This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DFB2D738F37C11F0BD8551326C6F56BC.roa
File: DFB2D738F37C11F0BD8551326C6F56BC.roa (raw, json)
Hash identifier: YdhdnEaFXj0IxWntoVoxCLL+uiaVAoiy9Nk+G1NqORs=
Subject key identifier: 0D:0B:DD:F7:AD:BF:F4:8D:BB:82:BC:3B:A5:7C:53:D4:33:0F:3A:BD
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 21DA
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DFB2D738F37C11F0BD8551326C6F56BC.roa
Signing time: Sat 17 Jan 2026 08:16:50 +0000
ROA not before: Sat 17 Jan 2026 08:16:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 141169
IP address blocks: 144.79.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 13:53:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8666 (0x21da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jan 17 08:16:50 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=696b4572-853e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:17:a1:b9:98:18:db:b6:0c:56:79:1b:70:17:
ad:af:4e:ff:39:36:09:77:ef:95:cf:8c:27:1c:ba:
84:7b:8f:00:5b:0c:d6:14:60:14:90:68:aa:ed:7a:
26:ad:55:4a:ad:92:ed:d5:d1:b7:63:93:96:fa:c6:
49:65:84:de:7f:e6:b4:fa:62:d5:e1:e8:ac:ea:56:
a1:07:eb:9d:f6:51:ce:fb:58:af:a0:09:2c:ff:7b:
a5:92:5c:8b:e6:06:60:7f:2c:ed:d2:4a:23:06:27:
45:8b:ca:55:bd:dc:47:88:60:d4:99:99:5c:06:c6:
76:36:5c:91:d6:4f:19:17:c6:10:64:b8:01:c9:94:
11:0a:75:cf:cb:f6:ed:ca:97:aa:6c:3a:d3:8c:41:
95:dc:df:40:31:94:66:07:ca:64:40:09:b4:fb:f3:
51:d6:6b:1a:fb:65:3d:9a:e8:dd:ac:22:ad:fc:66:
3f:00:9e:b5:bc:e6:72:6b:04:13:b5:c2:ef:53:c5:
85:f5:25:64:f0:ee:f7:b8:56:6a:df:bd:09:4a:91:
2d:c0:a6:6b:32:09:3f:5f:bf:56:b4:3b:5a:ec:09:
91:c6:5d:37:c6:f2:50:a7:eb:5c:ea:8b:4d:f6:f3:
e8:ed:e4:1f:99:5b:0f:bc:c2:af:1b:35:ee:33:bb:
18:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0B:DD:F7:AD:BF:F4:8D:BB:82:BC:3B:A5:7C:53:D4:33:0F:3A:BD
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DFB2D738F37C11F0BD8551326C6F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
144.79.215.0/24
Signature Algorithm: sha256WithRSAEncryption
38:29:70:9e:e3:08:e1:f6:0c:a9:e9:25:f6:bc:06:a9:68:12:
17:0c:b5:e5:1e:fa:1f:87:1f:9d:39:f4:6a:b2:fd:1f:3c:90:
c9:2e:9e:3d:6e:ca:00:1b:fc:19:83:1d:17:7d:94:b2:4b:38:
44:b4:51:c6:b0:02:a9:57:b9:a7:90:64:05:d0:16:8f:7c:41:
87:5d:fd:05:59:a8:05:28:fc:3a:d7:d4:a8:e4:ce:4f:95:94:
ea:4b:8a:a1:18:d0:38:16:ac:3a:c9:b0:f2:95:1b:0c:96:6b:
81:8d:e0:b4:26:8d:e7:04:4e:39:06:e4:db:0e:36:9f:75:2c:
da:5b:80:8c:cb:06:8d:13:67:c2:7e:76:0d:c3:2d:5d:64:43:
db:cd:c7:27:cd:65:3f:6f:db:82:a9:8a:2f:f5:49:10:a7:5a:
c9:7e:ac:f7:df:94:a4:83:c3:8f:cd:48:70:f0:42:28:9c:58:
6d:c0:9a:ea:90:28:eb:ca:90:3c:e1:60:4d:49:d9:69:e4:a6:
ad:d0:1f:76:d5:21:a8:5a:e2:c0:72:25:f2:0d:48:b2:f7:fa:
dd:54:2c:a9:cb:2f:03:e8:0a:ee:42:69:7e:d2:61:7f:8a:fb:
bc:92:cc:6b:88:cc:69:8b:9c:8c:9c:bf:cf:7b:29:00:d3:cd:
92:2f:7d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 15:54:59 2026 by rpki-client