This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/7C0B5320D61411F0877B8D3FC4F9AE02.roa
File: 7C0B5320D61411F0877B8D3FC4F9AE02.roa (raw, json)
Hash identifier: sEqEu4ZHkgzDYvWJDII6WZOgnySzMlBVpuOMflPaWms=
Subject key identifier: F2:66:19:23:54:37:17:64:65:CC:BF:01:70:13:0D:D7:F1:74:EC:47
Certificate issuer: /CN=A91A5ED2/serialNumber=D904D552C0EF32F249ABA4597BD84A15EE5555C1
Certificate serial: 71
Authority key identifier: D9:04:D5:52:C0:EF:32:F2:49:AB:A4:59:7B:D8:4A:15:EE:55:55:C1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/7C0B5320D61411F0877B8D3FC4F9AE02.roa
Signing time: Sat 13 Dec 2025 06:45:15 +0000
ROA not before: Sat 13 Dec 2025 06:45:15 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 2764
IP address blocks: 160.250.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl
rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 05:52:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113 (0x71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5ED2, serialNumber=D904D552C0EF32F249ABA4597BD84A15EE5555C1
Validity
Not Before: Dec 13 06:45:15 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=693d0b7b-3e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c4:ef:4b:eb:a4:8b:47:cf:e2:78:ad:d2:80:
9a:20:45:d4:ed:dc:5d:31:3a:d8:1e:5c:0a:94:c4:
bc:8b:79:67:de:1d:01:bc:18:73:28:1b:37:6b:db:
61:7b:f5:c3:43:3f:86:e8:58:9e:79:63:f7:3f:0d:
81:1c:51:2e:fa:5a:1f:3e:97:ec:11:6e:a9:10:e6:
6f:a4:c1:1a:bb:1e:00:dd:70:9f:e9:ed:c5:f3:b9:
c3:ca:ed:28:aa:46:4a:38:3d:8f:ef:bc:f9:87:1d:
35:02:7d:f8:0d:39:61:90:9f:db:ed:75:c5:03:40:
bf:80:df:34:b9:ae:35:b8:25:d4:7d:df:df:61:27:
18:03:19:1e:65:04:90:c9:15:26:9e:a3:7b:5b:78:
57:10:aa:71:3f:de:16:2a:cd:3f:60:85:db:70:83:
f0:a1:87:3f:32:da:12:fb:5c:dd:19:28:10:04:73:
a8:7e:be:57:25:b1:90:c2:4c:f7:84:a9:1c:52:fe:
e6:e4:8e:9b:14:d6:fa:47:36:4f:f7:0b:53:63:ec:
25:8c:8d:b9:0e:06:7b:2a:a3:0e:f1:a5:42:6e:f9:
be:8a:96:97:dc:ca:7a:99:f9:d8:11:32:40:3c:58:
8d:5d:78:91:ba:4b:83:2f:b4:42:78:fa:b7:66:68:
58:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:66:19:23:54:37:17:64:65:CC:BF:01:70:13:0D:D7:F1:74:EC:47
X509v3 Authority Key Identifier:
keyid:D9:04:D5:52:C0:EF:32:F2:49:AB:A4:59:7B:D8:4A:15:EE:55:55:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/7C0B5320D61411F0877B8D3FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.157.0/24
Signature Algorithm: sha256WithRSAEncryption
