This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/96F24818744F11ECBFE4A57DC4F9AE02.roa
File: 96F24818744F11ECBFE4A57DC4F9AE02.roa (raw, json)
Hash identifier: FqB0pPa+U7+8h+MpoMx1wCnjCFVg6yg+zuLj9vmyQDg=
Subject key identifier: F8:3A:1F:2C:7A:6D:C8:95:FD:CD:FF:4D:F9:23:3F:64:FF:FF:E8:EA
Certificate issuer: /CN=A91F7334/serialNumber=8CCE4E46195D15704FB562932E0AB62A0EB98A26
Certificate serial: 048D
Authority key identifier: 8C:CE:4E:46:19:5D:15:70:4F:B5:62:93:2E:0A:B6:2A:0E:B9:8A:26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/96F24818744F11ECBFE4A57DC4F9AE02.roa
Signing time: Sat 31 Jan 2026 00:20:42 +0000
ROA not before: Sat 31 Jan 2026 00:20:42 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 1221
IP address blocks: 203.19.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.crl
rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Feb 2026 00:20:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1165 (0x48d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7334, serialNumber=8CCE4E46195D15704FB562932E0AB62A0EB98A26
Validity
Not Before: Jan 31 00:20:42 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=697d4ada-531e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e3:e5:78:09:5a:b8:3b:1a:7c:23:c0:45:80:
0d:6e:36:c8:7a:80:62:cd:c3:f4:6b:4a:5a:48:ac:
11:9b:a9:6e:30:ef:14:40:8d:75:10:ba:f1:b2:20:
f3:64:2a:02:8b:73:2d:c5:49:70:7b:6b:e8:5c:e4:
b1:29:cd:8c:18:54:31:2c:81:2a:b2:02:cc:c1:be:
16:03:fa:b9:26:ad:8e:01:20:8c:11:43:9d:d0:d1:
e6:de:10:c4:85:f0:c4:60:73:ba:c3:08:cd:a8:d4:
e4:e4:3c:dd:e7:e5:b9:7a:dc:3c:ca:a9:6c:6d:41:
68:de:86:29:eb:71:df:fb:de:de:81:2a:09:a6:8d:
7b:7c:1d:49:d0:72:51:99:88:ad:33:59:54:19:67:
7c:a0:78:42:3e:ed:7c:f1:16:dd:5c:77:05:34:ee:
1f:78:9d:20:50:3c:a5:cc:92:97:a0:b6:72:06:e3:
05:b8:98:cc:1a:e5:a2:3b:39:83:be:ca:29:8e:e3:
2f:0c:92:15:e1:ed:7f:c3:15:02:7d:01:b7:14:be:
c8:67:43:63:c9:d3:39:ca:7b:97:99:84:20:40:f6:
7b:32:10:d6:7f:d4:80:d3:7e:1c:47:f9:cb:1b:a0:
aa:cc:a2:fe:32:ff:46:b9:f6:95:ab:8c:68:a5:9f:
1a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:3A:1F:2C:7A:6D:C8:95:FD:CD:FF:4D:F9:23:3F:64:FF:FF:E8:EA
X509v3 Authority Key Identifier:
keyid:8C:CE:4E:46:19:5D:15:70:4F:B5:62:93:2E:0A:B6:2A:0E:B9:8A:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/96F24818744F11ECBFE4A57DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.19.158.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:a1:57:ec:1b:0f:93:5a:77:79:fb:23:a0:61:44:6a:e2:81:
72:0b:71:b5:47:e9:ed:78:7e:aa:de:92:52:f4:6e:34:f4:79:
91:9e:a5:e3:f0:d1:d2:46:2d:77:9a:3f:ff:f6:0b:63:af:8c:
96:13:57:bc:e8:39:1d:2d:48:96:dd:8d:a1:5c:e1:82:26:30:
47:0d:1a:90:e9:7c:c1:aa:87:96:6d:43:ee:a2:9b:3c:1a:74:
8d:5c:50:1f:f3:74:42:63:a8:86:57:76:20:00:15:ba:12:8c:
d9:b9:2f:0b:18:d7:78:bd:9a:c8:f3:55:fa:1e:d9:3b:e7:99:
d2:a5:4f:3a:0f:53:cc:ac:85:b7:bb:f4:b8:51:eb:52:ff:7c:
1b:79:fa:20:f5:59:ad:45:2c:59:e3:c6:fa:7c:8f:ba:73:e0:
e9:8f:8d:f8:eb:06:e9:75:ad:cb:44:50:78:cf:e1:25:87:22:
07:e8:ec:5d:85:63:84:3a:3b:a4:ef:ef:1f:e4:30:7c:d5:e2:
41:46:ca:4d:7e:19:78:f0:55:bd:6f:4a:db:25:7b:a5:68:d0:
bc:c6:19:db:d7:b0:d0:5d:fc:0c:46:f1:b3:a5:ba:86:b3:d6:
82:d7:17:bd:f2:6a:f1:3d:95:55:cd:39:43:06:11:15:c6:42:
65:d6:48:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 31 10:13:54 2026 by rpki-client