This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/03FFD61EEF8A11F09F678C04616F56BC.roa File: 03FFD61EEF8A11F09F678C04616F56BC.roa (raw, json) Hash identifier: D7sgO+2di5yXYUYtKLuF4+RmkeiC1hhhyHZjcx0ov2E= Subject key identifier: 73:5A:6C:16:7F:B0:4C:7D:5E:66:C5:6F:32:87:B3:43:E7:C8:4E:EE Certificate issuer: /CN=A91C1025/serialNumber=399A7B1FC4207EBA0707A8515195CC68E836ABF8 Certificate serial: E4 Authority key identifier: 39:9A:7B:1F:C4:20:7E:BA:07:07:A8:51:51:95:CC:68:E8:36:AB:F8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/03FFD61EEF8A11F09F678C04616F56BC.roa Signing time: Mon 12 Jan 2026 07:40:50 +0000 ROA not before: Mon 12 Jan 2026 07:40:50 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 53167 IP address blocks: 160.25.210.0/24 maxlen: 26 160.25.211.0/24 maxlen: 24 160.25.211.0/27 maxlen: 27 160.25.211.32/28 maxlen: 28 160.25.211.48/28 maxlen: 28 160.25.211.64/28 maxlen: 28 160.25.211.80/28 maxlen: 28 160.25.211.96/28 maxlen: 28 160.25.211.112/28 maxlen: 28 160.25.211.128/28 maxlen: 28 160.25.211.144/28 maxlen: 28 160.25.211.160/29 maxlen: 29 160.25.211.168/29 maxlen: 29 160.25.211.176/29 maxlen: 29 160.25.211.184/29 maxlen: 29 160.25.211.192/29 maxlen: 29 160.25.211.200/29 maxlen: 29 160.25.211.208/29 maxlen: 29 160.25.211.216/29 maxlen: 29 160.25.211.224/28 maxlen: 28 160.25.211.240/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.crl rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 04:40:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1025, serialNumber=399A7B1FC4207EBA0707A8515195CC68E836ABF8 Validity Not Before: Jan 12 07:40:50 2026 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6964a582-68d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5e:52:51:98:b0:de:cc:db:eb:38:b7:26:09: b4:c2:7e:b6:71:ca:02:aa:f7:5a:d1:24:4d:a3:12: 9c:ed:b3:7b:aa:42:3e:ca:09:77:9e:60:3e:49:5c: 2e:c9:87:65:03:94:3e:ef:80:c3:b2:69:59:1b:24: 6c:fa:26:f2:4d:b2:0a:86:ff:30:82:18:ca:76:4a: 15:a2:41:63:42:73:04:c2:f5:ad:b7:db:de:91:9c: 19:11:e7:ca:e3:eb:06:bf:60:53:8d:c6:1a:7f:d0: 26:77:46:6c:d5:4d:6e:65:c3:df:01:87:8c:e5:fc: ab:9a:b2:9a:ab:94:90:82:d9:2d:68:b3:e3:e3:a3: c8:95:bb:95:9c:a8:6e:a2:0d:99:ea:87:34:32:5f: f9:f0:a5:6d:fb:cb:33:fe:5f:aa:78:5e:04:0a:21: 79:23:a8:75:b7:69:68:cd:c6:a1:f0:e7:5e:46:29: 23:54:45:cb:a8:4e:cd:34:02:b7:7a:67:ab:cc:ea: cd:02:e9:21:05:8c:a0:3a:30:fa:e9:c9:1d:47:0c: fb:59:d6:3a:fb:6e:4f:8c:88:10:f5:88:36:aa:a9: eb:6b:f4:e4:a8:c5:2c:73:90:38:1d:a5:3e:68:fe: 26:2d:06:0f:e8:eb:39:2a:84:0c:d4:cb:39:b7:c1: 14:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:5A:6C:16:7F:B0:4C:7D:5E:66:C5:6F:32:87:B3:43:E7:C8:4E:EE X509v3 Authority Key Identifier: