This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/A2D8D1F0F2C311F0B0C628D6386F56BC.roa
File: A2D8D1F0F2C311F0B0C628D6386F56BC.roa (raw, json)
Hash identifier: 34N9nX8iwsHh3hsHbUU6a6+SpZa9bdL/pw3isw+sv20=
Subject key identifier: 39:CF:6C:64:EF:15:A9:F5:46:33:42:EE:B0:D5:CA:EB:AB:B6:34:42
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 21D5
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/A2D8D1F0F2C311F0B0C628D6386F56BC.roa
Signing time: Fri 16 Jan 2026 10:10:51 +0000
ROA not before: Fri 16 Jan 2026 10:10:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 153870
IP address blocks: 160.30.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 13:39:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8661 (0x21d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jan 16 10:10:51 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=696a0eab-66a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a6:37:4b:27:e8:13:92:fa:45:17:dc:77:7b:
87:4f:81:65:60:a3:35:56:aa:ce:a1:c5:4a:c5:b6:
16:f0:a6:d3:91:85:3d:b2:71:46:f9:51:5c:09:7c:
1f:26:01:6e:12:bb:7f:6c:eb:3b:08:30:5d:57:42:
38:e8:1c:fc:ce:98:1b:7e:f4:cc:d9:05:0b:ca:0f:
67:7c:b0:a5:de:96:ae:d5:c9:83:37:3d:0f:9d:e5:
72:45:d3:69:ff:66:95:32:ab:9d:e9:a5:92:35:47:
24:81:a7:a1:b3:7a:0d:2a:b5:fc:a0:0b:d3:e3:9c:
bd:82:96:d5:62:0f:1f:9d:82:27:81:9e:ab:56:19:
dc:3a:9c:87:96:22:85:ac:f3:2a:e6:f2:cd:e1:03:
40:25:4d:03:ee:3a:79:91:2d:31:8e:e8:72:11:00:
25:26:cb:13:18:98:81:a1:c9:bb:0f:1e:ed:44:c2:
22:c2:91:97:96:ab:c6:10:6c:08:22:05:50:43:a8:
18:c6:72:79:bd:91:50:ec:c1:d8:ae:e4:87:9b:f7:
eb:62:6e:84:07:3c:a3:00:7a:16:ce:e9:57:e2:e2:
07:99:f6:e8:6d:7a:15:d3:8f:b0:4c:31:22:2c:65:
b4:06:8b:a2:29:15:89:e6:ef:be:17:bc:8c:14:93:
ed:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:CF:6C:64:EF:15:A9:F5:46:33:42:EE:B0:D5:CA:EB:AB:B6:34:42
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/A2D8D1F0F2C311F0B0C628D6386F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.84.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:77:7e:f6:57:70:b2:70:d8:47:15:c3:8e:31:c7:4f:04:79:
75:17:72:f3:b3:71:20:d5:35:4b:e1:a5:ba:cb:1d:84:11:dd:
78:69:62:3c:2d:a3:5d:36:73:73:66:62:bb:ae:46:2b:9d:f4:
05:d2:51:c1:7b:bd:8a:e9:59:fd:ce:ad:49:29:49:3c:7f:57:
63:6d:b1:0c:d3:d0:75:81:79:3b:51:fc:a8:6a:92:e6:c0:8a:
11:f4:90:a2:3f:ce:a5:1d:23:db:01:df:08:af:e2:d7:a4:38:
1f:81:5e:8e:27:74:18:05:9e:c2:db:e6:95:02:a4:c1:f8:93:
1a:c3:c4:cc:a2:c3:d3:9c:c5:7d:87:37:af:13:ec:b2:43:f1:
fa:85:4c:6b:84:9f:29:4d:1c:16:dd:55:c4:ca:9b:8e:5a:70:
02:0a:3d:a0:14:62:d7:a8:86:b7:bb:e9:a5:df:c2:f3:02:fd:
3d:01:8c:7d:36:8a:dd:2c:8b:76:09:13:5a:55:3b:14:f4:86:
c9:c4:b2:de:0d:4a:b7:34:00:dc:95:d7:b9:c6:ab:5e:eb:39:
1b:61:1f:ca:b1:33:44:e8:5d:3e:c5:80:37:1c:f6:59:1b:63:
b5:a9:b9:ff:0e:00:21:32:ce:1f:6c:7d:a6:af:ae:55:f5:d2:
4b:bd:b0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 15:54:58 2026 by rpki-client