This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/C577E392D0F711F0BC02385AC4F9AE02.roa File: C577E392D0F711F0BC02385AC4F9AE02.roa (raw, json) Hash identifier: A/1e58q+MdxskPknGiwVRXPIcLRGBTcwWKriVPbQ9n4= Subject key identifier: 0F:48:05:74:7A:2A:9C:19:CF:F0:B9:6F:A0:7C:12:1E:A1:9A:44:89 Certificate issuer: /CN=A91B13FE/serialNumber=52A1C420D827C16CEAA04283DD28B640A315634D Certificate serial: 65 Authority key identifier: 52:A1:C4:20:D8:27:C1:6C:EA:A0:42:83:DD:28:B6:40:A3:15:63:4D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UqHEINgnwWzqoEKD3Si2QKMVY00.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/C577E392D0F711F0BC02385AC4F9AE02.roa Signing time: Thu 04 Dec 2025 09:58:24 +0000 ROA not before: Thu 04 Dec 2025 09:58:24 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 154006 IP address blocks: 165.101.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.crl rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UqHEINgnwWzqoEKD3Si2QKMVY00.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:05:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B13FE, serialNumber=52A1C420D827C16CEAA04283DD28B640A315634D Validity Not Before: Dec 4 09:58:24 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69315b3f-fa47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7f:21:0e:a9:58:04:72:00:54:08:dd:c3:66: 04:96:8d:2e:ab:6e:3e:b9:d4:3d:8e:91:c7:87:67: d4:90:1d:a3:5b:40:27:c8:c8:cb:99:04:3a:6a:ea: 01:da:dc:b5:a0:50:22:b9:71:0f:2c:89:e1:1e:d0: 66:c4:2c:3c:8b:65:4b:00:af:5d:c8:0b:c5:b5:e4: 44:55:38:db:40:43:c4:80:23:4d:a5:2a:25:99:15: 68:91:e8:db:f1:aa:7f:4d:ed:5a:dd:f4:be:ba:f9: 10:e2:09:aa:1c:43:96:70:63:4c:5e:c3:b7:ab:2b: a8:fe:34:06:88:eb:f5:00:12:c0:95:4f:66:3a:96: 73:24:82:8a:3f:a4:e9:0b:17:76:4b:9f:5b:34:5c: 95:80:43:3a:72:21:75:be:36:81:d8:b2:8f:4a:90: 43:45:ad:ba:6a:5e:96:d8:de:25:96:80:fe:55:f7: a8:0c:15:e8:e0:f6:db:f7:20:a8:f9:9f:93:f2:ad: 6c:5e:90:a9:04:3c:8b:a5:60:b7:bf:56:25:6b:43: fd:62:5d:f8:70:8c:e9:5d:a8:6d:e9:80:9e:52:51: 42:b6:13:04:9f:8f:8b:cb:bd:24:07:54:fd:c1:e7: 77:1e:38:ee:f7:18:e6:34:94:6e:5d:51:1e:77:0c: 5b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:48:05:74:7A:2A:9C:19:CF:F0:B9:6F:A0:7C:12:1E:A1:9A:44:89 X509v3 Authority Key Identifier: keyid:52:A1:C4:20:D8:27:C1:6C:EA:A0:42:83:DD:28:B6:40:A3:15:63:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UqHEINgnwWzqoEKD3Si2QKMVY00.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/C577E392D0F711F0BC02385AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 165.101.100.