This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/AF9A0636B86B11EFA561215AC4F9AE02.roa
File: AF9A0636B86B11EFA561215AC4F9AE02.roa (raw, json)
Hash identifier: A1ObxkHjydwk6fyBehYuw1o+tlNdKL+8OMsW+xN5Ytc=
Subject key identifier: 35:A0:5C:5D:89:1F:C8:EB:DD:68:0D:0C:91:9E:17:93:B4:5F:D9:65
Certificate issuer: /CN=A918CC02/serialNumber=7F067A22A4A9E096FD86A6BA355A59249067D80C
Certificate serial: C3
Authority key identifier: 7F:06:7A:22:A4:A9:E0:96:FD:86:A6:BA:35:5A:59:24:90:67:D8:0C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/AF9A0636B86B11EFA561215AC4F9AE02.roa
Signing time: Fri 19 Dec 2025 05:25:27 +0000
ROA not before: Fri 19 Dec 2025 05:25:27 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 10075
IP address blocks: 160.191.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.crl
rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 05:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195 (0xc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918CC02, serialNumber=7F067A22A4A9E096FD86A6BA355A59249067D80C
Validity
Not Before: Dec 19 05:25:27 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6944e1c6-7b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:97:3a:cb:c4:c1:eb:07:47:d7:28:9b:be:0d:
cf:db:e9:83:ba:36:89:f3:d1:4b:b9:cb:38:4c:ae:
70:3c:91:2a:8c:6b:fb:2a:69:09:60:7e:55:d0:96:
e1:02:5f:de:03:b3:82:ed:81:78:5a:e8:31:ad:ab:
f5:89:60:fb:6f:52:b5:f3:e1:8e:05:bb:c4:78:a9:
cc:91:4f:00:05:da:18:cf:78:03:5b:e0:a9:ab:97:
fe:fe:62:e3:5d:3b:95:e8:2e:16:42:3b:18:65:68:
53:98:75:bd:a8:6b:fb:99:fd:87:7e:50:92:09:cd:
2e:00:c9:0d:cd:20:23:a7:71:85:ee:b2:fd:9e:d4:
87:12:8c:d7:9e:93:5b:a7:54:e5:eb:15:d5:a0:7e:
83:ca:cd:ad:79:69:90:c8:15:91:f0:1c:9a:17:e2:
fc:0b:17:ed:2f:5f:be:b8:12:49:ce:8f:ef:d1:fb:
86:1d:16:e1:ab:85:cf:20:49:58:54:98:62:b3:05:
f0:b4:ea:31:08:34:2b:36:3e:d6:54:2a:99:a2:08:
ab:01:21:45:d4:14:a8:c6:88:92:3a:06:59:f4:05:
94:59:7d:81:ed:93:c5:9e:bb:b7:ec:12:31:a0:8f:
c6:26:13:ed:1b:d6:1d:bb:3b:d0:05:e7:5e:23:22:
52:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A0:5C:5D:89:1F:C8:EB:DD:68:0D:0C:91:9E:17:93:B4:5F:D9:65
X509v3 Authority Key Identifier:
keyid:7F:06:7A:22:A4:A9:E0:96:FD:86:A6:BA:35:5A:59:24:90:67:D8:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/AF9A0636B86B11EFA561215AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.191.151.0/24
Signature Algorithm: sha256WithRSAEncryption
80:4e:d4:8d:49:8a:29:87:7f:cb:bf:67:f1:09:11:22:c7:f7:
8c:d3:2f:61:73:e8:c4:f8:d1:a2:00:0a:c1:6a:a2:c8:6e:7a:
90:62:19:11:b4:a0:9a:6f:c3:1c:c1:7f:00:e5:b1:0f:3a:7f:
02:4c:db:03:b0:09:8e:81:51:1b:bd:63:55:ee:d9:a4:88:31:
06:4d:b0:95:b1:ac:03:d9:eb:94:b8:3a:10:32:e2:68:fe:f8:
9f:de:81:b3:da:da:f3:3c:96:84:0d:f1:16:71:60:49:d8:e2:
a8:88:3d:8c:0b:93:74:16:b0:02:c8:af:58:2a:a2:49:0d:be:
8a:55:3a:59:de:ed:eb:cc:f0:31:36:27:cb:7f:61:60:bd:ec:
0c:a3:b2:d5:9f:60:f1:ea:bc:4a:02:32:7f:bc:eb:d2:05:18:
46:a8:f0:38:a8:4f:76:e4:93:00:50:bd:9a:15:e8:f6:dd:ec:
f2:11:99:19:d9:4c:85:76:f3:0a:7d:91:35:85:10:5d:d9:50:
16:ad:7f:1d:9a:fc:d4:35:ec:d5:ac:e9:f5:b6:67:f6:0a:92:
94:c3:5e:29:57:be:81:c9:63:cb:9e:cd:96:7a:df:6f:6f:f4:
9d:be:27:33:e9:ca:7a:af:4c:30:22:76:f6:49:a7:eb:32:41:
12:13:96:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:08:08 2025 by rpki-client