This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/FAF865AACB6B11F0A831E06BC4F9AE02.roa File: FAF865AACB6B11F0A831E06BC4F9AE02.roa (raw, json) Hash identifier: 38sgRw7lbQYMoiP7J/pdM87ivbZafpdULxwddXG9uZM= Subject key identifier: EF:5F:98:C7:5B:03:B0:E5:8E:7D:67:59:CC:A8:47:41:17:DE:A3:DC Certificate issuer: /CN=A9168494/serialNumber=B13EA4934F41FC4834CD2A6FF8218D40F7A97789 Certificate serial: 02EF Authority key identifier: B1:3E:A4:93:4F:41:FC:48:34:CD:2A:6F:F8:21:8D:40:F7:A9:77:89 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/FAF865AACB6B11F0A831E06BC4F9AE02.roa Signing time: Thu 27 Nov 2025 08:35:08 +0000 ROA not before: Thu 27 Nov 2025 08:35:08 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 23862 IP address blocks: 165.220.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.crl rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 23:57:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 751 (0x2ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168494, serialNumber=B13EA4934F41FC4834CD2A6FF8218D40F7A97789 Validity Not Before: Nov 27 08:35:08 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69280d3c-e6c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:72:71:6a:8a:17:2c:e4:b5:af:14:a7:fa:61: e7:12:b7:18:37:00:20:5e:da:f9:cc:e5:e1:d8:78: 97:27:22:0a:d8:3e:86:1f:ba:bf:58:4f:8d:66:49: e4:17:ed:05:1e:da:0c:5b:0a:10:9a:4f:1a:3b:01: 93:8a:c9:88:47:21:c2:e5:15:b9:28:f9:bc:5b:d3: b7:0c:4e:09:83:8f:d6:c9:bf:73:2e:5e:28:2d:71: 67:a4:96:51:34:a7:c4:71:96:23:66:a6:11:49:9c: 84:fc:dc:d6:58:82:3b:1f:ae:1c:b7:b8:55:46:2c: 5c:7b:51:00:28:62:22:a6:a4:ef:bd:1a:92:2c:42: 82:65:7d:8f:21:61:99:e2:20:18:5a:1c:54:6c:81: d9:ce:1e:bc:11:e1:36:8e:d1:17:7b:98:5f:5c:80: 2b:76:4f:fd:3e:77:de:5d:17:db:e2:d0:c0:e1:22: f2:e1:9b:3e:59:62:2a:ec:fc:a6:bc:41:2d:53:22: 6d:9d:ec:90:7a:1a:bc:1d:2b:f9:25:a2:42:c4:93: bf:1f:d4:a4:a8:19:9b:4b:1f:16:a9:9c:d6:e0:07: 7d:19:a5:42:45:82:ae:a6:a4:12:7d:91:ef:fb:b1: ca:0b:8a:1e:1d:d1:1e:54:f5:af:5b:6e:d3:00:9d: 56:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:5F:98:C7:5B:03:B0:E5:8E:7D:67:59:CC:A8:47:41:17:DE:A3:DC X509v3 Authority Key Identifier: keyid:B1:3E:A4:93:4F:41:FC:48:34:CD:2A:6F:F8:21:8D:40:F7:A9:77:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/FAF865AACB6B11F0A831E06BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 165.220.16.0/21 Signature Algorithm: sha256WithRSAEncryption 