This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/856BB842F51811F093E49DB5586F56BC.roa File: 856BB842F51811F093E49DB5586F56BC.roa (raw, json) Hash identifier: h76n/oAobtKc063J7FNfBw7NsTDxw6HiVR3l0QQ3UU0= Subject key identifier: 77:93:20:63:68:5E:C7:EF:F9:17:52:40:51:83:BF:74:B1:A0:9A:5D Certificate issuer: /CN=A91BCB09/serialNumber=EED2809187FDEAFC5478AC3AB56A6AB4F9C1BD46 Certificate serial: 04 Authority key identifier: EE:D2:80:91:87:FD:EA:FC:54:78:AC:3A:B5:6A:6A:B4:F9:C1:BD:46 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tKAkYf96vxUeKw6tWpqtPnBvUY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/856BB842F51811F093E49DB5586F56BC.roa Signing time: Mon 19 Jan 2026 09:23:31 +0000 ROA not before: Mon 19 Jan 2026 09:23:31 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 131192 IP address blocks: 151.158.48.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.crl rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tKAkYf96vxUeKw6tWpqtPnBvUY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 06:19:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCB09, serialNumber=EED2809187FDEAFC5478AC3AB56A6AB4F9C1BD46 Validity Not Before: Jan 19 09:23:31 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=696df813-1726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:45:68:91:7d:cd:00:be:26:24:64:57:ae:ce: de:68:1b:56:ff:9e:16:b9:8b:90:79:03:45:30:b1: 57:31:bf:52:50:c5:6c:94:7d:24:86:ca:07:49:d8: bb:96:5b:12:d0:38:d2:aa:f4:a1:a5:d6:9f:4f:8d: 75:68:de:08:dc:49:91:7b:aa:12:b8:b2:49:d5:6b: 47:0f:7c:1a:ed:22:4a:c0:d9:94:5d:0c:1c:bc:ae: 1f:b5:4e:37:30:e2:20:e1:85:ba:32:b0:14:5d:30: 4c:92:9c:1f:dd:98:bd:a1:44:70:d6:99:44:2c:9e: 6d:f9:67:f0:5a:c6:5d:ac:61:f8:b9:20:a2:34:30: 2e:38:f6:6c:76:48:92:c2:76:6b:19:a2:fc:a7:da: 6b:9a:7e:43:eb:c7:22:cb:0c:a2:db:a1:57:cd:f1: 89:ae:94:80:aa:f4:61:17:8c:29:0b:59:da:8e:05: ef:52:a2:83:f6:d4:da:e1:f0:4e:84:ce:5c:93:68: 96:c8:37:db:7b:53:37:0b:00:8f:dc:bb:fd:c1:6f: 9a:1c:5b:08:54:7d:15:d7:cb:01:9a:ed:00:d9:37: 76:ef:c1:7f:a0:b2:a7:91:8a:dd:0d:01:91:ab:eb: 43:d4:76:b6:2f:39:f2:cf:57:bd:f8:56:04:02:15: 7f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:93:20:63:68:5E:C7:EF:F9:17:52:40:51:83:BF:74:B1:A0:9A:5D X509v3 Authority Key Identifier: keyid:EE:D2:80:91:87:FD:EA:FC:54:78:AC:3A:B5:6A:6A:B4:F9:C1:BD:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tKAkYf96vxUeKw6tWpqtPnBvUY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/856BB842F51811F093E49DB5586F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 