This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/5A9C0D58311C11F0B91A2E64C4F9AE02.roa
File: 5A9C0D58311C11F0B91A2E64C4F9AE02.roa (raw, json)
Hash identifier: n8XUmr5KjS13+kjcxi8G3iN9bzXMPfNq3EcEqckzzBI=
Subject key identifier: 51:6A:76:5A:1F:60:87:B9:C0:F9:36:51:77:89:49:4E:8D:35:30:D5
Certificate issuer: /CN=A91A5ED2/serialNumber=D904D552C0EF32F249ABA4597BD84A15EE5555C1
Certificate serial: 72
Authority key identifier: D9:04:D5:52:C0:EF:32:F2:49:AB:A4:59:7B:D8:4A:15:EE:55:55:C1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/5A9C0D58311C11F0B91A2E64C4F9AE02.roa
Signing time: Sat 13 Dec 2025 06:45:16 +0000
ROA not before: Sat 13 Dec 2025 06:45:16 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 4826
IP address blocks: 165.99.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl
rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Jan 2026 05:51:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114 (0x72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5ED2, serialNumber=D904D552C0EF32F249ABA4597BD84A15EE5555C1
Validity
Not Before: Dec 13 06:45:16 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=693d0b7c-3eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a9:67:16:d5:22:a0:de:63:8e:8e:51:ad:25:
e0:64:31:3b:f2:58:a6:59:2b:93:1f:fd:a7:d7:38:
aa:d1:b7:86:50:cb:36:e5:eb:9f:27:4b:1a:c2:03:
f1:a2:31:d1:23:57:d4:00:d0:fb:ba:b5:0e:b2:00:
0f:7d:4c:08:63:9d:92:c5:db:4f:e2:4c:29:38:ba:
ef:8d:1b:af:45:6b:f4:80:e5:95:ea:5e:35:d6:7a:
dd:af:14:f4:ea:b2:e0:a1:e3:0b:e7:02:3b:fc:2d:
32:29:26:39:7c:f4:dd:b1:12:ab:03:eb:26:35:38:
fb:d7:7b:78:7c:51:5d:95:01:b3:55:10:fb:f1:b8:
9f:fb:0f:92:00:33:92:0c:72:d1:52:71:e6:20:7c:
b5:80:25:a1:30:f9:7d:1d:5a:a4:9f:f8:e1:90:e4:
4c:ea:81:a0:f1:35:69:8f:a5:4e:84:f9:56:b4:22:
88:8f:ff:46:48:1f:49:51:b2:42:16:bc:e2:e0:4c:
96:26:01:96:25:6e:ad:0c:a9:b8:94:45:db:fc:ed:
c8:b7:4b:16:b5:ff:5f:cf:e5:82:83:3e:a0:cd:1a:
2b:e5:a5:63:e7:eb:2f:2d:ef:a5:59:31:6f:37:b6:
25:14:5b:93:e1:32:4a:26:a1:ca:2f:10:49:91:73:
6e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:6A:76:5A:1F:60:87:B9:C0:F9:36:51:77:89:49:4E:8D:35:30:D5
X509v3 Authority Key Identifier:
keyid:D9:04:D5:52:C0:EF:32:F2:49:AB:A4:59:7B:D8:4A:15:EE:55:55:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/5A9C0D58311C11F0B91A2E64C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.99.18.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:c8:7c:62:40:95:22:09:1b:3a:7c:25:66:89:ba:99:3f:bf:
91:10:85:79:0d:03:8b:49:5d:3f:0b:bd:7c:0b:a6:5e:a9:58:
e2:c8:46:9d:ad:47:9e:6e:7a:7c:82:9c:4e:03:63:4d:b7:a9:
b4:12:6e:de:9f:e1:13:2e:77:55:08:29:23:5a:49:4a:08:4f:
cb:4e:12:cd:98:5c:81:3d:47:56:df:f6:35:44:76:e0:33:a0:
88:b8:17:2f:db:d7:13:13:0b:f3:38:92:c2:fd:c8:cd:4f:bc:
20:06:a2:04:75:33:bf:80:66:de:84:3d:60:e0:61:3d:2e:56:
df:78:ef:65:48:f1:b2:4b:59:4a:99:d7:63:36:9b:09:a4:1f:
22:b1:43:a1:7d:b1:95:15:c8:75:37:82:4e:61:a4:22:38:0d:
32:aa:53:e2:c9:96:24:64:3e:40:78:4a:69:ae:79:d5:2e:64:
5f:09:00:a5:49:ec:e4:e5:d9:ba:13:e3:f3:5b:c5:c9:04:4a:
39:d3:96:83:31:1c:39:de:5b:85:86:c5:c2:fc:7e:3c:46:9e:
fd:62:fe:f0:c7:7c:c4:f0:51:23:83:1b:18:ac:6a:cc:33:3e:
12:5b:0b:0e:7d:c9:d7:21:63:83:83:c6:d6:82:23:8e:9d:5d:
62:bf:be:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 07:11:26 2025 by rpki-client