This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/FFB52996ED3C11F08785EF274C6F56BC.roa File: FFB52996ED3C11F08785EF274C6F56BC.roa (raw, json) Hash identifier: AZqY4Lef3JKoIQQHHACuPs5LI9W875UJ2ruwGwpXaCM= Subject key identifier: 82:76:2C:9B:50:18:58:C5:A5:78:A4:0F:16:F5:79:CF:7A:7B:FF:6F Certificate issuer: /CN=A91529DF/serialNumber=9E6CFAAB94B42B217601E1330A027822B9CA1FB9 Certificate serial: 03 Authority key identifier: 9E:6C:FA:AB:94:B4:2B:21:76:01:E1:33:0A:02:78:22:B9:CA:1F:B9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/FFB52996ED3C11F08785EF274C6F56BC.roa Signing time: Fri 09 Jan 2026 09:24:29 +0000 ROA not before: Fri 09 Jan 2026 09:24:29 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 45474 IP address blocks: 167.179.200.0/21 maxlen: 21 167.179.200.0/24 maxlen: 24 167.179.201.0/24 maxlen: 24 167.179.202.0/24 maxlen: 24 167.179.203.0/24 maxlen: 24 167.179.204.0/24 maxlen: 24 167.179.205.0/24 maxlen: 24 167.179.206.0/24 maxlen: 24 167.179.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.crl rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 07:06:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91529DF, serialNumber=9E6CFAAB94B42B217601E1330A027822B9CA1FB9 Validity Not Before: Jan 9 09:24:29 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=6960c94d-433e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8f:f7:94:34:db:94:78:17:38:05:dc:7d:08: 2c:05:e7:69:66:ab:79:00:5e:a2:4c:9f:ae:8f:27: 98:0e:16:49:16:fa:b1:52:81:6a:64:a9:52:98:18: 34:0d:2d:2d:9e:0f:3b:88:27:f9:1e:bf:c5:55:b0: ac:06:d7:b4:50:69:72:1b:a8:4c:c3:fd:04:38:1b: d7:d9:8a:84:fb:64:5f:f0:56:c4:f4:0c:89:7c:81: c2:99:1e:09:b2:06:af:04:1b:2b:60:d6:62:c1:0c: 9e:cd:03:b8:68:b3:1c:49:2d:e4:da:be:19:63:ea: 07:7f:01:f2:0b:a1:1b:ae:1e:9a:03:5b:a2:86:53: 15:7c:cf:4f:0e:92:c3:73:cd:06:a3:00:5b:d6:18: 56:e1:1e:d9:c0:60:8b:fd:de:80:3d:71:89:7d:d8: 12:c9:16:1f:ac:3d:c8:62:ca:99:f0:bd:d4:dc:65: 57:bc:5d:81:4b:81:db:95:10:6b:74:7b:54:c0:63: 21:51:94:5d:1e:29:f6:98:79:e4:f1:d6:47:93:f9: 0a:6d:b0:06:5d:57:95:37:91:0a:58:12:d2:33:60: 46:ce:e3:27:d3:0c:83:9c:af:c7:6d:58:f3:af:be: 0b:cd:9f:3a:ae:76:4a:ae:98:9f:84:de:4f:c8:b0: 84:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:76:2C:9B:50:18:58:C5:A5:78:A4:0F:16:F5:79:CF:7A:7B:FF:6F X509v3 Authority Key Identifier: keyid:9E:6C:FA:AB:94:B4:2B:21:76:01:E1:33:0A:02:78:22:B9:CA:1F:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/FFB52996ED3C11F08785EF274C6F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 