This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/850C91D6001811F18252CD21426F56BC.roa
File: 850C91D6001811F18252CD21426F56BC.roa (raw, json)
Hash identifier: 6RVHEq6a8quQ7dV5oRbHpoeX5Rq/ra7jTNMPOMHwsKo=
Subject key identifier: 83:C8:39:F0:D1:64:26:55:E4:2A:48:9B:99:2F:DD:80:3B:7C:BF:10
Certificate issuer: /CN=A91F1BE5/serialNumber=8EED76984F231AA2C70F2982378DC69DD83D585C
Certificate serial: 02
Authority key identifier: 8E:ED:76:98:4F:23:1A:A2:C7:0F:29:82:37:8D:C6:9D:D8:3D:58:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ju12mE8jGqLHDymCN43Gndg9WFw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/850C91D6001811F18252CD21426F56BC.roa
Signing time: Mon 02 Feb 2026 09:21:14 +0000
ROA not before: Mon 02 Feb 2026 09:21:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4686
IP address blocks: 180.235.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.crl
rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ju12mE8jGqLHDymCN43Gndg9WFw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Feb 2026 08:16:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1BE5, serialNumber=8EED76984F231AA2C70F2982378DC69DD83D585C
Validity
Not Before: Feb 2 09:21:14 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69806c8a-1f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:36:a7:19:88:36:16:2a:f4:5b:df:04:7e:e9:
ef:e0:c9:0e:bb:d8:17:16:f7:08:83:69:bd:fa:14:
c3:24:fc:98:64:69:63:c9:14:d0:17:28:32:42:9f:
37:30:14:51:e2:92:9f:c3:35:9a:c9:2a:49:52:92:
5a:1b:58:9b:b9:fd:14:45:27:9a:2a:09:74:41:7c:
e7:c3:2b:1a:21:34:27:03:89:37:ea:78:10:06:bd:
c3:97:9b:ac:79:a3:02:b6:67:0d:03:96:e1:93:50:
65:6a:14:55:83:84:88:1d:f7:97:c1:70:35:75:da:
2f:4d:a7:ff:f9:dd:28:24:a7:54:59:4d:f9:61:8c:
ec:af:bb:97:34:c2:82:7d:7d:23:2a:a6:b6:03:89:
bd:7d:fc:07:9d:00:87:bf:f5:ce:49:76:eb:47:be:
d6:4c:a8:ec:4d:46:1e:68:b0:b5:62:db:74:9f:b6:
39:64:a0:84:2f:aa:14:b1:68:86:71:1f:aa:4b:1a:
9e:4d:a0:e8:d5:f4:f4:72:cf:15:70:14:6f:d9:8c:
13:6c:89:59:cf:da:ee:e4:07:5c:cc:71:bf:74:82:
6a:ff:ac:55:58:43:38:b3:05:70:05:c3:50:0f:5a:
20:b1:21:1c:ba:78:6f:01:49:27:b8:ea:d2:0c:c5:
c0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C8:39:F0:D1:64:26:55:E4:2A:48:9B:99:2F:DD:80:3B:7C:BF:10
X509v3 Authority Key Identifier:
keyid:8E:ED:76:98:4F:23:1A:A2:C7:0F:29:82:37:8D:C6:9D:D8:3D:58:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ju12mE8jGqLHDymCN43Gndg9WFw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/850C91D6001811F18252CD21426F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