keyid:39:9A:7B:1F:C4:20:7E:BA:07:07:A8:51:51:95:CC:68:E8:36:AB:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/03FFD61EEF8A11F09F678C04616F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.25.210.0/23 Signature Algorithm: sha256WithRSAEncryption 71:b0:4c:59:b5:6d:24:ce:bc:bb:15:06:7d:54:40:4f:cf:ca: 6d:54:c1:44:cb:ad:42:bc:09:ed:63:b9:36:26:1b:c7:c6:2d: dd:0b:aa:e3:f8:b1:43:2e:17:79:db:36:28:ca:7b:96:b6:cf: d5:c1:a1:7f:a4:dc:45:8a:80:b2:30:11:1c:26:6a:90:96:a9: cf:ad:48:46:10:3d:54:48:b3:3b:a4:ad:86:37:3f:aa:35:d0: d2:3c:4c:3b:de:46:1c:cf:6e:92:24:06:83:c3:0f:0d:82:af: 2f:68:2c:13:52:68:e5:a4:9b:12:2c:9e:b8:e1:9f:3a:2a:bd: f9:e7:be:6e:16:60:8d:a6:63:85:7f:51:eb:94:09:fc:9e:ca: ca:1b:83:cf:7e:65:85:63:17:2e:74:02:0a:9b:31:7d:50:fa: 69:8a:cd:7d:d4:d3:cf:c2:0e:ed:d8:f5:3d:8d:8b:05:43:d8: a5:9a:64:f4:eb:55:95:c5:ea:3b:77:43:2e:3d:4a:15:db:ae: 6e:a5:7a:1d:85:b4:17:20:74:5a:a9:c7:54:c4:b9:c5:1e:58: f5:52:05:7e:45:d7:5a:71:7d:38:04:07:12:0c:5f:d5:53:8d: 33:37:ea:00:a9:6c:54:55:7a:1d:e0:29:d4:af:e1:75:95:04: 9b:59:53:02 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEwMjUxMTAvBgNVBAUTKDM5OUE3QjFGQzQyMDdFQkEwNzA3QTg1MTUxOTVDQzY4 RTgzNkFCRjgwHhcNMjYwMTEyMDc0MDUwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDDA02OTY0YTU4Mi02OGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoV5SUZiw3szb6zi3Jgm0wn62ccoCqvda0SRNoxKc7bN7qkI+ygl3nmA+SVwu yYdlA5Q+74DDsmlZGyRs+ibyTbIKhv8wghjKdkoVokFjQnMEwvWtt9vekZwZEefK 4+sGv2BTjcYaf9Amd0Zs1U1uZcPfAYeM5fyrmrKaq5SQgtktaLPj46PIlbuVnKhu og2Z6oc0Ml/58KVt+8sz/l+qeF4ECiF5I6h1t2lozcah8OdeRikjVEXLqE7NNAK3 emerzOrNAukhBYygOjD66ckdRwz7WdY6+25PjIgQ9Yg2qqnra/TkqMUsc5A4HaU+ aP4mLQYP6Os5KoQM1Ms5t8EUbwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHNabBZ/ sEx9XmbFbzKHs0PnyE7uMB8GA1UdIwQYMBaAFDmaex/EIH66BweoUVGVzGjoNqv4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTAyNS84RDdCOUJGMjlE ODQxMUVGODE3RTE0MjBDNEY5QUUwMi9PWnA3SDhRZ2Zyb0hCNmhSVVpYTWFPZzJx X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09acDdIOFFnZnJvSEI2aFJVWlhNYU9nMnFfZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzEwMjUvOEQ3QjlCRjI5RDg0MTFFRjgxN0UxNDIwQzRGOUFFMDIvMDNGRkQ2MUVF RjhBMTFGMDlGNjc4QzA0NjE2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgGdIwDQYJKoZIhvcNAQELBQADggEBAHGwTFm1bSTOvLsV Bn1UQE/Pym1UwUTLrUK8Ce1juTYmG8fGLd0LquP4sUMuF3nbNijKe5a2z9XBoX+k 3EWKgLIwERwmapCWqc+tSEYQPVRIszukrYY3P6o10NI8TDveRhzPbpIkBoPDDw2C ry9oLBNSaOWkmxIsnrjhnzoqvfnnvm4WYI2mY4V/UeuUCfyeysobg89+ZYVjFy50 AgqbMX1Q+mmKzX3U08/CDu3Y9T2NiwVD2KWaZPTrVZXF6jt3Qy49ShXbrm6leh2F tBcgdFqpx1TEucUeWPVSBX5F11pxfTgEBxIMX9VTjTM36gCpbFRVeh3gKdSv4XWV BJtZUwI= -----END CERTIFICATE-----Generated at Sun Jan 18 23:23:35 2026 by rpki-client