167.179.200.0/21 Signature Algorithm: sha256WithRSAEncryption 48:a6:35:22:72:cf:a9:b9:64:9a:96:c9:d7:55:7e:99:06:02: 2d:ba:89:fc:81:be:97:2a:3b:3b:16:d5:eb:8d:c7:11:3d:71: c8:ac:c6:02:a5:ca:f9:2b:38:bf:dc:77:06:89:da:6e:d2:42: fa:40:8a:d4:93:0b:89:46:61:a5:4a:fc:bf:10:d9:10:ed:24: 55:dc:31:35:61:62:fa:71:0f:a1:f9:e9:a7:6a:9b:a3:da:b5: 1c:3f:9e:e6:85:4f:85:b4:e6:fe:f9:42:11:9d:e0:28:97:bd: 74:17:e2:ff:d9:4e:f1:29:b4:49:c2:f5:d7:44:7b:ab:86:ca: 67:84:9a:dd:15:9b:75:59:1c:d0:37:ed:db:c0:e2:bf:1d:4c: 25:58:13:17:db:01:ea:9b:d8:40:3a:1c:58:4b:95:08:7d:bb: 81:fc:bf:fe:b3:2b:17:11:30:02:b6:dc:cb:f8:55:1b:1d:1e: 0a:df:7e:32:9b:0e:62:f5:27:e4:ce:33:8f:3b:fa:ba:16:fd: 75:99:42:d9:4e:dd:75:05:c8:e8:26:17:1e:7f:e9:43:ba:5b: d6:9c:78:9a:e2:6f:68:05:73:56:5e:52:7f:1a:c5:f8:59:de: da:b2:17:ac:23:f5:64:16:5a:7c:15:84:14:65:de:e4:09:12: c3:16:3c:e6 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTE1 MjlERjExMC8GA1UEBRMoOUU2Q0ZBQUI5NEI0MkIyMTc2MDFFMTMzMEEwMjc4MjJC OUNBMUZCOTAeFw0yNjAxMDkwOTI0MjlaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV BAMMDTY5NjBjOTRkLTQzM2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtj/eUNNuUeBc4Bdx9CCwF52lmq3kAXqJMn66PJ5gOFkkW+rFSgWpkqVKYGDQN LS2eDzuIJ/kev8VVsKwG17RQaXIbqEzD/QQ4G9fZioT7ZF/wVsT0DIl8gcKZHgmy Bq8EGytg1mLBDJ7NA7hosxxJLeTavhlj6gd/AfILoRuuHpoDW6KGUxV8z08OksNz zQajAFvWGFbhHtnAYIv93oA9cYl92BLJFh+sPchiypnwvdTcZVe8XYFLgduVEGt0 e1TAYyFRlF0eKfaYeeTx1keT+QptsAZdV5U3kQpYEtIzYEbO4yfTDIOcr8dtWPOv vgvNnzqudkqumJ+E3k/IsISTAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUgnYsm1AY WMWleKQPFvV5z3p7/28wHwYDVR0jBBgwFoAUnmz6q5S0KyF2AeEzCgJ4IrnKH7kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUyOURGL0UyN0M5M0FFRUQy RTExRjA4MEM0NjAzMjQ3NkY1NkJDL25tejZxNVMwS3lGMkFlRXpDZ0o0SXJuS0g3 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbm16NnE1UzBLeUYyQWVFekNnSjRJcm5LSDdrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjlERi9FMjdDOTNBRUVEMkUxMUYwODBDNDYwMzI0NzZGNTZCQy9GRkI1Mjk5NkVE M0MxMUYwODc4NUVGMjc0QzZGNTZCQy5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEA6ezyDANBgkqhkiG9w0BAQsFAAOCAQEASKY1InLPqblkmpbJ 11V+mQYCLbqJ/IG+lyo7OxbV643HET1xyKzGAqXK+Ss4v9x3BonabtJC+kCK1JML iUZhpUr8vxDZEO0kVdwxNWFi+nEPofnpp2qbo9q1HD+e5oVPhbTm/vlCEZ3gKJe9 dBfi/9lO8Sm0ScL110R7q4bKZ4Sa3RWbdVkc0Dft28Divx1MJVgTF9sB6pvYQDoc WEuVCH27gfy//rMrFxEwArbcy/hVGx0eCt9+MpsOYvUn5M4zjzv6uhb9dZlC2U7d dQXI6CYXHn/pQ7pb1px4muJvaAVzVl5SfxrF+Fne2rIXrCP1ZBZafBWEFGXe5AkS wxY85g== -----END CERTIFICATE-----Generated at Sun Jan 18 04:30:30 2026 by rpki-client