180.235.124.0/22
Signature Algorithm: sha256WithRSAEncryption
28:41:c5:59:74:ec:cb:41:48:2e:6d:4b:09:cd:f0:22:66:89:
bf:10:83:35:23:17:ae:bd:58:d3:50:d1:2a:0a:6c:20:b1:02:
5d:95:45:65:2e:96:08:fd:83:0c:62:66:b6:e3:7c:6f:82:3e:
1d:ba:63:46:21:e3:dd:70:68:98:de:1c:36:dc:2d:48:e6:23:
41:54:34:4b:5f:71:e6:eb:22:3e:70:52:2c:8c:85:5a:2d:48:
9a:98:4e:6a:ea:0a:dd:bb:a0:a6:34:59:40:e5:44:dc:c5:b3:
fa:f9:3b:41:da:2f:56:5c:62:4e:d3:06:83:77:15:0a:fd:82:
06:e3:ac:a3:e3:19:4e:e0:9d:f0:03:25:29:fc:bf:45:e1:9c:
08:73:6c:89:68:53:60:51:2e:3a:05:db:d7:5e:65:dc:47:1d:
04:2b:90:98:8c:65:b0:eb:61:98:e4:42:63:8c:b7:d0:ae:e9:
b6:5e:3f:34:7a:ca:66:c6:db:ab:e4:9c:e9:77:f7:78:bd:59:
1b:92:a0:f3:e4:26:1f:fc:2d:31:9a:61:84:3d:61:19:ad:60:
c4:00:ae:14:06:6e:db:f2:1e:5f:49:44:99:b2:de:aa:d3:48:
6c:98:8f:f7:7a:21:70:11:9a:85:e8:89:cd:68:09:c0:c3:be:
bb:ee:9b:d5
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFG
MUJFNTExMC8GA1UEBRMoOEVFRDc2OTg0RjIzMUFBMkM3MEYyOTgyMzc4REM2OURE
ODNENTg1QzAeFw0yNjAyMDIwOTIxMTRaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV
BAMMDTY5ODA2YzhhLTFmMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDFNqcZiDYWKvRb3wR+6e/gyQ672BcW9wiDab36FMMk/JhkaWPJFNAXKDJCnzcw
FFHikp/DNZrJKklSklobWJu5/RRFJ5oqCXRBfOfDKxohNCcDiTfqeBAGvcOXm6x5
owK2Zw0DluGTUGVqFFWDhIgd95fBcDV12i9Np//53Sgkp1RZTflhjOyvu5c0woJ9
fSMqprYDib19/AedAIe/9c5JdutHvtZMqOxNRh5osLVi23SftjlkoIQvqhSxaIZx
H6pLGp5NoOjV9PRyzxVwFG/ZjBNsiVnP2u7kB1zMcb90gmr/rFVYQzizBXAFw1AP
WiCxIRy6eG8BSSe46tIMxcAzAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUg8g58NFk
JlXkKkibmS/dgDt8vxAwHwYDVR0jBBgwFoAUju12mE8jGqLHDymCN43Gndg9WFww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxQkU1LzNFRTc3RTZFMDAx
ODExRjFBQjREOEQxODQyNkY1NkJDL2p1MTJtRThqR3FMSER5bUNONDNHbmRnOVdG
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvanUxMm1FOGpHcUxIRHltQ040M0duZGc5V0Z3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MUJFNS8zRUU3N0U2RTAwMTgxMUYxQUI0RDhEMTg0MjZGNTZCQy84NTBDOTFENjAw
MTgxMUYxODI1MkNEMjE0MjZGNTZCQy5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEArTrfDANBgkqhkiG9w0BAQsFAAOCAQEAKEHFWXTsy0FILm1L
Cc3wImaJvxCDNSMXrr1Y01DRKgpsILECXZVFZS6WCP2DDGJmtuN8b4I+HbpjRiHj
3XBomN4cNtwtSOYjQVQ0S19x5usiPnBSLIyFWi1ImphOauoK3bugpjRZQOVE3MWz
+vk7QdovVlxiTtMGg3cVCv2CBuOso+MZTuCd8AMlKfy/ReGcCHNsiWhTYFEuOgXb
115l3EcdBCuQmIxlsOthmORCY4y30K7ptl4/NHrKZsbbq+Sc6Xf3eL1ZG5Kg8+Qm
H/wtMZphhD1hGa1gxACuFAZu2/IeX0lEmbLeqtNIbJiP93ohcBGaheiJzWgJwMO+
u+6b1Q==
-----END CERTIFICATE-----
Generated at Tue Feb 10 21:17:47 2026 by rpki-client