03:57:72:fe:b4:76:da:ce:67:98:86:8c:e1:a0:72:d1:28:a7:
74:70:1a:11:ef:96:10:3c:94:22:65:ed:30:fe:e5:35:b7:63:
97:86:76:8e:83:c2:60:9c:bf:b0:02:81:4a:ed:76:e5:fb:c2:
89:e9:b3:85:6a:6c:ac:db:3a:d4:86:90:d9:71:75:69:c8:cf:
39:1f:cc:78:1f:fe:3a:76:47:21:55:bb:bd:03:2e:35:2b:32:
c5:8f:35:99:11:6c:d0:64:c6:42:8d:a8:f3:da:4e:92:ea:16:
e4:cd:30:62:c4:4f:a5:d8:ca:ac:eb:56:12:43:89:12:d4:6c:
bf:38:05:03:8e:b3:da:06:45:ea:3e:f4:1c:60:e6:01:0e:cf:
9d:91:7c:3c:05:a7:b6:5f:4b:b6:59:6c:98:aa:9e:0d:0e:7c:
48:61:dc:40:23:de:ed:93:c0:ef:fd:e0:84:34:fd:69:3c:7e:
93:7f:52:30:c7:20:07:19:be:2b:5a:bf:23:2b:0c:4b:0b:51:
35:47:e7:02:71:2a:0a:42:f0:89:98:fb:10:53:f5:e1:7b:e6:
cf:30:f5:61:4f:d8:0d:56:ec:a1:c6:43:6f:b1:4c:79:3c:68:
54:4a:e7:89:19:cd:64:e9:89:5f:3d:6a:d8:26:e3:ee:9b:a2:
f6:ea:fa:a0
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
NUVEMjExMC8GA1UEBRMoRDkwNEQ1NTJDMEVGMzJGMjQ5QUJBNDU5N0JEODRBMTVF
RTU1NTVDMTAeFw0yNTEyMTMwNjQ1MTVaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV
BAMMDTY5M2QwYjdiLTNlNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDLxO9L66SLR8/ieK3SgJogRdTt3F0xOtgeXAqUxLyLeWfeHQG8GHMoGzdr22F7
9cNDP4boWJ55Y/c/DYEcUS76Wh8+l+wRbqkQ5m+kwRq7HgDdcJ/p7cXzucPK7Siq
Rko4PY/vvPmHHTUCffgNOWGQn9vtdcUDQL+A3zS5rjW4JdR9399hJxgDGR5lBJDJ
FSaeo3tbeFcQqnE/3hYqzT9ghdtwg/Chhz8y2hL7XN0ZKBAEc6h+vlclsZDCTPeE
qRxS/ubkjpsU1vpHNk/3C1Nj7CWMjbkOBnsqow7xpUJu+b6KlpfcynqZ+dgRMkA8
WI1deJG6S4MvtEJ4+rdmaFgPAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU8mYZI1Q3
F2RlzL8BcBMN1/F07EcwHwYDVR0jBBgwFoAU2QTVUsDvMvJJq6RZe9hKFe5VVcEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1RUQyL0YyNDVCMkQ2MzEx
QjExRjBBMkY1MTE2MEM0RjlBRTAyLzJRVFZVc0R2TXZKSnE2UlplOWhLRmU1VlZj
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvMlFUVlVzRHZNdkpKcTZSWmU5aEtGZTVWVmNFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NUVEMi9GMjQ1QjJENjMxMUIxMUYwQTJGNTExNjBDNEY5QUUwMi83QzBCNTMyMEQ2
MTQxMUYwODc3QjhEM0ZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKD6nTANBgkqhkiG9w0BAQsFAAOCAQEAA1dy/rR22s5nmIaM
4aBy0SindHAaEe+WEDyUImXtMP7lNbdjl4Z2joPCYJy/sAKBSu125fvCiemzhWps
rNs61IaQ2XF1acjPOR/MeB/+OnZHIVW7vQMuNSsyxY81mRFs0GTGQo2o89pOkuoW
5M0wYsRPpdjKrOtWEkOJEtRsvzgFA46z2gZF6j70HGDmAQ7PnZF8PAWntl9Ltlls
mKqeDQ58SGHcQCPe7ZPA7/3ghDT9aTx+k39SMMcgBxm+K1q/IysMSwtRNUfnAnEq
CkLwiZj7EFP14XvmzzD1YU/YDVbsocZDb7FMeTxoVErniRnNZOmJXz1q2Cbj7pui
9ur6oA==
-----END CERTIFICATE-----
Generated at Fri Dec 19 09:40:04 2025 by rpki-client