This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/332B4C6ABA7011F088893F1DC4F9AE02.roa File: 332B4C6ABA7011F088893F1DC4F9AE02.roa (raw, json) Hash identifier: QRYhDleOd8jLpze9qYmgI1TLfowDVW7d5fsN6Y1oV1c= Subject key identifier: 00:E4:49:97:9A:FB:2B:34:16:19:C6:02:D2:2D:D2:64:81:18:29:C3 Certificate issuer: /CN=A9170982/serialNumber=41BFBEBE63521FB04ED8123C68E5C0CDAF5D05CD Certificate serial: 03FD Authority key identifier: 41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/332B4C6ABA7011F088893F1DC4F9AE02.roa Signing time: Wed 17 Dec 2025 09:17:33 +0000 ROA not before: Wed 17 Dec 2025 09:17:33 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 16839 IP address blocks: 167.208.0.0/16 maxlen: 16 167.208.0.0/22 maxlen: 24 167.208.4.0/22 maxlen: 22 167.208.4.0/24 maxlen: 24 167.208.5.0/24 maxlen: 24 167.208.6.0/24 maxlen: 24 167.208.7.0/24 maxlen: 24 167.208.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.crl rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:51:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1021 (0x3fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170982, serialNumber=41BFBEBE63521FB04ED8123C68E5C0CDAF5D05CD Validity Not Before: Dec 17 09:17:33 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6942752d-b74d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d4:b9:d0:93:cd:87:4c:68:ee:f2:a3:5d:0e: c8:86:65:a1:be:7b:a6:a9:97:93:4d:d2:d0:24:0b: fd:12:c1:50:c6:ae:1e:6c:40:f9:fa:7a:22:b0:f2: f4:36:39:5f:e5:a6:fa:c2:6e:b8:e6:8b:04:d3:41: 09:19:4c:80:9e:99:28:96:9d:12:9d:19:2a:de:2f: c2:8b:83:a0:3a:87:a7:ff:32:5b:59:83:63:81:81: b4:79:7f:22:bb:a8:fc:2a:59:4c:e3:eb:46:cd:aa: e2:54:67:6b:94:3b:46:96:e8:a6:8b:5f:b4:2b:35: f1:08:f0:98:6c:bd:db:52:66:39:02:c3:81:8f:84: a6:61:ed:f3:5e:ed:45:73:81:4a:46:f6:35:b6:e2: 36:40:4a:4a:aa:3c:36:a4:b8:2d:4b:e6:dd:85:60: c6:10:5a:9b:2c:b0:f6:67:cc:f1:27:5d:15:59:5e: 86:f5:41:24:19:28:4a:4e:16:6f:5a:6e:2e:33:45: 55:0d:a9:85:e6:b9:83:4e:6c:39:40:13:19:95:01: 09:92:97:04:e6:4d:c2:82:15:ad:d1:1c:41:cf:02: 36:c5:4c:19:32:66:87:c4:b0:d7:12:95:37:1f:0a: 6c:27:87:8f:fb:12:2c:90:d1:3e:ba:b1:50:65:e4: b9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E4:49:97:9A:FB:2B:34:16:19:C6:02:D2:2D:D2:64:81:18:29:C3 X509v3 Authority Key Identifier: keyid:41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/332B4C6ABA7011F088893F1DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 167.208.0.0/16 Signature Algorithm: sha256WithRSAEncryption 