This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/5A6EF3DCF25811ECB8BB9A10C4F9AE02.roa File: 5A6EF3DCF25811ECB8BB9A10C4F9AE02.roa (raw, json) Hash identifier: +HXADpFnriZjngYmZdAXy6JNIBciDqbcn4OGIQs8R9c= Subject key identifier: 62:91:19:05:CD:A1:5C:85:6B:8A:D3:C5:93:8B:DB:27:23:4E:CA:97 Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Certificate serial: 2B1A Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/5A6EF3DCF25811ECB8BB9A10C4F9AE02.roa Signing time: Fri 02 Jan 2026 16:13:36 +0000 ROA not before: Fri 02 Jan 2026 16:13:36 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 38444 IP address blocks: 49.229.0.0/23 maxlen: 23 49.229.2.0/23 maxlen: 23 110.49.0.0/16 maxlen: 16 110.49.128.0/17 maxlen: 23 110.49.128.0/19 maxlen: 24 110.49.160.0/21 maxlen: 24 110.49.168.0/24 maxlen: 24 110.49.170.0/23 maxlen: 24 110.49.172.0/22 maxlen: 24 110.49.176.0/20 maxlen: 24 110.49.192.0/18 maxlen: 24 119.31.0.0/17 maxlen: 24 202.149.24.0/21 maxlen: 24 2001:44c8:a000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 15:33:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11034 (0x2b1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Validity Not Before: Jan 2 16:13:36 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6957eeb0-a9aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6e:04:a7:04:dd:12:ed:2b:63:d3:e0:6a:c1: aa:b1:db:3e:8a:41:3f:1a:13:79:98:d9:a6:be:96: c6:85:d2:4f:a0:3c:53:55:9c:f0:d3:09:30:7b:40: 21:d3:44:a5:a9:8f:e6:80:70:95:45:2d:a2:e7:70: c1:3c:01:6b:5d:bc:18:86:ce:93:ad:ea:7f:96:ef: 09:ad:5d:9c:27:21:13:bf:80:4d:af:a0:ff:25:84: d5:f0:5d:3f:0e:f5:54:c1:d3:8a:35:e0:08:f5:46: ac:16:fa:4f:c7:04:b2:d3:e5:98:24:00:b6:30:88: 12:81:bf:f5:5a:25:65:5d:69:af:b1:2a:ee:b3:52: f5:04:c1:ca:16:03:49:ac:87:54:4e:fd:e3:77:15: 2d:c1:5c:19:22:d6:bf:ce:19:b7:7d:36:db:e8:e5: 4d:09:7f:71:3a:44:bc:7c:e5:26:de:85:59:ba:f8: df:18:dd:d9:5d:52:0f:0f:82:16:87:e0:f9:2a:ed: d2:18:05:7d:31:29:10:da:bc:36:88:db:4f:3a:ae: 6b:2b:6d:b7:a5:01:f6:5e:9c:0e:8f:b4:b8:b8:d6: 98:75:fe:6d:03:57:79:b6:5b:4e:31:45:50:bc:f8: 16:a2:a4:2b:71:f3:61:37:14:5c:6d:d3:ea:91:61: ed:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:91:19:05:CD:A1:5C:85:6B:8A:D3:C5:93:8B:DB:27:23:4E:CA:97 X509v3 Authority Key Identifier: keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/5A6EF3DCF25811ECB8BB9A10C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.229.0.0/22 110.49.0.0/16 119.31.0.0/17 202.149.24.0/21 IPv6: 2001:44c8:a000::/36 Signature Algorithm: sha256WithRSAEncryption 