This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/8CBB3EA2D06911F09735DD48C4F9AE02.roa
File: 8CBB3EA2D06911F09735DD48C4F9AE02.roa (raw, json)
Hash identifier: gqj4jtEMDN4bcyseFHh+di3mjZVrlGI2+shg14Tz6Ac=
Subject key identifier: CB:03:C9:F1:7D:3D:68:04:92:E5:23:0E:A6:93:C2:A8:B0:01:0B:6C
Certificate issuer: /CN=A91100B2/serialNumber=BC42188A48A7A99F96D6AFB2011E7DC9DEEE22A5
Certificate serial: 54
Authority key identifier: BC:42:18:8A:48:A7:A9:9F:96:D6:AF:B2:01:1E:7D:C9:DE:EE:22:A5
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/8CBB3EA2D06911F09735DD48C4F9AE02.roa
Signing time: Thu 04 Dec 2025 03:35:25 +0000
ROA not before: Thu 04 Dec 2025 03:35:25 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 140570
IP address blocks: 79.109.236.0/22 maxlen: 22
79.109.236.0/24 maxlen: 24
79.109.237.0/24 maxlen: 24
79.109.238.0/24 maxlen: 24
79.109.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.crl
rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:11:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84 (0x54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91100B2, serialNumber=BC42188A48A7A99F96D6AFB2011E7DC9DEEE22A5
Validity
Not Before: Dec 4 03:35:25 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6931017d-ecbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:52:5f:8c:60:07:9c:e1:db:9e:12:f3:ef:98:
3a:0d:07:66:d5:89:39:63:53:2c:bd:85:cd:1d:14:
3e:ea:2b:ee:c5:14:b8:c6:c9:d3:65:e4:79:20:f6:
91:18:e2:b1:ab:1d:2d:89:8e:aa:f8:b7:e0:43:1d:
fd:e4:0d:10:26:40:c0:0e:e2:86:15:9f:ba:4f:9e:
4e:dc:7c:01:54:f0:91:38:6f:71:67:9c:a8:67:48:
d8:3a:be:f4:42:65:a2:44:26:7e:0e:5c:75:a3:20:
5c:d5:4c:d9:1c:75:10:e4:91:91:68:bd:a1:02:a7:
fb:81:bb:60:4e:f1:3a:50:b4:91:29:5c:76:d0:3a:
3e:33:9f:3f:4f:89:92:9b:43:00:6d:41:89:ae:0d:
2c:13:7d:61:1f:58:75:1b:b1:b3:0c:87:52:67:a7:
82:69:a7:c4:6f:48:49:72:bb:b2:1e:ac:bd:79:57:
28:8b:ce:d9:47:a9:c3:dc:a1:1f:2a:5d:ef:11:02:
df:ee:75:22:06:da:94:6f:d2:4b:af:a1:bf:f8:58:
12:b0:50:3d:ff:e0:a3:13:11:c4:5d:7a:d2:48:3d:
d2:a8:01:06:a4:f4:72:a0:e9:52:c3:f2:dc:11:5a:
df:3e:e4:ab:55:9c:fb:5a:ae:81:17:9a:c7:d7:a7:
13:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:03:C9:F1:7D:3D:68:04:92:E5:23:0E:A6:93:C2:A8:B0:01:0B:6C
X509v3 Authority Key Identifier:
keyid:BC:42:18:8A:48:A7:A9:9F:96:D6:AF:B2:01:1E:7D:C9:DE:EE:22:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/8CBB3EA2D06911F09735DD48C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
79.109.236.0/22
