This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/0029F6EAD41F11F0B1A47183C4F9AE02.roa File: 0029F6EAD41F11F0B1A47183C4F9AE02.roa (raw, json) Hash identifier: S2OZL34K7y7KU66LSbkx0n+jdpTeHIrf5kcKi6P19ww= Subject key identifier: F3:B0:66:ED:F7:52:03:38:D4:8E:E4:C6:5F:F6:F9:DE:53:1B:58:8C Certificate issuer: /CN=A9170F11/serialNumber=211A021E8ABDF4DBF20708226CC8328FD24131DF Certificate serial: DB Authority key identifier: 21:1A:02:1E:8A:BD:F4:DB:F2:07:08:22:6C:C8:32:8F:D2:41:31:DF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IRoCHoq99NvyBwgibMgyj9JBMd8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/0029F6EAD41F11F0B1A47183C4F9AE02.roa Signing time: Tue 09 Dec 2025 04:13:05 +0000 ROA not before: Tue 09 Dec 2025 04:13:05 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 137449 IP address blocks: 160.191.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.crl rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IRoCHoq99NvyBwgibMgyj9JBMd8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 08:12:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170F11, serialNumber=211A021E8ABDF4DBF20708226CC8328FD24131DF Validity Not Before: Dec 9 04:13:05 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6937a1d1-20c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:77:ae:e2:62:2f:d8:70:39:89:32:b2:72:c9: 3d:89:1e:13:28:c9:95:e0:34:cc:d3:8b:40:76:a3: 5a:cc:09:3e:ab:42:e8:ed:43:43:83:20:02:35:74: e0:d2:fd:e4:d5:f5:04:8c:48:49:9e:72:df:83:ac: 04:4c:a4:07:e1:d3:b7:50:97:48:c5:53:f5:41:c4: 44:bb:6d:77:3e:ae:55:4d:bc:a3:4b:88:1a:84:d5: 54:80:28:b0:53:57:cc:29:3e:0c:88:35:ff:ef:63: 44:fc:6a:00:82:5b:f2:df:6d:34:6c:9e:01:04:25: 32:d9:5a:0b:8d:c4:c1:dc:87:50:b0:95:37:95:a6: 61:fd:7f:68:47:2f:3e:41:9a:37:b5:a7:73:de:ba: 3b:51:dc:0c:56:6b:52:52:9c:57:39:39:08:be:f8: d4:8c:0c:f4:dc:3e:a9:e5:26:2c:24:16:27:e4:02: 0d:41:89:b0:06:c3:94:8e:6b:d8:2f:98:53:fb:b7: 73:00:96:ee:a8:ee:11:f5:c0:e6:f6:3b:e4:96:7e: 42:cf:8e:bd:fa:44:57:7d:fb:11:75:5f:89:91:9c: 81:7c:83:5b:0b:8c:6a:a3:f9:0f:f2:84:83:54:33: 7c:b6:55:93:a9:75:1e:29:2e:af:68:8f:d0:5d:c6: 2a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:B0:66:ED:F7:52:03:38:D4:8E:E4:C6:5F:F6:F9:DE:53:1B:58:8C X509v3 Authority Key Identifier: keyid:21:1A:02:1E:8A:BD:F4:DB:F2:07:08:22:6C:C8:32:8F:D2:41:31:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IRoCHoq99NvyBwgibMgyj9JBMd8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/0029F6EAD41F11F0B1A47183C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.149.0/24 