This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB1C2/059F7CBCDCA311F085D6F15B436F56BC/D4578CBCE0F811F0841404A85E6F56BC.roa
File: D4578CBCE0F811F0841404A85E6F56BC.roa (raw, json)
Hash identifier: 9eUAekJiT1Ca1LaRVVMKrixh9PlS8uVmPngCkQ0JqKg=
Subject key identifier: AC:71:DF:D0:3E:E0:D1:23:BD:5E:AF:CD:D5:89:E5:0F:5D:1F:2D:A2
Certificate issuer: /CN=A91AB1C2/serialNumber=18432D51E62DDA729D1FF1BE1B81FBF55BD8B347
Certificate serial: 06
Authority key identifier: 18:43:2D:51:E6:2D:DA:72:9D:1F:F1:BE:1B:81:FB:F5:5B:D8:B3:47
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GEMtUeYt2nKdH_G-G4H79VvYs0c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB1C2/059F7CBCDCA311F085D6F15B436F56BC/D4578CBCE0F811F0841404A85E6F56BC.roa
Signing time: Wed 24 Dec 2025 18:46:17 +0000
ROA not before: Wed 24 Dec 2025 18:46:17 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 199073
IP address blocks: 144.79.170.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB1C2/059F7CBCDCA311F085D6F15B436F56BC/GEMtUeYt2nKdH_G-G4H79VvYs0c.crl
rsync://rpki.apnic.net/member_repository/A91AB1C2/059F7CBCDCA311F085D6F15B436F56BC/GEMtUeYt2nKdH_G-G4H79VvYs0c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GEMtUeYt2nKdH_G-G4H79VvYs0c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 07:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB1C2, serialNumber=18432D51E62DDA729D1FF1BE1B81FBF55BD8B347
Validity
Not Before: Dec 24 18:46:17 2025 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=694c34f9-d900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bd:b5:39:4b:ed:51:9b:8a:63:b9:1f:02:8c:
41:c2:9f:f3:70:cb:75:fd:10:0b:91:23:66:ce:29:
27:1e:03:9c:61:b1:81:d9:8d:e0:a7:59:b9:47:35:
93:b8:3a:09:38:51:48:5b:90:de:60:6e:95:86:ee:
10:1d:53:82:4a:2d:c6:c3:3d:37:8f:ad:f2:a2:c7:
5d:88:e9:ff:5c:6f:0f:8d:66:a5:ed:9a:21:b9:9b:
cc:1f:1a:a0:da:d0:89:d1:06:68:5e:6e:e5:fc:55:
81:48:02:27:05:7a:27:ca:a4:12:a0:13:f3:3b:7d:
06:14:51:a4:90:a3:bd:c1:4b:7e:5e:c7:23:51:6a:
b1:e1:7e:0f:b4:39:74:ba:38:73:8f:1f:89:d6:34:
f7:7c:42:a4:a9:86:b6:a2:2c:55:a4:71:c9:be:a0:
83:67:b3:98:51:55:5d:27:9a:8d:02:d4:57:7c:ba:
8d:43:84:c2:2d:c0:a8:32:c1:fa:8e:11:86:c5:62:
6d:0f:da:d8:9a:e4:09:7a:39:48:3a:b1:5c:f2:02:
3c:a4:7b:08:2f:10:ea:de:bb:81:bb:53:d0:76:b3:
b1:be:d7:b7:00:c0:79:75:91:ee:ee:32:86:bc:07:
23:1b:cd:cc:2a:d8:64:c0:9d:9d:be:31:da:96:e3:
ec:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:71:DF:D0:3E:E0:D1:23:BD:5E:AF:CD:D5:89:E5:0F:5D:1F:2D:A2
X509v3 Authority Key Identifier:
keyid:18:43:2D:51:E6:2D:DA:72:9D:1F:F1:BE:1B:81:FB:F5:5B:D8:B3:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/059F7CBCDCA311F085D6F15B436F56BC/GEMtUeYt2nKdH_G-G4H79VvYs0c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GEMtUeYt2nKdH_G-G4H79VvYs0c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/059F7CBCDCA311F085D6F15B436F56BC/D4578CBCE0F811F0841404A85E6F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
