This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/4660810C41DE11F083E3205EC4F9AE02.roa
File: 4660810C41DE11F083E3205EC4F9AE02.roa (raw, json)
Hash identifier: lmR9ugrjbQmDnUx1UBy+nG9XOBElNu6bjT8wakrFaOA=
Subject key identifier: DC:B2:AF:5A:36:68:33:FB:FD:D3:2B:70:E0:79:6C:27:6C:50:4C:09
Certificate issuer: /CN=A9161857/serialNumber=C426D426400676555973DFEDE4EB2644BEED2873
Certificate serial: 5E
Authority key identifier: C4:26:D4:26:40:06:76:55:59:73:DF:ED:E4:EB:26:44:BE:ED:28:73
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/4660810C41DE11F083E3205EC4F9AE02.roa
Signing time: Thu 20 Nov 2025 09:43:24 +0000
ROA not before: Thu 20 Nov 2025 09:43:24 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 153913
IP address blocks: 165.99.148.0/24 maxlen: 24
165.99.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl
rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 05:18:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94 (0x5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161857, serialNumber=C426D426400676555973DFEDE4EB2644BEED2873
Validity
Not Before: Nov 20 09:43:24 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=691ee2bc-da29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:81:8a:54:df:d9:d4:e8:6d:81:06:e1:2d:b6:
aa:5a:ed:ae:de:eb:52:f8:29:a2:6d:30:64:03:ab:
69:a7:fd:09:81:29:0c:0d:18:62:ab:d5:12:1a:ff:
c9:c5:85:22:5f:80:92:45:13:2d:bc:e9:a0:74:04:
cc:34:d9:2c:eb:b8:1f:44:5d:7a:15:ad:04:77:a5:
5e:ee:00:6a:f4:34:eb:e7:20:a1:a0:a6:80:e2:f7:
64:45:88:15:74:aa:57:ef:2a:e0:ea:06:d9:95:60:
ba:6b:16:14:e5:c5:e5:0e:eb:b6:4b:0e:d3:f7:5c:
88:57:ff:a3:9d:24:10:01:e5:96:f1:6a:1b:57:ad:
1e:66:99:be:4b:04:d5:c6:5f:a5:f6:a8:0a:1b:1f:
2a:ef:de:a7:1d:87:37:ab:6a:4a:6a:23:32:97:49:
d0:26:72:aa:96:4c:7c:1f:29:f0:82:22:08:f4:3a:
26:5a:5c:31:da:58:1e:f8:09:13:47:0f:9f:21:ee:
20:50:67:44:5b:ef:70:c3:5b:ae:b7:d9:db:33:27:
8b:42:a7:31:52:6a:15:9d:92:5c:79:af:66:75:5f:
93:b2:12:88:18:52:b9:dd:0b:1a:8e:de:d1:95:69:
32:b7:a9:6a:dd:a5:39:c9:0d:6e:be:e5:a9:38:f5:
98:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B2:AF:5A:36:68:33:FB:FD:D3:2B:70:E0:79:6C:27:6C:50:4C:09
X509v3 Authority Key Identifier:
keyid:C4:26:D4:26:40:06:76:55:59:73:DF:ED:E4:EB:26:44:BE:ED:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/4660810C41DE11F083E3205EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.99.148.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:00:0a:0a:be:df:d4:9e:26:8b:a8:75:58:bf:f5:80:93:5e:
77:9b:4f:c4:fe:d8:ef:f2:f6:64:24:b6:23:f6:e0:9e:7a:1e:
9b:ea:38:94:a2:3f:68:0d:f8:38:2e:26:dd:bd:f8:1c:78:da:
f6:55:11:4a:99:8f:3c:0e:ee:70:dd:0e:e4:f6:b4:f6:84:7e:
cd:cd:27:1e:92:12:24:69:fe:ca:35:35:24:92:35:b0:4a:79:
d8:2e:17:6e:02:c1:1a:3f:65:93:9c:b5:dc:0a:a1:71:eb:ee:
64:e8:ec:11:5a:de:98:56:8e:9b:e9:47:ac:61:de:bf:f9:63:
43:2d:f9:b7:42:00:cb:4c:42:3c:47:42:0f:0f:12:55:65:16:
00:6c:5c:14:23:49:3f:24:6c:34:d8:e3:09:9a:de:78:8b:b9:
b0:47:29:6d:1b:c7:30:4d:17:aa:ac:d0:cb:63:45:84:0c:f7:
1b:9f:15:fa:a6:54:41:f6:18:e0:f0:cb:76:82:95:ce:86:bc:
82:3c:8d:2c:c3:5d:56:75:9e:0a:d2:66:a7:eb:64:37:4b:a0:
ff:d9:32:4a:49:00:39:50:2b:a9:54:c9:fb:6c:8f:87:2a:33:
5e:35:b6:b2:d9:19:c8:a2:43:31:96:71:19:19:ef:73:d1:cb:
83:44:09:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:22:46 2025 by rpki-client