This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/35CA66BABC2111F0A08A6F79C4F9AE02.roa File: 35CA66BABC2111F0A08A6F79C4F9AE02.roa (raw, json) Hash identifier: rpmrXdQJLd8mWrJCCVBclKAPg3Mu6Bj/cHb9ZSARUHQ= Subject key identifier: 66:A8:E0:E8:A6:66:BA:B1:99:CB:14:38:96:FA:30:E4:48:42:C5:DC Certificate issuer: /CN=A91C7E5B/serialNumber=AB53D9928102B919DB7C5465C8DD5FF2667443B3 Certificate serial: 5E Authority key identifier: AB:53:D9:92:81:02:B9:19:DB:7C:54:65:C8:DD:5F:F2:66:74:43:B3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/35CA66BABC2111F0A08A6F79C4F9AE02.roa Signing time: Fri 07 Nov 2025 21:33:35 +0000 ROA not before: Fri 07 Nov 2025 21:33:35 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 213549 IP address blocks: 165.99.164.0/24 maxlen: 25 165.99.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.crl rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:56:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7E5B, serialNumber=AB53D9928102B919DB7C5465C8DD5FF2667443B3 Validity Not Before: Nov 7 21:33:35 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=690e65af-b8ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9e:ff:96:b5:e5:27:b4:ab:ba:73:02:53:2c: 61:63:9d:12:1a:5c:6a:9a:33:a7:4a:b8:a0:62:63: 0b:2a:54:d2:89:ec:81:a7:3d:ec:1b:7b:36:f0:4c: 9b:eb:37:28:2a:3e:8e:12:50:9b:ae:77:d7:91:9b: 8f:9f:13:10:e4:93:d5:c4:e1:0b:ee:08:aa:4c:20: 5b:a4:59:8d:30:3a:4d:32:69:56:5d:2b:c4:a4:6a: 7f:61:ae:05:dc:0a:97:e3:8d:67:ef:f5:da:5d:ff: 5b:00:d4:a6:63:0d:0a:31:bd:7c:12:d7:db:82:85: 42:47:e9:39:92:e3:30:d1:21:37:8f:dd:38:3b:cc: 84:2c:4a:b6:25:1f:db:7b:44:22:9d:56:33:db:56: 92:14:8e:c0:c5:79:fe:ef:a6:51:76:67:1a:4d:3d: f6:dd:55:5f:30:c6:87:f5:f0:5e:4c:96:d3:0c:54: e4:f3:c3:c1:bc:5f:d5:60:0f:8b:eb:4b:5a:37:d2: 4b:fe:ea:ea:1e:24:6d:9f:c0:4d:28:70:11:a3:81: dd:cf:25:68:e8:8e:29:63:ed:a6:95:d1:50:c7:59: 64:14:44:25:59:47:82:d9:88:62:e6:cc:d1:3c:ae: 61:67:71:81:e6:c4:a1:2b:82:5a:10:c9:c4:2e:0c: 0b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A8:E0:E8:A6:66:BA:B1:99:CB:14:38:96:FA:30:E4:48:42:C5:DC X509v3 Authority Key Identifier: keyid:AB:53:D9:92:81:02:B9:19:DB:7C:54:65:C8:DD:5F:F2:66:74:43:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/35CA66BABC2111F0A08A6F79C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 165.99.164.0/23 Signature Algorithm: sha256WithRSAEncryption d0:b1:a5:f4:c5:f1:61:d9:f3:24:06:c4:37:40:8f:be:ef:18: 