This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/2117AE6E37AF11EF844EC638C4F9AE02.roa
File: 2117AE6E37AF11EF844EC638C4F9AE02.roa (raw, json)
Hash identifier: vmrZgLw19B5ritq7z4vG50pAGmXRwXJvrAIY9L3sz/4=
Subject key identifier: 92:02:2A:8C:CF:B3:69:FC:13:A0:FD:78:46:F5:FF:2D:58:51:F6:8C
Certificate issuer: /CN=A916B95A/serialNumber=F24C443210F741CBE59D014EBA6EE972B5CDDAE7
Certificate serial: CE
Authority key identifier: F2:4C:44:32:10:F7:41:CB:E5:9D:01:4E:BA:6E:E9:72:B5:CD:DA:E7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/2117AE6E37AF11EF844EC638C4F9AE02.roa
Signing time: Thu 31 Jul 2025 06:12:10 +0000
ROA not before: Thu 31 Jul 2025 06:12:10 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 153047
IP address blocks: 160.25.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.crl
rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 03:22:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 206 (0xce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B95A, serialNumber=F24C443210F741CBE59D014EBA6EE972B5CDDAE7
Validity
Not Before: Jul 31 06:12:10 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=688b093a-258c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1a:ab:6f:5a:46:e9:6d:9b:91:e4:08:97:2c:
d8:d0:44:f5:79:f8:73:20:7d:4b:4d:e9:9d:b8:d3:
17:85:1c:9e:83:39:7d:6a:29:1b:6e:7d:1d:c9:72:
d8:3e:04:49:57:8e:88:9c:90:8b:8d:6d:fd:cf:30:
d1:07:0f:f7:ce:c2:db:f8:94:12:7c:4f:0b:80:04:
7b:37:8c:c0:0f:4b:38:bd:69:94:19:4d:f1:89:59:
9f:28:ce:c4:f3:a7:85:67:e0:b4:66:c9:d9:e1:11:
d9:51:3b:d1:89:da:8a:b6:b1:0f:b9:60:4d:b2:38:
80:bc:d2:91:2a:69:25:86:48:e0:ed:49:2c:ab:a5:
2b:cc:50:57:0a:41:25:66:77:2b:f5:7b:22:10:1d:
ba:42:81:23:53:2f:e2:59:1c:5f:c7:ab:78:84:18:
12:97:ec:ec:7e:0e:d0:f6:b4:c0:88:fd:f3:bb:b8:
34:91:69:92:af:12:03:4a:b9:92:af:45:2c:3a:27:
8c:c6:77:b2:0f:7a:e4:a6:c6:57:3c:47:74:2d:f9:
30:ff:96:89:01:eb:17:40:aa:42:d5:cd:42:dc:e0:
b9:fa:4c:24:66:f8:e9:44:7a:7d:8a:2d:1c:e4:78:
44:a4:b9:33:55:a8:c1:e3:3f:66:f3:22:74:e0:84:
ec:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:02:2A:8C:CF:B3:69:FC:13:A0:FD:78:46:F5:FF:2D:58:51:F6:8C
X509v3 Authority Key Identifier:
keyid:F2:4C:44:32:10:F7:41:CB:E5:9D:01:4E:BA:6E:E9:72:B5:CD:DA:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/2117AE6E37AF11EF844EC638C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.25.43.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:6f:d6:1a:84:3e:5c:8f:81:90:0c:38:9f:6d:4a:66:e5:ae:
8e:f6:b0:c8:7e:d0:0f:44:ca:40:6d:e3:b3:77:76:63:05:12:
80:19:51:ba:28:c0:13:08:6b:56:72:66:8e:f8:62:7b:aa:88:
a3:8d:7a:6f:1c:3d:e7:58:26:2e:06:34:07:39:34:8e:4c:98:
f1:52:77:03:86:4a:30:00:23:8d:3a:e8:4a:fc:ad:4c:d6:e1:
05:5b:22:e9:ad:3e:62:2d:7b:c3:2f:5f:7c:4d:96:78:57:67:
14:5b:74:cd:11:75:1d:8f:76:cd:89:a1:96:b8:27:2a:4c:44:
58:ab:62:60:8b:86:9a:40:34:bc:f9:7a:17:81:08:0c:eb:bf:
6d:32:f7:5a:2a:3b:7b:ee:af:0d:7f:26:63:fe:9f:cd:4e:72:
a4:e5:90:64:72:de:14:d4:2c:45:68:9a:e3:63:52:a1:14:46:
00:4f:bb:42:88:4e:7a:b2:bd:6a:e0:4a:dd:ea:ea:97:a4:cf:
c2:a5:78:09:d4:43:c0:34:53:b8:6d:33:38:f2:6c:d4:e9:cd:
0c:10:25:ae:34:a9:30:07:9f:4e:52:dc:56:a0:2b:73:bb:af:
67:2e:fa:f2:25:84:57:2f:1b:4a:97:0c:dc:ad:2d:12:54:5a:
da:95:e0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:46:47 2025 by rpki-client