Signature Algorithm: sha256WithRSAEncryption 05:ee:e8:e2:dd:11:e0:98:99:61:5c:49:09:c5:37:5a:e9:6c: 4e:ea:3c:70:c6:43:de:5d:2f:ff:4a:76:35:a7:3b:95:15:f5: 22:c1:90:c5:6e:d6:95:ff:59:f1:84:e5:b1:af:b3:f6:1e:84: 70:fe:2b:3e:f7:be:07:96:78:4f:0e:d8:59:95:56:e4:cc:77: 95:a7:3a:6a:02:6d:79:ba:42:d5:33:45:2f:13:e9:f1:e1:b2: 7f:da:24:6e:91:51:49:1f:d8:c1:7e:c5:4b:30:33:28:4e:b7: c7:91:9d:84:d1:e8:e5:c7:b0:e1:a5:56:98:ed:6f:62:4d:94: 56:c1:a1:ae:00:65:dc:0a:23:c5:d3:df:3e:5d:3e:b7:e7:28: 28:86:c0:68:0e:fc:6a:52:9b:5a:b4:71:bc:26:4d:00:f2:bd: 5f:fc:14:e8:f5:32:cd:2c:35:2c:e2:db:eb:f7:fc:69:38:ea: 9a:c0:6d:fa:05:61:22:6f:9d:51:47:dc:b7:bd:c0:34:2a:9c: cb:f5:0d:02:90:da:e4:5a:3e:8e:9a:53:09:06:7d:bc:50:e7: 42:72:54:7e:7d:0b:f3:a5:cb:07:80:ff:fa:a3:ce:9a:39:4a: bb:48:29:e8:6d:30:53:19:7c:09:d3:1e:b6:7a:50:a4:89:b1: c0:e3:93:4e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBGMTExMTAvBgNVBAUTKDIxMUEwMjFFOEFCREY0REJGMjA3MDgyMjZDQzgzMjhG RDI0MTMxREYwHhcNMjUxMjA5MDQxMzA1WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTM3YTFkMS0yMGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1neu4mIv2HA5iTKycsk9iR4TKMmV4DTM04tAdqNazAk+q0Lo7UNDgyACNXTg 0v3k1fUEjEhJnnLfg6wETKQH4dO3UJdIxVP1QcREu213Pq5VTbyjS4gahNVUgCiw U1fMKT4MiDX/72NE/GoAglvy3200bJ4BBCUy2VoLjcTB3IdQsJU3laZh/X9oRy8+ QZo3tadz3ro7UdwMVmtSUpxXOTkIvvjUjAz03D6p5SYsJBYn5AINQYmwBsOUjmvY L5hT+7dzAJbuqO4R9cDm9jvkln5Cz469+kRXffsRdV+JkZyBfINbC4xqo/kP8oSD VDN8tlWTqXUeKS6vaI/QXcYqgwIDAQABo4IClTCCApEwHQYDVR0OBBYEFPOwZu33 UgM41I7kxl/2+d5TG1iMMB8GA1UdIwQYMBaAFCEaAh6KvfTb8gcIImzIMo/SQTHf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEYxMS9FMTYzODkxMDlB N0MxMUVGODQ5NTBEMzNDNEY5QUUwMi9JUm9DSG9xOTlOdnlCd2dpYk1neWo5SkJN ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lSb0NIb3E5OU52eUJ3Z2liTWd5ajlKQk1kOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzBGMTEvRTE2Mzg5MTA5QTdDMTFFRjg0OTUwRDMzQzRGOUFFMDIvMDAyOUY2RUFE NDFGMTFGMEIxQTQ3MTgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACgv5UwDQYJKoZIhvcNAQELBQADggEBAAXu6OLdEeCYmWFc SQnFN1rpbE7qPHDGQ95dL/9KdjWnO5UV9SLBkMVu1pX/WfGE5bGvs/YehHD+Kz73 vgeWeE8O2FmVVuTMd5WnOmoCbXm6QtUzRS8T6fHhsn/aJG6RUUkf2MF+xUswMyhO t8eRnYTR6OXHsOGlVpjtb2JNlFbBoa4AZdwKI8XT3z5dPrfnKCiGwGgO/GpSm1q0 cbwmTQDyvV/8FOj1Ms0sNSzi2+v3/Gk46prAbfoFYSJvnVFH3Le9wDQqnMv1DQKQ 2uRaPo6aUwkGfbxQ50JyVH59C/OlyweA//qjzpo5SrtIKehtMFMZfAnTHrZ6UKSJ scDjk04= -----END CERTIFICATE-----Generated at Fri Dec 12 02:06:55 2025 by rpki-client