This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/0D491000A64811EA939A7F67C4F9AE02.roa File: 0D491000A64811EA939A7F67C4F9AE02.roa (raw, json) Hash identifier: kkd/CbtVIoWblEY1duaDls2Uy2Uyf0EyvNKyp/C3IM4= Subject key identifier: 74:72:6F:BC:2E:13:B0:A6:BA:03:FE:3C:81:8F:84:E9:FD:0B:6F:49 Certificate issuer: /CN=A9118D0F/serialNumber=43E1E8C4261CE07D4F8E4CFB7A3F833FBB46B88C Certificate serial: 09B9 Authority key identifier: 43:E1:E8:C4:26:1C:E0:7D:4F:8E:4C:FB:7A:3F:83:3F:BB:46:B8:8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/0D491000A64811EA939A7F67C4F9AE02.roa Signing time: Fri 16 Jan 2026 08:08:42 +0000 ROA not before: Fri 16 Jan 2026 08:08:42 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 59268 IP address blocks: 49.128.64.0/24 maxlen: 24 49.128.65.0/24 maxlen: 24 49.128.66.0/24 maxlen: 24 49.128.67.0/24 maxlen: 24 49.128.68.0/24 maxlen: 24 49.128.69.0/24 maxlen: 24 49.128.70.0/24 maxlen: 24 49.128.71.0/24 maxlen: 24 49.128.72.0/24 maxlen: 24 49.128.73.0/24 maxlen: 24 49.128.74.0/24 maxlen: 24 49.128.75.0/24 maxlen: 24 49.128.76.0/24 maxlen: 24 49.128.77.0/24 maxlen: 24 49.128.78.0/24 maxlen: 24 49.128.79.0/24 maxlen: 24 49.128.80.0/24 maxlen: 24 49.128.81.0/24 maxlen: 24 49.128.82.0/24 maxlen: 24 49.128.83.0/24 maxlen: 24 49.128.84.0/24 maxlen: 24 49.128.85.0/24 maxlen: 24 49.128.86.0/24 maxlen: 24 49.128.87.0/24 maxlen: 24 49.128.88.0/24 maxlen: 24 49.128.89.0/24 maxlen: 24 49.128.90.0/24 maxlen: 24 49.128.91.0/24 maxlen: 24 49.128.92.0/24 maxlen: 24 49.128.93.0/24 maxlen: 24 49.128.94.0/24 maxlen: 24 49.128.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 19:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2489 (0x9b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118D0F, serialNumber=43E1E8C4261CE07D4F8E4CFB7A3F833FBB46B88C Validity Not Before: Jan 16 08:08:42 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6969f20a-b426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1c:09:8c:e5:42:47:8e:e5:d0:37:fd:17:19: c5:4b:c1:ff:69:f8:4a:4c:f2:2a:78:d1:05:83:cd: 07:6e:9f:57:73:8b:cf:af:4d:cb:69:70:4a:ab:fc: f4:f3:b7:7b:2b:db:a2:35:70:a5:6e:00:b7:70:d7: 67:e7:a4:b4:ac:62:3e:72:00:74:72:cb:4d:83:96: 0b:d9:73:c3:04:51:7e:6f:70:cc:0a:a8:ab:4e:aa: 00:6d:4b:f8:1c:eb:05:4c:e3:c2:dc:f8:fa:26:87: 74:dd:72:5c:9e:39:c9:46:c2:ee:2a:ca:7f:e8:13: 95:e5:b6:0b:54:9f:22:5a:2d:0d:af:ca:56:cb:5b: 0a:8a:db:fb:67:61:29:3d:7d:70:7e:02:48:31:b3: 3b:23:07:8f:ce:c6:19:9c:73:68:36:5b:0f:c5:e8: 92:ad:80:e9:e7:b7:f3:61:ee:b7:45:c2:c6:6b:ff: 6c:62:34:fe:3d:3b:06:6c:bd:3e:66:ec:85:1b:9b: 2a:31:99:ef:01:54:1a:82:ed:d0:81:4d:9a:76:7c: 1d:a2:52:44:73:7e:28:23:14:bc:6e:65:aa:47:66: 1f:c2:8f:bb:9c:20:17:56:b6:a3:46:74:95:8d:39: ad:76:9a:a0:43:74:b9:82:db:4d:b2:4e:9b:43:8a: 