This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/145B3B88C46B11F085C51F82C4F9AE02.roa File: 145B3B88C46B11F085C51F82C4F9AE02.roa (raw, json) Hash identifier: J9CnTUyePYPB90BlLPftIH1AYzCyvJxP8FcjWilMdvw= Subject key identifier: C2:2C:AC:37:31:E1:B2:56:FC:A2:A1:5F:38:A8:50:52:5B:C6:11:FC Certificate issuer: /CN=A91B80C2/serialNumber=2ABA2AA3CB3F94581C5D3D91BA36B8A9D8E8DEAD Certificate serial: 0140 Authority key identifier: 2A:BA:2A:A3:CB:3F:94:58:1C:5D:3D:91:BA:36:B8:A9:D8:E8:DE:AD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/145B3B88C46B11F085C51F82C4F9AE02.roa Signing time: Tue 18 Nov 2025 10:41:03 +0000 ROA not before: Tue 18 Nov 2025 10:41:03 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 141988 IP address blocks: 160.20.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 03:04:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 320 (0x140) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B80C2, serialNumber=2ABA2AA3CB3F94581C5D3D91BA36B8A9D8E8DEAD Validity Not Before: Nov 18 10:41:03 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=691c4d3f-6885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3e:b2:8a:95:72:e1:b6:6e:b8:58:00:a9:23: ee:a1:01:76:97:03:9f:18:6c:9d:f2:95:1c:27:42: 0c:cc:59:9f:54:e6:6b:f0:ce:95:a1:0f:97:32:f6: 4d:f0:9b:22:35:62:c0:8c:d7:a2:05:61:36:c0:78: 1b:a7:33:dd:c6:6a:c5:dc:6c:b3:2a:c9:d7:aa:9a: 9f:c7:3e:ce:ca:b0:cd:65:03:10:76:cf:5b:4f:c8: 31:41:72:5b:34:64:10:1f:b2:1a:52:49:41:5c:47: 7a:70:74:25:c9:c0:2d:34:40:26:9d:31:17:16:c6: e8:4b:2b:9e:b3:3c:61:25:6f:2b:e9:a4:6c:7b:fd: a5:67:45:0b:ad:6a:c7:45:7c:e5:38:00:3f:49:1b: 45:6b:bf:df:db:cf:8e:09:fd:aa:5f:6a:6c:1b:da: cc:58:79:6b:cd:a7:5e:9e:92:1c:bb:e7:b4:5e:2c: cd:c0:c9:e5:9e:b8:d3:57:7c:26:4f:47:bb:71:74: 71:98:ba:1e:12:fa:14:d8:61:b0:95:3e:f1:c0:2d: e5:e2:c0:78:05:5c:86:9b:cc:a7:ec:72:16:29:c8: 1b:36:42:7a:e3:87:c4:48:2c:e1:e1:ec:2a:9f:41: 9a:2e:07:fa:3d:0e:c4:94:6c:9d:23:98:8f:72:db: 4b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:2C:AC:37:31:E1:B2:56:FC:A2:A1:5F:38:A8:50:52:5B:C6:11:FC X509v3 Authority Key Identifier: keyid:2A:BA:2A:A3:CB:3F:94:58:1C:5D:3D:91:BA:36:B8:A9:D8:E8:DE:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/145B3B88C46B11F085C51F82C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.20.121.