This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/B86FBE4A2E3611EB84E66039C4F9AE02.roa File: B86FBE4A2E3611EB84E66039C4F9AE02.roa (raw, json) Hash identifier: rvZwb3PuQKmb69c1ytlb4kiN4S41D1CerZhXmc5sn9M= Subject key identifier: 59:CB:C2:A2:52:44:81:87:A0:66:71:DC:F3:71:CD:DF:D5:E7:63:83 Certificate issuer: /CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8 Certificate serial: 0FA8 Authority key identifier: AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/B86FBE4A2E3611EB84E66039C4F9AE02.roa Signing time: Wed 14 Jan 2026 18:15:04 +0000 ROA not before: Wed 14 Jan 2026 18:15:04 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 19905 IP address blocks: 210.57.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 17:35:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4008 (0xfa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFA0, serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8 Validity Not Before: Jan 14 18:15:04 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=6967dd27-5478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:45:00:34:ca:6e:3f:c1:a4:12:6f:f3:46:b8: 24:19:3c:b5:e5:ee:78:05:b8:75:66:61:80:a7:aa: 4a:67:d1:73:cc:3f:30:a9:45:a5:54:ef:ec:a8:1a: 57:14:83:6b:4f:95:c5:c4:27:52:90:66:0b:5f:68: 44:d8:7a:1b:cc:32:54:54:50:f1:6f:12:31:ea:04: eb:7b:83:53:4b:0e:85:6b:1d:5c:81:be:cb:55:d0: 02:5f:8a:f6:b5:48:eb:33:82:63:75:df:3a:cf:68: b0:4a:68:6f:84:ac:9b:a0:0a:0a:0a:5d:33:f5:e0: fe:6b:22:18:89:72:68:4e:4b:ad:da:e1:b9:7a:a6: 0c:d1:cb:c5:0f:a7:79:a9:05:16:e6:4a:d5:af:3d: 86:21:02:18:e1:93:3d:1d:2f:0d:95:f0:ee:9b:bb: 9c:36:b7:04:b2:27:04:86:de:b6:75:b8:ec:d8:df: 6e:8a:2d:f7:77:c7:44:6e:c0:44:ee:9d:21:e7:c4: 55:b7:ce:54:7e:88:c8:20:aa:e0:a6:86:66:2d:8b: 3d:18:13:63:4e:81:64:37:2b:4f:2d:cd:3f:4c:f4: 37:4f:39:14:0f:cc:27:3b:96:b9:4a:37:4c:d2:e9: 15:73:46:6d:2a:73:7f:57:d6:00:2f:24:da:bc:d2: 7f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:CB:C2:A2:52:44:81:87:A0:66:71:DC:F3:71:CD:DF:D5:E7:63:83 X509v3 Authority Key Identifier: keyid:AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/B86FBE4A2E3611EB84E66039C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.57.42.0/24 Signature Algorithm: sha256WithRSAEncryption 09:86:10:0c:a0:6d:2c:76:84:15:a7:73:ed:31:bf:6d:4a:ae: 98:5c:f5:9f:28:02:8c:aa:91:69:6e:b1:4d:10:9b:13:db:3b: 0c:e7:9d:94:b8:49:dd:09:29:76:cd:66:5e:aa:ca:4b:a7:f5: e0:4e:6c:09:e4:d0:ae:8d:fe:c9:f4:40:f5:b8:68:9d:17:23: 45:59:51:18:0e:0c:61:f6:ce:7d:c4:ac:62:e8:ce:69:1c:da: 0c:8c:3f:5e:ed:7b:fc:42:15:3f:a1:d2:b5:c7:f4:62:23:8b: a2:d5:37:ae:08:6a:f6:fc:24:2b:18:f3:58:61:d5:c8:6f:21: f2:bb:06:91:a3:e3:36:3e:b6:dd:b8:55:92:c3:71:1a:9f:45: fa:e3:2b:b5:7c:38:75:08:f6:0f:9c:1f:22:66:8c:e4:e6:98: f5:22:c7:ec:04:9a:c9:a6:70:cb:e9:f8:7f:4b:3f:ab:e4:c2: 0a:0e:7a:50:ae:59:50:73:2d:23:3d:d9:cd:75:21:f8:2a:35: 6d:ab:43:0e:15:14:8f:f1:9b:0c:85:a2:db:94:b9:c4:04:52: 3f:a5:a1:9e:0a:17:99:06:11:87:21:a6:be:5f:71:49:2a:f5: 58:e0:41:15:c6:05:b3:27:ca:d3:78:7b:6a:59:2b:9f:6e:48: ec:dc:43:ab -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICD6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx Q0ZGQTAxMTAvBgNVBAUTKEFERDk0MThGMEY5QjU1RjNCNzM3NkEwOTNEQjExREJB RDNBRUZFQzgwHhcNMjYwMTE0MTgxNTA0WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTY3ZGQyNy01NDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxEUANMpuP8GkEm/zRrgkGTy15e54Bbh1ZmGAp6pKZ9FzzD8wqUWlVO/sqBpX FINrT5XFxCdSkGYLX2hE2HobzDJUVFDxbxIx6gTre4NTSw6Fax1cgb7LVdACX4r2 tUjrM4Jjdd86z2iwSmhvhKyboAoKCl0z9eD+ayIYiXJoTkut2uG5eqYM0cvFD6d5 qQUW5krVrz2GIQIY4ZM9HS8NlfDum7ucNrcEsicEht62dbjs2N9uii33d8dEbsBE 7p0h58RVt85UfojIIKrgpoZmLYs9GBNjToFkNytPLc0/TPQ3TzkUD8wnO5a5SjdM 0ukVc0ZtKnN/V9YALyTavNJ/gwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFnLwqJS RIGHoGZx3PNxzd/V52ODMB8GA1UdIwQYMBaAFK3ZQY8Pm1XztzdqCT2xHbrTrv7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZBMC8xRDY2RDQ4NkQ4 Q0IxMUU5QkFFMjREMjFDNEY5QUUwMi9yZGxCanctYlZmTzNOMm9KUGJFZHV0T3Vf c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JkbEJqdy1iVmZPM04yb0pQYkVkdXRPdV9zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0ZGQTAvMUQ2NkQ0ODZEOENCMTFFOUJBRTI0RDIxQzRGOUFFMDIvQjg2RkJFNEEy RTM2MTFFQjg0RTY2MDM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADSOSowDQYJKoZIhvcNAQELBQADggEBAAmGEAygbSx2hBWn c+0xv21Krphc9Z8oAoyqkWlusU0QmxPbOwznnZS4Sd0JKXbNZl6qykun9eBObAnk 0K6N/sn0QPW4aJ0XI0VZURgODGH2zn3ErGLozmkc2gyMP17te/xCFT+h0rXH9GIj i6LVN64Iavb8JCsY81hh1chvIfK7BpGj4zY+tt24VZLDcRqfRfrjK7V8OHUI9g+c HyJmjOTmmPUix+wEmsmmcMvp+H9LP6vkwgoOelCuWVBzLSM92c11IfgqNW2rQw4V FI/xmwyFotuUucQEUj+loZ4KF5kGEYchpr5fcUkq9VjgQRXGBbMnytN4e2pZK59u SOzcQ6s= -----END CERTIFICATE-----Generated at Wed Jan 21 22:26:45 2026 by rpki-client