This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/31D77D7ED99811F0B81C7A7265D3641D.roa
File: 31D77D7ED99811F0B81C7A7265D3641D.roa (raw, json)
Hash identifier: UGcEdy2YnXgl+J1snGlC99HRrkyZEQrbBCiTVou5PQ8=
Subject key identifier: 7F:50:E4:31:C7:48:B2:7A:4F:43:6A:6A:BF:64:90:79:CA:BA:34:EE
Certificate issuer: /CN=A91731AD/serialNumber=C1597131EABC5BB332BC999D416E9D5E7FCC0A69
Certificate serial: 65
Authority key identifier: C1:59:71:31:EA:BC:5B:B3:32:BC:99:9D:41:6E:9D:5E:7F:CC:0A:69
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wVlxMeq8W7MyvJmdQW6dXn_MCmk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/31D77D7ED99811F0B81C7A7265D3641D.roa
Signing time: Mon 15 Dec 2025 09:26:54 +0000
ROA not before: Mon 15 Dec 2025 09:26:54 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 153930
IP address blocks: 165.99.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.crl
rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wVlxMeq8W7MyvJmdQW6dXn_MCmk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 06:05:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101 (0x65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91731AD, serialNumber=C1597131EABC5BB332BC999D416E9D5E7FCC0A69
Validity
Not Before: Dec 15 09:26:54 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=693fd45e-dc00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3e:c8:cd:20:ce:3d:61:d7:ee:d8:e6:d9:3f:
8e:97:36:71:ff:30:e7:ce:88:8e:3a:ce:15:bd:52:
cb:56:3b:19:5f:1c:e4:00:36:fb:cd:2a:b2:55:30:
6f:49:84:ab:b4:96:b5:db:a2:42:c2:77:dd:da:d3:
c6:3c:87:91:31:00:6d:e6:04:e3:4d:27:5d:4f:34:
f3:80:48:06:eb:e6:12:35:d0:da:de:76:e1:1e:6a:
3b:c5:d3:b9:ca:8f:4f:0a:cd:5e:3a:57:80:7a:cf:
52:ee:28:85:b1:f5:ed:c9:bb:f6:31:2c:f4:c0:b6:
e8:e8:e3:72:02:98:09:cc:49:67:29:d8:a5:be:90:
5c:13:1e:d7:a3:93:1d:4c:2a:2e:d0:b2:24:12:2e:
e4:21:ef:44:a8:5d:12:cd:2c:16:e9:97:98:25:f0:
f2:a4:f2:3f:ba:f8:cb:ac:02:f1:c5:cb:a5:82:7f:
39:f2:7d:5d:72:e8:7b:ab:8d:47:df:1b:ec:f4:f0:
9d:d1:c7:d5:b4:cc:1e:1c:88:a4:00:18:0e:1f:04:
b5:69:9c:9b:23:9e:2c:80:5f:2b:b1:1e:6a:fa:81:
cb:bc:b3:b8:9d:84:57:6b:ad:11:75:26:de:54:0b:
66:b9:d4:a4:b8:5c:d6:df:20:a3:bd:89:ae:e9:dc:
36:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:50:E4:31:C7:48:B2:7A:4F:43:6A:6A:BF:64:90:79:CA:BA:34:EE
X509v3 Authority Key Identifier:
keyid:C1:59:71:31:EA:BC:5B:B3:32:BC:99:9D:41:6E:9D:5E:7F:CC:0A:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wVlxMeq8W7MyvJmdQW6dXn_MCmk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/31D77D7ED99811F0B81C7A7265D3641D.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.99.145.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:5e:dc:53:d5:de:74:a5:31:a4:52:2c:be:d4:15:da:61:b6:
34:8d:1d:4b:2a:cd:81:2c:07:be:ec:e0:d1:5d:f7:68:56:08:
ef:a4:4c:14:f9:f1:ad:7e:4b:e6:32:9b:a8:ef:45:1e:79:8e:
8b:c6:03:41:d1:d7:e8:10:0a:80:66:a6:6a:cc:c4:15:0e:8b:
c2:6b:63:57:36:a6:c0:03:fb:34:b6:6e:80:30:87:d7:9f:f2:
c8:ad:03:40:e0:9f:b5:36:a2:30:b5:46:70:ed:07:44:0a:fc:
71:d6:7b:22:a8:15:4d:22:21:2b:76:3e:d9:7c:e2:3a:4c:dc:
3f:a5:d0:7a:93:b0:de:a1:1a:e0:f8:f4:aa:a3:ab:f5:41:39:
39:d0:e2:3d:db:dd:57:bd:0d:31:61:23:b6:5c:e1:a5:9d:7c:
dc:7a:2a:a1:10:cc:a2:e7:08:d4:b5:38:25:af:41:29:cb:82:
89:bb:37:c5:43:fa:1c:16:ad:cf:51:36:f6:98:10:79:6f:c8:
4a:6a:0a:39:ca:cd:ee:37:34:3c:53:78:dc:3b:31:3e:d3:b7:
d6:ba:cd:f0:aa:17:e9:97:69:bf:65:26:c4:74:e1:27:1e:1f:
94:ca:78:f2:ca:ed:23:30:a7:fc:e1:c2:ae:27:69:22:c2:45:
d1:9b:7e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 03:20:50 2025 by rpki-client