This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/3954E33CEE9E11F0B32FB2E5666F56BC.roa File: 3954E33CEE9E11F0B32FB2E5666F56BC.roa (raw, json) Hash identifier: 0z1ZJglewfTCuoc3OETmZi7sVb/01XDs8bw8qEfDqUE= Subject key identifier: FA:CD:74:17:34:38:8F:7D:71:2F:5C:0C:CF:72:4B:BE:50:5D:30:C1 Certificate issuer: /CN=A91E3441/serialNumber=316D89647F0D0CB06B3732078A4230AF11565334 Certificate serial: 02 Authority key identifier: 31:6D:89:64:7F:0D:0C:B0:6B:37:32:07:8A:42:30:AF:11:56:53:34 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MW2JZH8NDLBrNzIHikIwrxFWUzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/3954E33CEE9E11F0B32FB2E5666F56BC.roa Signing time: Sun 11 Jan 2026 03:32:58 +0000 ROA not before: Sun 11 Jan 2026 03:32:58 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 132436 IP address blocks: 192.232.60.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.crl rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MW2JZH8NDLBrNzIHikIwrxFWUzQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 07:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3441, serialNumber=316D89647F0D0CB06B3732078A4230AF11565334 Validity Not Before: Jan 11 03:32:58 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=696319ea-d013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3a:4e:0e:bd:69:68:4c:53:92:59:01:b4:f0: 15:f7:28:bb:fa:d5:65:08:b6:5a:38:bb:30:86:98: 9f:1e:09:e8:5e:93:db:de:46:c5:a3:e0:4f:b5:a0: 20:26:8f:68:8f:05:e0:64:49:e3:5d:e0:63:a0:62: e7:9a:cb:52:00:9f:e2:01:db:54:3a:e9:7d:13:7a: 07:03:32:56:ec:f9:d1:42:a1:ca:03:2c:d5:23:c0: f6:15:96:d7:c2:6b:c5:1b:55:db:89:25:9f:56:fd: 54:f6:64:e4:bb:82:bc:b9:c9:db:dc:3e:b1:86:34: a5:64:f1:51:31:b1:fa:c7:b0:06:93:4a:7b:8f:b2: f6:2a:ee:ab:f9:bf:4d:7c:85:44:43:6f:ab:38:fa: 3a:ac:a6:30:fa:cc:c6:b5:d8:29:32:69:1c:ed:88: a5:19:78:94:4f:b5:17:4d:ea:2a:1b:bc:36:e9:51: 9b:ab:db:50:4b:59:8a:4f:31:c6:91:09:97:a0:6d: 15:aa:13:db:4c:16:d5:0c:59:7e:39:48:32:e5:eb: 79:cd:d3:12:9e:f0:39:c0:2f:d6:15:8a:a6:20:4e: 89:25:ea:68:12:7e:cb:cf:26:19:f7:59:3f:f1:a3: b5:71:66:28:12:61:b7:d9:c0:c7:5b:5b:47:d4:1f: d0:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:CD:74:17:34:38:8F:7D:71:2F:5C:0C:CF:72:4B:BE:50:5D:30:C1 X509v3 Authority Key Identifier: keyid:31:6D:89:64:7F:0D:0C:B0:6B:37:32:07:8A:42:30:AF:11:56:53:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MW2JZH8NDLBrNzIHikIwrxFWUzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/3954E33CEE9E11F0B32FB2E5666F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 