44:8b:ef:f7:3c:22:bf:ee:74:d2:ae:c5:61:2b:87:d8:e5:cb: 57:70:19:63:5a:c6:b1:d7:5c:b1:61:ff:67:b9:fb:94:e2:93: 07:a8:b9:ec:95:95:39:22:0c:8e:05:b7:c4:96:66:4c:21:95: be:5a:e8:9c:39:56:00:57:be:bd:b9:33:3e:97:05:42:be:70: bc:35:17:58:85:79:cb:2c:e2:39:1f:36:85:46:13:ec:64:7f: 45:e6:26:06:99:fd:89:c5:b3:5c:23:87:07:b1:96:70:0f:1e: c0:71:47:3f:ac:db:02:5f:d1:8e:2c:3f:93:a1:e9:59:a6:c3: 3f:74:fb:1e:60:90:fc:e2:ad:ef:ed:aa:d7:25:b7:f3:a3:f4: 23:c4:f3:e4:9d:2c:d7:89:e8:a0:ee:cd:4f:0a:2d:fa:c9:52: f5:dc:17:d2:b0:f6:70:58:b8:cb:54:44:f8:b1:ba:5d:9e:de: f8:4e:4f:56:cf:64:ef:20:c9:72:92:99:6d:94:09:e7:af:cc: eb:88:a5:bd:7f:2d:80:88:a3:f3:c7:d6:e6:74:95:4a:d8:a6: 58:fb:82:71:19:a2:68:3f:cc:da:f0:3e:e1:cf:33:79:eb:d1: 40:3e:b0:56 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD N0U1QjExMC8GA1UEBRMoQUI1M0Q5OTI4MTAyQjkxOURCN0M1NDY1QzhERDVGRjI2 Njc0NDNCMzAeFw0yNTExMDcyMTMzMzVaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MGU2NWFmLWI4ZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvnv+WteUntKu6cwJTLGFjnRIaXGqaM6dKuKBiYwsqVNKJ7IGnPewbezbwTJvr NygqPo4SUJuud9eRm4+fExDkk9XE4QvuCKpMIFukWY0wOk0yaVZdK8Skan9hrgXc CpfjjWfv9dpd/1sA1KZjDQoxvXwS19uChUJH6TmS4zDRITeP3Tg7zIQsSrYlH9t7 RCKdVjPbVpIUjsDFef7vplF2ZxpNPfbdVV8wxof18F5MltMMVOTzw8G8X9VgD4vr S1o30kv+6uoeJG2fwE0ocBGjgd3PJWjojilj7aaV0VDHWWQURCVZR4LZiGLmzNE8 rmFncYHmxKErgloQycQuDAtLAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUZqjg6KZm urGZyxQ4lvow5EhCxdwwHwYDVR0jBBgwFoAUq1PZkoECuRnbfFRlyN1f8mZ0Q7Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3RTVCL0Q4NEU3QkYyM0M2 RTExRjA5RDc2QTI0REM0RjlBRTAyL3ExUFprb0VDdVJuYmZGUmx5TjFmOG1aMFE3 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcTFQWmtvRUN1Um5iZkZSbHlOMWY4bVowUTdNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0U1Qi9EODRFN0JGMjNDNkUxMUYwOUQ3NkEyNERDNEY5QUUwMi8zNUNBNjZCQUJD MjExMUYwQTA4QTZGNzlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaVjpDANBgkqhkiG9w0BAQsFAAOCAQEA0LGl9MXxYdnzJAbE N0CPvu8YRIvv9zwiv+500q7FYSuH2OXLV3AZY1rGsddcsWH/Z7n7lOKTB6i57JWV OSIMjgW3xJZmTCGVvlronDlWAFe+vbkzPpcFQr5wvDUXWIV5yyziOR82hUYT7GR/ ReYmBpn9icWzXCOHB7GWcA8ewHFHP6zbAl/Rjiw/k6HpWabDP3T7HmCQ/OKt7+2q 1yW386P0I8Tz5J0s14nooO7NTwot+slS9dwX0rD2cFi4y1RE+LG6XZ7e+E5PVs9k 7yDJcpKZbZQJ56/M64ilvX8tgIij88fW5nSVStimWPuCcRmiaD/M2vA+4c8zeevR QD6wVg== -----END CERTIFICATE-----Generated at Sat Dec 6 18:23:38 2025 by rpki-client