This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/CAA5A90CC47811F0833DFF5DC4F9AE02.roa File: CAA5A90CC47811F0833DFF5DC4F9AE02.roa (raw, json) Hash identifier: qXETRU+GynJDK8p52SWay/hILThEiMclY+eMG2SJhMY= Subject key identifier: C4:C5:26:59:15:A9:C1:99:A8:E5:E3:C7:2A:83:F7:FB:31:6F:92:33 Certificate issuer: /CN=A91E1BB0/serialNumber=17A2365B640ADAB2034339E1E5FF344E478B5898 Certificate serial: 02 Authority key identifier: 17:A2:36:5B:64:0A:DA:B2:03:43:39:E1:E5:FF:34:4E:47:8B:58:98 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F6I2W2QK2rIDQznh5f80TkeLWJg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/CAA5A90CC47811F0833DFF5DC4F9AE02.roa Signing time: Tue 18 Nov 2025 12:19:12 +0000 ROA not before: Tue 18 Nov 2025 12:19:12 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 153351 IP address blocks: 160.187.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/F6I2W2QK2rIDQznh5f80TkeLWJg.crl rsync://rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/F6I2W2QK2rIDQznh5f80TkeLWJg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F6I2W2QK2rIDQznh5f80TkeLWJg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 06:10:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1BB0, serialNumber=17A2365B640ADAB2034339E1E5FF344E478B5898 Validity Not Before: Nov 18 12:19:12 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=691c6440-9003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:99:a6:f3:9f:ba:b6:3a:03:5e:a6:55:ba:f1: a4:98:5e:a6:66:e5:e0:17:7a:c5:4d:0f:0f:8f:53: cf:8b:11:a5:c2:8b:f9:87:80:1a:9c:52:83:9f:f3: 2f:f8:0f:7d:15:d0:d7:a1:7c:b1:d5:f0:de:91:51: 88:b6:24:38:e6:cd:2c:1e:70:15:97:ea:f0:b2:73: ec:8d:36:25:45:3a:21:c9:30:ba:26:23:8e:6e:03: c6:97:41:4c:59:ac:51:b5:6c:9c:c8:6f:c0:75:7d: 7f:28:aa:80:7d:7a:77:48:e0:0b:0f:73:bd:d0:a3: 7f:0e:e3:56:21:e8:06:7f:32:0f:86:e5:f1:50:26: ca:3d:58:96:f2:03:c9:63:e4:1e:8c:6b:13:a6:5f: 74:90:d3:cb:94:5f:dd:24:a2:f4:1e:b8:30:ae:1b: 87:4d:bb:5b:08:1a:22:62:dd:41:91:b8:bb:e2:01: 66:ad:dd:6f:3b:1d:f2:a4:d1:7b:04:ef:4e:36:3c: a5:a2:45:da:1d:eb:bd:54:27:cb:af:eb:e1:35:19: 5d:50:d5:ef:3e:1c:88:d2:19:86:05:55:74:b9:cd: f3:5b:84:34:01:76:17:9c:68:93:3e:0d:91:2c:dd: f1:7f:8c:a8:b3:4f:bc:41:9a:05:52:85:ad:04:49: e1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:C5:26:59:15:A9:C1:99:A8:E5:E3:C7:2A:83:F7:FB:31:6F:92:33 X509v3 Authority Key Identifier: keyid:17:A2:36:5B:64:0A:DA:B2:03:43:39:E1:E5:FF:34:4E:47:8B:58:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/F6I2W2QK2rIDQznh5f80TkeLWJg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F6I2W2QK2rIDQznh5f80TkeLWJg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/CAA5A90CC47811F0833DFF5DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.187.215.0/24 