This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/7E08719E390311EF9DD1A882C4F9AE02.roa File: 7E08719E390311EF9DD1A882C4F9AE02.roa (raw, json) Hash identifier: 4s7EOK7fOyD0bh+PebzMoqJJ+Hie7EREL6lA7IpDGp8= Subject key identifier: C4:5C:77:71:D8:FA:7D:EC:C1:3C:E0:B8:3D:FD:23:42:FF:0B:8D:11 Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Certificate serial: 089A Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/7E08719E390311EF9DD1A882C4F9AE02.roa Signing time: Fri 09 Jan 2026 02:41:51 +0000 ROA not before: Fri 09 Jan 2026 02:41:51 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 131646 IP address blocks: 36.255.192.0/24 maxlen: 24 43.229.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 14:43:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2202 (0x89a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Validity Not Before: Jan 9 02:41:51 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69606aef-6b78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:93:b5:58:7b:7b:9f:ba:7d:74:19:ba:80:64: 48:8d:a1:a0:fb:55:e8:a6:f4:9f:a2:1c:b9:66:c2: 79:34:88:7c:ed:7f:4c:60:a4:9a:8b:6c:b6:ea:21: e6:52:cb:ff:fd:96:fb:69:c9:ec:9f:48:dd:37:6c: 88:76:8f:30:90:f8:c0:9d:b5:f5:41:0f:46:6b:46: 83:01:9c:fe:32:dc:8e:13:c8:88:51:af:86:59:6c: e5:74:e3:68:85:38:2c:f5:c2:eb:4b:1f:a3:f5:70: 53:33:30:8e:2e:43:b2:d6:ca:9f:b2:8a:ac:59:ed: 71:9f:b2:9d:15:88:26:ca:c1:6f:6a:c3:9b:fb:07: ef:6e:ab:36:41:84:b1:ad:87:34:da:8e:4e:02:16: d7:b5:f2:44:f9:3d:89:4a:2e:82:15:90:49:61:dd: 16:e8:9e:16:53:cf:8b:42:e5:f3:27:08:c5:b8:5f: 53:90:9f:30:31:e0:8d:dc:47:78:e3:70:8e:40:93: e2:b0:d6:5d:b1:b9:70:7e:72:31:0c:15:49:91:22: 5c:4b:3f:d9:02:19:cd:70:8d:42:f6:d5:d7:08:60: 43:59:08:4d:1c:2a:05:05:fa:4d:30:9e:86:47:af: df:9f:7e:a0:dc:67:4a:50:6c:d2:0f:af:a0:a4:62: 35:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:5C:77:71:D8:FA:7D:EC:C1:3C:E0:B8:3D:FD:23:42:FF:0B:8D:11 X509v3 Authority Key Identifier: keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/7E08719E390311EF9DD1A882C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.255.192.0/24 43.229.155.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:58:87:f4:da:7f:68:ce:81:34:d4:8c:b2:c5:f4:1f:6d:b9: b5:2a:69:23:23:e5:1d:60:95:a3:9e:3f:20:91:a2:12:68:22: c1:0b:f9:32:30:35:2e:6a:b5:72:74:4a:95:9c:1f:fe:d4:4c: fd:8f:9f:26:27:a3:b4:22:41:33:94:a2:ac:d5:d6:1e:a0:1e: ed:19:b2:25:90:05:c6:03:50:e0:6b:5e:90:78:13:91:e6:83: fa:ae:80:31:7d:ba:c0:d2:ea:0e:8f:84:75:eb:2c:9a:91:2a: 2d:7e:f0:cd:cc:b8:31:34:50:50:4a:2c:a8:bc:06:36:ed:39: fc:4b:e1:e6:f8:11:67:b5:1a:5b:a0:8f:07:f3:46:42:68:7c: 0f:d6:34:6f:45:10:8c:af:78:e4:ef:bc:03:fd:59:db:49:8a: 89:5e:a5:ea:8c:0a:09:fd:93:ad:e0:ab:74:f5:2a:04:b8:62: c8:94:df:21:73:fc:c0:05:25:aa:7d:9c:51:da:bc:14:82:eb: ab:da:c8:f0:f1:fb:16:92:c6:4a:0c:f7:6e:30:b5:50:ab:e7: f4:06:e6:7e:1e:5d:6d:b3:42:1d:0f:b4:be:68:31:03:95:dd: 4a:72:3f:a1:52:8c:b2:9c:00:9c:7a:00:eb:d5:ee:c8:3f:fe: d5:50:ed:67 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICCJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3 RDgwQjA5MzQwHhcNMjYwMTA5MDI0MTUxWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDDA02OTYwNmFlZi02Yjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA35O1WHt7n7p9dBm6gGRIjaGg+1XopvSfohy5ZsJ5NIh87X9MYKSai2y26iHm Usv//Zb7acnsn0jdN2yIdo8wkPjAnbX1QQ9Ga0aDAZz+MtyOE8iIUa+GWWzldONo hTgs9cLrSx+j9XBTMzCOLkOy1sqfsoqsWe1xn7KdFYgmysFvasOb+wfvbqs2QYSx rYc02o5OAhbXtfJE+T2JSi6CFZBJYd0W6J4WU8+LQuXzJwjFuF9TkJ8wMeCN3Ed4 43COQJPisNZdsblwfnIxDBVJkSJcSz/ZAhnNcI1C9tXXCGBDWQhNHCoFBfpNMJ6G R6/fn36g3GdKUGzSD6+gpGI1WwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFMRcd3HY +n3swTzguD39I0L/C40RMB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI0MTIvQzFFQTAzM0NEMkVBMTFFQkEyMDZCMTc4QzRGOUFFMDIvN0UwODcxOUUz OTAzMTFFRjlERDFBODgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAAk/8ADBAAr5ZswDQYJKoZIhvcNAQELBQADggEBAItYh/Ta f2jOgTTUjLLF9B9tubUqaSMj5R1glaOePyCRohJoIsEL+TIwNS5qtXJ0SpWcH/7U TP2PnyYno7QiQTOUoqzV1h6gHu0ZsiWQBcYDUOBrXpB4E5Hmg/qugDF9usDS6g6P hHXrLJqRKi1+8M3MuDE0UFBKLKi8BjbtOfxL4eb4EWe1GlugjwfzRkJofA/WNG9F EIyveOTvvAP9WdtJiolepeqMCgn9k63gq3T1KgS4YsiU3yFz/MAFJap9nFHavBSC 66vayPDx+xaSxkoM924wtVCr5/QG5n4eXW2zQh0PtL5oMQOV3UpyP6FSjLKcAJx6 AOvV7sg//tVQ7Wc= -----END CERTIFICATE-----Generated at Tue Jan 20 02:50:10 2026 by rpki-client