This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/1B6234F8C6C411F0B021E76AC4F9AE02.roa
File: 1B6234F8C6C411F0B021E76AC4F9AE02.roa (raw, json)
Hash identifier: v7C6IWvjF/5/1XJ5uojdApdcFxBlXs9eFZgCh/RMoPg=
Subject key identifier: 12:3B:06:98:09:91:6A:57:20:2E:AF:E9:1A:95:CC:89:32:C1:C2:6D
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 21CF
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/1B6234F8C6C411F0B021E76AC4F9AE02.roa
Signing time: Tue 13 Jan 2026 12:08:20 +0000
ROA not before: Tue 13 Jan 2026 12:08:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 153950
IP address blocks: 160.25.111.0/24 maxlen: 24
165.99.212.0/23 maxlen: 24
192.232.32.0/24 maxlen: 24
192.232.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 13:53:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8655 (0x21cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jan 13 12:08:20 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=696635b3-b948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ae:94:84:69:f3:2e:f5:21:1b:24:a9:8d:f4:
55:5a:bb:08:e9:88:1e:d2:71:ab:04:cb:fd:56:f0:
1f:64:6c:43:a7:a5:2e:fb:5c:15:2b:fe:9a:a8:6c:
56:8d:c8:13:26:33:36:e9:8d:7f:8c:a5:f3:e8:a5:
83:54:af:7c:cd:9b:a6:35:80:b6:75:11:4f:01:5d:
ec:eb:11:ce:c2:63:3a:bc:cb:bb:8f:44:47:5d:3b:
b3:58:aa:9d:46:b5:c4:10:1b:80:f9:df:24:2c:ee:
e5:83:b2:d7:06:a2:21:3f:c3:87:47:13:95:5a:1a:
5b:68:85:f4:2f:da:cb:28:6a:80:fc:24:c9:06:4e:
fc:c6:92:64:12:3f:da:e1:e7:c2:42:ba:34:81:3c:
c1:df:a1:bd:ba:2b:60:b3:f2:14:32:e8:dd:11:93:
53:88:d0:81:56:f7:47:90:1f:61:37:ef:66:a2:8d:
da:66:01:22:5c:d8:78:e4:a0:e3:1f:31:cf:f0:c6:
ae:72:57:5e:b8:dc:d5:89:68:54:50:41:30:2a:71:
92:f8:66:14:a3:5c:56:c4:c4:44:29:17:0e:18:b6:
3f:97:83:d5:da:42:f4:ab:31:9a:a2:67:bf:a1:fb:
62:f2:f6:62:74:cb:5e:8f:f3:d1:7c:0e:e9:30:e5:
04:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3B:06:98:09:91:6A:57:20:2E:AF:E9:1A:95:CC:89:32:C1:C2:6D
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/1B6234F8C6C411F0B021E76AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.25.111.0/24
165.99.212.0/23
192.232.32.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:59:9b:b1:f2:d4:70:2d:57:22:39:1f:72:18:67:b8:98:fe:
47:19:67:2c:4a:22:cb:93:f3:98:c4:42:d7:bf:03:13:70:f9:
e2:4f:63:58:04:86:31:d5:8e:86:c9:f3:df:88:aa:47:27:0f:
61:60:e2:ad:40:ce:98:db:e3:3d:14:54:f4:b3:b5:2b:76:59:
2d:90:d9:b8:6b:90:fc:6d:53:7a:7c:02:e7:93:c9:b7:92:07:
3f:ac:5e:81:70:01:4a:58:8f:a6:b0:05:fb:40:6c:90:a8:7c:
15:98:c5:6e:5f:70:94:93:60:e7:df:03:bf:11:ba:e8:c8:e7:
01:03:6c:54:7d:ce:4e:ea:e5:2a:d4:ce:4e:27:d6:98:2f:cd:
c2:3d:81:38:b6:06:cc:d1:c4:b1:d6:0f:98:ed:b4:b0:50:e9:
fd:df:92:35:1c:75:d4:1a:c6:0d:dd:53:fa:b8:53:4f:ba:89:
2f:6a:e7:f4:c7:9d:73:66:cd:67:41:58:00:4a:50:f8:14:48:
82:84:e4:84:4c:71:90:65:a6:31:e8:95:17:34:71:89:8c:17:
22:a6:fa:3c:75:fa:55:19:f7:3e:e7:ce:0b:ec:78:d9:3f:91:
fb:ac:ea:9a:7c:76:e9:21:ad:a4:e0:6d:e7:5b:d0:5d:3a:8c:
99:ee:34:dc
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgICIc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjYwMTEzMTIwODIwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTY2MzViMy1iOTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoq6UhGnzLvUhGySpjfRVWrsI6Yge0nGrBMv9VvAfZGxDp6Uu+1wVK/6aqGxW
jcgTJjM26Y1/jKXz6KWDVK98zZumNYC2dRFPAV3s6xHOwmM6vMu7j0RHXTuzWKqd
RrXEEBuA+d8kLO7lg7LXBqIhP8OHRxOVWhpbaIX0L9rLKGqA/CTJBk78xpJkEj/a
4efCQro0gTzB36G9uitgs/IUMujdEZNTiNCBVvdHkB9hN+9moo3aZgEiXNh45KDj
HzHP8MaucldeuNzViWhUUEEwKnGS+GYUo1xWxMREKRcOGLY/l4PV2kL0qzGaome/
ofti8vZidMtej/PRfA7pMOUEdQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFBI7BpgJ
kWpXIC6v6RqVzIkywcJtMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMUI2MjM0RjhD
NkM0MTFGMEIwMjFFNzZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E
HDAaMBgEAgABMBIDBACgGW8DBAGlY9QDBAHA6CAwDQYJKoZIhvcNAQELBQADggEB
AJ5Zm7Hy1HAtVyI5H3IYZ7iY/kcZZyxKIsuT85jEQte/AxNw+eJPY1gEhjHVjobJ
89+IqkcnD2Fg4q1Azpjb4z0UVPSztSt2WS2Q2bhrkPxtU3p8AueTybeSBz+sXoFw
AUpYj6awBftAbJCofBWYxW5fcJSTYOffA78RuujI5wEDbFR9zk7q5SrUzk4n1pgv
zcI9gTi2BszRxLHWD5jttLBQ6f3fkjUcddQaxg3dU/q4U0+6iS9q5/THnXNmzWdB
WABKUPgUSIKE5IRMcZBlpjHolRc0cYmMFyKm+jx1+lUZ9z7nzgvseNk/kfus6pp8
dukhraTgbedb0F06jJnuNNw=
-----END CERTIFICATE-----
Generated at Wed Jan 21 15:59:34 2026 by rpki-client