This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/FAFCF5C4E8D111F0BEA778E4616F56BC.roa
File: FAFCF5C4E8D111F0BEA778E4616F56BC.roa (raw, json)
Hash identifier: UQDB0gqsNk7IqDQvPRbnxFHsWrxmu9S/BVxhfZ1aAAk=
Subject key identifier: 1E:C1:C5:B6:4D:6F:CB:AB:4E:27:52:F3:53:75:FE:F1:5A:3F:CA:B8
Certificate issuer: /CN=A916BCBA/serialNumber=19C9A0C21930C16EA4169AC2EBEDC7E6C9D7B52F
Certificate serial: 09
Authority key identifier: 19:C9:A0:C2:19:30:C1:6E:A4:16:9A:C2:EB:ED:C7:E6:C9:D7:B5:2F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GcmgwhkwwW6kFprC6-3H5snXtS8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/FAFCF5C4E8D111F0BEA778E4616F56BC.roa
Signing time: Sat 03 Jan 2026 18:28:20 +0000
ROA not before: Sat 03 Jan 2026 18:28:20 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 152685
IP address blocks: 144.79.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.crl
rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GcmgwhkwwW6kFprC6-3H5snXtS8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 07:03:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BCBA, serialNumber=19C9A0C21930C16EA4169AC2EBEDC7E6C9D7B52F
Validity
Not Before: Jan 3 18:28:20 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69595fc4-92bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f0:64:05:9c:97:d1:e8:23:3e:a7:9f:49:79:
c4:b7:1a:a9:2b:5d:42:5e:0c:fa:3a:65:c4:55:5a:
47:59:82:1e:4d:d5:37:3e:03:8a:36:80:d9:90:a6:
ff:33:d2:38:7e:19:c6:ee:cf:0c:c8:4a:7e:90:0d:
fd:74:54:b2:0b:88:df:68:d6:58:12:e3:c4:f0:6b:
2f:55:8e:7c:72:05:fa:a0:e8:bc:ed:6c:9f:b6:cd:
d9:81:a7:a7:3d:01:1f:a9:0f:91:0c:fb:8f:5f:51:
af:d2:0a:25:37:55:98:79:6e:b9:3f:b7:64:36:32:
94:45:2f:ad:b1:6b:5b:a3:65:2f:00:83:59:25:a6:
9c:8e:07:e9:c0:b3:77:36:a0:54:39:59:dc:06:6f:
42:45:62:ec:ca:5c:70:38:39:69:c5:6b:30:63:bc:
25:47:2b:52:94:13:58:03:12:07:28:73:5e:c1:39:
85:3f:73:83:0a:44:39:cf:61:8e:a0:a1:24:71:a3:
f9:e0:74:1d:03:b5:79:cc:5f:5f:27:8f:f2:d9:85:
55:bb:74:5d:d8:a7:be:54:0a:ec:76:b3:9c:68:73:
9f:b5:2a:80:e0:72:ef:66:9b:53:2d:2b:d7:a0:01:
00:76:17:f6:70:95:69:48:e3:58:8e:71:09:1d:26:
dd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C1:C5:B6:4D:6F:CB:AB:4E:27:52:F3:53:75:FE:F1:5A:3F:CA:B8
X509v3 Authority Key Identifier:
keyid:19:C9:A0:C2:19:30:C1:6E:A4:16:9A:C2:EB:ED:C7:E6:C9:D7:B5:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GcmgwhkwwW6kFprC6-3H5snXtS8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/FAFCF5C4E8D111F0BEA778E4616F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
