGwDt+ip2Bvb9Hht2229b8Om9DskVD8upJvAq49ut 4WqZFBQKrdcrP225lpmyw0BxvSHoOUPFBbNjAncKTmm/h4lHPhMKpkRKpgo1xeBf SIRX4DkTw1MpVJAYZAK/CURZtQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJh1pMG4 EnVXkxNMEsZLT0jcYr+ZMB8GA1UdIwQYMBaAFJQ9PhC4u+E4tHc0VUtpBTEQ1Fvj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0UzRi8zMDVFQjg3NjdD REIxMUVEQUI4NDRDMTlDNEY5QUUwMi9sRDAtRUxpNzRUaTBkelJWUzJrRk1SRFVX LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xEMC1FTGk3NFRpMGR6UlZTMmtGTVJEVVctTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTNFM0YvMzA1RUI4NzY3Q0RCMTFFREFCODQ0QzE5QzRGOUFFMDIvOTEyNTg2RkE3 RjRGMTFFRDk2RkRFMzY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAKn3OgwDQYJKoZIhvcNAQELBQADggEBAAJQjw3HWDs6Dtry YJ6tyCOARCxC2sPesj4XNdn99lzpUpZ0CCOWVG7d49yuktbBe16NjvTHstvvzQ68 wO3HogavDnlW1+eP2hYI6bMemo1i1YhhJTqm+U25kqyywOcXixo4f4z3syLR9k1f 2KqsqBpzUznLmD+rb7L2dzEdnN0UkW2QdWSaK2Q0uJ8pujxjGikvq3sEOaM5LIRd 2Dm+6xjcJSuNK12UfYe0Wo+8K8AqkVfugQNyRMnoUBea33vxTx/VjTQWcJE6AhuU pyrSbaVo0Y9W+1zBz1bneg+LJyQCODi8wu0Yzo1GHVtO+128JG9rnxXisz7EMaMu ys0/6WY= -----END CERTIFICATE-----Generated at Sun Dec 21 10:47:36 2025 by rpki-client