83:82:3f:1d:f2:4c:70:69:d2:e5:9c:1d:03:2a:00:7e:fe:e5: f4:88:b4:13:8e:4e:09:15:5b:ac:2f:d3:8d:3c:55:72:e2:dd: 29:2c:75:34:81:2c:8b:df:e4:35:cb:93:53:16:03:eb:c5:de: cd:b8:34:52:be:18:ba:dd:0f:ff:07:df:e8:cc:dc:b6:af:0e: 08:45:ae:88:57:ee:50:d1:27:ed:29:d0:4f:8c:11:b8:f6:6e: a8:45:29:7a:26:00:6b:e2:fa:a5:d7:b4:1f:15:97:85:4d:2c: 2e:19:2c:dc:68:86:54:49:08:06:a3:9d:ed:8b:49:43:3f:56: e4:b5:48:e4:31:ae:57:f3:17:82:1b:cb:16:6d:1b:c9:bc:a7: b8:b0:92:3a:38:13:33:1e:f3:fd:14:bd:97:8b:c2:48:bc:9b: 5f:ca:c6:a8:6f:c7:21:e0:40:f0:56:86:8a:27:68:80:24:5d: 0d:fc:45:86:cf:0d:4c:f6:75:53:34:ed:c4:6f:f5:f7:86:9f: 40:44:d0:9e:3b:d3:d1:a2:68:19:25:8a:19:b0:a1:4f:17:96: e3:d5:3f:62:8b:1d:a6:8b:8d:b5:7a:93:cd:1a:88:06:f8:dc: ee:2e:3d:c4:46:63:b0:a6:01:3c:75:b6:2c:88:fc:ea:46:8b: 22:ec:f0:61 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgICA/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5ODIxMTAvBgNVBAUTKDQxQkZCRUJFNjM1MjFGQjA0RUQ4MTIzQzY4RTVDMENE QUY1RDA1Q0QwHhcNMjUxMjE3MDkxNzMzWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTQyNzUyZC1iNzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2tS50JPNh0xo7vKjXQ7IhmWhvnumqZeTTdLQJAv9EsFQxq4ebED5+noisPL0 Njlf5ab6wm645osE00EJGUyAnpkolp0SnRkq3i/Ci4OgOoen/zJbWYNjgYG0eX8i u6j8KllM4+tGzariVGdrlDtGluimi1+0KzXxCPCYbL3bUmY5AsOBj4SmYe3zXu1F c4FKRvY1tuI2QEpKqjw2pLgtS+bdhWDGEFqbLLD2Z8zxJ10VWV6G9UEkGShKThZv Wm4uM0VVDamF5rmDTmw5QBMZlQEJkpcE5k3CghWt0RxBzwI2xUwZMmaHxLDXEpU3 HwpsJ4eP+xIskNE+urFQZeS5ewIDAQABo4IClDCCApAwHQYDVR0OBBYEFADkSZea +ys0FhnGAtIt0mSBGCnDMB8GA1UdIwQYMBaAFEG/vr5jUh+wTtgSPGjlwM2vXQXN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDk4Mi9DRjIwNUM2MEFD MTMxMUVDQjc3NkIyMDlDNEY5QUUwMi9RYi0tdm1OU0g3Qk8yQkk4YU9YQXphOWRC YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FiLS12bU5TSDdCTzJCSThhT1hBemE5ZEJjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzA5ODIvQ0YyMDVDNjBBQzEzMTFFQ0I3NzZCMjA5QzRGOUFFMDIvMzMyQjRDNkFC QTcwMTFGMDg4ODkzRjFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8E DzANMAsEAgABMAUDAwCn0DANBgkqhkiG9w0BAQsFAAOCAQEAg4I/HfJMcGnS5Zwd AyoAfv7l9Ii0E45OCRVbrC/TjTxVcuLdKSx1NIEsi9/kNcuTUxYD68Xezbg0Ur4Y ut0P/wff6Mzctq8OCEWuiFfuUNEn7SnQT4wRuPZuqEUpeiYAa+L6pde0HxWXhU0s Lhks3GiGVEkIBqOd7YtJQz9W5LVI5DGuV/MXghvLFm0bybynuLCSOjgTMx7z/RS9 l4vCSLybX8rGqG/HIeBA8FaGiidogCRdDfxFhs8NTPZ1UzTtxG/194afQETQnjvT 0aJoGSWKGbChTxeW49U/YosdpouNtXqTzRqIBvjc7i49xEZjsKYBPHW2LIj86kaL IuzwYQ== -----END CERTIFICATE-----Generated at Fri Dec 19 07:01:41 2025 by rpki-client