This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/75BE67B2F12311F09E054F8D4F6F56BC.roa
File: 75BE67B2F12311F09E054F8D4F6F56BC.roa (raw, json)
Hash identifier: 0WZLBOrY5orE7S2WGRqVxm0407d+k7g1SOw//pvprUQ=
Subject key identifier: 17:B8:6E:35:A8:4B:84:A9:51:98:6F:4D:8B:F1:71:DE:4C:5E:9D:8A
Certificate issuer: /CN=A91D2B9A/serialNumber=499D691B0F732D9006E9513C60B7366B4E690400
Certificate serial: 02
Authority key identifier: 49:9D:69:1B:0F:73:2D:90:06:E9:51:3C:60:B7:36:6B:4E:69:04:00
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SZ1pGw9zLZAG6VE8YLc2a05pBAA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/75BE67B2F12311F09E054F8D4F6F56BC.roa
Signing time: Wed 14 Jan 2026 08:31:45 +0000
ROA not before: Wed 14 Jan 2026 08:31:45 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 142207
IP address blocks: 151.158.14.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.crl
rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SZ1pGw9zLZAG6VE8YLc2a05pBAA.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 06:19:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2B9A, serialNumber=499D691B0F732D9006E9513C60B7366B4E690400
Validity
Not Before: Jan 14 08:31:45 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69675471-7cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:33:06:41:72:b3:70:cd:11:89:68:d2:54:80:
be:a8:29:ff:d6:df:e2:c8:21:1b:2a:f3:37:03:74:
3b:ea:3b:3b:53:89:5d:f1:31:18:cd:7f:07:90:3a:
69:70:93:0d:58:e3:5c:45:fd:35:39:4a:83:2c:42:
a6:40:80:1f:4f:90:38:a5:a4:8c:8d:30:a9:50:1b:
db:2e:45:77:e8:ba:9b:22:75:87:f7:c8:e4:88:49:
8b:46:8e:b7:fd:27:71:e1:e6:cb:ae:6c:65:9e:4e:
69:fb:40:92:a9:1d:c4:ad:62:0c:0f:29:2a:50:2f:
c4:0a:b5:64:2d:08:c5:8e:6c:38:66:50:1e:68:cb:
dd:ab:3e:6f:55:74:df:64:ac:a1:0d:4d:3b:43:ba:
75:d0:9f:2d:e8:17:8c:7d:8a:24:4e:05:b1:2d:2e:
e0:e4:61:5a:f3:6d:85:06:5d:bb:91:91:fd:ea:da:
8a:50:90:04:82:3b:63:b4:fe:d4:0b:7d:a9:a8:0f:
db:ad:30:81:b6:5a:5e:7c:ad:c0:cd:1b:e1:f4:ce:
f9:34:4c:13:ac:1b:91:32:9a:3d:15:07:70:0b:68:
ac:1d:78:5a:44:e7:7c:b2:10:5c:cf:b2:f5:4b:be:
d7:47:aa:c1:b3:10:9a:11:c2:dd:0a:81:3a:32:22:
96:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B8:6E:35:A8:4B:84:A9:51:98:6F:4D:8B:F1:71:DE:4C:5E:9D:8A
X509v3 Authority Key Identifier:
keyid:49:9D:69:1B:0F:73:2D:90:06:E9:51:3C:60:B7:36:6B:4E:69:04:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SZ1pGw9zLZAG6VE8YLc2a05pBAA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/75BE67B2F12311F09E054F8D4F6F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
151.158.14.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:66:61:f4:b0:41:f9:0a:bd:57:07:86:ec:f7:58:bf:a8:a9:
89:f3:b6:d2:13:cc:d7:2d:77:bd:b5:d2:40:2d:b0:c7:48:3a:
59:8f:cc:2d:09:29:72:74:45:56:85:fc:83:f5:f5:6f:5e:15:
96:79:be:c1:fa:b2:ab:a1:50:22:2b:28:1e:b9:35:db:ac:63:
d5:52:6a:b6:46:86:8f:a8:85:6a:fe:2f:04:ef:a4:40:34:1c:
ff:4d:40:b0:ae:91:08:a3:85:99:6c:69:f3:53:2c:99:68:72:
7e:92:cd:7d:c7:88:30:3a:d0:a2:e6:e3:71:8a:ef:c2:b5:72:
22:71:c1:48:b0:2c:fd:c5:cb:d7:9c:d6:f9:7a:a7:ee:15:c1:
ef:cd:07:3f:82:58:ba:7d:44:0e:a3:a7:28:23:6a:5e:1c:e8:
24:52:b7:12:ae:76:3f:e2:e4:89:67:60:37:1f:be:81:ac:19:
9a:fd:78:52:14:a1:bc:07:29:a6:08:74:88:4b:85:ba:95:70:
aa:35:93:8a:7f:6f:29:5c:42:b3:2d:ab:53:9c:b3:5f:9a:53:
28:74:a7:1b:d8:aa:10:9a:8f:1c:a3:8e:a4:66:9f:2d:54:29:
e2:ad:b3:1d:2b:58:5a:5a:93:64:99:39:08:a9:cd:67:71:d9:
1d:2a:e8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 09:22:09 2026 by rpki-client