This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/21A970BC737211EEB3112437C4F9AE02.roa File: 21A970BC737211EEB3112437C4F9AE02.roa (raw, json) Hash identifier: K46iupxQKPhTWBneWE/ku4cW3ePU1rT46XNEG7veBro= Subject key identifier: 1B:B0:05:33:FE:8D:E7:D8:DC:8E:89:4F:7D:AF:30:8B:BD:AD:FB:BE Certificate issuer: /CN=A916D36A/serialNumber=7B9CEDC8328028A7456E9C414BB77DAFEBCE765F Certificate serial: 0199 Authority key identifier: 7B:9C:ED:C8:32:80:28:A7:45:6E:9C:41:4B:B7:7D:AF:EB:CE:76:5F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/21A970BC737211EEB3112437C4F9AE02.roa Signing time: Thu 18 Dec 2025 14:03:19 +0000 ROA not before: Thu 18 Dec 2025 14:03:19 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 38910 IP address blocks: 161.121.128.0/19 maxlen: 19 161.121.128.0/20 maxlen: 20 161.121.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 16:16:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 409 (0x199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D36A, serialNumber=7B9CEDC8328028A7456E9C414BB77DAFEBCE765F Validity Not Before: Dec 18 14:03:19 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=694409a7-f637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:eb:c8:9d:66:48:49:56:21:84:2d:31:7d:d6: de:8a:70:66:34:3f:99:c4:56:5a:12:b2:ed:22:7c: bb:16:6f:ea:08:f7:27:6d:1a:7c:c6:ed:91:f8:84: b7:da:f6:47:61:7f:09:f3:74:7a:44:b5:2d:69:08: 13:1c:ca:00:78:b0:1b:cf:ef:7c:0d:8b:63:f7:85: 0e:d9:1a:d5:f1:55:75:1e:9b:d8:40:9c:2d:7b:90: 58:1e:10:b4:12:a0:47:0f:e8:85:61:21:a8:7e:d3: 8d:da:a7:89:0f:c6:2c:79:04:ad:5a:51:d0:9a:4c: d1:3a:07:22:4b:fa:92:f6:92:df:be:ea:9e:08:75: 0e:8f:14:30:a8:c3:70:ef:83:30:b6:62:a8:ed:24: a4:53:43:36:67:fd:b0:1b:a7:db:df:55:d7:4a:db: 05:c8:61:8f:d5:ca:d4:04:2c:b1:0e:77:29:21:e6: 12:7f:8b:6c:51:6f:e7:13:95:f0:c9:48:9f:81:b3: 2d:88:3b:49:5a:18:5c:ed:9f:14:5d:1a:f6:ef:94: bd:65:5b:de:0b:c3:2a:43:0c:93:02:6d:9c:b8:9b: 12:8c:eb:1f:3c:74:b4:b0:6f:2e:52:5d:6f:3e:00: db:f9:cf:14:cc:c2:72:9e:56:35:d7:c9:7d:ce:6a: aa:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:B0:05:33:FE:8D:E7:D8:DC:8E:89:4F:7D:AF:30:8B:BD:AD:FB:BE X509v3 Authority Key Identifier: keyid:7B:9C:ED:C8:32:80:28:A7:45:6E:9C:41:4B:B7:7D:AF:EB:CE:76:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/21A970BC737211EEB3112437C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.121.128.0/19 Signature Algorithm: sha256WithRSAEncryption 