192.232.60.0/23 Signature Algorithm: sha256WithRSAEncryption 84:51:5c:e1:85:b9:f9:e4:c2:d1:d9:fa:5d:de:5f:c4:c6:40: ef:53:1a:3e:38:64:bd:70:51:7c:f7:1d:66:b7:79:13:ed:40: c3:5c:cc:87:6b:66:d0:01:43:64:06:a1:6a:bb:d5:32:dd:31: a0:26:b4:14:74:8d:de:b0:6d:3e:c8:21:dd:16:75:18:6b:5b: 23:81:4f:26:2e:d4:ec:a2:c6:e5:99:2e:1c:b4:ce:8d:79:87: 1b:2d:dd:c2:a5:a6:71:b0:05:1f:78:22:a6:ca:9c:5f:03:41: ad:ba:fe:fd:41:01:03:f1:9c:88:89:77:c8:95:65:35:31:b9: f0:ea:bd:ec:2f:27:d0:6a:bf:ea:59:76:c5:ee:44:a1:e7:14: 7c:f0:74:db:c1:d0:0d:dc:9a:4c:18:03:0b:fe:1e:21:be:35: 76:86:b0:d7:08:74:53:ea:67:77:6a:60:81:0e:fa:5c:42:78: c9:09:2d:ed:bc:59:e6:fc:ae:c1:da:89:6e:6a:8f:56:93:49: 7e:b3:85:0a:54:4b:d0:e5:5e:1e:82:55:cc:b4:48:09:50:87: ee:49:ea:a9:31:a4:0e:1b:03:6d:72:7f:61:f6:89:51:4a:a6: f6:21:a6:ca:5b:6e:d0:a5:52:fa:4c:5c:10:36:38:75:75:96: 00:39:3b:ad -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFF MzQ0MTExMC8GA1UEBRMoMzE2RDg5NjQ3RjBEMENCMDZCMzczMjA3OEE0MjMwQUYx MTU2NTMzNDAeFw0yNjAxMTEwMzMyNThaFw0yNzA1MDEwMDAwMDBaMBgxFjAUBgNV BAMMDTY5NjMxOWVhLWQwMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPOk4OvWloTFOSWQG08BX3KLv61WUItlo4uzCGmJ8eCehek9veRsWj4E+1oCAm j2iPBeBkSeNd4GOgYueay1IAn+IB21Q66X0TegcDMlbs+dFCocoDLNUjwPYVltfC a8UbVduJJZ9W/VT2ZOS7gry5ydvcPrGGNKVk8VExsfrHsAaTSnuPsvYq7qv5v018 hURDb6s4+jqspjD6zMa12CkyaRztiKUZeJRPtRdN6iobvDbpUZur21BLWYpPMcaR CZegbRWqE9tMFtUMWX45SDLl63nN0xKe8DnAL9YViqYgTokl6mgSfsvPJhn3WT/x o7VxZigSYbfZwMdbW0fUH9DxAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU+s10FzQ4 j31xL1wMz3JLvlBdMMEwHwYDVR0jBBgwFoAUMW2JZH8NDLBrNzIHikIwrxFWUzQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzNDQxL0UwODFBNjBBRUU5 RDExRjBBQ0UyNUM5RDY2NkY1NkJDL01XMkpaSDhORExCck56SUhpa0l3cnhGV1V6 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTVcySlpIOE5ETEJyTnpJSGlrSXdyeEZXVXpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzQ0MS9FMDgxQTYwQUVFOUQxMUYwQUNFMjVDOUQ2NjZGNTZCQy8zOTU0RTMzQ0VF OUUxMUYwQjMyRkIyRTU2NjZGNTZCQy5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAcDoPDANBgkqhkiG9w0BAQsFAAOCAQEAhFFc4YW5+eTC0dn6 Xd5fxMZA71MaPjhkvXBRfPcdZrd5E+1Aw1zMh2tm0AFDZAaharvVMt0xoCa0FHSN 3rBtPsgh3RZ1GGtbI4FPJi7U7KLG5ZkuHLTOjXmHGy3dwqWmcbAFH3gipsqcXwNB rbr+/UEBA/GciIl3yJVlNTG58Oq97C8n0Gq/6ll2xe5EoecUfPB028HQDdyaTBgD C/4eIb41doaw1wh0U+pnd2pggQ76XEJ4yQkt7bxZ5vyuwdqJbmqPVpNJfrOFClRL 0OVeHoJVzLRICVCH7knqqTGkDhsDbXJ/YfaJUUqm9iGmyltu0KVS+kxcEDY4dXWW ADk7rQ== -----END CERTIFICATE-----Generated at Sun Jan 18 04:09:27 2026 by rpki-client