This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/45FFCD9AD6E511EE9E963F62C4F9AE02.roa File: 45FFCD9AD6E511EE9E963F62C4F9AE02.roa (raw, json) Hash identifier: XMDhcduFX+9tkhW48DPzOrrU9cMe3GRrYD4IDGbk2WA= Subject key identifier: 5E:7B:BE:0A:AA:A8:16:07:55:51:B8:84:43:32:FD:36:CC:BF:96:D6 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 0754 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/45FFCD9AD6E511EE9E963F62C4F9AE02.roa Signing time: Thu 25 Dec 2025 09:50:33 +0000 ROA not before: Thu 25 Dec 2025 09:50:33 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 135905 IP address blocks: 144.79.110.0/23 maxlen: 24 157.20.88.0/23 maxlen: 24 160.22.102.0/23 maxlen: 24 160.191.100.0/23 maxlen: 23 160.250.126.0/23 maxlen: 24 160.250.188.0/23 maxlen: 24 165.101.16.0/23 maxlen: 23 165.101.114.0/23 maxlen: 24 165.101.116.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Jan 2026 14:33:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1876 (0x754) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Dec 25 09:50:33 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=694d08e9-695d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:29:2e:ac:eb:24:f3:88:50:41:5e:ca:e9:02: 6e:14:ae:3b:62:f8:77:7e:c0:c2:b8:b2:ec:99:6f: 80:ac:14:87:14:db:d5:fc:07:e8:75:b0:d5:ee:73: e4:db:c9:59:fd:f8:59:e6:68:01:64:2a:e1:22:75: 58:33:b2:01:ce:9b:a0:9a:39:57:29:cf:e3:2f:7c: 06:0e:3e:10:ee:ad:af:ec:0e:7b:49:a0:6f:26:3b: 31:bd:ce:84:6d:00:4a:9b:b9:56:ca:8a:f2:6f:38: 68:55:d6:0f:a5:9a:5e:bb:8b:17:3c:f9:f5:a2:b3: 16:93:24:1b:bb:5a:cc:c8:31:f2:d1:cd:24:16:12: e9:15:19:ee:44:e1:af:e7:9c:d7:15:4b:33:75:96: 1a:71:9f:99:60:e6:6e:44:10:d3:a8:a2:01:ec:11: a6:d1:3d:b7:ad:c9:ff:77:23:51:d0:77:7f:45:0c: bc:18:72:1f:72:5f:d7:22:66:3b:51:be:b8:34:04: b1:a1:5d:d6:90:78:ff:95:55:fc:1c:56:4c:b6:7c: 67:5a:3d:59:00:bb:bf:82:f7:21:77:ba:23:85:4e: 60:b4:78:b3:97:83:74:da:b9:9d:46:ed:2c:9c:f7: 4f:48:13:be:51:39:e2:09:1d:50:ed:32:3e:ca:4a: 8b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:7B:BE:0A:AA:A8:16:07:55:51:B8:84:43:32:FD:36:CC:BF:96:D6 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/45FFCD9AD6E511EE9E963F62C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 144.79.110.0/23 157.20.88.0/23 160.22.102.0/23 160.191.100.0/23 160.250.126.0/23 160.250.188.0/23 165.101.16.0/23 165.101.114.0-165.101.117.255 Signature Algorithm: sha256WithRSAEncryption 6e:ca:12:dd:c8:ea:2b:4f:08:2a:6c:e9:bb:f7:31:c0:a3:e2: dd:61:63:6e:ca:c4:61:0a:32:25:48:f6:79:d9:92:4c:a0:69: 08:53:a1:52:9f:00:38:3a:aa:aa:f7:ed:c1:d4:79:c4:d8:b5: 2b:8f:29:fb:65:a6:a9:38:31:8b:03:a6:09:c6:e3:d3:14:8c: 7c:5f:33:d6:ce:84:0a:be:d5:12:50:0f:01:a7:72:ee:15:fd: dd:a2:98:c1:e0:01:fb:95:df:b7:ee:20:92:c1:20:46:74:5a: 1b:fd:f5:7b:c9:26:fa:7d:a1:42:48:0e:7e:b0:e5:81:bf:d8: 32:39:9b:12:87:fe:51:92:a2:62:8c:fc:2c:68:b8:20:6c:d9: 42:08:2c:92:ed:94:78:43:e2:d3:fd:57:4d:43:fe:db:93:99: e6:b4:d2:d8:43:b5:ed:64:98:2f:21:40:38:ca:c0:08:a2:35: 06:0a:ce:66:cc:8e:f6:62:69:b5:8e:1b:b4:25:77:44:42:9d: d8:3c:05:04:98:61:13:c1:a8:54:a8:29:cd:7d:a3:b5:d5:86: 24:d7:88:9b:7f:b2:6b:a5:10:7f:41:d5:54:56:4f:0e:14:34: 1b:7b:03:5a:aa:4e:73:5e:a7:02:86:02:ce:c8:cb:34:8b:1f: f5:82:2c:f4 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgICB1QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjUxMjI1MDk1MDMzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTRkMDhlOS02OTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqykurOsk84hQQV7K6QJuFK47Yvh3fsDCuLLsmW+ArBSHFNvV/AfodbDV7nPk 28lZ/fhZ5mgBZCrhInVYM7IBzpugmjlXKc/jL3wGDj4Q7q2v7A57SaBvJjsxvc6E bQBKm7lWyorybzhoVdYPpZpeu4sXPPn1orMWkyQbu1rMyDHy0c0kFhLpFRnuROGv 55zXFUszdZYacZ+ZYOZuRBDTqKIB7BGm0T23rcn/dyNR0Hd/RQy8GHIfcl/XImY7 Ub64NASxoV3WkHj/lVX8HFZMtnxnWj1ZALu/gvchd7ojhU5gtHizl4N02rmdRu0s nPdPSBO+UTniCR1Q7TI+ykqLwwIDAQABo4ICxzCCAsMwHQYDVR0OBBYEFF57vgqq qBYHVVG4hEMy/TbMv5bWMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvNDVGRkNEOUFE NkU1MTFFRTlFOTYzRjYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUQYIKwYBBQUHAQcBAf8E QjBAMD4EAgABMDgDBAGQT24DBAGdFFgDBAGgFmYDBAGgv2QDBAGg+n4DBAGg+rwD BAGlZRAwDAMEAaVlcgMEAaVldDANBgkqhkiG9w0BAQsFAAOCAQEAbsoS3cjqK08I Kmzpu/cxwKPi3WFjbsrEYQoyJUj2edmSTKBpCFOhUp8AODqqqvftwdR5xNi1K48p +2WmqTgxiwOmCcbj0xSMfF8z1s6ECr7VElAPAady7hX93aKYweAB+5Xft+4gksEg RnRaG/31e8km+n2hQkgOfrDlgb/YMjmbEof+UZKiYoz8LGi4IGzZQggsku2UeEPi 0/1XTUP+25OZ5rTS2EO17WSYLyFAOMrACKI1BgrOZsyO9mJptY4btCV3REKd2DwF BJhhE8GoVKgpzX2jtdWGJNeIm3+ya6UQf0HVVFZPDhQ0G3sDWqpOc16nAoYCzsjL NIsf9YIs9A== -----END CERTIFICATE-----Generated at Tue Dec 30 18:40:17 2025 by rpki-client