2e:82:1e:1a:9a:f9:dc:a6:88:18:3f:2e:fa:0d:f6:97:62:d2: 46:8c:d0:b7:0b:b8:5e:9c:a2:70:10:29:21:63:8f:64:af:0f: c6:a2:37:83:e4:ad:c8:b8:a3:3e:00:83:1b:74:08:72:d4:75: 06:71:b4:a4:06:70:b8:ca:4a:e3:b2:60:9f:8a:f7:64:5c:2e: 38:00:e8:62:02:1a:c9:ff:82:f9:dc:ce:0c:10:95:5d:68:f0: ab:cc:a4:40:c5:4d:cf:4f:d3:b2:bc:ca:09:db:b6:d3:62:55: 0c:72:06:06:16:1e:c5:2e:0e:76:54:48:77:cc:37:9a:9d:02: 6f:ef:b4:eb:35:c9:1c:3b:49:09:6a:6b:ad:fb:54:c5:08:68: 72:9c:93:a1:2f:cb:a8:17:22:c3:f8:7b:6d:fb:70:7e:d4:f7: a4:ab:9c:64:88:3f:53:0a:b9:50:bf:cd:c3:e6:95:dc:67:29: bf:cd:04:1a:7c:34:a8:07:35:8f:b9:db:66:2e:44:07:fc:ee: 65:86:ad:a4:a5:26:98:21:fa:aa:19:4e:08:08:7d:63:e3:f0: 13:aa:b7:9a:27:fc:07:8f:ff:e2:d5:ef:3f:f0:88:63:52:cc: e1:d4:58:64:e3:bf:24:51:96:b2:99:31:7a:ff:57:95:4b:9d: 15:ac:45:d2 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg0OTQxMTAvBgNVBAUTKEIxM0VBNDkzNEY0MUZDNDgzNENEMkE2RkY4MjE4RDQw RjdBOTc3ODkwHhcNMjUxMTI3MDgzNTA4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTI4MGQzYy1lNmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxHJxaooXLOS1rxSn+mHnErcYNwAgXtr5zOXh2HiXJyIK2D6GH7q/WE+NZknk F+0FHtoMWwoQmk8aOwGTismIRyHC5RW5KPm8W9O3DE4Jg4/Wyb9zLl4oLXFnpJZR NKfEcZYjZqYRSZyE/NzWWII7H64ct7hVRixce1EAKGIipqTvvRqSLEKCZX2PIWGZ 4iAYWhxUbIHZzh68EeE2jtEXe5hfXIArdk/9PnfeXRfb4tDA4SLy4Zs+WWIq7Pym vEEtUyJtneyQehq8HSv5JaJCxJO/H9SkqBmbSx8WqZzW4Ad9GaVCRYKupqQSfZHv +7HKC4oeHdEeVPWvW27TAJ1WQQIDAQABo4IClTCCApEwHQYDVR0OBBYEFO9fmMdb A7Dljn1nWcyoR0EX3qPcMB8GA1UdIwQYMBaAFLE+pJNPQfxINM0qb/ghjUD3qXeJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODQ5NC8zMUI4MjYzQzA5 OTMxMUVEQjIxQzlCNEJDNEY5QUUwMi9zVDZrazA5Ql9FZzB6U3B2LUNHTlFQZXBk NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3NUNmtrMDlCX0VnMHpTcHYtQ0dOUVBlcGQ0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njg0OTQvMzFCODI2M0MwOTkzMTFFREIyMUM5QjRCQzRGOUFFMDIvRkFGODY1QUFD QjZCMTFGMEE4MzFFMDZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAOl3BAwDQYJKoZIhvcNAQELBQADggEBAC6CHhqa+dymiBg/ LvoN9pdi0kaM0LcLuF6conAQKSFjj2SvD8aiN4Pkrci4oz4Agxt0CHLUdQZxtKQG cLjKSuOyYJ+K92RcLjgA6GICGsn/gvnczgwQlV1o8KvMpEDFTc9P07K8ygnbttNi VQxyBgYWHsUuDnZUSHfMN5qdAm/vtOs1yRw7SQlqa637VMUIaHKck6Evy6gXIsP4 e237cH7U96SrnGSIP1MKuVC/zcPmldxnKb/NBBp8NKgHNY+522YuRAf87mWGraSl Jpgh+qoZTggIfWPj8BOqt5on/AeP/+LV7z/wiGNSzOHUWGTjvyRRlrKZMXr/V5VL nRWsRdI= -----END CERTIFICATE-----Generated at Wed Dec 3 15:26:48 2025 by rpki-client