This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/6767E894A32311F0A8D9D520C4F9AE02.roa
File: 6767E894A32311F0A8D9D520C4F9AE02.roa (raw, json)
Hash identifier: RmIQAxMzPt9TyOSbY6kkvQxz7NF1izZibV45HtGClcU=
Subject key identifier: A7:E9:BA:16:AF:2C:E9:D2:C2:31:4B:CB:50:76:9A:25:6B:06:2D:C1
Certificate issuer: /CN=A91D94CD/serialNumber=E706012A106BD094658E604C5603050F14DC3F4C
Certificate serial: 2D
Authority key identifier: E7:06:01:2A:10:6B:D0:94:65:8E:60:4C:56:03:05:0F:14:DC:3F:4C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/6767E894A32311F0A8D9D520C4F9AE02.roa
Signing time: Wed 17 Dec 2025 07:25:05 +0000
ROA not before: Wed 17 Dec 2025 07:25:04 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 21859
IP address blocks: 165.84.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.crl
rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 06:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45 (0x2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D94CD, serialNumber=E706012A106BD094658E604C5603050F14DC3F4C
Validity
Not Before: Dec 17 07:25:04 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69425ad0-0106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ce:4a:b4:a5:1c:e5:ce:40:89:64:b0:ac:41:
56:37:ee:72:c8:36:67:3f:7a:c5:05:78:57:6d:d1:
76:a1:61:0d:09:5b:3e:a7:f0:f1:f8:7f:e7:bd:7b:
fa:77:eb:c7:91:95:cd:12:f1:fc:f8:09:a3:01:d6:
16:58:8a:ef:b4:1e:99:7a:c2:41:51:60:00:5e:72:
bb:6d:02:44:2e:54:55:f1:8e:90:36:b3:3e:56:51:
fe:f2:68:bb:2a:d5:34:9d:49:2b:53:f1:63:b1:42:
e2:08:6b:95:60:6f:eb:24:16:d2:52:dc:46:4c:1f:
67:da:c8:89:45:43:0e:10:b6:b6:ea:71:56:fd:ea:
d2:c0:af:da:f1:b6:7e:9a:8d:b5:e9:a1:b2:f0:fc:
21:4a:b7:02:55:c6:46:46:e2:29:3a:cc:ff:57:49:
f3:2b:99:d7:8a:9b:4d:39:85:77:c3:83:84:bf:85:
c8:03:f5:a7:bd:8b:d4:fc:fc:5a:37:19:18:d6:8a:
71:c8:4a:fa:6d:ce:74:3a:b7:1a:53:f1:e6:7f:c6:
2c:5c:f6:fa:47:74:93:a1:1d:9b:59:97:2b:75:99:
58:bd:6d:1c:0c:62:99:03:e3:66:e8:8f:58:4a:1d:
dc:84:0f:2b:f6:d9:f6:8e:bd:fb:2f:ed:77:1b:9a:
0f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E9:BA:16:AF:2C:E9:D2:C2:31:4B:CB:50:76:9A:25:6B:06:2D:C1
X509v3 Authority Key Identifier:
keyid:E7:06:01:2A:10:6B:D0:94:65:8E:60:4C:56:03:05:0F:14:DC:3F:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/6767E894A32311F0A8D9D520C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.84.245.0/24
Signature Algorithm: sha256WithRSAEncryption
10:00:d3:4e:bc:60:8b:5f:30:f4:9a:60:87:84:fd:43:cc:3c:
54:b9:f4:88:79:e5:f3:41:12:05:86:2d:d3:b6:35:4b:a7:3f:
2f:ae:18:d7:75:b5:11:ac:5d:d9:45:6b:6c:29:7d:08:eb:54:
c1:e6:60:5c:1a:fc:02:6b:ed:14:92:09:70:05:f1:1d:71:19:
6d:8f:58:0b:7e:7c:be:15:03:6f:9f:3b:03:69:81:1b:be:e7:
0c:d4:a2:16:f2:bd:5e:5e:59:a7:47:76:e4:49:ac:2f:b3:25:
58:18:c8:df:16:96:db:5d:b2:cf:f2:8f:53:9a:80:7b:03:a7:
92:f9:3e:d4:75:c6:98:da:35:db:e1:c0:ea:3b:3a:57:e0:34:
70:4f:24:87:33:77:2f:fa:3c:0a:75:c5:b9:fc:82:1d:ea:33:
de:b3:d4:c1:b2:70:5d:1b:67:a4:95:16:42:fd:d8:c5:1f:cd:
ac:2b:41:e3:6d:1d:20:2e:3e:fc:c9:d9:7d:fe:b6:9a:36:48:
72:b1:55:aa:79:b2:8b:37:ea:91:2c:7e:dd:e4:a5:2b:e9:b3:
6e:1d:f2:b3:cd:81:bd:97:f3:da:44:32:ae:6c:2c:bb:cf:96:
a3:21:b4:fc:3d:af:48:52:fe:7f:74:54:16:dc:f0:8c:f0:9b:
6e:c4:28:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 04:32:29 2026 by rpki-client