This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/04A3F314E94211F095EE60383C6F56BC.roa File: 04A3F314E94211F095EE60383C6F56BC.roa (raw, json) Hash identifier: xCA7+qfMPr+CL4lBVmaOYtFfKa1iKLabqRXEEm624Qo= Subject key identifier: 66:C4:84:57:6B:CA:4E:AC:12:0D:B3:84:B4:14:3B:90:88:23:96:9D Certificate issuer: /CN=A91918AB/serialNumber=662EC9A2B7B6CE42D23A5238534C657622325372 Certificate serial: 02 Authority key identifier: 66:2E:C9:A2:B7:B6:CE:42:D2:3A:52:38:53:4C:65:76:22:32:53:72 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zi7Jore2zkLSOlI4U0xldiIyU3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/04A3F314E94211F095EE60383C6F56BC.roa Signing time: Sun 04 Jan 2026 07:50:20 +0000 ROA not before: Sun 04 Jan 2026 07:50:20 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 142168 IP address blocks: 198.56.24.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.crl rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zi7Jore2zkLSOlI4U0xldiIyU3I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Jan 2026 07:20:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91918AB, serialNumber=662EC9A2B7B6CE42D23A5238534C657622325372 Validity Not Before: Jan 4 07:50:20 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=695a1bbc-f4d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a4:44:35:c8:4a:ed:5c:b3:f3:27:4d:28:ef: a3:a1:f4:31:27:48:7c:b8:a9:0d:4c:d9:a7:ff:35: 23:69:ef:1f:b7:37:d3:c0:88:6a:16:df:de:7c:67: 9a:5c:55:53:37:b9:b2:42:dc:c5:48:54:30:98:c3: 55:b4:46:74:b5:40:bd:27:a8:8e:70:f6:7d:0e:d6: cc:f4:5b:b0:b7:e8:8d:8e:48:58:0a:5c:11:11:9d: cf:08:24:e5:0f:5d:f2:16:9a:51:5a:77:49:0e:f7: 3b:74:91:6e:a0:35:a9:48:b0:d0:ca:5a:64:4f:1d: 8c:c3:4a:f1:22:55:d9:c3:c4:94:db:33:32:a5:cf: 35:4b:6e:1a:e0:6b:82:8b:1b:4b:8b:f5:83:71:a2: 45:36:33:b4:b5:8b:bd:5c:5d:35:13:b8:a5:9b:a9: b1:08:e8:a4:9d:80:ed:94:32:d6:c5:57:b6:85:d2: b6:4d:bf:71:08:39:35:39:cc:49:48:81:3d:66:66: 0a:28:c9:b5:45:72:bd:38:84:64:66:ed:a7:4b:bc: 8b:24:b1:94:4a:84:4c:8b:c9:e4:76:49:81:c1:6c: 1f:9d:4b:3e:68:be:0a:e2:70:ad:4c:a4:97:3e:61: 7b:3a:57:ee:00:8a:f5:8e:14:df:54:1d:8c:e6:c4: 79:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:C4:84:57:6B:CA:4E:AC:12:0D:B3:84:B4:14:3B:90:88:23:96:9D X509v3 Authority Key Identifier: keyid:66:2E:C9:A2:B7:B6:CE:42:D2:3A:52:38:53:4C:65:76:22:32:53:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zi7Jore2zkLSOlI4U0xldiIyU3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/04A3F314E94211F095EE60383C6F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 