This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5A9096F8CF3711F0B1F0FA45C4F9AE02.roa
File: 5A9096F8CF3711F0B1F0FA45C4F9AE02.roa (raw, json)
Hash identifier: REBkyfiqd/0tbe+uynnZMf07gxZFi2MFA1Zr0tt7lNQ=
Subject key identifier: E5:28:16:58:B6:79:82:2F:9E:A8:DF:A9:CC:04:9C:A4:7B:37:90:F1
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 204D
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5A9096F8CF3711F0B1F0FA45C4F9AE02.roa
Signing time: Tue 02 Dec 2025 04:28:30 +0000
ROA not before: Tue 02 Dec 2025 04:28:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 154068
IP address blocks: 165.101.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8269 (0x204d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Dec 2 04:28:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=692e6aee-b69b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:33:19:a4:da:70:c8:fc:bb:3a:64:ff:b6:2e:
e5:fd:7b:3b:e4:9a:c3:38:e7:d7:bf:2f:0e:b9:d5:
0a:d7:39:ba:08:9b:3e:fb:e0:f5:ac:b5:e4:19:02:
e6:39:87:c8:54:24:ab:1b:21:e4:31:46:dc:62:88:
f8:a8:62:b6:7d:48:91:55:79:2c:c7:27:02:45:c3:
36:a8:f8:d3:31:33:30:06:b8:cd:e6:f3:95:03:4a:
a1:57:57:50:df:96:fe:27:8f:56:d6:3b:2b:08:da:
3b:27:22:2b:3d:61:2b:21:7c:35:f8:65:68:fb:28:
a5:f1:db:74:f9:18:13:1b:97:da:f5:87:41:79:75:
7b:f7:f7:11:b6:b0:1a:10:11:67:bb:9b:d6:aa:aa:
1d:c6:c1:e6:5a:aa:70:84:5e:97:d2:b2:06:ff:89:
1d:d1:63:fb:cc:24:c1:5e:97:e0:e0:c1:27:f6:d9:
d7:1d:0c:9d:58:a1:70:86:69:eb:e6:c7:60:50:8b:
76:97:d5:e7:c4:8a:2b:fc:93:41:b1:f2:e4:08:a8:
a4:ce:50:e0:e3:ac:db:56:cf:fb:a6:f3:d8:80:f4:
65:cb:56:ae:4b:88:2f:7d:df:db:9f:63:99:e0:49:
17:84:69:95:cd:99:1b:86:e9:b7:47:87:75:83:0a:
a1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:28:16:58:B6:79:82:2F:9E:A8:DF:A9:CC:04:9C:A4:7B:37:90:F1
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5A9096F8CF3711F0B1F0FA45C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.101.225.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:eb:e6:1c:cb:94:a0:d9:56:ed:45:6b:b1:05:d2:84:a0:66:
cc:01:dd:08:85:cd:66:21:3e:f0:17:68:34:bb:76:6f:3d:3f:
1a:82:27:c7:ce:c5:c8:35:c1:e3:19:6c:ea:8a:9b:72:88:0b:
7c:6d:bd:43:c1:4e:b9:d0:96:0e:ea:29:0c:7d:35:6d:bf:ce:
32:0f:06:82:78:3a:1b:09:c3:89:8e:c2:05:1c:35:b4:d0:b6:
a8:8f:46:0c:f8:7d:17:8a:c3:3e:a7:45:fd:a7:a7:5e:2d:c5:
2f:e3:74:13:81:81:43:19:69:51:b3:08:cc:ba:f2:ee:f7:7b:
62:a4:42:4e:87:27:16:5b:34:ed:5b:5a:07:5b:0d:83:85:64:
a3:db:ac:2c:7e:ea:60:46:1d:ed:84:14:75:c0:0e:a1:b5:52:
c8:14:88:b4:85:41:71:03:d3:37:8a:7b:38:c6:bd:1a:63:54:
73:98:50:24:1a:ba:83:e3:d0:09:62:2c:f0:94:4c:dc:9e:6b:
f9:f4:b4:18:e1:13:95:23:c2:5b:24:b0:97:6c:41:ef:89:8a:
47:28:2b:53:72:12:d2:88:f3:7c:c2:74:8a:cc:40:e7:5b:d7:
46:67:b0:8d:2c:58:8c:d1:db:f1:3e:06:7d:35:51:46:bf:c0:
86:fe:7b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:36:54 2025 by rpki-client