144.79.219.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:b3:67:0e:25:4c:a1:3e:38:ca:c9:d8:ea:45:12:46:17:6b:
0d:31:fa:33:31:04:d3:a0:18:a2:e1:d4:70:4b:4e:4a:c2:96:
2f:a8:a7:67:70:ae:30:3d:28:50:c5:81:27:10:59:35:fd:1c:
9c:dd:0f:d0:98:67:22:f7:60:fc:a8:26:a6:c3:d2:6e:a1:da:
23:88:f2:40:a3:81:24:ef:57:5b:e5:22:b5:59:2a:f2:0e:1c:
54:a6:b6:79:d1:cc:de:f4:69:31:4f:75:07:31:d6:70:e8:87:
d4:07:2d:00:c0:9f:5b:2f:8c:05:59:63:f8:3b:25:37:97:8c:
26:5f:42:c4:4a:3a:cc:49:59:2f:3e:94:b3:a1:a5:63:9f:e1:
e2:19:f0:5f:c0:7a:0f:61:99:b5:04:2a:25:f9:41:5b:f6:76:
bc:56:3a:e3:14:9b:10:5e:0c:35:97:cd:6c:72:ee:a0:23:67:
9d:d8:fb:b4:87:98:97:f4:a5:61:24:9a:f0:a2:90:a0:76:a9:
e7:57:be:b1:cb:74:0f:f8:05:45:63:32:ab:67:f2:e7:fa:4e:
f0:5d:93:0d:6e:43:8f:4c:d9:b3:66:d8:5b:ea:d1:9d:75:01:
f6:5e:0f:66:ff:37:00:af:59:8d:e8:e2:37:0f:45:67:c9:11:
1c:ce:89:7d
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTE2
QkNCQTExMC8GA1UEBRMoMTlDOUEwQzIxOTMwQzE2RUE0MTY5QUMyRUJFREM3RTZD
OUQ3QjUyRjAeFw0yNjAxMDMxODI4MjBaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV
BAMMDTY5NTk1ZmM0LTkyYmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCz8GQFnJfR6CM+p59JecS3GqkrXUJeDPo6ZcRVWkdZgh5N1Tc+A4o2gNmQpv8z
0jh+GcbuzwzISn6QDf10VLILiN9o1lgS48Tway9VjnxyBfqg6LztbJ+2zdmBp6c9
AR+pD5EM+49fUa/SCiU3VZh5brk/t2Q2MpRFL62xa1ujZS8Ag1klppyOB+nAs3c2
oFQ5WdwGb0JFYuzKXHA4OWnFazBjvCVHK1KUE1gDEgcoc17BOYU/c4MKRDnPYY6g
oSRxo/ngdB0DtXnMX18nj/LZhVW7dF3Yp75UCux2s5xoc5+1KoDgcu9mm1MtK9eg
AQB2F/ZwlWlI41iOcQkdJt3lAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUHsHFtk1v
y6tOJ1LzU3X+8Vo/yrgwHwYDVR0jBBgwFoAUGcmgwhkwwW6kFprC6+3H5snXtS8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCQ0JBLzM0MDBDNzE4RTYy
QzExRjA5NzZBOTVGQjZGNkY1NkJDL0djbWd3aGt3d1c2a0ZwckM2LTNINXNuWHRT
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvR2NtZ3doa3d3VzZrRnByQzYtM0g1c25YdFM4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QkNCQS8zNDAwQzcxOEU2MkMxMUYwOTc2QTk1RkI2RjZGNTZCQy9GQUZDRjVDNEU4
RDExMUYwQkVBNzc4RTQ2MTZGNTZCQy5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAJBP2zANBgkqhkiG9w0BAQsFAAOCAQEATrNnDiVMoT44ysnY
6kUSRhdrDTH6MzEE06AYouHUcEtOSsKWL6inZ3CuMD0oUMWBJxBZNf0cnN0P0Jhn
Ivdg/KgmpsPSbqHaI4jyQKOBJO9XW+UitVkq8g4cVKa2edHM3vRpMU91BzHWcOiH
1ActAMCfWy+MBVlj+DslN5eMJl9CxEo6zElZLz6Us6GlY5/h4hnwX8B6D2GZtQQq
JflBW/Z2vFY64xSbEF4MNZfNbHLuoCNnndj7tIeYl/SlYSSa8KKQoHap51e+sct0
D/gFRWMyq2fy5/pO8F2TDW5Dj0zZs2bYW+rRnXUB9l4PZv83AK9ZjejiNw9FZ8kR
HM6JfQ==
-----END CERTIFICATE-----
Generated at Sun Jan 18 04:48:20 2026 by rpki-client