This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/4CE6CCDCEB8611F09362151A546F56BC.roa
File: 4CE6CCDCEB8611F09362151A546F56BC.roa (raw, json)
Hash identifier: Ll5AmPyn81KRkJmhk35Xt9Z7ZswC6EcUIH+EF3gy50Q=
Subject key identifier: D5:CA:3E:86:5D:BC:59:A9:C4:0D:2F:FC:AD:F8:84:F5:4D:4D:DC:37
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 21AE
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/4CE6CCDCEB8611F09362151A546F56BC.roa
Signing time: Wed 07 Jan 2026 05:04:10 +0000
ROA not before: Wed 07 Jan 2026 05:04:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142169
IP address blocks: 192.26.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 13:53:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8622 (0x21ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jan 7 05:04:10 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=695de949-e62f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ee:82:75:33:bd:b4:05:4f:9e:e9:ba:5a:41:
fd:1c:74:48:39:7a:9e:7c:1a:c8:39:e1:83:e8:bc:
98:5c:35:bb:c2:24:99:ba:b3:f2:28:69:63:00:95:
aa:9b:39:47:2b:cd:8e:31:57:d5:61:e4:3d:ae:f4:
91:1c:77:a4:76:16:fc:af:1b:55:fa:b7:87:52:74:
01:39:2d:78:c0:9b:c7:16:a9:d6:61:9a:38:24:5e:
bb:3f:74:1b:6d:c5:b2:87:96:4d:85:f9:3b:df:9b:
9e:c0:73:bb:15:07:ef:71:c1:f6:1a:ab:45:c9:45:
3a:11:80:d3:79:ee:5c:d5:db:5c:57:48:8a:2b:36:
0d:f7:7d:b5:e2:9b:b5:f9:b3:aa:a2:40:84:14:8a:
b1:8f:82:47:43:81:ca:39:e8:1b:49:ba:ab:ed:d3:
2c:27:8c:a3:6c:8f:a1:5c:5b:d9:14:62:79:44:e6:
bb:2b:6f:e9:72:a8:7f:2b:68:51:af:e3:25:9a:8f:
71:24:a4:2a:bb:89:98:5f:e3:0b:27:5c:84:62:30:
b0:d0:f7:d3:f4:1e:a8:a0:7c:0c:5e:64:ae:48:93:
3d:fe:f5:eb:47:f5:aa:32:22:1c:5c:d5:91:c1:b9:
5d:6f:d4:ce:24:5b:d7:c3:45:d1:ec:20:0f:e1:88:
81:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:CA:3E:86:5D:BC:59:A9:C4:0D:2F:FC:AD:F8:84:F5:4D:4D:DC:37
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/4CE6CCDCEB8611F09362151A546F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.26.215.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:7d:5a:76:85:56:35:b0:30:1f:4c:92:0e:c4:90:f1:e8:a8:
a1:0e:a3:7c:63:f6:04:fb:73:33:6a:29:c5:31:c1:b2:ca:fa:
57:ed:ad:d8:2e:04:78:6e:ad:32:3f:93:63:5d:ba:8f:d0:4e:
6b:38:03:66:a1:68:f2:8f:1e:98:5a:75:60:db:49:48:1a:e5:
d3:93:18:3b:84:fb:65:ff:18:06:90:a2:c1:d4:07:31:47:8c:
34:9e:37:ac:50:43:6f:0f:69:d6:af:cf:aa:73:ce:a1:7c:b0:
25:1c:a3:55:c3:90:db:35:f6:5a:d3:82:05:92:27:82:26:9b:
42:cc:4d:f0:f6:38:65:53:33:7e:72:9d:ff:e8:5a:76:a3:a2:
6b:65:64:21:12:d7:f0:31:d3:bc:d7:8d:f5:75:53:40:94:52:
5c:ad:0b:ca:24:d6:36:13:b9:04:e4:76:4e:67:ad:ea:2d:d2:
a7:b9:e0:94:07:5c:f4:2c:89:ed:77:5f:90:6b:35:bf:a0:70:
d0:1e:5b:0f:60:b8:32:0d:4d:25:6c:ed:af:57:76:f3:24:f6:
84:53:8e:a0:2b:c6:b9:c8:4a:9f:ff:79:87:c7:f4:aa:19:d5:
0b:1c:ae:fd:4a:75:47:1a:05:0f:96:c4:5d:d8:ad:85:7a:d6:
82:7f:7f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 15:54:57 2026 by rpki-client