This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/0099AE56536911EE8594503BC4F9AE02.roa
File: 0099AE56536911EE8594503BC4F9AE02.roa (raw, json)
Hash identifier: ZpCx0RDhO/3a016yxSmp4qzmXeudCkZizqsM58t9iRc=
Subject key identifier: 77:BA:0D:BD:6D:0C:21:E4:3E:29:9D:BC:87:B7:15:88:9B:B8:77:89
Certificate issuer: /CN=A91C0D37/serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4
Certificate serial: 01BA
Authority key identifier: E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/0099AE56536911EE8594503BC4F9AE02.roa
Signing time: Fri 09 Jan 2026 03:22:23 +0000
ROA not before: Fri 09 Jan 2026 03:22:23 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 4768
IP address blocks: 192.107.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl
rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 02:17:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 442 (0x1ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0D37, serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4
Validity
Not Before: Jan 9 03:22:23 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6960746f-c309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e8:74:74:c2:3e:3b:a8:9c:83:4c:b8:99:d0:
08:38:7f:53:7e:f2:5d:8d:ab:f8:5c:5e:c6:6b:30:
19:a8:1a:b1:40:b4:7f:af:61:0a:fa:44:93:e8:9b:
91:8f:64:d3:f8:46:ad:cc:c6:10:06:20:3e:20:51:
d5:db:ae:3f:2a:88:14:02:a8:c6:14:43:d8:f0:7d:
47:05:e3:7c:68:7c:bb:10:04:bc:a6:cf:3a:f9:e9:
a0:f3:b7:bf:60:93:e6:0f:1e:90:dd:f9:20:d9:4d:
e0:5e:e9:9b:0b:68:84:04:1c:46:09:95:d9:02:2d:
af:84:d4:90:1d:0e:fa:01:c9:cb:d6:ea:b3:f2:66:
1b:85:7d:b9:2b:50:e3:ee:6f:99:3c:d1:ec:91:f0:
36:e0:2d:d9:2a:3c:dd:a5:9b:1f:eb:96:75:f9:5f:
97:b8:90:71:6c:c5:ca:d4:06:63:d8:15:07:cf:bb:
7c:fa:4c:7f:00:9b:76:ad:5a:ac:56:aa:c8:6d:df:
3c:8a:c9:fc:3b:9d:9b:91:58:44:87:ff:71:74:bf:
a8:38:b2:be:a1:a2:31:e0:3e:39:c6:94:49:24:96:
23:74:33:64:8d:e2:60:80:7a:db:b5:d1:b9:ee:d4:
d9:1c:10:d3:65:95:d2:b3:5f:2d:6b:12:eb:53:f6:
a0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:BA:0D:BD:6D:0C:21:E4:3E:29:9D:BC:87:B7:15:88:9B:B8:77:89
X509v3 Authority Key Identifier:
keyid:E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/0099AE56536911EE8594503BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.107.113.0/24
Signature Algorithm: sha256WithRSAEncryption
e0:9f:05:ea:4e:49:ed:a6:43:b8:2a:54:4d:ee:ff:fc:e7:b1:
32:70:ca:15:39:ea:87:98:4d:74:cd:ab:47:af:c2:d1:3a:54:
91:a8:97:18:f1:9c:8b:0b:c0:bf:71:9b:d7:0a:9e:bc:a7:54:
bf:49:96:d7:b5:ed:ba:80:5b:4e:4c:8e:e7:8f:96:9e:31:6f:
ed:38:3c:0f:e7:79:c9:16:d9:fd:98:36:77:2a:60:a9:a0:b7:
57:9b:ab:d1:01:d9:a2:34:05:7f:c1:ff:64:3c:fb:d1:a0:7e:
f1:31:7c:91:3b:6c:3d:d3:01:04:87:73:0f:03:ff:1e:b0:6f:
58:5f:41:98:5f:51:9a:57:9d:24:f7:e0:fb:59:38:e6:80:cc:
75:02:73:e4:4d:5d:d7:08:81:c6:2a:34:19:4a:e8:02:b6:f5:
4f:57:c5:2a:dd:e0:d2:5a:b4:19:62:63:9f:65:a5:b1:52:8b:
80:35:f2:4b:b0:cb:54:18:cc:10:bd:fb:ae:28:ff:ec:71:f7:
6f:a8:8e:a9:04:fc:9b:2f:3d:c3:4b:3c:99:a2:b4:e1:88:c0:
3c:f3:c8:12:f6:3d:a1:0a:f8:2c:58:c0:c5:81:9c:83:52:41:
04:96:9d:81:e0:28:ab:2b:2f:ed:c8:f2:f0:b0:c6:13:cc:dc:
48:42:d6:94
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
QzBEMzcxMTAvBgNVBAUTKEU0MjAwRDQ0QUQ5RDZFQ0I2ODcyRjY1M0E5NTg0M0ZC
MjdEODQ3QTQwHhcNMjYwMTA5MDMyMjIzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTYwNzQ2Zi1jMzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1uh0dMI+O6icg0y4mdAIOH9TfvJdjav4XF7GazAZqBqxQLR/r2EK+kST6JuR
j2TT+EatzMYQBiA+IFHV264/KogUAqjGFEPY8H1HBeN8aHy7EAS8ps86+emg87e/
YJPmDx6Q3fkg2U3gXumbC2iEBBxGCZXZAi2vhNSQHQ76AcnL1uqz8mYbhX25K1Dj
7m+ZPNHskfA24C3ZKjzdpZsf65Z1+V+XuJBxbMXK1AZj2BUHz7t8+kx/AJt2rVqs
VqrIbd88isn8O52bkVhEh/9xdL+oOLK+oaIx4D45xpRJJJYjdDNkjeJggHrbtdG5
7tTZHBDTZZXSs18taxLrU/agjwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHe6Db1t
DCHkPimdvIe3FYibuHeJMB8GA1UdIwQYMBaAFOQgDUStnW7LaHL2U6lYQ/sn2Eek
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEQzNy8wNUVFQ0Q4NjUz
NUIxMUVFOUJGMjBBNkJDNEY5QUUwMi81Q0FOUksyZGJzdG9jdlpUcVZoRC15ZllS
NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzVDQU5SSzJkYnN0b2N2WlRxVmhELXlmWVI2US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzBEMzcvMDVFRUNEODY1MzVCMTFFRTlCRjIwQTZCQzRGOUFFMDIvMDA5OUFFNTY1
MzY5MTFFRTg1OTQ1MDNCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADAa3EwDQYJKoZIhvcNAQELBQADggEBAOCfBepOSe2mQ7gq
VE3u//znsTJwyhU56oeYTXTNq0evwtE6VJGolxjxnIsLwL9xm9cKnrynVL9Jlte1
7bqAW05MjuePlp4xb+04PA/neckW2f2YNncqYKmgt1ebq9EB2aI0BX/B/2Q8+9Gg
fvExfJE7bD3TAQSHcw8D/x6wb1hfQZhfUZpXnST34PtZOOaAzHUCc+RNXdcIgcYq
NBlK6AK29U9XxSrd4NJatBliY59lpbFSi4A18kuwy1QYzBC9+64o/+xx92+ojqkE
/JsvPcNLPJmitOGIwDzzyBL2PaEK+CxYwMWBnINSQQSWnYHgKKsrL+3I8vCwxhPM
3EhC1pQ=
-----END CERTIFICATE-----
Generated at Sun Jan 18 04:51:02 2026 by rpki-client