This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/67298C50CE9A11F0B8544609C4F9AE02.roa File: 67298C50CE9A11F0B8544609C4F9AE02.roa (raw, json) Hash identifier: D/FROTHgk95aeR7pvXgf/keX7nzE4wZTFPtJzFb1Wlw= Subject key identifier: 61:B9:E8:EF:3C:31:D6:F8:CD:8A:5F:5A:CB:45:3B:9A:08:52:BF:92 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2046 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/67298C50CE9A11F0B8544609C4F9AE02.roa Signing time: Mon 01 Dec 2025 09:45:00 +0000 ROA not before: Mon 01 Dec 2025 09:45:00 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134889 IP address blocks: 161.248.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 12:10:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8262 (0x2046) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Dec 1 09:45:00 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=692d639c-56ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3e:5b:1b:1b:d8:68:4d:9c:ce:4e:eb:6b:87: d4:02:4e:c6:f2:9a:bd:40:a5:83:64:50:f6:7b:7d: 23:3b:d3:0c:25:ab:f6:2d:22:cb:86:c1:48:9c:19: c3:05:ac:b2:ca:86:82:10:5a:98:02:fd:e9:ee:5c: a3:10:79:a4:6b:37:88:b8:8a:92:9e:4a:2c:14:83: a5:f8:44:4b:0f:e5:75:1f:70:3a:33:dc:46:b9:45: f9:59:db:aa:de:14:6c:11:3e:92:6e:bb:8e:72:c2: c1:d4:c2:d9:a5:ae:85:b6:d1:af:f1:e9:01:08:46: 5b:66:69:26:b4:e9:37:88:d5:8a:bd:9f:a6:5c:47: f2:3c:80:6d:27:a7:fa:9c:62:e0:67:5f:7b:5a:de: 5b:5e:39:81:c5:f7:d8:85:ee:e0:2f:d4:cb:a9:dd: b9:dd:67:60:6c:90:09:48:73:88:ed:bd:b4:74:8f: 2e:0f:9c:f1:b6:75:1d:31:ab:47:40:65:c3:a7:d5: 2f:81:35:37:4c:01:36:22:73:b9:24:c5:e1:4e:5a: 81:3d:11:59:a2:71:d7:6a:e8:b5:4d:a3:2f:ea:c0: 47:01:d5:65:c8:90:b6:e8:66:ac:c1:98:81:e7:c1: 51:3e:1f:d6:17:6f:46:a5:42:bd:d1:bd:52:1c:41: a8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:B9:E8:EF:3C:31:D6:F8:CD:8A:5F:5A:CB:45:3B:9A:08:52:BF:92 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/67298C50CE9A11F0B8544609C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.248.27.0/24 Signature Algorithm: sha256WithRSAEncryption 91:80:cd:be:5a:aa:b7:b3:29:a2:97:4f:f1:d2:9f:64:97:45: 83:0a:d1:1e:62:f6:c6:a6:84:c0:d5:e3:7e:95:ae:7d:10:ef: 59:51:05:8c:87:dc:51:a4:a3:49:d8:e5:30:d4:ce:6e:97:85: 03:a6:d4:e1:1b:fc:e5:3a:dd:36:17:d3:5e:fe:22:ab:43:50: c4:ac:05:40:1a:0b:a2:44:68:8e:c6:09:0f:bc:3b:6e:98:0d: 16:9b:81:e2:18:51:f3:88:c0:47:fe:fd:da:cb:a3:79:d4:af: 07:6d:cc:6e:d7:5d:30:68:f0:b5:6c:99:ab:e3:4e:93:c5:6d: 96:d1:45:56:40:44:69:27:f2:d8:6f:12:a2:ce:da:f9:f6:e5: 9c:0e:37:94:c3:bc:01:57:3c:e3:b7:fc:63:6d:3a:dc:e5:a3: cf:db:16:18:08:1c:32:b7:d9:9f:40:31:4c:5e:c2:3d:9b:8d: 2e:e0:83:35:a7:4d:0a:ca:40:d6:bb:b2:52:42:5b:7c:9f:4b: 21:cd:78:7d:88:b0:5e:78:4a:dc:1e:63:94:16:39:93:cc:a7: ad:8c:78:86:bf:df:2d:d5:76:b8:fc:b7:1d:63:96:b8:af:c4: 4a:ea:4d:10:4f:1b:b8:50:82:aa:c0:17:9f:ea:e1:ea:94:ea: 13:b2:7a:14 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICIEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUxMjAxMDk0NTAwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJkNjM5Yy01NmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuD5bGxvYaE2czk7ra4fUAk7G8pq9QKWDZFD2e30jO9MMJav2LSLLhsFInBnD BayyyoaCEFqYAv3p7lyjEHmkazeIuIqSnkosFIOl+ERLD+V1H3A6M9xGuUX5Wduq 3hRsET6SbruOcsLB1MLZpa6FttGv8ekBCEZbZmkmtOk3iNWKvZ+mXEfyPIBtJ6f6 nGLgZ197Wt5bXjmBxffYhe7gL9TLqd253WdgbJAJSHOI7b20dI8uD5zxtnUdMatH QGXDp9UvgTU3TAE2InO5JMXhTlqBPRFZonHXaui1TaMv6sBHAdVlyJC26GaswZiB 58FRPh/WF29GpUK90b1SHEGomQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGG56O88 Mdb4zYpfWstFO5oIUr+SMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNjcyOThDNTBD RTlBMTFGMEI4NTQ0NjA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACh+BswDQYJKoZIhvcNAQELBQADggEBAJGAzb5aqrezKaKX T/HSn2SXRYMK0R5i9samhMDV436Vrn0Q71lRBYyH3FGko0nY5TDUzm6XhQOm1OEb /OU63TYX017+IqtDUMSsBUAaC6JEaI7GCQ+8O26YDRabgeIYUfOIwEf+/drLo3nU rwdtzG7XXTBo8LVsmavjTpPFbZbRRVZARGkn8thvEqLO2vn25ZwON5TDvAFXPOO3 /GNtOtzlo8/bFhgIHDK32Z9AMUxewj2bjS7ggzWnTQrKQNa7slJCW3yfSyHNeH2I sF54StweY5QWOZPMp62MeIa/3y3Vdrj8tx1jlrivxErqTRBPG7hQgqrAF5/q4eqU 6hOyehQ= -----END CERTIFICATE-----Generated at Fri Dec 5 19:12:40 2025 by rpki-client