0b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:72:6F:BC:2E:13:B0:A6:BA:03:FE:3C:81:8F:84:E9:FD:0B:6F:49 X509v3 Authority Key Identifier: keyid:43:E1:E8:C4:26:1C:E0:7D:4F:8E:4C:FB:7A:3F:83:3F:BB:46:B8:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/0D491000A64811EA939A7F67C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.128.64.0/19 Signature Algorithm: sha256WithRSAEncryption 14:55:13:f9:92:48:ce:30:53:8f:04:07:c6:4d:32:d5:ac:b3: 77:3c:55:4c:3f:1d:f1:dd:92:b0:98:3b:9d:1e:bb:ac:ec:d6: f5:1c:cc:15:18:6d:6b:cc:7b:c9:97:80:5b:4d:f5:c9:93:74: 81:d1:12:0f:36:ab:ff:07:69:a6:97:5e:e4:f8:39:32:f9:56: 4a:24:2b:00:33:99:8a:70:a8:7a:79:b2:95:62:79:b0:bd:59: 69:6b:47:cc:53:bf:5a:9f:72:1e:ad:e6:f8:ac:89:33:7e:cf: 2f:ec:fb:1d:7e:fd:dd:62:98:78:29:d6:b9:26:35:a2:ec:47: 99:13:23:b4:3e:16:02:1f:6c:7e:d6:e1:b8:22:ae:41:de:fb: 1a:8f:c3:93:19:54:bf:d4:93:22:f7:33:6c:c2:d8:c4:d9:70: d7:18:09:2d:07:f8:6f:3d:c9:57:a5:4a:7d:ec:37:e2:da:fd: 65:12:f3:23:6f:9c:05:c9:c4:dd:6d:a0:e9:89:b8:52:df:b5: 19:0f:35:5c:ab:be:d1:f9:3c:c4:33:58:32:d9:8d:4e:78:d8: 86:3f:c7:c4:40:24:d3:23:1b:e9:36:08:f2:3c:b9:7f:5b:ba: 8b:87:4b:20:9f:0c:dd:fc:11:08:57:1a:bc:22:69:7e:5d:4a: b3:62:fe:a7 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThEMEYxMTAvBgNVBAUTKDQzRTFFOEM0MjYxQ0UwN0Q0RjhFNENGQjdBM0Y4MzNG QkI0NkI4OEMwHhcNMjYwMTE2MDgwODQyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTY5ZjIwYS1iNDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlRwJjOVCR47l0Df9FxnFS8H/afhKTPIqeNEFg80Hbp9Xc4vPr03LaXBKq/z0 87d7K9uiNXClbgC3cNdn56S0rGI+cgB0cstNg5YL2XPDBFF+b3DMCqirTqoAbUv4 HOsFTOPC3Pj6Jod03XJcnjnJRsLuKsp/6BOV5bYLVJ8iWi0Nr8pWy1sKitv7Z2Ep PX1wfgJIMbM7IwePzsYZnHNoNlsPxeiSrYDp57fzYe63RcLGa/9sYjT+PTsGbL0+ ZuyFG5sqMZnvAVQagu3QgU2adnwdolJEc34oIxS8bmWqR2Yfwo+7nCAXVrajRnSV jTmtdpqgQ3S5gttNsk6bQ4oLRQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHRyb7wu E7CmugP+PIGPhOn9C29JMB8GA1UdIwQYMBaAFEPh6MQmHOB9T45M+3o/gz+7RriM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEQwRi83RDIyNzNCNEE2 NDYxMUVBQUY5RTkxNjJDNEY5QUUwMi9RLUhveENZYzRIMVBqa3o3ZWotRFA3dEd1 SXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1EtSG94Q1ljNEgxUGprejdlai1EUDd0R3VJdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MThEMEYvN0QyMjczQjRBNjQ2MTFFQUFGOUU5MTYyQzRGOUFFMDIvMEQ0OTEwMDBB NjQ4MTFFQTkzOUE3RjY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAUxgEAwDQYJKoZIhvcNAQELBQADggEBABRVE/mSSM4wU48E B8ZNMtWss3c8VUw/HfHdkrCYO50eu6zs1vUczBUYbWvMe8mXgFtN9cmTdIHREg82 q/8HaaaXXuT4OTL5VkokKwAzmYpwqHp5spViebC9WWlrR8xTv1qfch6t5visiTN+ zy/s+x1+/d1imHgp1rkmNaLsR5kTI7Q+FgIfbH7W4bgirkHe+xqPw5MZVL/UkyL3 M2zC2MTZcNcYCS0H+G89yVelSn3sN+La/WUS8yNvnAXJxN1toOmJuFLftRkPNVyr vtH5PMQzWDLZjU542IY/x8RAJNMjG+k2CPI8uX9buouHSyCfDN38EQhXGrwiaX5d SrNi/qc= -----END CERTIFICATE-----Generated at Sun Jan 25 19:05:04 2026 by rpki-client