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:96:b2:7b:1c:ad:03:24:52:fd:01:32:b6:b4:7c:7a:03:e0: cd:f5:2c:b3:a3:c5:11:6d:a6:e5:cb:51:07:86:6b:6b:ef:b9: e8:26:f7:4e:2f:f8:09:44:5d:be:9a:4f:1a:e3:a7:32:c9:74: 9e:e3:cb:00:d8:15:16:e6:67:29:e4:2e:98:ca:32:1a:d6:e4: 23:81:2f:86:cd:cf:17:03:fb:ec:0a:40:1c:59:96:67:63:16: 52:ab:e8:26:ec:a3:38:63:2d:fa:b9:d6:95:be:7e:1a:4c:83: 4e:07:ce:b6:2f:05:bf:e8:9e:0e:f0:69:50:0e:51:fd:c9:28: de:12:7e:2b:64:b7:ed:1e:1d:28:bd:41:5d:ca:d7:72:7b:68: 70:c8:b7:15:d5:57:29:2c:00:7a:f9:d7:d0:9d:15:89:bf:fb: 3b:b3:6c:36:eb:ea:7c:52:d0:54:23:fb:d1:cd:01:4e:49:15: da:61:d5:97:44:30:8b:25:ad:7c:39:4f:64:54:ef:38:7f:9c: 52:3f:40:46:f4:cf:26:bc:df:48:84:6f:f7:7e:89:eb:d1:4b: 29:ea:09:88:b6:11:a8:08:f0:6f:c6:ef:bf:20:a6:47:89:1b: ad:4b:44:65:2c:1c:f3:61:98:1a:d4:2e:e8:01:aa:13:b3:27: 81:d7:c6:1d -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MTNGRTExMC8GA1UEBRMoNTJBMUM0MjBEODI3QzE2Q0VBQTA0MjgzREQyOEI2NDBB MzE1NjM0RDAeFw0yNTEyMDQwOTU4MjRaFw0yNjA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MzE1YjNmLWZhNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVfyEOqVgEcgBUCN3DZgSWjS6rbj651D2OkceHZ9SQHaNbQCfIyMuZBDpq6gHa 3LWgUCK5cQ8sieEe0GbELDyLZUsAr13IC8W15ERVONtAQ8SAI02lKiWZFWiR6Nvx qn9N7Vrd9L66+RDiCaocQ5ZwY0xew7erK6j+NAaI6/UAEsCVT2Y6lnMkgoo/pOkL F3ZLn1s0XJWAQzpyIXW+NoHYso9KkENFrbpqXpbY3iWWgP5V96gMFejg9tv3IKj5 n5PyrWxekKkEPIulYLe/ViVrQ/1iXfhwjOldqG3pgJ5SUUK2EwSfj4vLvSQHVP3B 53ceOO73GOY0lG5dUR53DFvVAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUD0gFdHoq nBnP8LlvoHwSHqGaRIkwHwYDVR0jBBgwFoAUUqHEINgnwWzqoEKD3Si2QKMVY00w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxM0ZFLzhEOEUyMkMyNTY0 MzExRjBCMTYyN0ExNUM0RjlBRTAyL1VxSEVJTmdud1d6cW9FS0QzU2kyUUtNVlkw MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVXFIRUlOZ253V3pxb0VLRDNTaTJRS01WWTAwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTNGRS84RDhFMjJDMjU2NDMxMUYwQjE2MjdBMTVDNEY5QUUwMi9DNTc3RTM5MkQw RjcxMUYwQkMwMjM4NUFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKVlZDANBgkqhkiG9w0BAQsFAAOCAQEAi5ayexytAyRS/QEy trR8egPgzfUss6PFEW2m5ctRB4Zra++56Cb3Ti/4CURdvppPGuOnMsl0nuPLANgV FuZnKeQumMoyGtbkI4Evhs3PFwP77ApAHFmWZ2MWUqvoJuyjOGMt+rnWlb5+GkyD TgfOti8Fv+ieDvBpUA5R/cko3hJ+K2S37R4dKL1BXcrXcntocMi3FdVXKSwAevnX 0J0Vib/7O7NsNuvqfFLQVCP70c0BTkkV2mHVl0QwiyWtfDlPZFTvOH+cUj9ARvTP JrzfSIRv936J69FLKeoJiLYRqAjwb8bvvyCmR4kbrUtEZSwc82GYGtQu6AGqE7Mn gdfGHQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:47:44 2025 by rpki-client