This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/694A4554ED2311F09CB4E0CD436F56BC.roa
File: 694A4554ED2311F09CB4E0CD436F56BC.roa (raw, json)
Hash identifier: NscRI7Tj7nB7aaEvUT/ZVUoTxSyW2OBR1girJmJqCVE=
Subject key identifier: B1:8D:E4:F2:22:7E:EF:7E:A8:79:FC:D1:65:F6:79:BB:89:78:91:19
Certificate issuer: /CN=A9178992/serialNumber=D58F834E3CC56A50136931A44199DBCBE58B844C
Certificate serial: 04
Authority key identifier: D5:8F:83:4E:3C:C5:6A:50:13:69:31:A4:41:99:DB:CB:E5:8B:84:4C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1Y-DTjzFalATaTGkQZnby-WLhEw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/694A4554ED2311F09CB4E0CD436F56BC.roa
Signing time: Sat 10 Jan 2026 03:50:43 +0000
ROA not before: Sat 10 Jan 2026 03:50:43 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 152685
IP address blocks: 192.232.58.0/23 maxlen: 23
192.232.58.0/24 maxlen: 24
192.232.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/1Y-DTjzFalATaTGkQZnby-WLhEw.crl
rsync://rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/1Y-DTjzFalATaTGkQZnby-WLhEw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1Y-DTjzFalATaTGkQZnby-WLhEw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 07:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178992, serialNumber=D58F834E3CC56A50136931A44199DBCBE58B844C
Validity
Not Before: Jan 10 03:50:43 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6961cc93-f3c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1b:83:56:5f:15:3f:e7:f4:40:38:0f:60:01:
87:8c:ab:cd:b9:ae:cf:dc:bb:68:5f:91:60:0c:85:
0d:25:f1:af:36:77:7e:79:79:aa:c7:60:44:1f:9e:
29:8e:9d:7e:8d:01:a6:4c:35:44:d7:10:ef:38:58:
af:98:08:c5:ca:c6:6f:cb:09:e2:b3:b9:19:c1:6e:
18:c7:e5:3e:44:5a:77:23:2f:2a:a0:b3:ed:ff:c1:
e8:a2:ca:30:d8:a2:28:47:ff:f4:71:93:18:2c:a5:
04:0c:89:88:56:64:1f:26:a7:f7:1b:4a:7a:a5:8c:
84:5c:ba:9c:da:94:37:7b:4d:20:9d:79:a0:5a:5c:
b2:aa:f0:b9:de:f1:d8:9d:a1:69:04:bb:22:66:34:
e5:10:7b:78:11:61:fb:44:cd:41:94:6e:d3:d4:28:
35:38:e7:85:a1:96:2a:7d:5d:99:7a:0e:cf:5c:91:
24:bb:15:33:12:e3:8a:20:87:b0:23:9e:ad:3c:e2:
42:49:7f:80:d2:ef:6b:49:bb:4f:6e:49:b1:eb:7b:
41:75:fc:7c:49:a5:7d:cc:03:af:4a:f6:7a:10:3c:
8a:bc:87:eb:7f:fb:42:24:d8:a6:dc:a8:fb:b5:b4:
37:82:26:81:12:4e:5f:67:6e:f1:5c:bd:e1:11:c2:
66:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8D:E4:F2:22:7E:EF:7E:A8:79:FC:D1:65:F6:79:BB:89:78:91:19
X509v3 Authority Key Identifier:
keyid:D5:8F:83:4E:3C:C5:6A:50:13:69:31:A4:41:99:DB:CB:E5:8B:84:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/1Y-DTjzFalATaTGkQZnby-WLhEw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1Y-DTjzFalATaTGkQZnby-WLhEw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/694A4554ED2311F09CB4E0CD436F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.232.58.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:d4:bf:86:2c:e9:82:33:76:45:78:69:3a:f9:27:58:0e:b3:
df:31:ae:2e:07:d5:9d:b4:8b:8d:a8:9b:f8:ed:9d:7a:d8:1e:
cd:b4:de:78:f6:dc:b8:f0:b1:a8:95:6f:7b:d6:39:52:b7:de:
52:29:48:ea:12:b0:97:e4:61:8e:d6:8a:d9:17:df:41:9a:e3:
db:ba:bf:21:49:a7:b4:61:b6:a6:84:f0:4a:f3:ce:d4:c9:91:
01:a6:4d:47:da:b6:bb:be:81:f3:bd:3e:3b:e8:98:c8:e3:61:
58:d6:ef:02:42:5f:dc:3d:a6:b1:cf:32:14:9d:a8:6f:b0:90:
6a:9b:da:18:85:b4:15:6d:7b:97:b2:17:c1:7a:53:2e:9a:97:
f8:68:58:f5:f8:eb:1c:8e:f7:6c:06:20:93:80:60:4b:97:7d:
ed:ce:31:9a:d4:17:79:82:c2:98:3e:c0:63:7f:66:b7:3e:00:
a0:44:f6:a1:c7:1f:27:92:06:56:cc:27:5e:b3:c5:6e:58:c6:
3f:0f:38:c6:0f:5e:e0:06:59:a8:8f:5f:95:3a:94:ba:d0:cc:
ef:4c:41:ee:49:1f:15:4c:26:4c:08:75:bc:a0:7b:38:83:a4:
64:fe:5b:d0:27:37:c2:4b:98:56:b3:d4:63:df:95:1c:5a:20:
52:83:d1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 04:08:44 2026 by rpki-client