This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/58A89B282A6A11F0AEF7CB2EC4F9AE02.roa
File: 58A89B282A6A11F0AEF7CB2EC4F9AE02.roa (raw, json)
Hash identifier: aHOxrJmseWAmKHcwxvdiyQrvEzuVStWosR3sI22DqG4=
Subject key identifier: 7B:C9:17:DC:BD:8A:86:75:28:09:D5:30:00:30:6B:8E:33:2C:BB:72
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: CC47
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/58A89B282A6A11F0AEF7CB2EC4F9AE02.roa
Signing time: Fri 02 Jan 2026 06:07:03 +0000
ROA not before: Fri 02 Jan 2026 06:07:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151175
IP address blocks: 103.204.0.0/23 maxlen: 24
2400:ff20::/32 maxlen: 32
2400:ff20::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 11:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52295 (0xcc47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jan 2 06:07:03 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69576087-bd4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:71:07:52:1e:f1:81:55:6d:fd:cb:b8:23:b3:
7c:35:b1:8e:37:d9:70:19:3a:4e:75:ad:3c:91:9f:
f6:9e:89:06:fc:df:b4:58:93:8f:a5:ea:c7:d2:99:
e2:b4:7e:96:b9:83:41:48:42:05:0e:9e:e9:e7:9b:
bc:f2:ff:0c:b3:df:5e:29:f7:18:a3:7a:59:19:95:
47:f2:63:d9:0e:a8:76:b6:f0:53:64:da:55:08:22:
ab:1a:b3:fc:5d:9f:c5:69:50:ca:01:29:58:8d:42:
bd:48:c2:48:ad:83:7e:f1:b2:8a:0d:ad:eb:df:17:
a7:fb:c2:a4:98:8b:6c:c4:76:79:bd:c7:3f:34:df:
ee:97:7b:26:37:46:1c:f6:3d:c6:5c:04:08:27:40:
3c:0a:d6:69:e7:2c:3c:82:bb:20:cb:6c:82:40:5b:
7f:00:bb:9e:46:98:41:7d:9b:92:ef:72:5a:9f:8b:
ad:81:f5:78:91:cc:72:52:e1:8f:f8:a6:0d:7a:57:
75:31:81:f4:d9:42:79:61:d1:7d:92:78:0e:b5:91:
e6:99:86:4e:a0:5a:1f:fe:b2:4e:4e:6d:a5:6f:61:
83:d3:97:8b:e0:ad:0d:12:52:42:d7:f2:28:70:a3:
5c:22:d5:96:61:a8:e8:cf:b3:c8:50:6c:da:a8:25:
e8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C9:17:DC:BD:8A:86:75:28:09:D5:30:00:30:6B:8E:33:2C:BB:72
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/58A89B282A6A11F0AEF7CB2EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.204.0.0/23
IPv6:
2400:ff20::/32
Signature Algorithm: sha256WithRSAEncryption
3e:7c:10:0a:46:4f:bd:98:49:9f:1f:da:97:2c:a0:7c:6e:c3:
4c:30:e4:be:ee:ed:51:ef:14:20:1f:2a:e8:d4:e7:1a:4b:6f:
d0:92:85:a5:d3:f5:26:48:ef:bc:f4:13:3b:6d:45:85:df:28:
7d:3a:ce:72:a5:50:3e:f9:c3:70:85:7a:8f:85:fc:d0:85:c4:
20:9c:0e:8b:42:27:52:5a:1e:00:9a:b3:d1:ea:10:85:b1:ba:
6c:03:a7:8c:ab:9d:b7:1a:96:3b:4a:85:17:88:01:f6:10:8b:
e2:e6:67:11:bc:33:c1:15:20:ce:dc:90:69:58:05:a2:7d:61:
b8:15:23:b9:a9:b0:e8:95:d5:d3:72:61:ad:81:b9:34:54:45:
b3:fe:4e:5c:48:7e:51:b3:7f:c9:bb:90:64:8c:2f:10:1f:64:
a4:b6:56:22:aa:5f:43:1e:ea:df:e5:9e:ae:40:66:eb:35:8e:
09:13:a2:39:7e:07:40:c5:3f:8c:b6:31:0f:7f:38:b9:ad:08:
d6:df:68:14:6f:b9:e0:14:80:66:eb:33:9f:29:3c:6a:64:fd:
3b:8d:81:5f:25:e4:ed:14:4f:77:a0:fb:03:a9:52:41:d6:f8:
b3:20:b1:d8:4f:ae:70:c7:9c:33:ae:a7:4e:16:fd:b2:af:93:
cd:05:5f:92
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAMxHMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMMCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDEwMjA2MDcwM1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAwwNNjk1NzYwODctYmQ0YTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMhxB1Ie8YFVbf3LuCOzfDWxjjfZcBk6TnWtPJGf9p6JBvzftFiTj6Xqx9KZ
4rR+lrmDQUhCBQ6e6eebvPL/DLPfXin3GKN6WRmVR/Jj2Q6odrbwU2TaVQgiqxqz
/F2fxWlQygEpWI1CvUjCSK2DfvGyig2t698Xp/vCpJiLbMR2eb3HPzTf7pd7JjdG
HPY9xlwECCdAPArWaecsPIK7IMtsgkBbfwC7nkaYQX2bku9yWp+LrYH1eJHMclLh
j/imDXpXdTGB9NlCeWHRfZJ4DrWR5pmGTqBaH/6yTk5tpW9hg9OXi+CtDRJSQtfy
KHCjXCLVlmGo6M+zyFBs2qgl6BUCAwEAAaOCAqQwggKgMB0GA1UdDgQWBBR7yRfc
vYqGdSgJ1TAAMGuOMyy7cjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzU4QTg5QjI4
MkE2QTExRjBBRUY3Q0IyRUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMC4GCCsGAQUFBwEHAQH/
BB8wHTAMBAIAATAGAwQBZ8wAMA0EAgACMAcDBQAkAP8gMA0GCSqGSIb3DQEBCwUA
A4IBAQA+fBAKRk+9mEmfH9qXLKB8bsNMMOS+7u1R7xQgHyro1OcaS2/QkoWl0/Um
SO+89BM7bUWF3yh9Os5ypVA++cNwhXqPhfzQhcQgnA6LQidSWh4AmrPR6hCFsbps
A6eMq523GpY7SoUXiAH2EIvi5mcRvDPBFSDO3JBpWAWifWG4FSO5qbDoldXTcmGt
gbk0VEWz/k5cSH5Rs3/Ju5BkjC8QH2SktlYiql9DHurf5Z6uQGbrNY4JE6I5fgdA
xT+MtjEPfzi5rQjW32gUb7ngFIBm6zOfKTxqZP07jYFfJeTtFE93oPsDqVJB1viz
ILHYT65wx5wzrqdOFv2yr5PNBV+S
-----END CERTIFICATE-----
Generated at Mon Jan 19 23:43:01 2026 by rpki-client