This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151290/44AB495AF20511F0BD2586054A6F56BC/95303322F20511F0873139314A6F56BC.roa
File: 95303322F20511F0873139314A6F56BC.roa (raw, json)
Hash identifier: TqOW0Ji8JWxbWqrkth4X9nlHY7jDf79g81KfNeFf5Hg=
Subject key identifier: 9B:1C:12:99:3F:6C:E8:DA:DC:A8:DE:B8:73:42:A1:2F:62:3C:B0:ED
Certificate issuer: /CN=A9151290/serialNumber=BD3CC5FF8428F2DE1C386BF8068D028745806FCE
Certificate serial: 02
Authority key identifier: BD:3C:C5:FF:84:28:F2:DE:1C:38:6B:F8:06:8D:02:87:45:80:6F:CE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151290/44AB495AF20511F0BD2586054A6F56BC/95303322F20511F0873139314A6F56BC.roa
Signing time: Thu 15 Jan 2026 11:30:24 +0000
ROA not before: Thu 15 Jan 2026 11:30:24 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 146943
IP address blocks: 192.83.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9151290/44AB495AF20511F0BD2586054A6F56BC/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.crl
rsync://rpki.apnic.net/member_repository/A9151290/44AB495AF20511F0BD2586054A6F56BC/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 07:09:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151290, serialNumber=BD3CC5FF8428F2DE1C386BF8068D028745806FCE
Validity
Not Before: Jan 15 11:30:24 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6968cfd0-ddcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d5:66:ae:b4:10:9e:ea:63:73:fc:9c:ca:29:
26:f0:75:35:58:5a:0c:33:70:59:96:66:0c:7c:ef:
f7:32:da:a6:73:f3:a6:a0:e5:47:91:7a:c4:5f:77:
1c:ec:0b:32:5a:c8:ca:fd:2a:c2:62:ae:46:34:3f:
2c:c0:7d:3e:08:3a:5a:94:6c:5f:b8:cf:ba:f6:5c:
77:02:bf:ba:5a:27:ad:c8:5c:79:5b:55:92:3c:8d:
bd:d1:62:4f:a7:7f:3d:46:15:64:8d:ca:0b:e4:7b:
0d:6f:cd:71:45:fb:f8:b9:b5:c0:1d:8b:83:4b:a9:
da:b3:ca:21:d6:c8:8a:65:64:c8:65:aa:6d:b3:7a:
87:34:09:fb:be:44:23:49:b7:a2:39:90:50:f4:17:
f3:6d:77:f2:74:f9:f2:78:12:f0:68:6c:42:86:86:
d7:cb:58:43:30:bd:3d:ea:92:b3:2b:1a:bb:59:62:
7e:b0:43:05:5a:38:e8:f4:15:5d:5b:5c:d2:fa:e3:
3b:ce:17:ad:4b:1c:95:79:40:e4:2c:65:df:5e:41:
ad:53:8d:69:26:e6:7c:b3:3c:a2:56:11:2c:6c:93:
32:33:17:2e:b9:46:ff:32:e8:dd:14:ec:84:fc:54:
e0:1e:a5:43:1a:f2:85:83:9b:6a:65:4d:df:09:c9:
09:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:1C:12:99:3F:6C:E8:DA:DC:A8:DE:B8:73:42:A1:2F:62:3C:B0:ED
X509v3 Authority Key Identifier:
keyid:BD:3C:C5:FF:84:28:F2:DE:1C:38:6B:F8:06:8D:02:87:45:80:6F:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151290/44AB495AF20511F0BD2586054A6F56BC/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151290/44AB495AF20511F0BD2586054A6F56BC/95303322F20511F0873139314A6F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.83.157.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:6f:3c:c4:20:f1:b2:00:0e:03:eb:ba:9b:fd:de:68:a2:a1:
92:6d:57:c9:c9:f2:70:91:e6:38:c3:95:ab:fa:50:11:b3:9c:
e7:7b:74:6e:5c:0a:d0:3c:bd:c5:a1:35:86:d0:76:56:6d:ff:
4d:f2:51:35:48:66:c8:93:bc:38:36:3e:f1:ca:1b:c2:f5:9e:
fe:e6:b8:23:17:23:22:1f:b3:7c:a2:50:e1:06:13:47:e4:de:
41:fd:4e:3d:3e:86:21:f1:4e:26:d1:ab:78:ba:e9:6d:fa:01:
70:9e:e8:70:38:b8:39:5e:b8:ee:fa:58:9f:ff:c9:cb:bd:ca:
11:4a:15:00:51:6d:0d:63:07:26:a5:6b:f9:82:65:c0:88:2a:
3f:46:da:03:69:15:31:a8:a9:d2:af:e3:8c:08:55:6a:b4:4a:
98:9f:81:17:3e:81:1e:b4:20:9a:1d:3e:3a:ec:dd:f3:63:7c:
f1:40:05:ed:c3:80:40:13:e5:95:d3:58:9d:1d:9a:de:b0:8c:
af:e3:a7:2b:7c:56:92:cb:ce:16:4d:a4:3e:7b:31:f4:cd:6d:
34:cf:90:0b:c5:0c:8d:9e:41:03:b3:72:2d:4a:1c:b3:e9:5f:
65:f0:3f:df:7b:4d:34:bd:c2:41:05:0f:5d:8f:98:5c:a9:f8:
31:73:ea:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 04:31:48 2026 by rpki-client