This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/436251B0C52311F0A1118818C4F9AE02.roa File: 436251B0C52311F0A1118818C4F9AE02.roa (raw, json) Hash identifier: uZ9eyof3QzVDzi9BWRf2zBi6dJBoVZqfZeDAKMhvj2Q= Subject key identifier: A8:EE:2F:0D:12:F3:70:90:24:34:03:1C:16:BD:D1:94:67:84:AE:60 Certificate issuer: /CN=A91B2D56/serialNumber=91B289916B5EF7B36869B3BA810C245B364E43C0 Certificate serial: 04 Authority key identifier: 91:B2:89:91:6B:5E:F7:B3:68:69:B3:BA:81:0C:24:5B:36:4E:43:C0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kbKJkWte97NoabO6gQwkWzZOQ8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/436251B0C52311F0A1118818C4F9AE02.roa Signing time: Wed 19 Nov 2025 08:40:49 +0000 ROA not before: Wed 19 Nov 2025 08:40:49 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 139704 IP address blocks: 165.101.220.0/23 maxlen: 23 165.101.220.0/24 maxlen: 24 165.101.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.crl rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kbKJkWte97NoabO6gQwkWzZOQ8A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 06:11:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D56, serialNumber=91B289916B5EF7B36869B3BA810C245B364E43C0 Validity Not Before: Nov 19 08:40:49 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=691d8291-daef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:a9:7d:8f:cd:36:f7:2f:f7:ad:ef:42:b1:ff: 81:2c:a7:28:62:f7:4c:cd:3b:80:b6:ab:5f:14:2b: b1:aa:11:8e:12:a9:c4:46:35:31:35:f7:f4:bf:af: 97:06:9b:ed:bd:56:55:e9:87:34:aa:bb:1a:52:00: 08:b4:7d:79:8a:63:bd:cb:43:5b:90:8f:77:b3:c6: 38:89:2f:ed:4c:47:84:f3:c3:62:1e:a5:bd:1d:d8: a4:bf:05:f4:98:66:d1:27:24:64:6e:76:71:47:21: a7:87:3d:65:41:49:56:b0:8d:3f:95:57:b8:c3:51: 08:fb:4f:86:a6:26:f4:06:d0:c1:34:ad:41:58:6a: 27:5b:43:32:40:8e:03:38:05:cb:a9:30:cf:e2:92: 6a:89:67:74:0d:36:b2:e3:d9:d7:67:75:5b:84:61: d3:04:fd:ca:55:02:90:39:38:9d:0d:55:be:75:6a: 86:48:82:fa:e1:e4:42:34:2b:e9:49:01:7e:6c:c2: 0e:87:76:c7:13:38:4e:11:69:57:ea:be:7e:23:7f: 8f:11:d6:94:e0:a0:02:6d:b2:c0:a7:4d:34:e7:5a: 7e:3f:f7:71:48:0e:70:b4:7d:26:3f:69:13:e5:27: d7:d1:bf:d9:fa:71:31:f4:78:47:cc:67:c0:17:65: cc:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:EE:2F:0D:12:F3:70:90:24:34:03:1C:16:BD:D1:94:67:84:AE:60 X509v3 Authority Key Identifier: keyid:91:B2:89:91:6B:5E:F7:B3:68:69:B3:BA:81:0C:24:5B:36:4E:43:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kbKJkWte97NoabO6gQwkWzZOQ8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/436251B0C52311F0A1118818C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 