This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/CE6915C0ED3A11F0A5B7B5054B6F56BC.roa File: CE6915C0ED3A11F0A5B7B5054B6F56BC.roa (raw, json) Hash identifier: ZhcQJbrC1/0EL+xA9V5mKW9bp21ubHFqtWHWB54vKrc= Subject key identifier: 3F:67:DD:6F:CB:D4:B8:32:6E:FF:A5:AB:56:03:00:55:A4:55:24:2F Certificate issuer: /CN=A91EA850/serialNumber=995D70A97F56B2E000BACA6ECA4373E6207BB98D Certificate serial: 04 Authority key identifier: 99:5D:70:A9:7F:56:B2:E0:00:BA:CA:6E:CA:43:73:E6:20:7B:B9:8D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mV1wqX9WsuAAuspuykNz5iB7uY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/CE6915C0ED3A11F0A5B7B5054B6F56BC.roa Signing time: Fri 09 Jan 2026 09:08:47 +0000 ROA not before: Fri 09 Jan 2026 09:08:47 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 142187 IP address blocks: 192.58.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.crl rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mV1wqX9WsuAAuspuykNz5iB7uY0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 07:05:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA850, serialNumber=995D70A97F56B2E000BACA6ECA4373E6207BB98D Validity Not Before: Jan 9 09:08:47 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=6960c59f-6609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:94:74:50:cb:d3:11:93:96:5d:da:a1:4e:62: 31:8a:98:4f:46:7a:58:32:1e:c7:81:ea:26:ff:83: 39:0e:0a:6b:ee:22:16:2a:d2:2a:50:84:87:41:fa: 31:f7:2b:be:04:66:bc:46:17:2e:bc:aa:1d:74:ea: 08:cc:91:f3:ae:77:4b:dc:e9:2d:af:1f:ae:88:e9: e5:40:8e:00:2d:18:57:43:80:99:e8:99:0c:ab:5d: f7:16:77:7d:c8:cd:81:c8:32:d7:78:bd:9f:d4:9b: 3e:3d:97:24:c7:9d:bd:31:41:c9:03:12:24:29:13: 3e:55:17:9f:de:c7:65:08:90:ca:3e:e3:af:e0:e1: d2:8c:4c:f4:30:96:03:96:25:73:dd:8d:31:26:2f: 5c:0d:ac:cd:01:92:26:81:9a:11:85:e1:29:4c:c9: 5f:37:78:a2:bb:5d:3a:3f:0e:8b:43:30:38:1d:df: c2:51:67:b6:18:7a:b5:fc:40:92:3c:4d:ea:86:ce: e2:fe:a8:fd:ed:ee:0d:94:dd:fa:ea:d8:61:98:db: 71:f1:b5:39:cc:c5:d2:2b:3d:e4:85:c4:f3:83:ad: dd:54:e9:e4:1c:05:98:98:c4:22:da:6d:15:1e:ad: ed:7e:eb:e3:00:47:c1:b9:0e:ed:aa:6d:b6:5a:73: bb:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:67:DD:6F:CB:D4:B8:32:6E:FF:A5:AB:56:03:00:55:A4:55:24:2F X509v3 Authority Key Identifier: keyid:99:5D:70:A9:7F:56:B2:E0:00:BA:CA:6E:CA:43:73:E6:20:7B:B9:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mV1wqX9WsuAAuspuykNz5iB7uY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/CE6915C0ED3A11F0A5B7B5054B6F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 192.58.99.