42:42:91:ee:8f:30:e6:72:6c:0b:67:b8:b4:53:be:1b:7e:59: c6:d0:50:f3:ea:42:77:21:0a:31:64:dd:f4:4d:79:aa:35:0d: f7:e1:a9:b6:9c:95:3c:ab:ff:7f:b5:b6:1b:d5:32:40:d0:4b: 00:49:17:c7:fb:5c:00:fd:9f:43:c5:f3:59:72:a1:88:36:9d: b4:66:2e:ea:03:31:41:36:49:04:e0:dc:09:fd:1e:11:e0:64: 1f:73:40:b2:10:41:84:8d:92:73:41:c1:71:ae:41:c4:5b:7c: 73:3b:61:1c:82:ea:16:b6:b7:ea:c5:ba:14:c0:ed:50:ee:83: 1b:cf:7d:6c:d2:0f:f0:37:df:b0:b2:ac:15:60:8c:3e:e0:de: 64:d5:16:17:ba:c7:db:45:9f:60:75:ac:32:e0:ea:02:37:03: f4:cf:9f:c6:26:d0:4c:3f:48:04:2b:bc:1b:a4:b5:88:9a:5f: e7:dc:f4:4e:60:4e:d7:db:1d:5a:85:06:db:e8:14:87:95:88: a3:14:08:70:5f:f8:c6:c4:f6:e4:06:be:49:6d:6b:a3:34:88: 0d:a1:7e:2d:73:e4:92:28:7e:f5:c9:e6:8b:af:f0:1b:08:3c: 70:7f:42:ad:a5:62:c8:4a:47:4c:4d:01:f1:6b:2d:a4:15:f0: 5e:56:1c:8d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQzNkExMTAvBgNVBAUTKDdCOUNFREM4MzI4MDI4QTc0NTZFOUM0MTRCQjc3REFG RUJDRTc2NUYwHhcNMjUxMjE4MTQwMzE5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDDA02OTQ0MDlhNy1mNjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5+vInWZISVYhhC0xfdbeinBmND+ZxFZaErLtIny7Fm/qCPcnbRp8xu2R+IS3 2vZHYX8J83R6RLUtaQgTHMoAeLAbz+98DYtj94UO2RrV8VV1HpvYQJwte5BYHhC0 EqBHD+iFYSGoftON2qeJD8YseQStWlHQmkzROgciS/qS9pLfvuqeCHUOjxQwqMNw 74MwtmKo7SSkU0M2Z/2wG6fb31XXStsFyGGP1crUBCyxDncpIeYSf4tsUW/nE5Xw yUifgbMtiDtJWhhc7Z8UXRr275S9ZVveC8MqQwyTAm2cuJsSjOsfPHS0sG8uUl1v PgDb+c8UzMJynlY118l9zmqq8wIDAQABo4IClTCCApEwHQYDVR0OBBYEFBuwBTP+ jefY3I6JT32vMIu9rfu+MB8GA1UdIwQYMBaAFHuc7cgygCinRW6cQUu3fa/rznZf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDM2QS9DNkRENTFCNDcz NkYxMUVFOTE3RDAzMzRDNEY5QUUwMi9lNXp0eURLQUtLZEZicHhCUzdkOXItdk9k bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2U1enR5REtBS0tkRmJweEJTN2Q5ci12T2RsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkQzNkEvQzZERDUxQjQ3MzZGMTFFRTkxN0QwMzM0QzRGOUFFMDIvMjFBOTcwQkM3 MzcyMTFFRUIzMTEyNDM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAWheYAwDQYJKoZIhvcNAQELBQADggEBAEJCke6PMOZybAtn uLRTvht+WcbQUPPqQnchCjFk3fRNeao1DffhqbaclTyr/3+1thvVMkDQSwBJF8f7 XAD9n0PF81lyoYg2nbRmLuoDMUE2SQTg3An9HhHgZB9zQLIQQYSNknNBwXGuQcRb fHM7YRyC6ha2t+rFuhTA7VDugxvPfWzSD/A337CyrBVgjD7g3mTVFhe6x9tFn2B1 rDLg6gI3A/TPn8Ym0Ew/SAQrvBuktYiaX+fc9E5gTtfbHVqFBtvoFIeViKMUCHBf +MbE9uQGvklta6M0iA2hfi1z5JIofvXJ5ouv8BsIPHB/Qq2lYshKR0xNAfFrLaQV 8F5WHI0= -----END CERTIFICATE-----Generated at Mon Dec 22 14:00:27 2025 by rpki-client