165.101.220.0/23 Signature Algorithm: sha256WithRSAEncryption 50:63:5d:80:36:3b:aa:a8:cf:0a:87:81:c3:aa:72:20:88:fd: 46:84:84:e7:5f:c2:b5:ac:b6:3a:19:3b:5c:f7:92:e4:fa:9d: b8:dd:ff:4a:9c:64:7b:0e:5e:14:cc:dd:61:f5:03:ca:5b:8a: 58:5e:26:ff:34:5a:01:ed:93:bd:33:02:2c:f0:ce:13:5d:f7: b9:80:db:2c:5e:9c:83:18:be:5b:35:8b:86:22:5e:44:d7:52: 4b:66:a2:19:61:af:d6:1f:1c:d4:fa:b7:2e:42:ab:7b:f7:47: 10:72:80:ce:cf:43:a6:87:12:ce:76:b7:42:eb:27:4a:70:96: 34:52:1c:c9:09:50:5c:d9:f6:49:36:a4:62:27:ef:50:9f:48: 99:b9:ce:16:20:f8:06:41:d7:4c:c7:7e:ac:86:59:7d:c8:f3: 2a:f1:19:ca:06:88:c1:35:b0:ab:5e:4b:7b:d7:6e:56:c1:3a: ac:41:d1:e9:71:70:6f:69:fb:25:a2:9b:13:21:ce:0a:63:e9: 12:53:72:53:8e:f9:c0:01:2e:c5:4a:af:61:6f:48:b4:f3:09: 4e:a2:70:c4:e0:e5:54:23:1d:41:fa:bf:67:dd:65:69:84:51: 2a:a0:88:22:ec:ac:00:05:8f:34:56:3f:b5:8c:0d:56:25:c0: c2:3f:1d:bd -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MkQ1NjExMC8GA1UEBRMoOTFCMjg5OTE2QjVFRjdCMzY4NjlCM0JBODEwQzI0NUIz NjRFNDNDMDAeFw0yNTExMTkwODQwNDlaFw0yNjEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MWQ4MjkxLWRhZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD1qX2PzTb3L/et70Kx/4Espyhi90zNO4C2q18UK7GqEY4SqcRGNTE19/S/r5cG m+29VlXphzSquxpSAAi0fXmKY73LQ1uQj3ezxjiJL+1MR4Tzw2Iepb0d2KS/BfSY ZtEnJGRudnFHIaeHPWVBSVawjT+VV7jDUQj7T4amJvQG0ME0rUFYaidbQzJAjgM4 BcupMM/ikmqJZ3QNNrLj2ddndVuEYdME/cpVApA5OJ0NVb51aoZIgvrh5EI0K+lJ AX5swg6HdscTOE4RaVfqvn4jf48R1pTgoAJtssCnTTTnWn4/93FIDnC0fSY/aRPl J9fRv9n6cTH0eEfMZ8AXZczdAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUqO4vDRLz cJAkNAMcFr3RlGeErmAwHwYDVR0jBBgwFoAUkbKJkWte97NoabO6gQwkWzZOQ8Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIyRDU2L0VEQkJERkQ4QzUy MjExRjA4N0M3QjIxN0M0RjlBRTAyL2tiS0prV3RlOTdOb2FiTzZnUXdrV3paT1E4 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIva2JLSmtXdGU5N05vYWJPNmdRd2tXelpPUThBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkQ1Ni9FREJCREZEOEM1MjIxMUYwODdDN0IyMTdDNEY5QUUwMi80MzYyNTFCMEM1 MjMxMUYwQTExMTg4MThDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaVl3DANBgkqhkiG9w0BAQsFAAOCAQEAUGNdgDY7qqjPCoeB w6pyIIj9RoSE51/Ctay2Ohk7XPeS5PqduN3/Spxkew5eFMzdYfUDyluKWF4m/zRa Ae2TvTMCLPDOE133uYDbLF6cgxi+WzWLhiJeRNdSS2aiGWGv1h8c1Pq3LkKre/dH EHKAzs9DpocSzna3QusnSnCWNFIcyQlQXNn2STakYifvUJ9ImbnOFiD4BkHXTMd+ rIZZfcjzKvEZygaIwTWwq15Le9duVsE6rEHR6XFwb2n7JaKbEyHOCmPpElNyU475 wAEuxUqvYW9ItPMJTqJwxODlVCMdQfq/Z91laYRRKqCIIuysAAWPNFY/tYwNViXA wj8dvQ== -----END CERTIFICATE-----Generated at Wed Dec 3 14:52:20 2025 by rpki-client