144.79.170.0/23
Signature Algorithm: sha256WithRSAEncryption
10:6f:ee:c5:80:5b:7a:bf:39:a6:b7:cc:a6:11:70:fd:9f:7c:
c2:1a:33:9c:fd:f1:ed:e5:8b:82:2d:12:b9:13:ee:16:0c:b4:
60:d0:35:a6:55:d9:7b:3e:49:e9:b7:16:74:73:dd:fa:b9:47:
0e:8f:bf:9b:2d:3e:a1:dc:cc:ee:71:9b:eb:c4:bc:d1:ec:00:
de:fe:a8:06:32:3f:46:c6:37:46:54:3a:01:78:c7:f2:24:34:
4b:c7:2c:e6:a0:77:44:e4:d3:1a:d0:fb:51:b3:32:d5:36:01:
d1:86:14:5f:82:65:fc:8a:e0:29:a1:ac:e6:0d:ba:9d:d8:c7:
79:b2:40:89:21:e7:0e:d2:d5:99:32:62:6e:80:e0:11:5d:52:
a4:8d:7b:5e:01:25:10:3c:a2:8a:43:4f:77:4f:d9:f5:93:9c:
8a:b6:9f:82:ed:84:db:ca:60:20:c3:e7:bc:10:fc:5b:96:33:
c9:b4:08:33:0c:e9:9c:54:9a:ef:ac:6c:4e:89:49:c7:32:53:
7b:f8:ea:c4:4c:45:d9:66:ce:4f:75:22:33:08:d5:3f:1a:6d:
02:52:c2:ff:65:e0:ed:00:19:09:d1:a9:d6:19:e4:28:6a:c6:
48:3e:bf:c9:80:e3:b8:40:fd:af:39:93:37:34:be:0d:37:e6:
80:5c:6d:10
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFB
QjFDMjExMC8GA1UEBRMoMTg0MzJENTFFNjJEREE3MjlEMUZGMUJFMUI4MUZCRjU1
QkQ4QjM0NzAeFw0yNTEyMjQxODQ2MTdaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV
BAMMDTY5NGMzNGY5LWQ5MDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDHvbU5S+1Rm4pjuR8CjEHCn/Nwy3X9EAuRI2bOKSceA5xhsYHZjeCnWblHNZO4
Ogk4UUhbkN5gbpWG7hAdU4JKLcbDPTePrfKix12I6f9cbw+NZqXtmiG5m8wfGqDa
0InRBmhebuX8VYFIAicFeifKpBKgE/M7fQYUUaSQo73BS35exyNRarHhfg+0OXS6
OHOPH4nWNPd8QqSphraiLFWkccm+oINns5hRVV0nmo0C1Fd8uo1DhMItwKgywfqO
EYbFYm0P2tia5Al6OUg6sVzyAjykewgvEOreu4G7U9B2s7G+17cAwHl1ke7uMoa8
ByMbzcwq2GTAnZ2+MdqW4+x9AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUrHHf0D7g
0SO9Xq/N1YnlD10fLaIwHwYDVR0jBBgwFoAUGEMtUeYt2nKdH/G+G4H79VvYs0cw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFCMUMyLzA1OUY3Q0JDRENB
MzExRjA4NUQ2RjE1QjQzNkY1NkJDL0dFTXRVZVl0Mm5LZEhfRy1HNEg3OVZ2WXMw
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvR0VNdFVlWXQybktkSF9HLUc0SDc5VnZZczBjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QjFDMi8wNTlGN0NCQ0RDQTMxMUYwODVENkYxNUI0MzZGNTZCQy9ENDU3OENCQ0Uw
RjgxMUYwODQxNDA0QTg1RTZGNTZCQy5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAZBPqjANBgkqhkiG9w0BAQsFAAOCAQEAEG/uxYBber85prfM
phFw/Z98whoznP3x7eWLgi0SuRPuFgy0YNA1plXZez5J6bcWdHPd+rlHDo+/my0+
odzM7nGb68S80ewA3v6oBjI/RsY3RlQ6AXjH8iQ0S8cs5qB3ROTTGtD7UbMy1TYB
0YYUX4Jl/IrgKaGs5g26ndjHebJAiSHnDtLVmTJiboDgEV1SpI17XgElEDyiikNP
d0/Z9ZOcirafgu2E28pgIMPnvBD8W5YzybQIMwzpnFSa76xsTolJxzJTe/jqxExF
2WbOT3UiMwjVPxptAlLC/2Xg7QAZCdGp1hnkKGrGSD6/yYDjuED9rzmTNzS+DTfm
gFxtEA==
-----END CERTIFICATE-----
Generated at Sun Jan 18 04:46:05 2026 by rpki-client