This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/1D0B40BAD85F11E991811862C4F9AE02.roa
File: 1D0B40BAD85F11E991811862C4F9AE02.roa (raw, json)
Hash identifier: WurjdoW1hZFmSg4ZlVaHGjoPMsE/sO7yR3H8W49veT8=
Subject key identifier: 54:94:B5:8E:00:5F:28:B1:87:F1:B2:AE:51:A3:79:94:CA:67:0C:66
Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial: 2B16
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/1D0B40BAD85F11E991811862C4F9AE02.roa
Signing time: Fri 02 Jan 2026 16:13:32 +0000
ROA not before: Fri 02 Jan 2026 16:13:32 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 18256
IP address blocks: 58.64.42.0/24 maxlen: 24
202.183.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 15:33:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11030 (0x2b16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Validity
Not Before: Jan 2 16:13:32 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6957eeab-dba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:16:98:bc:b4:4e:4c:11:91:ea:78:76:85:13:
b4:aa:db:2e:66:a9:d4:dd:f4:40:4c:33:a4:23:3a:
ae:1c:aa:6c:1b:d8:6e:a2:76:df:ae:40:2f:6e:cb:
f4:eb:4e:2b:71:86:0b:22:0f:35:11:06:d4:dc:fc:
7c:0c:bd:2f:4d:f0:c1:a8:6f:52:bf:ce:ba:d8:bd:
5e:78:e8:79:0a:67:d4:8d:f6:b3:70:d0:b3:1a:27:
44:d0:11:c0:cf:37:3b:18:8f:65:0f:3a:2e:b0:e9:
20:fb:07:2b:de:af:73:db:6f:60:cb:79:f9:b1:df:
5c:05:df:36:8c:e5:06:ba:58:ec:e3:ec:47:70:fc:
20:32:7e:cc:54:42:f0:f7:ae:00:22:e4:ff:72:a3:
a8:48:82:f6:a3:a5:8b:0c:e2:ef:62:b0:60:c6:e8:
40:4e:16:9a:2f:2f:e7:99:57:e9:4e:3b:fa:0f:f0:
75:50:ac:eb:f4:40:6a:5f:ea:45:c4:fa:0d:f6:b2:
fc:b7:9d:12:0f:56:56:ab:e8:12:8e:05:e2:67:04:
84:47:fd:88:59:47:ae:29:c7:42:52:43:c1:d2:f5:
ac:c3:4d:a7:88:05:55:3d:e0:08:f3:60:9a:26:2d:
cc:9d:9c:4b:84:35:40:01:70:94:42:a4:2f:c2:10:
68:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:94:B5:8E:00:5F:28:B1:87:F1:B2:AE:51:A3:79:94:CA:67:0C:66
X509v3 Authority Key Identifier:
keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/1D0B40BAD85F11E991811862C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
58.64.42.0/24
202.183.239.0/24
Signature Algorithm: sha256WithRSAEncryption
73:15:02:58:58:bc:66:f1:ce:2b:28:2e:cd:fc:21:89:7c:d7:
74:16:f1:6c:fd:d0:90:7b:93:d5:ba:77:bc:52:79:53:33:90:
56:16:c5:c9:f0:c7:37:12:4c:ce:b5:23:33:b4:48:2f:cd:a6:
3f:c2:23:eb:4a:f2:d4:5a:64:e3:cb:54:af:ce:3e:92:1c:3f:
cf:c1:a0:a1:0e:c0:50:6a:2a:67:3b:6e:e7:d2:d0:24:f8:7a:
d9:e1:e9:07:ec:c7:05:32:8b:22:d3:2b:6c:cb:0c:5b:43:64:
97:7b:23:70:b6:5f:2d:ff:3f:3b:f8:13:da:aa:47:ae:34:3e:
db:36:22:10:da:c2:a4:d5:b0:4f:ef:00:24:fa:f9:80:b7:bb:
31:c4:89:30:17:6a:c3:70:e0:42:9b:6a:b9:6f:d8:20:39:3f:
79:5e:3e:69:31:73:6f:c0:9e:d7:8c:d4:73:36:5e:4b:66:14:
3e:a3:4f:09:e2:ee:e5:8f:f3:d8:63:a3:2c:14:30:3a:10:23:
44:6e:78:14:59:d5:5b:94:76:f8:16:2c:c6:02:79:bc:6f:4e:
e2:56:dd:84:aa:48:22:12:9b:30:0d:6e:f7:48:3b:86:50:a4:
6c:88:ec:93:d3:7b:1e:b1:b1:c7:63:ef:57:88:e3:6c:c4:7f:
d1:b2:3a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 06:17:39 2026 by rpki-client