This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/85B52606F44311F089BA68A95F6F56BC.roa File: 85B52606F44311F089BA68A95F6F56BC.roa (raw, json) Hash identifier: yev7UF6GiT3r4YilvVioheDs+Lc8lUv834mSPfBVKVE= Subject key identifier: 06:6D:31:14:E8:BD:9C:97:0F:78:5C:1C:77:A4:B9:DD:C7:E3:66:D8 Certificate issuer: /CN=A91430D6/serialNumber=AAC39FD963DE1731D0DA3D4141E4A1E469E98523 Certificate serial: 65 Authority key identifier: AA:C3:9F:D9:63:DE:17:31:D0:DA:3D:41:41:E4:A1:E4:69:E9:85:23 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/85B52606F44311F089BA68A95F6F56BC.roa Signing time: Sun 18 Jan 2026 07:58:49 +0000 ROA not before: Sun 18 Jan 2026 07:58:49 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 154037 IP address blocks: 165.101.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 06:07:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91430D6, serialNumber=AAC39FD963DE1731D0DA3D4141E4A1E469E98523 Validity Not Before: Jan 18 07:58:49 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=696c92b9-499a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:1c:34:c1:63:52:4e:c9:d5:6d:dc:83:02:22: 56:92:4b:2b:1b:4b:f1:77:78:30:12:ce:ce:34:f6: 98:be:34:92:af:a9:76:91:79:47:f5:e2:3c:14:f3: ce:0e:69:df:c6:5c:5d:4f:c6:2b:03:a9:91:bf:36: a5:26:17:0a:f9:4c:47:26:fe:cf:a7:c8:8f:bd:d4: 48:32:ab:a4:8d:86:72:f9:9d:70:32:f7:6a:14:8b: 38:fb:62:e9:a3:a7:4d:10:5e:0f:fa:2b:94:c5:97: 56:c9:7e:ea:7f:fe:50:a2:cf:b2:15:6e:4d:cb:91: b0:0a:8b:27:dd:9e:8d:56:0b:ad:fa:57:54:93:31: 92:bb:12:cd:33:25:26:f4:cf:b5:69:3a:78:cf:9d: 5b:f9:d6:07:13:de:6e:1f:bf:01:87:81:22:6c:11: 83:a6:f6:49:82:35:9d:e4:33:ab:ec:41:8d:f1:39: 87:c2:a8:37:d5:2b:ce:d2:04:7f:98:28:83:ca:6b: 46:fb:e9:6f:65:6a:2d:01:cd:33:99:86:8a:56:0c: 02:9a:2a:78:45:80:27:40:3e:1d:53:13:e3:89:a6: 66:0d:52:e1:64:ff:00:f1:30:1c:48:35:f4:1f:8e: 66:4f:80:d8:33:cd:c5:8b:ee:c5:fe:3b:20:b7:ec: 75:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:6D:31:14:E8:BD:9C:97:0F:78:5C:1C:77:A4:B9:DD:C7:E3:66:D8 X509v3 Authority Key Identifier: keyid:AA:C3:9F:D9:63:DE:17:31:D0:DA:3D:41:41:E4:A1:E4:69:E9:85:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/85B52606F44311F089BA68A95F6F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 165.101.168.0/24 Signature Algorithm: sha256WithRSAEncryption 74:0b:18:32:37:a2:8a:38:0e:8c:39:cb:f9:6c:88:96:99:e0: cf:0f:42:e6:f5:f3:84:60:53:ef:a4:5c:a6:eb:a7:81:f9:73: f0:2a:bf:45:64:3c:22:65:38:0b:03:d9:4a:3c:a0:c6:08:50: bc:d1:66:ac:77:3a:40:5d:9d:d5:c3:01:f9:5a:ba:77:92:e5: 8d:2a:51:1d:2b:88:dd:a3:b5:4f:d1:9b:02:c3:be:b1:0e:2c: 81:0e:36:7e:f0:b8:51:08:31:7e:be:ba:12:a5:d2:f2:11:db: 73:62:2e:45:dd:40:5f:4e:8e:5c:6d:6a:47:1a:1a:48:c3:9a: ae:d3:da:ef:3f:90:75:5d:93:18:1d:a1:c0:7e:72:a5:95:58: 48:3c:cb:db:da:62:25:cd:3c:b2:ec:6b:1a:38:57:45:30:56: 13:7b:39:5e:72:b0:55:b7:aa:e4:98:ab:3a:06:63:d6:bd:8b: ab:12:35:59:e2:38:df:7f:4e:57:ee:ac:4c:de:bf:68:9b:e8: 3d:83:03:71:53:69:44:96:67:dc:9c:99:08:5e:6f:df:ee:99: 78:cf:54:e8:86:9f:93:3b:3c:fd:3c:45:4d:a0:da:07:c0:f6: e2:a4:79:79:9c:4e:00:72:c5:f6:45:f1:dd:9c:b6:17:22:4c: 96:45:91:b9 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MzBENjExMC8GA1UEBRMoQUFDMzlGRDk2M0RFMTczMUQwREEzRDQxNDFFNEExRTQ2 OUU5ODUyMzAeFw0yNjAxMTgwNzU4NDlaFw0yNjEwMzEwMDAwMDBaMBgxFjAUBgNV BAMMDTY5NmM5MmI5LTQ5OWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDeHDTBY1JOydVt3IMCIlaSSysbS/F3eDASzs409pi+NJKvqXaReUf14jwU884O ad/GXF1PxisDqZG/NqUmFwr5TEcm/s+nyI+91Egyq6SNhnL5nXAy92oUizj7Yumj p00QXg/6K5TFl1bJfup//lCiz7IVbk3LkbAKiyfdno1WC636V1STMZK7Es0zJSb0 z7VpOnjPnVv51gcT3m4fvwGHgSJsEYOm9kmCNZ3kM6vsQY3xOYfCqDfVK87SBH+Y KIPKa0b76W9lai0BzTOZhopWDAKaKnhFgCdAPh1TE+OJpmYNUuFk/wDxMBxINfQf jmZPgNgzzcWL7sX+OyC37HVzAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUBm0xFOi9 nJcPeFwcd6S53cfjZtgwHwYDVR0jBBgwFoAUqsOf2WPeFzHQ2j1BQeSh5GnphSMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQzMEQ2LzE3RjA2QTI0NUZF MDExRjBCMkZEOEY1N0M0RjlBRTAyL3FzT2YyV1BlRnpIUTJqMUJRZVNoNUducGhT TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcXNPZjJXUGVGekhRMmoxQlFlU2g1R25waFNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzBENi8xN0YwNkEyNDVGRTAxMUYwQjJGRDhGNTdDNEY5QUUwMi84NUI1MjYwNkY0 NDMxMUYwODlCQTY4QTk1RjZGNTZCQy5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKVlqDANBgkqhkiG9w0BAQsFAAOCAQEAdAsYMjeiijgOjDnL +WyIlpngzw9C5vXzhGBT76Rcpuungflz8Cq/RWQ8ImU4CwPZSjygxghQvNFmrHc6 QF2d1cMB+Vq6d5LljSpRHSuI3aO1T9GbAsO+sQ4sgQ42fvC4UQgxfr66EqXS8hHb c2IuRd1AX06OXG1qRxoaSMOartPa7z+QdV2TGB2hwH5ypZVYSDzL29piJc08suxr GjhXRTBWE3s5XnKwVbeq5JirOgZj1r2LqxI1WeI4339OV+6sTN6/aJvoPYMDcVNp RJZn3JyZCF5v3+6ZeM9U6Iafkzs8/TxFTaDaB8D24qR5eZxOAHLF9kXx3Zy2FyJM lkWRuQ== -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:15 2026 by rpki-client