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:49:50:28:db:31:90:54:b3:c4:28:3f:32:65:25:7d:05:58: 76:2e:17:97:07:7b:35:a8:4e:97:97:11:5d:ca:48:6f:78:bf: 66:8d:08:68:1d:1b:86:83:f6:35:ae:6a:e1:ba:6d:05:22:aa: 6e:fd:89:e5:0b:fd:e7:fd:93:7d:23:ed:4a:29:af:a5:00:25: 34:e8:23:14:fd:4d:13:db:88:de:b3:15:3a:19:dc:c1:d3:09: f3:f4:26:6c:88:02:e4:9c:64:cf:08:4c:3a:7b:82:a8:62:58: bc:21:26:91:e8:37:e3:a3:f8:d2:56:82:55:0f:ef:22:e5:3c: 92:3c:17:7f:c9:57:b3:f6:08:9f:63:e0:db:a2:3b:bb:0e:96: 5d:6e:70:4b:65:3a:bf:d5:4e:2a:8b:79:e5:5b:7e:d6:c2:90: 0c:17:44:5d:1b:14:20:64:64:6a:89:85:8e:c0:5b:71:97:eb: 53:3b:3e:5d:23:cb:68:89:52:fe:e4:da:fc:8c:76:aa:23:67: a0:39:f0:7e:1a:a7:0d:91:80:2f:c1:6a:60:d5:de:0e:46:da: 28:33:b4:8f:7e:8e:f7:4b:d4:47:b1:23:e7:2c:6c:fe:3b:a1: 67:28:c2:db:27:ab:be:e8:48:4a:cb:c9:77:d4:56:f9:c5:c9: ca:8f:05:7a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgwQzIxMTAvBgNVBAUTKDJBQkEyQUEzQ0IzRjk0NTgxQzVEM0Q5MUJBMzZCOEE5 RDhFOERFQUQwHhcNMjUxMTE4MTA0MTAzWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTFjNGQzZi02ODg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqz6yipVy4bZuuFgAqSPuoQF2lwOfGGyd8pUcJ0IMzFmfVOZr8M6VoQ+XMvZN 8JsiNWLAjNeiBWE2wHgbpzPdxmrF3GyzKsnXqpqfxz7OyrDNZQMQds9bT8gxQXJb NGQQH7IaUklBXEd6cHQlycAtNEAmnTEXFsboSyueszxhJW8r6aRse/2lZ0ULrWrH RXzlOAA/SRtFa7/f28+OCf2qX2psG9rMWHlrzadenpIcu+e0XizNwMnlnrjTV3wm T0e7cXRxmLoeEvoU2GGwlT7xwC3l4sB4BVyGm8yn7HIWKcgbNkJ644fESCzh4ewq n0GaLgf6PQ7ElGydI5iPcttLVQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMIsrDcx 4bJW/KKhXzioUFJbxhH8MB8GA1UdIwQYMBaAFCq6KqPLP5RYHF09kbo2uKnY6N6t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODBDMi85ODNFNjE1MDE3 MUExMUVGODY1Nzc1NEZDNEY5QUUwMi9Lcm9xbzhzX2xGZ2NYVDJSdWphNHFkam8z cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0tyb3FvOHNfbEZnY1hUMlJ1amE0cWRqbzNxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjgwQzIvOTgzRTYxNTAxNzFBMTFFRjg2NTc3NTRGQzRGOUFFMDIvMTQ1QjNCODhD NDZCMTFGMDg1QzUxRjgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACgFHkwDQYJKoZIhvcNAQELBQADggEBAEpJUCjbMZBUs8Qo PzJlJX0FWHYuF5cHezWoTpeXEV3KSG94v2aNCGgdG4aD9jWuauG6bQUiqm79ieUL /ef9k30j7Uopr6UAJTToIxT9TRPbiN6zFToZ3MHTCfP0JmyIAuScZM8ITDp7gqhi WLwhJpHoN+Oj+NJWglUP7yLlPJI8F3/JV7P2CJ9j4NuiO7sOll1ucEtlOr/VTiqL eeVbftbCkAwXRF0bFCBkZGqJhY7AW3GX61M7Pl0jy2iJUv7k2vyMdqojZ6A58H4a pw2RgC/BamDV3g5G2igztI9+jvdL1EexI+csbP47oWcowtsnq77oSErLyXfUVvnF ycqPBXo= -----END CERTIFICATE-----Generated at Wed Dec 3 15:51:19 2025 by rpki-client