151.158.48.0/23 Signature Algorithm: sha256WithRSAEncryption 52:ab:11:89:c4:90:b5:9d:bf:36:db:e0:47:64:8f:c2:7b:60: e5:d7:cf:81:41:08:b6:d4:59:0a:23:ca:6b:99:49:fb:f1:ac: b1:04:e2:ec:10:a9:9a:3f:7c:82:42:42:04:ba:87:73:44:f5: 2e:9b:39:df:f7:f2:b7:6c:48:2c:d9:4f:68:2d:81:00:17:68: 9a:65:9e:3c:2c:c9:30:8c:7d:12:56:e0:f0:f4:a3:ca:1a:c3: f0:a7:91:da:60:1d:f4:0a:bc:d2:3d:10:e1:f1:38:40:01:75: 7c:de:e1:c4:1c:d5:2b:bd:87:2c:ae:06:00:fa:25:ba:91:e0: b5:42:c9:78:82:0b:14:aa:3d:f9:db:02:25:49:00:45:23:f4: 8b:fb:03:65:4e:ed:33:73:09:ef:ed:a1:0b:e8:fe:64:bb:33: 82:34:11:b5:01:f4:d1:d2:21:79:4a:41:9e:23:ce:ed:c6:a4: 99:89:43:92:2b:4e:6b:d0:2d:28:63:66:95:7c:03:41:73:ec: d2:db:28:3d:5e:b8:4b:3d:90:be:34:d4:0c:04:87:d9:67:4f: 40:75:eb:5b:f9:73:cd:42:39:0f:b2:97:38:33:43:3d:95:3b: df:da:ca:be:a5:53:cb:bf:b8:bd:58:7a:29:dc:eb:6d:c9:cc: 9d:e3:b1:4f -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFC Q0IwOTExMC8GA1UEBRMoRUVEMjgwOTE4N0ZERUFGQzU0NzhBQzNBQjU2QTZBQjRG OUMxQkQ0NjAeFw0yNjAxMTkwOTIzMzFaFw0yNzA1MDEwMDAwMDBaMBgxFjAUBgNV BAMMDTY5NmRmODEzLTE3MjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbRWiRfc0AviYkZFeuzt5oG1b/nha5i5B5A0UwsVcxv1JQxWyUfSSGygdJ2LuW WxLQONKq9KGl1p9PjXVo3gjcSZF7qhK4sknVa0cPfBrtIkrA2ZRdDBy8rh+1Tjcw 4iDhhboysBRdMEySnB/dmL2hRHDWmUQsnm35Z/Baxl2sYfi5IKI0MC449mx2SJLC dmsZovyn2muafkPrxyLLDKLboVfN8YmulICq9GEXjCkLWdqOBe9SooP21Nrh8E6E zlyTaJbIN9t7UzcLAI/cu/3Bb5ocWwhUfRXXywGa7QDZN3bvwX+gsqeRit0NAZGr 60PUdrYvOfLPV734VgQCFX9nAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUd5MgY2he x+/5F1JAUYO/dLGgml0wHwYDVR0jBBgwFoAU7tKAkYf96vxUeKw6tWpqtPnBvUYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJDQjA5L0YzMDJFNTM0RjRG RTExRjBCOUQ5RUYxRjUxNkY1NkJDLzd0S0FrWWY5NnZ4VWVLdzZ0V3BxdFBuQnZV WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvN3RLQWtZZjk2dnhVZUt3NnRXcHF0UG5CdlVZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0IwOS9GMzAyRTUzNEY0RkUxMUYwQjlEOUVGMUY1MTZGNTZCQy84NTZCQjg0MkY1 MTgxMUYwOTNFNDlEQjU1ODZGNTZCQy5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAZeeMDANBgkqhkiG9w0BAQsFAAOCAQEAUqsRicSQtZ2/Ntvg R2SPwntg5dfPgUEIttRZCiPKa5lJ+/GssQTi7BCpmj98gkJCBLqHc0T1Lps53/fy t2xILNlPaC2BABdommWePCzJMIx9Elbg8PSjyhrD8KeR2mAd9Aq80j0Q4fE4QAF1 fN7hxBzVK72HLK4GAPolupHgtULJeIILFKo9+dsCJUkARSP0i/sDZU7tM3MJ7+2h C+j+ZLszgjQRtQH00dIheUpBniPO7cakmYlDkitOa9AtKGNmlXwDQXPs0tsoPV64 Sz2QvjTUDASH2WdPQHXrW/lzzUI5D7KXODNDPZU739rKvqVTy7+4vVh6KdzrbcnM neOxTw== -----END CERTIFICATE-----Generated at Wed Jan 21 09:13:04 2026 by rpki-client