Signature Algorithm: sha256WithRSAEncryption
03:f9:63:dd:5a:11:70:52:3e:3f:e5:6b:ce:32:98:e7:cf:28:
d2:27:09:e2:d5:e1:3e:1e:63:f5:2d:72:07:33:86:30:d0:74:
2b:a3:11:3e:92:3d:ac:69:48:1c:c5:0b:ad:2c:38:20:bf:ab:
2f:87:ab:01:97:84:7a:86:b2:23:3c:e1:54:e0:67:29:69:fb:
d1:a2:57:e5:6f:f7:6a:46:51:4a:f5:48:b3:b1:87:dd:2d:7c:
f6:fe:94:f0:d3:7a:f6:72:1a:46:f9:87:3a:4f:75:4a:4a:22:
c3:24:85:3d:47:2d:33:10:7d:f8:88:bc:ae:b0:a0:0f:bb:b1:
7d:04:f2:e3:76:90:0e:fa:ab:06:80:ad:e6:22:d7:34:d0:65:
4b:42:2c:6a:f7:4a:a3:fa:15:88:e5:ee:21:dc:37:81:28:ad:
e0:0e:d5:61:a0:21:69:31:90:6a:37:ce:62:54:53:4b:a8:c9:
8a:a3:87:89:5e:29:36:88:da:fa:34:e0:18:74:e0:2f:da:7a:
39:50:7b:16:2e:56:52:42:02:be:24:97:ca:3a:68:af:e8:38:
03:73:e9:d1:43:d0:b1:32:6d:cb:de:fd:d1:ba:02:c7:3d:03:
93:95:10:35:7b:4e:e1:23:67:38:d1:e5:5f:17:c8:7c:52:fa:
5b:2e:35:b1
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
MDBCMjExMC8GA1UEBRMoQkM0MjE4OEE0OEE3QTk5Rjk2RDZBRkIyMDExRTdEQzlE
RUVFMjJBNTAeFw0yNTEyMDQwMzM1MjVaFw0yNjEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5MzEwMTdkLWVjYmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDGUl+MYAec4dueEvPvmDoNB2bViTljUyy9hc0dFD7qK+7FFLjGydNl5Hkg9pEY
4rGrHS2Jjqr4t+BDHf3kDRAmQMAO4oYVn7pPnk7cfAFU8JE4b3FnnKhnSNg6vvRC
ZaJEJn4OXHWjIFzVTNkcdRDkkZFovaECp/uBu2BO8TpQtJEpXHbQOj4znz9PiZKb
QwBtQYmuDSwTfWEfWHUbsbMMh1Jnp4Jpp8RvSElyu7IerL15VyiLztlHqcPcoR8q
Xe8RAt/udSIG2pRv0kuvob/4WBKwUD3/4KMTEcRdetJIPdKoAQak9HKg6VLD8twR
Wt8+5KtVnPtaroEXmsfXpxPBAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUywPJ8X09
aASS5SMOppPCqLABC2wwHwYDVR0jBBgwFoAUvEIYikinqZ+W1q+yAR59yd7uIqUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEwMEIyLzcyMUYzQzlDQTYx
QjExRjBBQzk5NTgzM0M0RjlBRTAyL3ZFSVlpa2lucVotVzFxLXlBUjU5eWQ3dUlx
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvdkVJWWlraW5xWi1XMXEteUFSNTl5ZDd1SXFVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MDBCMi83MjFGM0M5Q0E2MUIxMUYwQUM5OTU4MzNDNEY5QUUwMi84Q0JCM0VBMkQw
NjkxMUYwOTczNURENDhDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAk9t7DANBgkqhkiG9w0BAQsFAAOCAQEAA/lj3VoRcFI+P+Vr
zjKY588o0icJ4tXhPh5j9S1yBzOGMNB0K6MRPpI9rGlIHMULrSw4IL+rL4erAZeE
eoayIzzhVOBnKWn70aJX5W/3akZRSvVIs7GH3S189v6U8NN69nIaRvmHOk91Skoi
wySFPUctMxB9+Ii8rrCgD7uxfQTy43aQDvqrBoCt5iLXNNBlS0IsavdKo/oViOXu
Idw3gSit4A7VYaAhaTGQajfOYlRTS6jJiqOHiV4pNoja+jTgGHTgL9p6OVB7Fi5W
UkICviSXyjpor+g4A3Pp0UPQsTJty9790boCxz0Dk5UQNXtO4SNnONHlXxfIfFL6
Wy41sQ==
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:52:28 2025 by rpki-client