This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/67D535ACA32311F0A8D9D520C4F9AE02.roa File: 67D535ACA32311F0A8D9D520C4F9AE02.roa (raw, json) Hash identifier: zV/TsOK61tkCb0hqmdLcVSamFC3xdNV0n+J6OlbKFeg= Subject key identifier: 37:85:D9:16:15:40:70:42:8C:84:F7:DA:45:EF:4D:BE:8D:56:F2:28 Certificate issuer: /CN=A91D94CD/serialNumber=E706012A106BD094658E604C5603050F14DC3F4C Certificate serial: 2E Authority key identifier: E7:06:01:2A:10:6B:D0:94:65:8E:60:4C:56:03:05:0F:14:DC:3F:4C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/67D535ACA32311F0A8D9D520C4F9AE02.roa Signing time: Wed 17 Dec 2025 07:25:05 +0000 ROA not before: Wed 17 Dec 2025 07:25:05 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 55547 IP address blocks: 165.84.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.crl rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 06:30:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D94CD, serialNumber=E706012A106BD094658E604C5603050F14DC3F4C Validity Not Before: Dec 17 07:25:05 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69425ad1-3bd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:36:5d:7f:50:03:a4:b3:66:15:8a:26:2d:f6: db:d7:c7:6e:e3:1c:cf:4a:cf:96:10:62:ab:d1:70: df:67:d0:64:df:26:67:43:be:70:46:69:ba:59:0c: 32:e4:7a:92:61:f9:d2:2c:29:52:7a:53:d9:8c:c9: 66:78:dc:9c:ac:ce:41:46:42:cc:1c:2e:45:d7:9f: 0a:fe:54:15:a3:48:11:4d:0e:e0:ae:55:ba:93:8e: 80:70:0a:ff:8a:1b:25:d8:e4:0a:6c:55:34:9c:39: 41:23:2e:47:65:b2:b9:12:10:fd:1d:bd:6a:ab:79: 15:4b:21:60:15:0a:f7:08:c7:6e:b4:c0:28:53:3e: e1:f9:90:e6:4b:3f:67:20:5f:b9:1c:01:22:a7:cb: 01:ad:71:01:57:57:4d:82:0c:bd:a9:cb:e2:e8:d8: 97:7c:30:53:d6:63:06:84:7d:b9:14:4e:fd:eb:5e: 90:bb:08:d9:3e:f6:fe:a2:3c:ac:58:94:e2:32:8e: a6:3c:c5:b0:98:79:0c:de:e0:c6:1d:9e:92:05:13: f4:d4:eb:e9:df:65:50:12:53:59:04:e9:57:16:af: 68:6a:8a:5f:5a:95:d5:0b:96:f1:a7:89:61:4c:27: a8:1c:80:a6:e6:6b:0d:51:c3:8c:48:48:56:01:9c: ec:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:85:D9:16:15:40:70:42:8C:84:F7:DA:45:EF:4D:BE:8D:56:F2:28 X509v3 Authority Key Identifier: keyid:E7:06:01:2A:10:6B:D0:94:65:8E:60:4C:56:03:05:0F:14:DC:3F:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/67D535ACA32311F0A8D9D520C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 165.84.245.0/24 Signature Algorithm: sha256WithRSAEncryption 34:bf:2b:5f:d2:66:fe:7f:59:99:c8:a6:8a:6b:c6:16:d0:69: 