This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/94ACE664F39211F0A321C9CD736F56BC.roa
File: 94ACE664F39211F0A321C9CD736F56BC.roa (raw, json)
Hash identifier: sAbp2HJ9jHUDgzDJJJJAYBMgzuLgyIy/s0YJslmS/v4=
Subject key identifier: 16:00:FC:17:92:47:F9:D3:FC:32:5F:08:26:0E:47:98:DF:A9:C7:4A
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 21E5
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/94ACE664F39211F0A321C9CD736F56BC.roa
Signing time: Sat 17 Jan 2026 10:52:13 +0000
ROA not before: Sat 17 Jan 2026 10:52:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142204
IP address blocks: 192.58.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8677 (0x21e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jan 17 10:52:13 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=696b69dd-82e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:eb:ff:d6:86:3f:38:10:dc:2f:7f:ec:3a:d7:
1f:34:da:18:89:31:5b:50:94:2f:c9:8d:b2:d2:29:
1b:ab:92:19:5a:70:2c:49:2c:04:b1:61:2a:76:1c:
40:54:7c:5e:96:6b:b5:ad:b7:1d:5e:1a:b6:1d:78:
7a:20:ae:5d:d6:78:0f:32:ae:14:f0:f9:d6:26:bc:
49:07:93:c2:0d:0f:f2:fd:20:3b:d1:bb:54:04:6b:
c9:ca:e7:45:b1:03:08:3b:39:c1:5a:75:62:eb:9c:
5b:56:b1:89:cb:bd:cf:db:0e:0e:77:1b:42:2d:f8:
fb:5a:13:26:c4:5d:45:89:cd:52:5c:92:3b:de:51:
a0:30:91:d4:32:b7:63:5f:7e:5e:82:36:fb:35:b2:
be:2c:7f:55:01:59:c3:e3:5b:19:d6:e9:ea:fb:2f:
e9:6b:19:48:d1:7a:ae:32:6c:2a:9c:09:b1:c5:c1:
22:b9:41:ee:d9:02:b2:7d:df:2c:3b:c8:de:51:7d:
09:89:68:dc:18:75:fd:92:6b:65:26:29:fa:fe:fc:
fa:21:e3:61:45:60:17:64:82:a4:81:71:19:7c:83:
09:f2:2d:22:16:42:9c:60:da:a1:77:a4:b7:fa:b7:
d4:cf:7f:71:ab:f1:ca:4d:75:0f:3f:d2:78:2b:c5:
17:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:00:FC:17:92:47:F9:D3:FC:32:5F:08:26:0E:47:98:DF:A9:C7:4A
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/94ACE664F39211F0A321C9CD736F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.58.101.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:a8:22:f6:f7:6d:be:13:18:a8:71:ca:b6:87:a5:37:93:16:
c3:66:5d:ca:c8:a1:f8:d7:59:be:9d:08:d5:5f:eb:c3:bb:b5:
81:d7:eb:ae:4a:fd:11:18:37:03:73:13:c3:24:71:d0:16:f6:
0d:00:97:55:dd:d1:5d:ac:2b:b3:62:34:8a:3d:61:69:6f:6b:
d8:5d:47:87:51:66:15:70:19:60:10:e4:c3:d0:c7:5c:0d:6c:
e4:35:fa:85:00:bd:12:24:c2:85:06:05:9d:bd:1a:0e:00:26:
91:65:e6:6f:0c:38:95:3f:18:e0:5b:36:3a:0e:c2:64:ec:c3:
3e:7f:61:f6:d6:4c:ba:65:05:09:eb:5e:96:68:20:8f:93:50:
9e:e6:bc:10:a3:5d:94:4b:7d:22:34:94:a1:c9:9d:0a:05:5b:
1b:0c:d4:3a:cb:32:37:6f:d8:a5:49:86:ba:4c:9d:8f:63:f7:
ef:64:9c:46:02:55:3e:ca:0a:1c:3c:ff:be:ee:28:9f:4d:9c:
cb:a6:8d:52:98:db:08:bd:e4:7f:e1:a3:75:d5:ee:da:f9:62:
6d:aa:f5:a1:b1:22:2c:49:1d:c2:24:fe:5d:b0:e2:b5:08:b7:
9d:12:6c:1b:f4:47:d6:c5:ae:f1:b1:c2:31:22:f9:97:a6:33:
b6:f1:ce:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 00:54:55 2026 by rpki-client