This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2B253FB4F5C911F0A1C4DE1F456F56BC.roa
File: 2B253FB4F5C911F0A1C4DE1F456F56BC.roa (raw, json)
Hash identifier: 5NbY0gJH1iL+TyYUUveD5hEbYaJeeIaske+vnGjTMME=
Subject key identifier: D9:8D:F4:2D:3C:C8:1C:62:16:7C:1D:98:2F:DB:32:C5:0A:EA:C4:8D
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 21EA
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2B253FB4F5C911F0A1C4DE1F456F56BC.roa
Signing time: Tue 20 Jan 2026 06:28:01 +0000
ROA not before: Tue 20 Jan 2026 06:28:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 150045
IP address blocks: 192.58.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 13:53:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8682 (0x21ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jan 20 06:28:01 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=696f2071-1a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b4:d3:0e:55:1c:86:c9:39:5a:68:51:74:18:
f1:fe:5c:20:d5:5c:8c:14:47:c5:b0:0d:c6:c1:da:
53:85:a7:a8:b5:36:1f:88:f1:7d:90:2e:a4:3a:ae:
2b:e6:e9:43:31:66:30:e2:45:2e:cb:84:ac:6f:be:
84:96:a4:7e:0a:b3:61:19:93:ad:39:91:af:7d:1b:
5a:d8:2d:de:2f:2d:f3:20:b0:7c:b0:23:8f:17:5e:
d7:75:ab:66:76:6d:f9:3f:bd:40:b7:84:00:13:7b:
b1:82:e4:b5:dc:a7:2d:19:01:bc:aa:87:c9:20:b0:
db:e8:6d:93:95:41:e8:70:9b:39:d5:2e:fe:51:b2:
bf:f7:00:06:79:85:9b:dd:6a:4a:58:81:a3:76:03:
7f:6c:5f:88:0b:37:ce:3a:3b:17:e2:f8:59:1e:f8:
a7:73:78:d4:2c:f5:10:de:3c:71:75:2b:96:6e:db:
a2:91:ac:21:af:b7:84:5f:a3:89:f3:12:17:3e:d9:
90:4a:ae:cb:85:06:a4:cb:9a:bf:ff:be:fa:13:5c:
63:b1:23:0b:2d:b3:9c:c1:3e:b4:86:da:bd:f5:8d:
aa:4d:ce:17:50:ed:1a:84:77:4a:08:f5:74:b6:8d:
a4:df:dc:03:14:a6:41:ba:78:c1:21:3c:85:b1:56:
7f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:8D:F4:2D:3C:C8:1C:62:16:7C:1D:98:2F:DB:32:C5:0A:EA:C4:8D
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2B253FB4F5C911F0A1C4DE1F456F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.58.101.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:b2:4f:81:0d:f6:d5:3a:54:56:b5:a0:ef:e9:9b:8e:a0:1e:
fa:17:4d:70:7d:e7:3f:db:ba:64:b8:43:34:c4:40:c1:97:f4:
66:fd:27:31:63:af:f0:f7:d2:03:86:84:97:c9:58:22:88:2f:
f9:da:07:32:e7:53:2f:0c:04:b5:ae:4f:67:29:b8:7b:1b:c8:
95:6d:28:1e:23:95:37:4a:23:31:b3:11:bf:ec:83:ce:dd:76:
62:0c:97:59:44:41:aa:78:f4:1f:01:fc:0e:c4:34:50:44:f3:
5c:a4:f5:3e:16:9b:c6:e3:5c:53:74:6a:c7:ea:40:e9:9f:bd:
d9:e2:05:b8:fc:2c:9d:0b:42:a8:f4:2b:db:0b:bd:2e:4c:3a:
68:53:40:d6:d8:1f:ae:c6:b8:f9:11:8f:48:56:f9:55:91:46:
4d:c2:5f:2f:a3:16:0a:d5:a8:bb:73:75:64:31:8c:af:c9:94:
ff:47:af:62:b8:63:5a:df:97:1f:15:d3:be:65:1f:d9:d8:55:
c3:6c:d4:be:c0:3f:71:78:35:c7:b7:2e:43:81:0d:90:37:2b:
de:c0:4b:bc:1e:73:9f:af:99:c5:d2:37:4c:d6:4e:9b:7d:6e:
94:eb:4f:5f:28:f4:22:0f:2d:d9:67:cb:ce:19:79:ff:0a:84:
0a:8c:f0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 15:54:56 2026 by rpki-client