This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/F053A1CAC28B11EBBF310469C4F9AE02.roa File: F053A1CAC28B11EBBF310469C4F9AE02.roa (raw, json) Hash identifier: +baJ4IIlVuI0qFlzRCIAXw8ieoi3Maif+6sxqFCGNb8= Subject key identifier: 2A:7F:A2:00:1A:72:11:F0:10:29:56:68:24:63:AE:78:EE:78:1D:8B Certificate issuer: /CN=A916B18B/serialNumber=368F3C938B601412521A3A819009978FCFE91E7E Certificate serial: 17B4 Authority key identifier: 36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/F053A1CAC28B11EBBF310469C4F9AE02.roa Signing time: Thu 04 Dec 2025 16:15:57 +0000 ROA not before: Thu 04 Dec 2025 16:15:57 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 139034 IP address blocks: 161.49.149.0/24 maxlen: 24 161.49.193.0/24 maxlen: 24 161.49.195.0/24 maxlen: 24 161.49.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 16:10:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6068 (0x17b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B18B, serialNumber=368F3C938B601412521A3A819009978FCFE91E7E Validity Not Before: Dec 4 16:15:57 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6931b3bd-1d7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:39:9d:e0:f5:7c:09:66:a8:40:b5:d7:7e:e4: 76:fd:04:9f:8c:97:35:29:0b:20:3b:a9:f8:fe:f3: 15:dd:e4:ce:62:f4:0e:32:b8:1e:eb:63:27:e0:65: b4:e8:d8:fc:c7:ff:19:70:ea:7d:13:5c:c7:f0:7f: 11:6a:6c:3e:58:58:43:87:a1:0c:3e:77:eb:23:8b: 1a:65:96:aa:9f:df:8d:78:1c:1e:b4:3f:87:95:19: ac:ba:4c:10:fd:3a:50:79:9c:7c:89:60:30:99:ff: 53:a9:51:a0:08:1b:d2:89:46:fd:77:3a:23:27:90: 17:9b:8a:f6:38:3d:03:7c:99:f4:55:8a:20:f9:1f: c9:10:90:9a:e3:2b:cd:b5:4e:a5:fa:60:ed:e4:9f: 74:80:f6:6b:66:09:1e:35:77:b9:09:89:fa:d8:b3: 25:a0:25:66:72:06:bf:d7:d6:cf:c1:22:cf:64:2d: f8:47:35:de:64:7f:27:2a:bb:28:12:80:f5:8c:99: 37:45:78:88:ef:5b:90:54:40:7a:9b:7b:a3:c8:f4: 95:e0:75:8f:b8:c4:11:e6:5d:41:94:27:c3:39:d9: 6c:59:ba:4a:c6:78:78:21:32:0a:6a:64:61:39:00: 76:8d:fe:0d:13:92:27:17:54:91:38:a0:d4:61:c6: 6c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:7F:A2:00:1A:72:11:F0:10:29:56:68:24:63:AE:78:EE:78:1D:8B X509v3 Authority Key Identifier: keyid:36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/F053A1CAC28B11EBBF310469C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.49.149.0/24 161.49.193.0/24 161.49.195.0/24 161.49.198.0/24 Signature Algorithm: sha256WithRSAEncryption 77:d0:05:9e:72:d9:f2:7d:d1:ae:51:e3:b4:ad:53:78:47:60: da:f3:da:92:db:03:0c:3c:55:24:0a:e4:f9:02:8a:01:dc:b9: 72:9e:10:a9:08:01:0b:c4:49:09:cc:8c:c7:4b:23:b0:08:a3: b0:0c:1e:d9:15:0c:87:d2:30:f9:ee:b3:7f:6c:6a:d6:0a:4b: 99:88:b2:4b:33:77:ee:14:b2:08:89:ba:17:d6:b1:b1:c8:c0: c4:06:20:5e:b0:e2:45:f2:e7:32:c7:d6:71:bb:38:ef:17:ac: dc:ce:47:e1:9e:48:55:78:02:cb:05:d1:dd:7a:24:9a:3c:04: f0:0b:67:fe:4e:74:46:9c:81:9f:11:bb:94:fa:5b:6d:06:c2: 51:fb:9b:3a:17:9e:81:9e:97:d1:44:eb:83:17:72:ba:95:db: d4:5f:91:66:d6:08:18:17:b4:b2:10:aa:2e:49:a8:f5:70:94: 87:1a:dd:12:f0:75:e8:bc:31:f3:46:75:83:9a:f8:67:e7:17: 3d:ba:35:83:6b:26:8e:7a:01:8e:3e:ad:7b:31:92:ea:be:45: d3:55:b2:47:12:e4:19:ed:a0:52:04:5c:36:93:f9:80:d7:d3: 5d:bc:57:46:c0:99:be:99:f6:61:b3:4c:05:67:76:41:dd:2d: 6a:af:8f:77 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICF7QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIxOEIxMTAvBgNVBAUTKDM2OEYzQzkzOEI2MDE0MTI1MjFBM0E4MTkwMDk5NzhG Q0ZFOTFFN0UwHhcNMjUxMjA0MTYxNTU3WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTMxYjNiZC0xZDdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3jmd4PV8CWaoQLXXfuR2/QSfjJc1KQsgO6n4/vMV3eTOYvQOMrge62Mn4GW0 6Nj8x/8ZcOp9E1zH8H8Ramw+WFhDh6EMPnfrI4saZZaqn9+NeBwetD+HlRmsukwQ /TpQeZx8iWAwmf9TqVGgCBvSiUb9dzojJ5AXm4r2OD0DfJn0VYog+R/JEJCa4yvN tU6l+mDt5J90gPZrZgkeNXe5CYn62LMloCVmcga/19bPwSLPZC34RzXeZH8nKrso EoD1jJk3RXiI71uQVEB6m3ujyPSV4HWPuMQR5l1BlCfDOdlsWbpKxnh4ITIKamRh OQB2jf4NE5InF1SROKDUYcZsRQIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFCp/ogAa chHwEClWaCRjrnjueB2LMB8GA1UdIwQYMBaAFDaPPJOLYBQSUho6gZAJl4/P6R5+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjE4Qi9GOThCNUYwQzIx RjkxMUU4OTZDMUREMjNDNEY5QUUwMi9Obzg4azR0Z0ZCSlNHanFCa0FtWGo4X3BI bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL05vODhrNHRnRkJKU0dqcUJrQW1YajhfcEhuNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkIxOEIvRjk4QjVGMEMyMUY5MTFFODk2QzFERDIzQzRGOUFFMDIvRjA1M0ExQ0FD MjhCMTFFQkJGMzEwNDY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAChMZUDBAChMcEDBAChMcMDBAChMcYwDQYJKoZIhvcNAQEL BQADggEBAHfQBZ5y2fJ90a5R47StU3hHYNrz2pLbAww8VSQK5PkCigHcuXKeEKkI AQvESQnMjMdLI7AIo7AMHtkVDIfSMPnus39satYKS5mIskszd+4UsgiJuhfWsbHI wMQGIF6w4kXy5zLH1nG7OO8XrNzOR+GeSFV4AssF0d16JJo8BPALZ/5OdEacgZ8R u5T6W20GwlH7mzoXnoGel9FE64MXcrqV29RfkWbWCBgXtLIQqi5JqPVwlIca3RLw dei8MfNGdYOa+GfnFz26NYNrJo56AY4+rXsxkuq+RdNVskcS5BntoFIEXDaT+YDX 0128V0bAmb6Z9mGzTAVndkHdLWqvj3c= -----END CERTIFICATE-----Generated at Sun Dec 7 23:47:10 2025 by rpki-client