74:da:c9:91:9e:78:8d:11:f9:82:5e:36:75:a9:c4:88:d2:03: 13:60:69:c6:35:96:61:46:eb:e3:d2:7d:3c:60:dc:27:be:89: ac:41:89:1d:11:15:b5:37:05:e2:00:c9:36:5f:17:32:6e:a0: 6b:ce:38:79:84:c0:96:7d:9b:5d:a3:ed:78:e9:f1:08:b6:a7: 1b:84:44:39:7d:fd:5e:6d:98:3e:ac:5a:4d:63:83:b6:2f:1f: 2d:72:c4:22:27:55:8e:a8:e1:68:7d:b0:c6:53:63:56:19:67: fd:01:3f:23:52:e0:44:d3:61:f3:33:f7:78:64:d7:17:69:7e: cc:0f:4d:60:92:db:ce:da:b8:00:ea:28:53:07:87:cd:13:f6: 24:3a:27:a6:8f:fe:5e:f8:09:aa:2c:97:88:01:8d:c4:a0:9b: 6b:d7:ea:79:4a:c7:a7:e8:bc:6a:83:fe:d9:dd:a4:92:21:29: 7c:8c:96:12:64:be:54:10:8e:ee:9c:b8:70:00:2d:1c:ac:20: df:e7:f1:1b:92:52:73:26:fb:85:fe:91:2e:92:f0:40:de:60: 92:71:59:39:ab:7e:b7:54:93:60:a3:3c:43:ad:55:54:0f:bb: 9f:90:1d:3d:a9:95:97:a6:74:1d:7c:6b:f7:da:12:ad:04:ad: d4:1e:98:dd -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICKxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx MUJENTQxMTAvBgNVBAUTKEJDRkFGOEQzM0YxOEE4RDM2MDIwMjlFQkNFREUxRTM2 QUYyMDcxNUMwHhcNMjYwMTAyMTYxMzM2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU3ZWViMC1hOWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsm4EpwTdEu0rY9PgasGqsds+ikE/GhN5mNmmvpbGhdJPoDxTVZzw0wkwe0Ah 00SlqY/mgHCVRS2i53DBPAFrXbwYhs6Trep/lu8JrV2cJyETv4BNr6D/JYTV8F0/ DvVUwdOKNeAI9UasFvpPxwSy0+WYJAC2MIgSgb/1WiVlXWmvsSrus1L1BMHKFgNJ rIdUTv3jdxUtwVwZIta/zhm3fTbb6OVNCX9xOkS8fOUm3oVZuvjfGN3ZXVIPD4IW h+D5Ku3SGAV9MSkQ2rw2iNtPOq5rK223pQH2XpwOj7S4uNaYdf5tA1d5tltOMUVQ vPgWoqQrcfNhNxRcbdPqkWHtrQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFGKRGQXN oVyFa4rTxZOL2ycjTsqXMB8GA1UdIwQYMBaAFLz6+NM/GKjTYCAp687eHjavIHFc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC8zRTI4MUM5ODAw NDkxMUU1QjRCNjRGNjNDNEY5QUUwMi92UHI0MHo4WXFOTmdJQ25yenQ0ZU5xOGdj VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZQcjQwejhZcU5OZ0lDbnJ6dDRlTnE4Z2NWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUJENTQvM0UyODFDOTgwMDQ5MTFFNUI0QjY0RjYzQzRGOUFFMDIvNUE2RUYzRENG MjU4MTFFQ0I4QkI5QTEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E MTAvMB0EAgABMBcDBAIx5QADAwBuMQMEB3cfAAMEA8qVGDAOBAIAAjAIAwYEIAFE yKAwDQYJKoZIhvcNAQELBQADggEBAHTayZGeeI0R+YJeNnWpxIjSAxNgacY1lmFG 6+PSfTxg3Ce+iaxBiR0RFbU3BeIAyTZfFzJuoGvOOHmEwJZ9m12j7Xjp8Qi2pxuE RDl9/V5tmD6sWk1jg7YvHy1yxCInVY6o4Wh9sMZTY1YZZ/0BPyNS4ETTYfMz93hk 1xdpfswPTWCS287auADqKFMHh80T9iQ6J6aP/l74Caosl4gBjcSgm2vX6nlKx6fo vGqD/tndpJIhKXyMlhJkvlQQju6cuHAALRysIN/n8RuSUnMm+4X+kS6S8EDeYJJx WTmrfrdUk2CjPEOtVVQPu5+QHT2plZemdB18a/faEq0ErdQemN0= -----END CERTIFICATE-----Generated at Sun Jan 25 16:18:55 2026 by rpki-client