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:35:26:f8:26:9f:a4:91:7c:34:a0:eb:87:1f:c7:f1:ca:a6: 6c:5c:85:c4:53:01:8d:eb:b7:f6:c3:05:34:53:17:7a:d0:32: 41:58:4b:e4:ce:03:83:3a:e0:4e:15:04:a7:50:c3:f5:a8:64: fd:3d:89:2a:91:4d:6d:5e:16:13:05:f6:84:5f:bf:1b:bc:14: b9:05:18:90:cf:09:2f:1e:cd:86:ea:d8:73:76:be:0e:d5:9c: 61:95:f9:fb:5f:75:a6:f3:9c:d0:76:b3:d2:27:bf:51:e9:cc: ad:ef:c3:43:9b:42:eb:dc:c9:ce:72:ea:62:59:5f:a3:a5:ca: fb:97:60:c2:23:28:b4:92:b4:60:b4:b8:a4:75:1c:66:dc:6b: 1d:af:f8:03:a9:04:77:5a:df:a9:5b:3f:d5:b4:c4:00:0e:cb: 47:1c:64:14:42:3a:84:07:18:bb:ad:0e:b1:24:7d:78:40:54: fb:fa:7b:8e:a5:63:5d:dd:38:9a:1d:6a:f4:ab:65:3c:95:5a: 9c:ba:55:42:6d:d3:9a:09:da:2a:55:db:2a:37:16:b5:0d:72: b8:13:cc:27:84:94:57:cd:d5:87:cb:b9:d9:25:23:e0:91:73: d2:bf:eb:78:70:b1:cb:dc:f5:84:fd:b3:86:15:40:6f:cb:2d: 9a:72:57:a6 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFF QTg1MDExMC8GA1UEBRMoOTk1RDcwQTk3RjU2QjJFMDAwQkFDQTZFQ0E0MzczRTYy MDdCQjk4RDAeFw0yNjAxMDkwOTA4NDdaFw0yNzA1MDEwMDAwMDBaMBgxFjAUBgNV BAMMDTY5NjBjNTlmLTY2MDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxlHRQy9MRk5Zd2qFOYjGKmE9GelgyHseB6ib/gzkOCmvuIhYq0ipQhIdB+jH3 K74EZrxGFy68qh106gjMkfOud0vc6S2vH66I6eVAjgAtGFdDgJnomQyrXfcWd33I zYHIMtd4vZ/Umz49lyTHnb0xQckDEiQpEz5VF5/ex2UIkMo+46/g4dKMTPQwlgOW JXPdjTEmL1wNrM0BkiaBmhGF4SlMyV83eKK7XTo/DotDMDgd38JRZ7YYerX8QJI8 TeqGzuL+qP3t7g2U3frq2GGY23HxtTnMxdIrPeSFxPODrd1U6eQcBZiYxCLabRUe re1+6+MAR8G5Du2qbbZac7u1AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUP2fdb8vU uDJu/6WrVgMAVaRVJC8wHwYDVR0jBBgwFoAUmV1wqX9WsuAAuspuykNz5iB7uY0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBODUwLzJEQkM0OTQ4RUQy NzExRjBCMzk3RDM3OTQ0NkY1NkJDL21WMXdxWDlXc3VBQXVzcHV5a056NWlCN3VZ MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbVYxd3FYOVdzdUFBdXNwdXlrTno1aUI3dVkwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTg1MC8yREJDNDk0OEVEMjcxMUYwQjM5N0QzNzk0NDZGNTZCQy9DRTY5MTVDMEVE M0ExMUYwQTVCN0I1MDU0QjZGNTZCQy5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMA6YzANBgkqhkiG9w0BAQsFAAOCAQEAPzUm+CafpJF8NKDr hx/H8cqmbFyFxFMBjeu39sMFNFMXetAyQVhL5M4DgzrgThUEp1DD9ahk/T2JKpFN bV4WEwX2hF+/G7wUuQUYkM8JLx7NhurYc3a+DtWcYZX5+191pvOc0Haz0ie/UenM re/DQ5tC69zJznLqYllfo6XK+5dgwiMotJK0YLS4pHUcZtxrHa/4A6kEd1rfqVs/ 1bTEAA7LRxxkFEI6hAcYu60OsSR9eEBU+/p7jqVjXd04mh1q9KtlPJVanLpVQm3T mgnaKlXbKjcWtQ1yuBPMJ4SUV83Vh8u52SUj4JFz0r/reHCxy9z1hP2zhhVAb8st mnJXpg== -----END CERTIFICATE-----Generated at Sun Jan 18 04:30:33 2026 by rpki-client