02:14:68:b3:3b:fd:92:30:30:5e:af:fa:69:27:41:0e:35:40: 84:74:f1:96:82:42:62:78:45:75:df:4a:e8:fe:4f:30:b5:14: d2:c9:98:56:87:bd:33:51:15:b6:dc:85:2e:a8:4f:8e:7d:d8: c4:c7:f6:85:a0:c6:3e:7e:bd:31:7e:ea:e0:54:40:17:1b:84: ab:e2:a8:0f:f8:12:a7:0a:2d:cb:27:23:3d:5e:f9:92:96:2a: 07:4b:0a:d0:6b:60:d6:98:18:2d:28:7e:8e:81:28:dc:20:23: 08:69:93:63:e0:71:bc:cd:7f:26:e1:6c:0e:50:fc:9b:32:de: 4f:e3:d8:db:7a:e8:df:85:42:fc:8c:f9:c5:8b:05:d7:09:00: 16:87:80:56:4f:04:25:66:e4:ae:50:3f:9d:43:43:b0:1b:0a: ff:d4:10:72:5d:3c:f5:d5:21:9f:8a:4d:1e:1f:fb:42:a2:63: 7e:0c:0e:95:ad:cd:4a:28:d2:b9:94:17:e8:5d:98:7d:3a:47: a0:9c:de:13:70:f8:18:4f:1e:a0:da:a1:91:2b:1f:33:2f:09: ef:14:29:02:5d:32:a9:0b:f4:71:92:84:85:b6:2f:aa:49:58: f5:34:2c:32 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OTRDRDExMC8GA1UEBRMoRTcwNjAxMkExMDZCRDA5NDY1OEU2MDRDNTYwMzA1MEYx NERDM0Y0QzAeFw0yNTEyMTcwNzI1MDVaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV BAMMDTY5NDI1YWQxLTNiZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDENl1/UAOks2YViiYt9tvXx27jHM9Kz5YQYqvRcN9n0GTfJmdDvnBGabpZDDLk epJh+dIsKVJ6U9mMyWZ43JyszkFGQswcLkXXnwr+VBWjSBFNDuCuVbqTjoBwCv+K GyXY5ApsVTScOUEjLkdlsrkSEP0dvWqreRVLIWAVCvcIx260wChTPuH5kOZLP2cg X7kcASKnywGtcQFXV02CDL2py+Lo2Jd8MFPWYwaEfbkUTv3rXpC7CNk+9v6iPKxY lOIyjqY8xbCYeQze4MYdnpIFE/TU6+nfZVASU1kE6VcWr2hqil9aldULlvGniWFM J6gcgKbmaw1Rw4xISFYBnOxTAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUN4XZFhVA cEKMhPfaRe9Nvo1W8igwHwYDVR0jBBgwFoAU5wYBKhBr0JRljmBMVgMFDxTcP0ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5NENELzJDRDdGRDBFOUVD ODExRjA4Q0QyQUM3QkM0RjlBRTAyLzV3WUJLaEJyMEpSbGptQk1WZ01GRHhUY1Aw dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNXdZQktoQnIwSlJsam1CTVZnTUZEeFRjUDB3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTRDRC8yQ0Q3RkQwRTlFQzgxMUYwOENEMkFDN0JDNEY5QUUwMi82N0Q1MzVBQ0Ez MjMxMUYwQThEOUQ1MjBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKVU9TANBgkqhkiG9w0BAQsFAAOCAQEANL8rX9Jm/n9Zmcim imvGFtBpAhRoszv9kjAwXq/6aSdBDjVAhHTxloJCYnhFdd9K6P5PMLUU0smYVoe9 M1EVttyFLqhPjn3YxMf2haDGPn69MX7q4FRAFxuEq+KoD/gSpwotyycjPV75kpYq B0sK0Gtg1pgYLSh+joEo3CAjCGmTY+BxvM1/JuFsDlD8mzLeT+PY23ro34VC/Iz5 xYsF1wkAFoeAVk8EJWbkrlA/nUNDsBsK/9QQcl089dUhn4pNHh/7QqJjfgwOla3N SijSuZQX6F2YfTpHoJzeE3D4GE8eoNqhkSsfMy8J7xQpAl0yqQv0cZKEhbYvqklY 9TQsMg== -----END CERTIFICATE-----Generated at Sun Jan 18 04:32:30 2026 by rpki-client