This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/992A7358004211F0AC90656CC4F9AE02.roa File: 992A7358004211F0AC90656CC4F9AE02.roa (raw, json) Hash identifier: rg22dLtvUVEIca2HHu+lw9opygD3mcPgsF/jKiaHrGE= Subject key identifier: CC:8B:B5:65:4E:3E:48:15:38:0C:B5:84:9E:92:A5:9C:3E:DE:A3:96 Certificate issuer: /CN=A91C146D/serialNumber=664E59A000B91E72F803E6D86841154C8056B88A Certificate serial: 9B Authority key identifier: 66:4E:59:A0:00:B9:1E:72:F8:03:E6:D8:68:41:15:4C:80:56:B8:8A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/992A7358004211F0AC90656CC4F9AE02.roa Signing time: Wed 17 Dec 2025 06:25:06 +0000 ROA not before: Wed 17 Dec 2025 06:25:06 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 138590 IP address blocks: 160.191.208.0/24 maxlen: 24 160.191.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.crl rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:25:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C146D, serialNumber=664E59A000B91E72F803E6D86841154C8056B88A Validity Not Before: Dec 17 06:25:06 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69424cc2-95ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:3e:41:06:36:1d:c2:09:07:09:4b:27:52:81: e4:71:53:81:df:03:b2:16:20:05:56:73:25:fc:61: 90:9f:07:4c:70:ed:b2:24:a1:12:3f:79:4b:f3:72: 04:31:eb:38:b1:66:2e:22:11:6d:68:ec:6f:d5:61: 17:2d:ba:50:2c:5f:31:ec:5a:a8:fc:46:a8:51:65: 73:c3:2d:36:2e:3b:cb:f4:6a:d9:44:fc:1c:63:d3: 09:94:d4:bc:95:20:93:e7:a5:e7:cf:22:48:2a:c9: 15:61:d0:d1:bb:97:1b:c3:95:01:78:a1:20:d1:a5: 3d:d9:a1:82:d1:1d:d4:bf:92:c6:6b:02:d5:08:ef: 30:aa:85:ed:35:3f:f3:1c:c6:66:94:62:a8:c8:3a: d2:ef:9b:3c:ac:29:fc:6b:2f:53:16:99:bd:c3:8b: 36:e0:b9:d0:de:6e:ee:00:e1:84:a3:5b:8a:71:81: af:a6:f7:4c:b0:aa:ff:b5:92:ae:5b:27:19:0d:12: 2e:e7:b9:53:c9:e2:e6:08:f9:62:e9:a0:5b:49:63: 4b:0e:03:cd:87:39:2e:52:7b:9d:22:2d:4a:b8:c0: 8e:4a:7d:c3:61:43:fe:2e:ea:b0:fa:be:6b:03:fc: f5:1a:d5:d6:e9:67:29:94:0a:4f:d0:77:95:48:d4: c0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:8B:B5:65:4E:3E:48:15:38:0C:B5:84:9E:92:A5:9C:3E:DE:A3:96 X509v3 Authority Key Identifier: keyid:66:4E:59:A0:00:B9:1E:72:F8:03:E6:D8:68:41:15:4C:80:56:B8:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/992A7358004211F0AC90656CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.208.0/23 Signature Algorithm: sha256WithRSAEncryption 