This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/14CB89DAF2C711F0A661CCA33A6F56BC.roa
File: 14CB89DAF2C711F0A661CCA33A6F56BC.roa (raw, json)
Hash identifier: MUTQ6NqGs/mfQzPvMT9Aenmlf5+BhjsbxteBHsVuZaA=
Subject key identifier: 85:39:38:AF:F5:D9:BC:D2:BD:CD:0B:FF:E1:2F:E3:CC:B8:F2:44:8A
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 21D7
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/14CB89DAF2C711F0A661CCA33A6F56BC.roa
Signing time: Fri 16 Jan 2026 10:35:31 +0000
ROA not before: Fri 16 Jan 2026 10:35:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 154468
IP address blocks: 144.79.204.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 13:53:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8663 (0x21d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jan 16 10:35:31 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=696a1473-99f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dd:e7:c4:82:7d:2e:ab:d3:64:80:cc:c4:86:
c8:ca:ad:d8:08:87:9e:a3:4a:13:1b:34:ca:c1:ae:
d1:76:df:fd:ba:e7:59:a2:1b:73:58:aa:1a:15:8d:
43:71:7e:a7:7b:d1:b5:41:e5:89:11:89:47:8d:5f:
b9:9f:e5:e2:2e:9c:c3:d9:81:2b:4d:f4:ac:d1:18:
a7:cf:97:38:e8:ee:06:a0:15:78:22:e9:fa:17:a5:
d4:e8:f0:57:b2:1a:6f:bd:d8:49:11:90:65:af:f3:
d4:0f:24:0e:29:44:6a:8f:3f:5c:56:9d:0c:dc:90:
d7:7e:e5:33:4b:83:a3:f7:61:01:f3:7a:16:28:09:
56:7b:64:88:29:f0:f4:f0:91:e2:1d:bf:f8:0e:85:
14:8a:74:b4:6c:13:6f:36:77:e8:06:05:a6:12:d4:
74:88:dd:e3:7a:ed:e3:58:0f:3d:a7:ff:b3:ed:e1:
5c:07:2f:de:08:fb:69:d7:42:91:24:56:c5:4e:6c:
9c:d3:99:05:a4:a9:25:85:7f:f7:fe:6a:ee:e7:fc:
a0:ea:fc:34:9e:4b:0c:e1:6c:a7:e0:7c:9a:e0:45:
8f:b9:f4:ed:62:3f:d8:9f:b9:36:37:97:72:10:7a:
a4:c2:5c:29:04:b5:7d:bb:99:2a:4c:e8:0e:d7:aa:
94:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:39:38:AF:F5:D9:BC:D2:BD:CD:0B:FF:E1:2F:E3:CC:B8:F2:44:8A
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/14CB89DAF2C711F0A661CCA33A6F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
144.79.204.0/23
Signature Algorithm: sha256WithRSAEncryption
20:d2:3f:fd:d6:38:5f:7c:ac:2c:7e:b6:50:bc:5c:ea:a2:ca:
90:f4:71:a3:9c:19:35:d0:2b:fd:a6:07:82:3a:97:9c:4c:12:
3f:94:85:af:c2:b2:fe:19:7d:8a:74:5a:8a:83:01:3f:cd:f2:
91:c1:9c:b0:40:7c:4c:a2:0f:5e:c9:82:68:c4:db:0b:6e:02:
64:08:08:b9:b1:0b:b1:f8:dd:33:f6:80:bf:69:f3:37:21:f4:
54:2e:bc:d4:e0:e0:26:8b:4d:6d:5b:3e:54:f6:5a:46:ed:78:
ce:69:48:ce:2c:d8:ee:83:36:4b:01:c4:5f:10:c7:6f:1d:4c:
46:f1:3e:d0:ae:68:09:4e:ee:4c:a8:b8:ee:ee:65:b4:bf:b3:
f6:a3:4e:82:5b:f8:59:0f:cc:6a:fd:a7:0d:53:53:72:56:31:
44:13:c8:c6:5c:6a:8d:cd:66:13:a4:10:54:82:20:09:df:eb:
83:cd:91:4e:4c:4f:02:79:26:74:ca:00:9b:be:35:38:60:9d:
b5:30:3f:24:d6:96:2d:67:5d:90:19:a5:46:db:42:b8:c7:9a:
be:3c:78:8a:1f:42:8c:56:d3:2a:29:ec:61:ff:d0:76:92:b4:
35:7c:10:45:0f:a1:84:5f:d9:a8:54:b9:79:22:6c:a9:0e:3c:
8a:fa:65:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 15:54:58 2026 by rpki-client