This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/FC3E29FC85E111EFB365E459C4F9AE02.roa
File: FC3E29FC85E111EFB365E459C4F9AE02.roa (raw, json)
Hash identifier: Y3P581iwNBtM7GAEmYXEwohRufrsNXEYBtPTu9fYw2o=
Subject key identifier: E6:CD:DD:3D:71:FD:F1:F1:AE:26:66:C1:4E:FB:2C:A5:C7:D9:A6:59
Certificate issuer: /CN=A91C68AD/serialNumber=E9F2CE483F1B06D29D5EA2ABE375BD1D22A9E1C4
Certificate serial: DE
Authority key identifier: E9:F2:CE:48:3F:1B:06:D2:9D:5E:A2:AB:E3:75:BD:1D:22:A9:E1:C4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/FC3E29FC85E111EFB365E459C4F9AE02.roa
Signing time: Tue 09 Dec 2025 03:42:57 +0000
ROA not before: Tue 09 Dec 2025 03:42:57 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 139005
IP address blocks: 160.187.216.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl
rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 04:37:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222 (0xde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C68AD, serialNumber=E9F2CE483F1B06D29D5EA2ABE375BD1D22A9E1C4
Validity
Not Before: Dec 9 03:42:57 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69379ac1-7d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:37:97:34:2e:77:69:6b:57:69:0c:64:c2:46:
15:81:8f:90:17:69:47:78:ba:42:0f:4e:85:9b:af:
86:0b:42:30:13:90:a0:cf:02:00:ac:a4:f9:7e:32:
33:d3:fc:1e:14:5f:ff:64:4b:74:8e:00:56:35:fd:
32:89:e1:e9:65:78:22:6b:86:f5:2b:3e:12:41:9d:
d0:bf:cc:a0:24:0a:8f:2e:9d:10:05:59:1e:15:67:
06:d0:df:e6:42:f5:32:5f:f9:16:39:ca:fb:e7:d9:
13:19:fd:a9:ce:e0:05:3e:6d:61:bc:aa:bf:cf:29:
b4:76:23:83:75:54:02:de:87:ba:f2:22:9a:12:9f:
59:87:aa:9d:e2:1e:bc:91:29:09:0c:bd:8a:bf:8e:
74:49:f4:84:ee:0f:23:2a:90:01:0a:2d:34:43:ec:
a5:3b:7b:54:be:fa:9f:bf:04:f8:db:84:90:c9:86:
c0:24:d9:65:7d:da:f7:28:a8:1c:78:61:c1:58:b9:
aa:ea:5f:79:10:2d:32:3e:7e:6f:e7:00:04:0c:21:
ca:c7:18:6c:cf:79:79:5b:8b:a3:d8:0a:07:a8:bf:
1f:c8:df:15:97:a2:f5:22:fe:a4:2b:47:0e:5f:d1:
74:76:6b:2c:ce:0e:71:16:3a:cc:2b:25:04:bf:0e:
c7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:CD:DD:3D:71:FD:F1:F1:AE:26:66:C1:4E:FB:2C:A5:C7:D9:A6:59
X509v3 Authority Key Identifier:
keyid:E9:F2:CE:48:3F:1B:06:D2:9D:5E:A2:AB:E3:75:BD:1D:22:A9:E1:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/FC3E29FC85E111EFB365E459C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.216.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:92:ff:de:ba:f0:39:89:7f:b1:10:e4:7e:20:13:59:0a:59:
f6:d3:5d:ab:43:5d:52:fe:44:8f:5d:62:2d:65:54:51:38:aa:
8b:ab:f5:d5:cd:c3:fa:4a:74:15:75:d0:dc:96:01:33:e7:b5:
83:c5:93:52:cc:78:6b:e9:c0:df:d2:7c:a3:60:2b:61:32:74:
a2:6a:c3:7f:0f:11:ca:5c:ae:87:70:44:87:73:c1:0f:b9:d4:
a7:00:49:bf:03:47:f7:f4:80:a8:ae:86:62:d4:59:35:05:e9:
89:6b:50:77:a4:7d:af:90:72:e0:5b:49:1a:d9:e5:47:d1:91:
0f:e5:73:c1:53:47:16:63:c0:5c:e0:45:5f:49:3b:9e:34:6d:
03:51:7c:69:25:0a:c7:1c:0d:de:89:90:50:e3:1e:b7:30:1d:
9f:8f:ef:a2:8c:2a:41:8c:91:0d:bf:ae:6d:ea:29:36:ff:7e:
9d:fd:79:68:cc:a0:94:0a:4e:e9:82:dc:e7:03:92:37:7f:01:
65:f0:19:3a:37:7f:ac:ba:aa:15:52:74:be:8c:d8:32:62:ea:
08:99:9a:e3:56:5e:eb:a2:6f:71:17:46:1f:86:f1:49:92:c7:
3f:1e:f9:b9:a6:30:63:32:be:16:05:7d:ef:84:a0:6e:af:9a:
12:81:9c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 14:30:08 2025 by rpki-client