This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/427996B2D4CF11F0BFE5643BC4F9AE02.roa File: 427996B2D4CF11F0BFE5643BC4F9AE02.roa (raw, json) Hash identifier: 4VNLn+x8t23/JHL3ZOopb+YwUiMDsvRa6dDINvkfAVI= Subject key identifier: C6:2A:F7:13:3B:53:0D:5F:9B:E2:AB:75:98:8F:28:B0:F3:3D:BD:06 Certificate issuer: /CN=A91CF4FE/serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8 Certificate serial: 35A9 Authority key identifier: 16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/427996B2D4CF11F0BFE5643BC4F9AE02.roa Signing time: Tue 09 Dec 2025 07:25:45 +0000 ROA not before: Tue 09 Dec 2025 07:25:45 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 45806 IP address blocks: 1.179.161.0/24 maxlen: 24 1.179.211.0/24 maxlen: 24 1.179.223.0/24 maxlen: 24 182.52.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 03:11:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13737 (0x35a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF4FE, serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8 Validity Not Before: Dec 9 07:25:45 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=6937cef9-c404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:70:08:9d:99:83:a6:38:0c:e1:7e:7c:3e:0a: 92:8c:7f:a1:7b:de:9d:ff:f7:1a:d6:55:37:c9:6d: 6d:bb:c3:d3:95:7a:7b:0b:ee:78:6d:0d:a6:e8:f7: 77:38:af:85:00:96:30:c8:94:28:93:7c:53:85:0a: 7e:0e:6a:c4:66:76:3f:54:51:a0:ae:a7:1d:20:7e: bd:6a:68:9e:46:c4:e7:26:79:06:35:49:f8:1f:c4: 42:15:f4:08:4f:c5:50:d3:ed:55:c2:48:71:79:a6: d8:9d:b8:de:91:55:93:0a:1a:1d:e5:a0:15:95:63: 97:89:a3:61:53:b9:01:17:35:fd:54:48:5b:4e:b9: a1:3a:e8:ea:86:4c:5a:ca:f7:b6:da:0f:1d:be:c7: cd:81:dc:fa:02:37:13:46:cb:9c:ef:aa:39:40:a3: 17:f1:b6:2c:c4:cd:34:e9:a2:a2:91:6c:e9:ee:35: e5:35:67:1e:01:75:cc:19:7e:c6:ff:df:4a:8a:69: 83:6e:ad:56:40:08:25:f6:20:25:38:b0:ed:b8:f4: dd:76:3f:ab:80:95:cd:59:c5:83:64:f2:48:7e:b2: 90:58:0a:41:ad:b3:3f:7e:e8:11:59:30:0a:ed:a3: ef:05:12:33:32:2c:cb:70:3e:ef:a7:bd:dc:fd:3b: cd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:2A:F7:13:3B:53:0D:5F:9B:E2:AB:75:98:8F:28:B0:F3:3D:BD:06 X509v3 Authority Key Identifier: keyid:16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/427996B2D4CF11F0BFE5643BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.179.161.0/24 1.179.211.0/24 1.179.223.0/24 182.52.154.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:42:a7:69:fd:1c:43:e6:d2:1c:4f:4e:16:a2:65:48:cb:53: f5:57:af:f3:68:89:4c:c4:e8:63:46:03:f8:35:27:84:4e:f5: 08:61:05:34:83:2e:35:25:5d:dc:17:67:1d:e9:d8:30:25:7a: 57:a2:c9:9e:2d:32:a7:6a:a1:26:4b:58:61:d8:45:6e:94:03: 61:5a:fc:a0:10:4f:63:b9:a0:c5:df:68:1f:f7:8f:d5:03:64: f9:cc:8e:c6:02:36:12:2f:08:27:48:09:6b:36:b4:65:a4:ed: 54:02:0b:cc:f7:9a:47:06:a5:91:f2:8a:35:46:a4:17:ab:70: 17:ae:ac:1b:50:09:63:a0:e5:30:b0:35:b6:50:de:1f:c9:63: 43:05:f4:85:60:bb:a2:e0:f1:66:b1:84:96:81:e9:71:09:1b: 31:d9:87:07:df:60:30:28:2f:1a:f6:98:60:9f:26:f7:86:59: 9d:4c:43:fc:2f:83:18:45:75:1f:06:8e:b6:27:01:34:5a:e8: ea:86:70:ac:b1:f4:e6:78:a6:44:54:b3:ee:a8:c0:ad:5f:6b: bd:a7:22:27:92:d0:98:c6:80:2e:6c:64:87:d8:f1:89:89:54: 62:81:80:eb:be:0c:7b:98:71:98:62:e7:45:6d:83:fe:9c:76: a9:a6:32:07 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICNakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y0RkUxMTAvBgNVBAUTKDE2QjU2NEI3NThERkNENTJDNUNFODkxMTkyRTMxQjcx NUIxQ0JGRTgwHhcNMjUxMjA5MDcyNTQ1WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTM3Y2VmOS1jNDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2HAInZmDpjgM4X58PgqSjH+he96d//ca1lU3yW1tu8PTlXp7C+54bQ2m6Pd3 OK+FAJYwyJQok3xThQp+DmrEZnY/VFGgrqcdIH69amieRsTnJnkGNUn4H8RCFfQI T8VQ0+1VwkhxeabYnbjekVWTChod5aAVlWOXiaNhU7kBFzX9VEhbTrmhOujqhkxa yve22g8dvsfNgdz6AjcTRsuc76o5QKMX8bYsxM006aKikWzp7jXlNWceAXXMGX7G /99KimmDbq1WQAgl9iAlOLDtuPTddj+rgJXNWcWDZPJIfrKQWApBrbM/fugRWTAK 7aPvBRIzMizLcD7vp73c/TvNZwIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFMYq9xM7 Uw1fm+KrdZiPKLDzPb0GMB8GA1UdIwQYMBaAFBa1ZLdY381Sxc6JEZLjG3FbHL/o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjRGRS9CQTEzMTI0RTFE ODUxMUUyQTc3OTk5REMwOEIwMkNEMi9GclZrdDFqZnpWTEZ6b2tSa3VNYmNWc2N2 LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZyVmt0MWpmelZMRnpva1JrdU1iY1ZzY3YtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0Y0RkUvQkExMzEyNEUxRDg1MTFFMkE3Nzk5OURDMDhCMDJDRDIvNDI3OTk2QjJE NENGMTFGMEJGRTU2NDNCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAABs6EDBAABs9MDBAABs98DBAC2NJowDQYJKoZIhvcNAQEL BQADggEBAC5Cp2n9HEPm0hxPThaiZUjLU/VXr/NoiUzE6GNGA/g1J4RO9QhhBTSD LjUlXdwXZx3p2DAleleiyZ4tMqdqoSZLWGHYRW6UA2Fa/KAQT2O5oMXfaB/3j9UD ZPnMjsYCNhIvCCdICWs2tGWk7VQCC8z3mkcGpZHyijVGpBercBeurBtQCWOg5TCw NbZQ3h/JY0MF9IVgu6Lg8WaxhJaB6XEJGzHZhwffYDAoLxr2mGCfJveGWZ1MQ/wv gxhFdR8GjrYnATRa6OqGcKyx9OZ4pkRUs+6owK1fa72nIieS0JjGgC5sZIfY8YmJ VGKBgOu+DHuYcZhi50Vtg/6cdqmmMgc= -----END CERTIFICATE-----Generated at Fri Dec 12 15:43:24 2025 by rpki-client