53:9a:9e:99:14:fb:2b:3b:5d:19:94:bf:19:00:fd:b1:aa:93: cc:93:62:19:99:07:19:f6:4e:01:2d:20:f3:1f:0f:a7:51:9f: 34:bf:e5:1b:40:78:e2:5c:92:a8:e8:34:3b:f1:17:95:09:f6: 12:5b:9a:e7:d7:7e:40:b7:17:56:02:ab:9a:db:b7:be:02:9b: b1:7a:00:08:d7:5f:d4:66:23:1e:e4:a4:9b:bc:92:ed:51:73: 6e:c0:a0:23:cc:7d:36:f1:82:59:89:65:2c:3e:1a:66:90:96: 9a:1a:59:df:32:24:4b:c4:d3:bd:05:37:c0:fc:ff:f2:d6:b2: 6c:9e:d2:4d:ee:b6:f3:47:4a:2f:15:e0:b9:e7:06:78:91:dc: 22:99:48:a0:2e:1f:64:2c:bc:91:b8:1b:0a:5d:31:1d:11:b2: 47:e6:30:3b:bd:2e:75:f9:6c:cd:7d:4d:35:af:cb:cc:e1:62: a6:39:8d:53:ba:06:cb:e4:de:d4:9a:98:14:ec:67:76:4e:92: 67:cb:72:b3:58:11:7e:ac:70:dc:38:a5:df:b9:43:66:a5:60: 22:70:e9:8b:38:a2:62:26:d4:2b:30:e9:41:f5:ea:68:f3:13: 95:06:8a:32:73:15:5c:a9:47:42:7b:7c:59:1b:84:6e:98:07: b6:d6:d3:5a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE0NkQxMTAvBgNVBAUTKDY2NEU1OUEwMDBCOTFFNzJGODAzRTZEODY4NDExNTRD ODA1NkI4OEEwHhcNMjUxMjE3MDYyNTA2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTQyNGNjMi05NWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+T5BBjYdwgkHCUsnUoHkcVOB3wOyFiAFVnMl/GGQnwdMcO2yJKESP3lL83IE Mes4sWYuIhFtaOxv1WEXLbpQLF8x7Fqo/EaoUWVzwy02LjvL9GrZRPwcY9MJlNS8 lSCT56XnzyJIKskVYdDRu5cbw5UBeKEg0aU92aGC0R3Uv5LGawLVCO8wqoXtNT/z HMZmlGKoyDrS75s8rCn8ay9TFpm9w4s24LnQ3m7uAOGEo1uKcYGvpvdMsKr/tZKu WycZDRIu57lTyeLmCPli6aBbSWNLDgPNhzkuUnudIi1KuMCOSn3DYUP+Luqw+r5r A/z1GtXW6WcplApP0HeVSNTAswIDAQABo4IClTCCApEwHQYDVR0OBBYEFMyLtWVO PkgVOAy1hJ6SpZw+3qOWMB8GA1UdIwQYMBaAFGZOWaAAuR5y+APm2GhBFUyAVriK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTQ2RC9FQ0IwMEI0MjAw MzcxMUYwQkJENzI0NzVDNEY5QUUwMi9aazVab0FDNUhuTDRBLWJZYUVFVlRJQld1 SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1prNVpvQUM1SG5MNEEtYllhRUVWVElCV3VJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzE0NkQvRUNCMDBCNDIwMDM3MTFGMEJCRDcyNDc1QzRGOUFFMDIvOTkyQTczNTgw MDQyMTFGMEFDOTA2NTZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgv9AwDQYJKoZIhvcNAQELBQADggEBAFOanpkU+ys7XRmU vxkA/bGqk8yTYhmZBxn2TgEtIPMfD6dRnzS/5RtAeOJckqjoNDvxF5UJ9hJbmufX fkC3F1YCq5rbt74Cm7F6AAjXX9RmIx7kpJu8ku1Rc27AoCPMfTbxglmJZSw+GmaQ lpoaWd8yJEvE070FN8D8//LWsmye0k3utvNHSi8V4LnnBniR3CKZSKAuH2QsvJG4 GwpdMR0RskfmMDu9LnX5bM19TTWvy8zhYqY5jVO6Bsvk3tSamBTsZ3ZOkmfLcrNY EX6scNw4pd+5Q2alYCJw6Ys4omIm1Csw6UH16mjzE5UGijJzFVypR0J7fFkbhG6Y B7bW01o= -----END CERTIFICATE-----Generated at Wed Dec 24 22:05:27 2025 by rpki-client