This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/8C538C5AEFCF11F0889DE39E746F56BC.roa File: 8C538C5AEFCF11F0889DE39E746F56BC.roa (raw, json) Hash identifier: ZEoytO32QwkPloF6rE+4YTvhwrYVLQulkfLFq/U7ehY= Subject key identifier: 5C:B0:3C:ED:97:1B:FB:10:29:EA:6D:01:DD:84:C1:8A:36:BA:DC:F3 Certificate issuer: /CN=A91425C3/serialNumber=9EBDA123D9EE83094305A1180C2A08057FE5406A Certificate serial: 63 Authority key identifier: 9E:BD:A1:23:D9:EE:83:09:43:05:A1:18:0C:2A:08:05:7F:E5:40:6A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nr2hI9nugwlDBaEYDCoIBX_lQGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/8C538C5AEFCF11F0889DE39E746F56BC.roa Signing time: Mon 12 Jan 2026 15:58:34 +0000 ROA not before: Mon 12 Jan 2026 15:58:34 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 135413 IP address blocks: 165.101.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.crl rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nr2hI9nugwlDBaEYDCoIBX_lQGo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 06:10:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91425C3, serialNumber=9EBDA123D9EE83094305A1180C2A08057FE5406A Validity Not Before: Jan 12 15:58:34 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69651a2a-9035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:26:63:b7:a2:83:ff:ce:1f:47:2d:79:b4:29: 2c:9d:38:9d:a0:54:35:c4:96:81:8e:4d:a1:d2:a3: df:12:59:15:c5:02:a1:21:14:07:c6:38:9a:c9:44: 49:c6:38:b9:3e:4a:5f:f6:d6:b1:6b:d9:08:33:0c: 0d:a3:67:b8:40:db:e3:60:eb:60:bc:2b:7a:a8:95: a0:36:c9:72:4e:58:0d:37:78:88:6d:b4:ae:e3:ac: 5b:15:76:88:35:27:54:0c:b8:dc:0f:81:e4:3e:b3: 09:66:87:b1:58:33:2e:38:0e:91:84:41:f5:6f:f1: 6c:fc:ad:68:c2:a2:c6:53:e9:b2:80:aa:3c:c5:c4: 3b:87:1c:0d:1c:f8:3d:71:31:05:b9:89:b1:eb:51: 68:e6:8a:bf:21:ce:b1:56:91:3d:94:2e:c8:d9:57: 1a:61:8d:e1:cb:2f:92:e8:76:ad:88:62:d9:19:74: 18:eb:29:26:60:68:52:c3:d8:c2:52:b1:9f:43:24: 05:4f:2d:4f:19:5c:b5:ca:ac:49:9e:de:a3:9b:81: 7c:ab:4c:a8:b9:63:04:01:7c:48:89:71:c3:9a:e4: 55:6e:12:d4:db:71:11:e8:21:1a:0d:de:e6:2f:9d: ec:bd:d4:32:fe:07:44:ae:22:92:bb:b8:c7:97:73: 67:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B0:3C:ED:97:1B:FB:10:29:EA:6D:01:DD:84:C1:8A:36:BA:DC:F3 X509v3 Authority Key Identifier: keyid:9E:BD:A1:23:D9:EE:83:09:43:05:A1:18:0C:2A:08:05:7F:E5:40:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nr2hI9nugwlDBaEYDCoIBX_lQGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/8C538C5AEFCF11F0889DE39E746F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 