This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/224FBC52EFCF11F0A018F59D746F56BC.roa
File: 224FBC52EFCF11F0A018F59D746F56BC.roa (raw, json)
Hash identifier: 9RKnDGWf6hRwyLey6EVK85cDtcnKzHVAJY61vFFYDMM=
Subject key identifier: EB:56:12:AF:F8:2F:93:CB:20:05:B0:8C:C2:BB:CA:B1:25:3D:56:71
Certificate issuer: /CN=A91425C3/serialNumber=9EBDA123D9EE83094305A1180C2A08057FE5406A
Certificate serial: 61
Authority key identifier: 9E:BD:A1:23:D9:EE:83:09:43:05:A1:18:0C:2A:08:05:7F:E5:40:6A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nr2hI9nugwlDBaEYDCoIBX_lQGo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/224FBC52EFCF11F0A018F59D746F56BC.roa
Signing time: Mon 12 Jan 2026 15:55:36 +0000
ROA not before: Mon 12 Jan 2026 15:55:36 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 154071
IP address blocks: 165.101.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.crl
rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nr2hI9nugwlDBaEYDCoIBX_lQGo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 06:10:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97 (0x61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91425C3, serialNumber=9EBDA123D9EE83094305A1180C2A08057FE5406A
Validity
Not Before: Jan 12 15:55:36 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69651978-30d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:69:6f:c1:a1:f6:cd:e4:47:b7:b7:cc:52:8b:
d1:f3:10:96:76:21:e3:9d:f5:4a:6a:04:56:33:f4:
df:1e:c7:18:48:a8:80:8f:63:c2:95:e2:9a:bd:ae:
62:56:af:07:2d:28:c4:2a:30:8c:72:d3:55:8d:fc:
db:07:b1:78:43:41:f5:e6:cd:f4:8d:cb:85:8e:3c:
60:27:28:4a:f0:70:d9:ea:32:c2:c4:f2:b7:5e:b2:
21:83:25:bd:09:1b:a6:b3:59:b1:03:70:b5:46:8b:
78:3b:ff:d0:e1:20:82:27:a2:29:fb:65:23:78:71:
e8:fc:1e:99:6a:00:b8:30:eb:b9:fa:af:7f:19:90:
64:f8:79:e4:a6:07:e8:64:af:e6:f1:3a:d4:24:db:
1b:c6:01:0c:15:ca:37:50:5c:b3:43:4a:13:5d:db:
d3:04:cc:f7:c0:83:34:a3:3f:de:6c:88:a5:7c:32:
1a:7c:9b:24:b9:3a:3d:56:55:50:be:5a:e7:76:ae:
4e:6f:b6:e8:a1:5a:ac:2f:de:7b:28:f9:c6:62:8c:
f2:3e:be:46:25:b3:59:77:f3:0e:5a:e3:d3:d8:1b:
9f:60:8a:ad:3a:b3:72:c1:de:1e:70:a3:75:aa:ef:
d5:f7:dd:09:0d:e2:3a:03:68:00:6f:f4:eb:40:56:
16:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:56:12:AF:F8:2F:93:CB:20:05:B0:8C:C2:BB:CA:B1:25:3D:56:71
X509v3 Authority Key Identifier:
keyid:9E:BD:A1:23:D9:EE:83:09:43:05:A1:18:0C:2A:08:05:7F:E5:40:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nr2hI9nugwlDBaEYDCoIBX_lQGo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/224FBC52EFCF11F0A018F59D746F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.101.238.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:88:38:5e:a1:9b:d9:58:95:31:a9:7b:ce:28:56:00:55:ae:
