This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/C3DCFE54EB2911F0BD7173483B6F56BC.roa
File: C3DCFE54EB2911F0BD7173483B6F56BC.roa (raw, json)
Hash identifier: P1bCh8NZHu89O2JXhqD66pQeX9ueew/dSonhzOMsaoU=
Subject key identifier: BA:11:92:72:58:F8:22:88:C4:A2:57:4D:6D:91:8A:01:14:9B:15:1E
Certificate issuer: /CN=A91C7E5B/serialNumber=AB53D9928102B919DB7C5465C8DD5FF2667443B3
Certificate serial: 7F
Authority key identifier: AB:53:D9:92:81:02:B9:19:DB:7C:54:65:C8:DD:5F:F2:66:74:43:B3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/C3DCFE54EB2911F0BD7173483B6F56BC.roa
Signing time: Tue 06 Jan 2026 18:01:47 +0000
ROA not before: Tue 06 Jan 2026 18:01:47 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 213549
IP address blocks: 165.99.164.0/24 maxlen: 25
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.crl
rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 05:52:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127 (0x7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7E5B, serialNumber=AB53D9928102B919DB7C5465C8DD5FF2667443B3
Validity
Not Before: Jan 6 18:01:47 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=695d4e0a-2fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:50:e9:01:3d:e0:ee:95:52:23:23:0d:bb:70:
e4:7d:a8:48:0a:6a:1f:23:08:3c:f6:88:a7:dc:e3:
25:1f:74:67:91:fe:7a:2c:14:f0:c2:1a:19:c9:61:
96:c9:03:7b:65:54:85:04:ce:9f:32:cc:9c:35:c3:
30:22:2a:be:d6:87:a4:ac:43:c7:8a:aa:fe:22:01:
c8:bf:bd:dd:89:d9:02:b0:c3:3a:c8:a7:08:42:65:
50:0f:f7:02:8b:e5:5a:42:20:9b:7d:29:db:30:02:
29:31:b7:a7:07:1e:3a:08:2c:dc:cf:6c:5d:d6:70:
11:d2:fb:93:ce:6c:ab:6a:65:cd:60:56:0a:00:18:
aa:83:27:5b:ee:3f:f2:7a:52:8d:60:54:57:c7:18:
84:ab:69:13:16:34:4c:65:5f:62:62:53:68:18:80:
a9:0b:6d:84:2b:6f:a5:e8:b4:79:aa:69:fc:51:fc:
7c:2f:d4:8a:78:c4:5e:09:d1:81:9d:8a:89:08:92:
4c:6e:08:5c:e6:46:18:40:62:f7:30:68:63:3f:b6:
4a:49:8a:c7:de:06:02:1e:83:0b:8e:7a:3e:a7:bd:
bf:cc:a0:d6:3c:b8:8b:55:c9:f8:b2:16:1f:d6:62:
54:e8:25:ed:b0:e4:cf:5b:e9:f6:09:68:d3:d2:99:
aa:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:11:92:72:58:F8:22:88:C4:A2:57:4D:6D:91:8A:01:14:9B:15:1E
X509v3 Authority Key Identifier:
keyid:AB:53:D9:92:81:02:B9:19:DB:7C:54:65:C8:DD:5F:F2:66:74:43:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/C3DCFE54EB2911F0BD7173483B6F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.99.164.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:d8:a6:84:11:2e:ff:d8:42:0d:55:02:07:da:35:30:cf:7d:
fa:53:c1:23:f2:b3:b3:bb:21:d4:88:8a:29:e6:a3:ec:eb:43:
ea:c2:d0:f6:51:f3:08:fe:ea:6d:e0:e4:15:4d:cc:c0:ca:63:
15:2c:18:84:60:f1:3c:06:e0:9d:b6:3c:d1:2c:2a:f3:34:01:
8a:d2:bc:ad:93:bb:a2:f4:fc:ae:eb:bf:f2:52:70:65:3b:3b:
58:4c:73:59:9a:c3:ea:47:33:b2:3a:cc:78:34:07:03:55:fa:
ac:ee:23:7d:cd:31:c5:de:1d:7e:82:84:83:1a:b1:78:62:74:
88:f4:52:b4:15:eb:34:b4:ec:d6:1d:e3:42:e7:f5:3b:9c:ed:
33:e8:2e:6d:42:55:ec:eb:19:d7:bd:54:d3:8e:61:1c:16:af:
86:f2:b2:04:ea:a8:3a:f2:c1:33:01:8a:a4:7f:fd:d8:e9:b0:
1c:9b:fc:99:a8:78:f5:a5:6e:49:ac:2c:90:29:04:f5:e0:f0:
19:80:38:21:0d:bb:42:58:72:a6:1e:f5:fa:03:b8:ee:4b:d8:
c7:1a:4c:07:b8:c9:ac:e7:17:6b:af:e1:ca:08:50:4d:ee:36:
b7:2d:f9:a8:4e:65:12:ff:37:f7:fc:9f:60:57:d1:95:fc:cd:
ee:f3:4d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:50:07 2026 by rpki-client