165.101.239.0/24 Signature Algorithm: sha256WithRSAEncryption 85:40:e1:0f:43:f5:e1:c4:0d:4c:4f:29:b6:3b:fc:ae:3e:54: 27:97:90:e3:ce:19:ae:5d:dd:e0:40:89:f8:75:63:c6:bf:cf: d1:8e:18:57:47:e6:72:5d:3f:68:4a:de:b9:35:ec:0a:b5:76: 58:dc:14:7f:64:42:bc:5f:fb:31:5c:36:18:ff:49:57:39:07: 61:ba:74:cb:41:bb:14:9c:c0:9f:1b:7f:9f:53:73:fe:aa:9c: ac:0e:57:00:08:87:af:38:74:38:74:fb:f0:00:f2:76:70:94: 66:ab:06:01:06:b8:00:c2:df:5d:44:78:76:38:dc:2f:79:0a: ef:74:80:40:f0:8d:2b:18:7a:fd:21:40:6b:e8:38:5c:77:74: ea:b6:b3:3a:4a:90:a2:96:82:2b:4e:97:7a:02:c5:82:2d:75: 6b:15:a9:53:62:a4:00:8e:93:a8:ff:79:b4:b2:d0:18:03:9e: 92:f1:96:4d:9a:e5:06:4c:15:bd:f6:bc:37:d6:05:b4:b2:23: 69:58:ca:c2:2d:42:6c:8b:ba:4e:a6:fd:11:4f:56:35:49:79: 64:7b:1c:59:df:bd:5c:46:99:23:f4:a9:26:b9:0a:2c:b6:4f: 00:97:e5:15:bd:fe:7f:3c:b5:e3:81:49:d2:1b:52:7c:0b:b6: 35:60:81:a4 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjVDMzExMC8GA1UEBRMoOUVCREExMjNEOUVFODMwOTQzMDVBMTE4MEMyQTA4MDU3 RkU1NDA2QTAeFw0yNjAxMTIxNTU4MzRaFw0yNjEwMzEwMDAwMDBaMBgxFjAUBgNV BAMMDTY5NjUxYTJhLTkwMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYJmO3ooP/zh9HLXm0KSydOJ2gVDXEloGOTaHSo98SWRXFAqEhFAfGOJrJREnG OLk+Sl/21rFr2QgzDA2jZ7hA2+Ng62C8K3qolaA2yXJOWA03eIhttK7jrFsVdog1 J1QMuNwPgeQ+swlmh7FYMy44DpGEQfVv8Wz8rWjCosZT6bKAqjzFxDuHHA0c+D1x MQW5ibHrUWjmir8hzrFWkT2ULsjZVxphjeHLL5Lodq2IYtkZdBjrKSZgaFLD2MJS sZ9DJAVPLU8ZXLXKrEme3qObgXyrTKi5YwQBfEiJccOa5FVuEtTbcRHoIRoN3uYv ney91DL+B0SuIpK7uMeXc2ftAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUXLA87Zcb +xAp6m0B3YTBija63PMwHwYDVR0jBBgwFoAUnr2hI9nugwlDBaEYDCoIBX/lQGow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyNUMzLzIzMjZDNjNFNjYw NDExRjBBNEM1MTkyQkM0RjlBRTAyL25yMmhJOW51Z3dsREJhRVlEQ29JQlhfbFFH by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbnIyaEk5bnVnd2xEQmFFWURDb0lCWF9sUUdvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjVDMy8yMzI2QzYzRTY2MDQxMUYwQTRDNTE5MkJDNEY5QUUwMi84QzUzOEM1QUVG Q0YxMUYwODg5REUzOUU3NDZGNTZCQy5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKVl7zANBgkqhkiG9w0BAQsFAAOCAQEAhUDhD0P14cQNTE8p tjv8rj5UJ5eQ484Zrl3d4ECJ+HVjxr/P0Y4YV0fmcl0/aEreuTXsCrV2WNwUf2RC vF/7MVw2GP9JVzkHYbp0y0G7FJzAnxt/n1Nz/qqcrA5XAAiHrzh0OHT78ADydnCU ZqsGAQa4AMLfXUR4djjcL3kK73SAQPCNKxh6/SFAa+g4XHd06razOkqQopaCK06X egLFgi11axWpU2KkAI6TqP95tLLQGAOekvGWTZrlBkwVvfa8N9YFtLIjaVjKwi1C bIu6Tqb9EU9WNUl5ZHscWd+9XEaZI/SpJrkKLLZPAJflFb3+fzy144FJ0htSfAu2 NWCBpA== -----END CERTIFICATE-----Generated at Sun Jan 18 04:30:35 2026 by rpki-client