8e:03:63:b7:a1:d8:18:38:99:bc:77:f9:53:5a:ad:92:b5:98:
55:f5:ff:4a:0d:44:f1:5c:0e:e8:c0:2d:fd:e0:c9:14:eb:37:
f9:31:b8:de:ec:27:d5:d6:0c:8f:74:99:99:9b:f2:72:8c:9f:
fa:ad:ba:d7:50:75:4f:e9:4d:cd:e7:0d:13:00:e5:ef:8d:c7:
b4:64:fb:de:88:49:a2:61:df:06:4d:23:06:17:07:8d:43:38:
03:a6:8c:b4:6c:af:a2:7d:05:ee:84:ea:f6:9a:27:82:c6:d7:
68:d0:bf:fd:9e:1e:7a:0a:8d:f3:ad:4e:09:28:d3:32:58:f7:
4a:0d:6b:62:12:79:f9:2a:8e:38:ec:3f:8c:18:96:82:4d:04:
d8:53:3e:c4:af:5f:51:0b:ac:c9:30:7e:56:26:df:24:fa:35:
29:cd:43:d4:76:59:c5:6e:8f:02:3e:43:0b:c8:dd:4d:84:22:
f0:5e:1b:77:b8:ee:43:7e:84:9b:ce:c5:46:22:78:45:07:e4:
51:30:63:88:65:4f:b3:a7:8b:fc:45:d3:d9:c1:7e:5f:7f:b3:
02:05:3c:f3:5f:4d:0f:c0:57:9b:c0:53:76:35:5a:fc:9c:16:
82:42:10:27
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
MjVDMzExMC8GA1UEBRMoOUVCREExMjNEOUVFODMwOTQzMDVBMTE4MEMyQTA4MDU3
RkU1NDA2QTAeFw0yNjAxMTIxNTU1MzZaFw0yNjEwMzEwMDAwMDBaMBgxFjAUBgNV
BAMMDTY5NjUxOTc4LTMwZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCkaW/BofbN5Ee3t8xSi9HzEJZ2IeOd9UpqBFYz9N8exxhIqICPY8KV4pq9rmJW
rwctKMQqMIxy01WN/NsHsXhDQfXmzfSNy4WOPGAnKErwcNnqMsLE8rdesiGDJb0J
G6azWbEDcLVGi3g7/9DhIIInoin7ZSN4cej8HplqALgw67n6r38ZkGT4eeSmB+hk
r+bxOtQk2xvGAQwVyjdQXLNDShNd29MEzPfAgzSjP95siKV8Mhp8myS5Oj1WVVC+
Wud2rk5vtuihWqwv3nso+cZijPI+vkYls1l38w5a49PYG59giq06s3LB3h5wo3Wq
79X33QkN4joDaABv9OtAVhb3AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU61YSr/gv
k8sgBbCMwrvKsSU9VnEwHwYDVR0jBBgwFoAUnr2hI9nugwlDBaEYDCoIBX/lQGow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyNUMzLzIzMjZDNjNFNjYw
NDExRjBBNEM1MTkyQkM0RjlBRTAyL25yMmhJOW51Z3dsREJhRVlEQ29JQlhfbFFH
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvbnIyaEk5bnVnd2xEQmFFWURDb0lCWF9sUUdvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MjVDMy8yMzI2QzYzRTY2MDQxMUYwQTRDNTE5MkJDNEY5QUUwMi8yMjRGQkM1MkVG
Q0YxMUYwQTAxOEY1OUQ3NDZGNTZCQy5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKVl7jANBgkqhkiG9w0BAQsFAAOCAQEAbog4XqGb2ViVMal7
zihWAFWujgNjt6HYGDiZvHf5U1qtkrWYVfX/Sg1E8VwO6MAt/eDJFOs3+TG43uwn
1dYMj3SZmZvycoyf+q2611B1T+lNzecNEwDl743HtGT73ohJomHfBk0jBhcHjUM4
A6aMtGyvon0F7oTq9pongsbXaNC//Z4eegqN861OCSjTMlj3Sg1rYhJ5+SqOOOw/
jBiWgk0E2FM+xK9fUQusyTB+VibfJPo1Kc1D1HZZxW6PAj5DC8jdTYQi8F4bd7ju
Q36Em87FRiJ4RQfkUTBjiGVPs6eL/EXT2cF+X3+zAgU8819ND8BXm8BTdjVa/JwW
gkIQJw==
-----END CERTIFICATE-----
Generated at Sun Jan 18 04:30:29 2026 by rpki-client