This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/160AF8E8CE8D11F0BE6FB51EC4F9AE02.roa File: 160AF8E8CE8D11F0BE6FB51EC4F9AE02.roa (raw, json) Hash identifier: 6w+qBhaQP14zy72YyydEIPq0/gA1jmSu65E6u7NcIZY= Subject key identifier: E5:27:4D:DF:F0:84:A6:E6:50:D6:A9:84:5D:10:AF:CF:D5:F8:F6:02 Certificate issuer: /CN=A91CFA8E/serialNumber=488FB0697C446960FFDA2643E6BC9B44BA3D1CAC Certificate serial: 03 Authority key identifier: 48:8F:B0:69:7C:44:69:60:FF:DA:26:43:E6:BC:9B:44:BA:3D:1C:AC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SI-waXxEaWD_2iZD5rybRLo9HKw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/160AF8E8CE8D11F0BE6FB51EC4F9AE02.roa Signing time: Mon 01 Dec 2025 08:09:40 +0000 ROA not before: Mon 01 Dec 2025 08:09:40 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 56309 IP address blocks: 157.85.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.crl rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SI-waXxEaWD_2iZD5rybRLo9HKw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 01:21:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFA8E, serialNumber=488FB0697C446960FFDA2643E6BC9B44BA3D1CAC Validity Not Before: Dec 1 08:09:40 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=692d4d44-6a93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:dc:4f:57:06:df:a4:bb:84:66:bb:6d:e8:a2: 5a:81:1d:23:b0:c7:46:c7:7f:83:c1:04:12:82:31: 07:3d:84:bb:f5:ce:08:70:ef:f6:36:09:10:31:cb: 33:45:10:88:20:6c:42:4b:3d:8d:90:37:2d:78:e4: 39:3a:f4:74:19:0a:d4:33:3a:80:90:9b:0b:61:2d: e9:60:93:4e:79:08:fa:5a:e6:77:90:da:ab:c9:0b: 4f:fc:3c:74:cc:de:ec:24:f3:a5:e1:9b:62:b9:b9: 9c:2d:28:a8:ca:d6:e4:46:d8:7b:df:92:05:1c:14: f1:1b:41:d9:63:ac:64:91:21:82:b9:63:e0:c6:ae: bd:7c:34:83:82:ea:25:7f:bb:00:e8:79:57:f8:f5: 19:92:98:76:11:d6:58:3c:13:00:d3:99:9a:fb:d1: 9e:65:05:90:66:d1:09:a1:b0:06:46:82:85:23:ab: 3c:51:c1:33:c0:4e:a3:ac:ae:7e:51:e8:0c:0c:eb: 4d:9e:85:28:2d:4b:63:8f:94:7d:22:e0:8a:20:3b: 74:14:89:ed:21:93:6b:a7:70:bf:3f:0b:ff:0f:68: 99:9a:25:b0:13:28:ad:8c:f8:93:f3:93:09:37:df: 0d:e8:e1:29:1e:a2:9b:00:b3:2e:e2:b9:67:a3:73: 4b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:27:4D:DF:F0:84:A6:E6:50:D6:A9:84:5D:10:AF:CF:D5:F8:F6:02 X509v3 Authority Key Identifier: keyid:48:8F:B0:69:7C:44:69:60:FF:DA:26:43:E6:BC:9B:44:BA:3D:1C:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SI-waXxEaWD_2iZD5rybRLo9HKw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/160AF8E8CE8D11F0BE6FB51EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.85.96.0/20 