This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/7229FDDCDC3D11F08C062F6F696F56BC.roa
File: 7229FDDCDC3D11F08C062F6F696F56BC.roa (raw, json)
Hash identifier: AQ3RRlUnQ+bI7Mxuna8nU/0LJRi7LZKQd0nTc9fvglM=
Subject key identifier: DC:9C:46:CF:DE:61:8B:3A:E0:1B:3E:B4:B3:16:2B:07:3D:D1:AA:0C
Certificate issuer: /CN=A91C022C/serialNumber=3BA2558CA5F1A037D9696F567AE81367C6EE35E6
Certificate serial: AE
Authority key identifier: 3B:A2:55:8C:A5:F1:A0:37:D9:69:6F:56:7A:E8:13:67:C6:EE:35:E6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/7229FDDCDC3D11F08C062F6F696F56BC.roa
Signing time: Thu 18 Dec 2025 18:14:51 +0000
ROA not before: Thu 18 Dec 2025 18:14:51 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 153528
IP address blocks: 161.248.200.0/24 maxlen: 24
161.248.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.crl
rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 05:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174 (0xae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C022C, serialNumber=3BA2558CA5F1A037D9696F567AE81367C6EE35E6
Validity
Not Before: Dec 18 18:14:51 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=6944449b-726e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:85:58:39:85:c9:b5:95:d6:23:ec:9e:b8:b4:
0c:1a:e7:d4:9d:42:42:55:42:9e:ed:4e:7f:10:08:
55:1f:5a:59:43:37:32:fd:6e:0f:a9:ce:ee:7f:bb:
f4:a9:fc:c9:f3:15:62:f2:63:50:f3:b4:35:28:59:
2d:5a:9f:da:85:50:fa:e0:e5:f4:12:f7:3e:f8:59:
72:3f:19:b6:c0:66:58:18:35:cd:2e:a8:b8:13:d5:
df:60:47:0a:13:a6:7f:59:3b:bd:f0:39:5a:86:01:
04:f8:30:36:13:ff:25:71:5c:c7:f6:57:02:6e:3c:
9b:c9:22:ab:0d:85:02:6d:bb:c9:2e:e7:70:16:0a:
5d:50:04:09:3e:20:d5:44:f4:67:54:f7:d8:8e:70:
0a:15:b0:3f:3f:cc:82:e0:34:51:c1:0d:dc:15:00:
95:e3:89:78:a9:8d:4e:92:43:af:e7:17:dd:63:61:
a7:29:80:32:f6:ad:ad:fa:b7:bb:b4:f7:5d:06:0b:
a7:ff:b1:b2:d5:13:58:59:7d:15:3a:7e:b8:4d:fa:
be:f1:1e:f3:15:8e:a3:6a:17:10:df:a5:ef:94:55:
da:5e:74:3d:15:29:a4:92:fa:a1:5f:61:1b:73:09:
a0:39:c4:ad:bc:5d:59:9e:25:98:0e:8a:09:08:4f:
bf:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:9C:46:CF:DE:61:8B:3A:E0:1B:3E:B4:B3:16:2B:07:3D:D1:AA:0C
X509v3 Authority Key Identifier:
keyid:3B:A2:55:8C:A5:F1:A0:37:D9:69:6F:56:7A:E8:13:67:C6:EE:35:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/7229FDDCDC3D11F08C062F6F696F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.200.0/23
Signature Algorithm: sha256WithRSAEncryption
55:61:c1:78:af:3a:7a:04:64:05:2d:08:e7:44:76:dc:12:52:
46:e2:25:a7:7b:c2:a1:fe:a8:77:15:fa:47:78:1f:03:3e:09:
72:3f:24:66:45:24:98:1a:fd:bb:0e:cb:62:50:10:a2:3c:bc:
00:c6:46:95:f1:68:4f:7d:58:c8:20:ee:64:d6:4c:1d:44:39:
07:d3:e3:58:96:fa:2d:8a:1c:43:93:4f:f4:90:fb:31:85:10:
08:85:75:ee:e5:71:9f:c3:11:76:be:d5:39:a6:1c:50:58:6b:
1c:45:f8:f5:15:fe:ef:74:ba:2a:bb:f2:ef:e7:46:bc:ee:3f:
89:39:6c:a7:62:d1:fe:f0:ed:f3:f0:37:e6:e8:5a:c2:f2:69:
cc:13:e0:e2:4d:5b:82:78:e8:9c:9e:ba:ca:75:61:cd:73:36:
82:0e:0b:68:2e:4a:c3:e4:f8:f7:d8:6c:3a:e8:2a:7e:eb:43:
23:87:50:87:37:36:b5:5c:f2:5a:b4:27:e8:f6:fb:c9:4d:2b:
2b:0d:36:ce:3e:da:9e:30:fb:db:57:1e:8d:d3:fb:5b:f1:e6:
fb:bc:85:82:50:41:80:e0:79:24:0a:b7:dd:82:4e:66:7b:f7:
74:2d:12:76:4e:7a:69:c3:ed:70:37:85:39:3b:35:63:03:f4:
86:88:41:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 02:37:27 2025 by rpki-client