198.56.24.0/23 Signature Algorithm: sha256WithRSAEncryption 5a:dd:d3:72:ab:4b:e4:29:20:a7:a2:99:c6:13:5b:97:4f:86: f6:b1:bd:b6:12:3c:02:f3:ec:be:36:29:16:aa:64:31:d2:f4: 02:49:24:e1:7a:19:39:0b:31:9c:ab:44:cd:df:76:68:c6:4d: c6:02:67:7c:b9:c6:82:90:41:f9:ae:01:2a:58:2c:5a:b3:6f: 38:d1:22:52:9e:6a:13:1d:59:e0:ba:d9:33:0f:29:4a:79:e0: 49:cb:07:92:d8:5b:36:a6:fb:ab:b1:98:c7:c3:fb:71:e5:75: 29:fc:e2:e3:fc:7a:ad:e5:bc:50:d5:97:a5:c1:cb:d5:fb:d0: e6:08:c5:d5:38:13:21:6c:22:14:b1:47:48:63:76:8a:8c:ef: d0:ea:3d:8f:ab:9d:21:98:62:df:ba:d8:de:b4:ff:03:09:80: 7f:ed:7a:ce:8b:d1:6c:b9:a2:f3:56:f7:81:1b:4f:1c:e6:32: ef:58:bd:70:b0:ff:67:8b:df:c4:49:60:5d:7e:3c:fa:34:ef: c5:a9:0d:51:a6:ce:12:8a:5c:f1:40:97:77:c9:a8:67:0a:bc: a6:3c:fe:49:fe:3d:2b:5c:cc:18:6f:19:98:77:7d:87:c2:6e: 56:9e:b2:fa:34:20:05:d9:99:32:88:10:70:50:43:50:fd:f1: 08:02:f9:b4 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTE5 MThBQjExMC8GA1UEBRMoNjYyRUM5QTJCN0I2Q0U0MkQyM0E1MjM4NTM0QzY1NzYy MjMyNTM3MjAeFw0yNjAxMDQwNzUwMjBaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV BAMMDTY5NWExYmJjLWY0ZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBpEQ1yErtXLPzJ00o76Oh9DEnSHy4qQ1M2af/NSNp7x+3N9PAiGoW3958Z5pc VVM3ubJC3MVIVDCYw1W0RnS1QL0nqI5w9n0O1sz0W7C36I2OSFgKXBERnc8IJOUP XfIWmlFad0kO9zt0kW6gNalIsNDKWmRPHYzDSvEiVdnDxJTbMzKlzzVLbhrga4KL G0uL9YNxokU2M7S1i71cXTUTuKWbqbEI6KSdgO2UMtbFV7aF0rZNv3EIOTU5zElI gT1mZgooybVFcr04hGRm7adLvIsksZRKhEyLyeR2SYHBbB+dSz5ovgricK1MpJc+ YXs6V+4AivWOFN9UHYzmxHnbAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUZsSEV2vK TqwSDbOEtBQ7kIgjlp0wHwYDVR0jBBgwFoAUZi7Jore2zkLSOlI4U0xldiIyU3Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkxOEFCLzhBNTc5N0RDRTk0 MTExRjBCRkQ2Q0UzMzNDNkY1NkJDL1ppN0pvcmUyemtMU09sSTRVMHhsZGlJeVUz SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWmk3Sm9yZTJ6a0xTT2xJNFUweGxkaUl5VTNJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MThBQi84QTU3OTdEQ0U5NDExMUYwQkZENkNFMzMzQzZGNTZCQy8wNEEzRjMxNEU5 NDIxMUYwOTVFRTYwMzgzQzZGNTZCQy5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAcY4GDANBgkqhkiG9w0BAQsFAAOCAQEAWt3TcqtL5Ckgp6KZ xhNbl0+G9rG9thI8AvPsvjYpFqpkMdL0Akkk4XoZOQsxnKtEzd92aMZNxgJnfLnG gpBB+a4BKlgsWrNvONEiUp5qEx1Z4LrZMw8pSnngScsHkthbNqb7q7GYx8P7ceV1 Kfzi4/x6reW8UNWXpcHL1fvQ5gjF1TgTIWwiFLFHSGN2iozv0Oo9j6udIZhi37rY 3rT/AwmAf+16zovRbLmi81b3gRtPHOYy71i9cLD/Z4vfxElgXX48+jTvxakNUabO Eopc8UCXd8moZwq8pjz+Sf49K1zMGG8ZmHd9h8JuVp6y+jQgBdmZMogQcFBDUP3x CAL5tA== -----END CERTIFICATE-----Generated at Fri Jan 9 23:32:12 2026 by rpki-client