Signature Algorithm: sha256WithRSAEncryption 4c:1a:bf:c6:2c:3a:e9:33:56:f0:2f:73:d7:94:b6:36:e4:e5: 0a:c1:08:32:c1:b1:7b:6b:cb:cf:83:9e:b7:11:45:70:35:26: 66:cb:77:81:38:fa:74:04:e3:09:21:78:57:40:97:ad:33:d7: 22:fb:f4:9b:f8:3b:84:7b:1e:83:90:27:06:5b:82:b4:88:0e: ec:1a:bd:a6:61:1a:8f:40:91:ea:e1:15:d6:a5:3f:02:78:17: 89:6d:21:18:23:3a:9d:3f:c6:d0:20:75:a0:16:03:86:6f:c8: dd:57:65:ee:01:02:68:5d:b8:21:1a:04:c0:94:c0:a7:34:3d: ac:2e:78:a6:a3:93:9f:c2:9f:45:81:9c:ce:5c:00:34:fc:0f: 0b:6a:72:2c:a0:d9:c2:ef:51:cf:da:81:93:bf:82:d0:5d:c9: 7b:f8:4b:9f:96:fd:ff:48:c1:da:9a:c9:a9:58:ec:c6:36:4a: 8a:9f:87:c0:80:e9:64:71:d1:18:e8:3a:01:e1:6a:8c:2b:7e: 95:55:36:86:b9:96:15:c2:27:f2:ff:97:66:17:8f:09:12:db: a9:87:72:a1:4e:96:86:5e:95:0f:0f:27:ed:6d:68:14:fd:b7: 8f:05:3c:d1:ab:e4:f6:fc:1a:1c:76:57:4d:7a:fb:2e:f5:19: 4c:4b:93:97 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RkE4RTExMC8GA1UEBRMoNDg4RkIwNjk3QzQ0Njk2MEZGREEyNjQzRTZCQzlCNDRC QTNEMUNBQzAeFw0yNTEyMDEwODA5NDBaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MmQ0ZDQ0LTZhOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQ3E9XBt+ku4Rmu23oolqBHSOwx0bHf4PBBBKCMQc9hLv1zghw7/Y2CRAxyzNF EIggbEJLPY2QNy145Dk69HQZCtQzOoCQmwthLelgk055CPpa5neQ2qvJC0/8PHTM 3uwk86Xhm2K5uZwtKKjK1uRG2HvfkgUcFPEbQdljrGSRIYK5Y+DGrr18NIOC6iV/ uwDoeVf49RmSmHYR1lg8EwDTmZr70Z5lBZBm0QmhsAZGgoUjqzxRwTPATqOsrn5R 6AwM602ehSgtS2OPlH0i4IogO3QUie0hk2uncL8/C/8PaJmaJbATKK2M+JPzkwk3 3w3o4SkeopsAsy7iuWejc0sJAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU5SdN3/CE puZQ1qmEXRCvz9X49gIwHwYDVR0jBBgwFoAUSI+waXxEaWD/2iZD5rybRLo9HKww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGQThFLzZCOUEyMzM4Q0U2 RjExRjBBMzIzREY1NUM0RjlBRTAyL1NJLXdhWHhFYVdEXzJpWkQ1cnliUkxvOUhL dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvU0ktd2FYeEVhV0RfMmlaRDVyeWJSTG85SEt3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkE4RS82QjlBMjMzOENFNkYxMUYwQTMyM0RGNTVDNEY5QUUwMi8xNjBBRjhFOENF OEQxMUYwQkU2RkI1MUVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEBJ1VYDANBgkqhkiG9w0BAQsFAAOCAQEATBq/xiw66TNW8C9z 15S2NuTlCsEIMsGxe2vLz4OetxFFcDUmZst3gTj6dATjCSF4V0CXrTPXIvv0m/g7 hHseg5AnBluCtIgO7Bq9pmEaj0CR6uEV1qU/AngXiW0hGCM6nT/G0CB1oBYDhm/I 3Vdl7gECaF24IRoEwJTApzQ9rC54pqOTn8KfRYGczlwANPwPC2pyLKDZwu9Rz9qB k7+C0F3Je/hLn5b9/0jB2prJqVjsxjZKip+HwIDpZHHRGOg6AeFqjCt+lVU2hrmW FcIn8v+XZhePCRLbqYdyoU6Whl6VDw8n7W1oFP23jwU80avk9vwaHHZXTXr7LvUZ TEuTlw== -----END CERTIFICATE-----Generated at Wed Dec 3 14:52:57 2025 by rpki-client