This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/26CABD66DB4011F0B92C4C778FD3641D.roa
File: 26CABD66DB4011F0B92C4C778FD3641D.roa (raw, json)
Hash identifier: qNSJ4pqRhXOzoVAHZQaycGg0ZmCHhSMerGrL2kuYbx8=
Subject key identifier: 85:AA:42:16:60:A2:48:F6:40:98:19:1C:FD:C2:84:36:12:EB:EC:25
Certificate issuer: /CN=A91A2946/serialNumber=C8EBC245C04CF3E46CFEE7812387CC1D5AD38E5D
Certificate serial: 0E
Authority key identifier: C8:EB:C2:45:C0:4C:F3:E4:6C:FE:E7:81:23:87:CC:1D:5A:D3:8E:5D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/26CABD66DB4011F0B92C4C778FD3641D.roa
Signing time: Wed 17 Dec 2025 12:02:02 +0000
ROA not before: Wed 17 Dec 2025 12:02:02 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 137127
IP address blocks: 144.79.158.0/24 maxlen: 24
144.79.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.crl
rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 07:03:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2946, serialNumber=C8EBC245C04CF3E46CFEE7812387CC1D5AD38E5D
Validity
Not Before: Dec 17 12:02:02 2025 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69429bba-c5ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a7:57:f1:8c:0e:e5:5e:f7:5c:38:30:50:ef:
38:02:49:14:be:8d:d3:74:8c:b9:8d:f0:23:5a:b1:
46:a5:b8:56:0c:5c:75:08:87:0f:c7:eb:6a:14:e8:
28:d2:92:50:6f:d7:0c:d9:e1:6c:bb:89:d7:be:fa:
17:6a:f9:01:09:e4:0f:96:94:82:f8:06:2a:2d:0f:
a7:7a:c0:5f:44:ea:0b:09:f0:b7:18:80:1e:37:f3:
eb:65:c6:d1:06:2e:bb:a1:a4:83:3e:73:6b:23:30:
c2:7c:d0:41:c4:77:97:97:82:ab:27:ea:81:73:06:
27:82:42:b0:52:5b:ed:6b:6a:fe:6a:5b:b5:32:62:
7c:7e:73:32:52:54:be:13:fb:ec:78:5c:36:61:72:
81:eb:d1:0e:2f:bd:8a:54:8b:b6:3c:1c:e0:ea:ec:
2d:47:08:91:da:a3:1a:71:e3:e5:e1:cf:30:31:28:
e4:b8:82:95:df:23:5e:6d:95:07:31:72:a6:09:fd:
99:93:48:ab:91:40:d7:13:df:62:8a:3e:af:0c:8e:
a1:84:c2:e4:67:5b:4f:6a:0a:ca:aa:15:62:20:e8:
f0:8d:8f:f0:8e:58:71:77:61:2d:56:f9:ad:ee:b5:
01:23:6f:6d:dc:03:98:58:46:ee:75:cd:fb:c4:35:
d1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AA:42:16:60:A2:48:F6:40:98:19:1C:FD:C2:84:36:12:EB:EC:25
X509v3 Authority Key Identifier:
keyid:C8:EB:C2:45:C0:4C:F3:E4:6C:FE:E7:81:23:87:CC:1D:5A:D3:8E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/26CABD66DB4011F0B92C4C778FD3641D.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
144.79.158.0/23
Signature Algorithm: sha256WithRSAEncryption
e2:98:2d:0f:33:b2:07:c5:fa:c9:58:9b:be:a1:13:8f:27:e5:
68:85:2b:9e:bf:01:d6:8b:95:f0:fe:30:60:2c:7d:91:7e:f3:
70:db:10:24:35:e6:4c:e9:68:61:85:68:48:b2:3e:26:88:95:
6f:15:bd:4f:2d:6b:96:77:f4:24:bb:db:4d:ae:e4:ef:4b:fd:
02:d8:a1:76:84:94:b7:52:e1:34:cf:34:a4:01:28:09:3c:e3:
3b:2a:db:1e:c7:00:31:7b:61:fc:4b:f7:0b:cb:3f:b4:9f:3b:
ac:af:66:ba:b4:a6:f5:10:2b:aa:75:6d:a0:3c:7c:7d:95:2e:
f8:c9:d5:e1:74:12:7a:72:b5:36:bd:62:3c:4a:c3:e6:c8:de:
db:ac:cd:85:52:ad:c7:a9:d0:ce:ec:85:39:b5:f4:84:b2:a8:
97:ca:d6:a1:33:76:24:2c:af:49:e9:5d:73:fa:4e:f8:19:4e:
3d:74:85:40:50:e3:78:34:a9:c4:bd:7d:25:22:07:4b:39:7f:
d0:fa:82:03:fd:c0:df:d2:0d:97:e2:1e:2a:fe:20:53:75:4a:
27:a2:78:e3:49:e5:cd:96:fc:88:0a:8f:eb:e6:3d:06:96:1b:
10:6e:66:29:c3:d2:20:47:95:b5:88:53:2c:77:ab:49:ae:fd:
ae:fb:09:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 23:35:58 2025 by rpki-client