This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/4F89B0D6D86311E9BE55026FC4F9AE02.roa File: 4F89B0D6D86311E9BE55026FC4F9AE02.roa (raw, json) Hash identifier: DuUrL8VntttXO/bqEMqMgmiYNclVE7GUUFVn3tqMFJo= Subject key identifier: 03:99:62:44:B2:29:00:CB:17:DC:9A:CA:D9:23:72:34:8D:30:D2:5B Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Certificate serial: 2AFD Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/4F89B0D6D86311E9BE55026FC4F9AE02.roa Signing time: Fri 02 Jan 2026 16:13:07 +0000 ROA not before: Fri 02 Jan 2026 16:13:07 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 136742 IP address blocks: 49.231.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 15:33:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11005 (0x2afd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Validity Not Before: Jan 2 16:13:07 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6957ee93-6682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3e:4c:16:7d:0d:8f:ae:bb:85:25:64:c6:2a: 07:c2:6f:04:59:d0:ac:21:50:49:ac:41:57:57:42: 83:0f:6f:1e:b6:8a:4c:ee:41:94:32:eb:6c:6d:b9: 40:9c:bf:48:ae:fd:87:16:ba:aa:9b:91:2a:9e:e0: 1a:c9:d9:d0:b5:6b:5f:78:66:0c:53:c2:dc:bd:68: e2:b6:ae:45:c8:d5:5a:28:ae:76:25:8c:69:81:a1: ce:35:6e:0b:73:50:ca:e8:e9:b5:59:6c:46:ed:d0: 00:74:c5:ba:20:70:88:88:a8:be:87:07:9d:47:ed: ba:0e:5d:3f:6a:9d:0a:06:a2:7c:76:3b:03:f6:4a: eb:ee:ee:d2:d6:83:53:bb:4f:0e:0f:4a:56:e4:74: 5c:97:8f:77:70:0c:e7:28:8f:0c:02:df:bc:00:b4: 72:06:a7:e8:2f:8b:77:76:4b:10:ef:bb:24:fd:72: f2:d3:b7:16:b0:9a:db:09:a1:a4:e7:a6:17:8e:90: ad:36:93:18:52:c2:1a:39:c4:09:7e:ee:db:ae:96: 51:1f:43:45:ca:46:03:e4:ac:11:e3:08:e6:e1:e6: 76:24:1e:cf:ef:de:ed:b6:22:64:e4:70:b3:95:a0: d4:3c:04:40:71:27:a5:dc:e7:76:25:72:d7:dd:0b: 2b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:99:62:44:B2:29:00:CB:17:DC:9A:CA:D9:23:72:34:8D:30:D2:5B X509v3 Authority Key Identifier: keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/4F89B0D6D86311E9BE55026FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.231.191.0/24 Signature Algorithm: sha256WithRSAEncryption 04:7e:23:a4:fe:ab:36:62:2a:17:a2:50:15:77:d6:56:c7:6e: 79:c4:8d:4b:4d:33:64:a6:d9:91:16:9a:9b:92:b4:18:99:59: 31:bd:ff:91:05:1f:d0:d5:26:0b:57:41:c2:92:73:07:6d:b7: da:63:09:7b:cc:1d:a8:83:30:8d:24:a8:96:aa:6e:31:5f:ba: 12:c3:46:c0:9e:11:56:31:04:28:ed:c2:09:92:bf:11:d2:a3: e7:03:ac:a7:2d:3a:f0:37:bb:23:3c:70:bb:19:79:49:a2:49: 9e:7e:3e:43:9b:2b:52:ef:80:fc:21:c2:38:64:91:ae:8e:fb: 5e:b0:8e:77:4a:87:bd:bf:e7:8a:12:f0:54:cf:78:5c:01:6e: 9e:54:f0:52:25:93:9f:6e:6e:a6:76:5a:44:78:6f:17:d4:03: 9e:ef:11:0e:bf:ea:08:0e:3f:77:9f:79:7e:fb:53:df:46:00: 8f:3d:72:c9:11:9e:00:70:be:f6:19:d9:99:72:b6:de:39:a4: a6:42:9d:2f:66:6a:f2:93:4f:ff:86:10:cc:20:10:09:9f:23: de:f9:34:19:6f:2c:ee:ae:f2:92:d8:62:4e:75:63:dc:30:b7: 42:a9:84:e6:f0:1b:a5:73:1d:78:31:e1:c1:d1:85:09:2b:96: 9a:05:fe:8a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICKv0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx MUJENTQxMTAvBgNVBAUTKEJDRkFGOEQzM0YxOEE4RDM2MDIwMjlFQkNFREUxRTM2 QUYyMDcxNUMwHhcNMjYwMTAyMTYxMzA3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU3ZWU5My02NjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsT5MFn0Nj667hSVkxioHwm8EWdCsIVBJrEFXV0KDD28etopM7kGUMutsbblA nL9Irv2HFrqqm5EqnuAaydnQtWtfeGYMU8LcvWjitq5FyNVaKK52JYxpgaHONW4L c1DK6Om1WWxG7dAAdMW6IHCIiKi+hwedR+26Dl0/ap0KBqJ8djsD9krr7u7S1oNT u08OD0pW5HRcl493cAznKI8MAt+8ALRyBqfoL4t3dksQ77sk/XLy07cWsJrbCaGk 56YXjpCtNpMYUsIaOcQJfu7brpZRH0NFykYD5KwR4wjm4eZ2JB7P797ttiJk5HCz laDUPARAcSel3Od2JXLX3Qsr1wIDAQABo4IClTCCApEwHQYDVR0OBBYEFAOZYkSy KQDLF9yaytkjcjSNMNJbMB8GA1UdIwQYMBaAFLz6+NM/GKjTYCAp687eHjavIHFc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC8zRTI4MUM5ODAw NDkxMUU1QjRCNjRGNjNDNEY5QUUwMi92UHI0MHo4WXFOTmdJQ25yenQ0ZU5xOGdj VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZQcjQwejhZcU5OZ0lDbnJ6dDRlTnE4Z2NWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUJENTQvM0UyODFDOTgwMDQ5MTFFNUI0QjY0RjYzQzRGOUFFMDIvNEY4OUIwRDZE ODYzMTFFOUJFNTUwMjZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAx578wDQYJKoZIhvcNAQELBQADggEBAAR+I6T+qzZiKhei UBV31lbHbnnEjUtNM2Sm2ZEWmpuStBiZWTG9/5EFH9DVJgtXQcKScwdtt9pjCXvM HaiDMI0kqJaqbjFfuhLDRsCeEVYxBCjtwgmSvxHSo+cDrKctOvA3uyM8cLsZeUmi SZ5+PkObK1LvgPwhwjhkka6O+16wjndKh72/54oS8FTPeFwBbp5U8FIlk59ubqZ2 WkR4bxfUA57vEQ6/6ggOP3efeX77U99GAI89cskRngBwvvYZ2Zlytt45pKZCnS9m avKTT/+GEMwgEAmfI975NBlvLO6u8pLYYk51Y9wwt0KphObwG6VzHXgx4cHRhQkr lpoF/oo= -----END CERTIFICATE-----Generated at Sun Jan 25 16:18:50 2026 by rpki-client