Signature Algorithm: sha256WithRSAEncryption 28:ac:12:60:38:d9:bf:3c:35:10:09:98:82:3c:0e:d6:06:81: ee:85:01:6a:f1:6d:db:6c:78:64:89:96:10:45:e3:a3:2d:f7: 46:b5:c5:a9:1f:99:ca:14:5a:2d:23:86:fb:a6:a3:5b:ef:15: 73:c3:bf:1e:e3:b0:33:42:d9:4a:3f:b8:2c:2e:76:44:21:72: a0:ee:2e:07:97:13:33:f2:e5:be:dd:e0:d1:e4:d7:5a:fc:c0: 06:7f:d8:1f:85:39:c3:eb:80:aa:84:9a:68:0c:02:02:bd:12: e5:9c:cc:3d:05:c4:12:53:a1:0b:64:3f:a2:bc:75:b3:a4:de: 06:7a:c9:6c:74:6a:c1:ab:76:da:d9:5a:e5:8b:5b:f1:3c:e6: 6e:8c:70:ae:75:a8:7e:06:32:b3:fc:39:8e:9f:f9:0e:d9:70: 32:f7:52:97:52:03:60:90:00:c6:8d:12:74:1e:5e:0c:1d:b1: 93:fc:04:7a:b1:20:7e:d3:b7:6a:2a:79:96:ac:4c:d0:89:d9: 3b:29:d8:be:e6:b4:e2:33:b1:2d:95:dd:63:30:c4:9f:e2:39: bb:a9:9f:53:02:94:d3:d6:b9:14:cb:48:43:93:39:38:4b:6c: 63:bc:42:4e:ea:64:63:5d:96:90:33:f3:f0:fe:6e:1c:56:7a: 04:a7:77:8b -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MUJCMDExMC8GA1UEBRMoMTdBMjM2NUI2NDBBREFCMjAzNDMzOUUxRTVGRjM0NEU0 NzhCNTg5ODAeFw0yNTExMTgxMjE5MTJaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MWM2NDQwLTkwMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOmabzn7q2OgNeplW68aSYXqZm5eAXesVNDw+PU8+LEaXCi/mHgBqcUoOf8y/4 D30V0NehfLHV8N6RUYi2JDjmzSwecBWX6vCyc+yNNiVFOiHJMLomI45uA8aXQUxZ rFG1bJzIb8B1fX8oqoB9endI4AsPc73Qo38O41Yh6AZ/Mg+G5fFQJso9WJbyA8lj 5B6MaxOmX3SQ08uUX90kovQeuDCuG4dNu1sIGiJi3UGRuLviAWat3W87HfKk0XsE 7042PKWiRdod671UJ8uv6+E1GV1Q1e8+HIjSGYYFVXS5zfNbhDQBdhecaJM+DZEs 3fF/jKizT7xBmgVSha0ESeG1AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUxMUmWRWp wZmo5ePHKoP3+zFvkjMwHwYDVR0jBBgwFoAUF6I2W2QK2rIDQznh5f80TkeLWJgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxQkIwLzUzRURCNEQwQzQ3 ODExRjA4NTM4NTAyNUM0RjlBRTAyL0Y2STJXMlFLMnJJRFF6bmg1ZjgwVGtlTFdK Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRjZJMlcyUUsycklEUXpuaDVmODBUa2VMV0pnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUJCMC81M0VEQjREMEM0NzgxMUYwODUzODUwMjVDNEY5QUUwMi9DQUE1QTkwQ0M0 NzgxMUYwODMzREZGNURDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKC71zANBgkqhkiG9w0BAQsFAAOCAQEAKKwSYDjZvzw1EAmY gjwO1gaB7oUBavFt22x4ZImWEEXjoy33RrXFqR+ZyhRaLSOG+6ajW+8Vc8O/HuOw M0LZSj+4LC52RCFyoO4uB5cTM/Llvt3g0eTXWvzABn/YH4U5w+uAqoSaaAwCAr0S 5ZzMPQXEElOhC2Q/orx1s6TeBnrJbHRqwat22tla5Ytb8TzmboxwrnWofgYys/w5 jp/5DtlwMvdSl1IDYJAAxo0SdB5eDB2xk/wEerEgftO3aip5lqxM0InZOynYvua0 4jOxLZXdYzDEn+I5u6mfUwKU09a5FMtIQ5M5OEtsY7xCTupkY12WkDPz8P5uHFZ6 BKd3iw== -----END CERTIFICATE-----Generated at Wed Dec 3 14:52:22 2025 by rpki-client