This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/A3C2B7D25DBC11EE80E75075C4F9AE02.roa File: A3C2B7D25DBC11EE80E75075C4F9AE02.roa (raw, json) Hash identifier: T/8P6pTBdORiGqhTEinIuK8yEnQUVy3kyIdzMTz9KMw= Subject key identifier: C0:D3:5B:B5:85:AA:D6:37:F7:B7:74:D1:D3:BB:D5:CF:FE:49:90:10 Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Certificate serial: 2AF0 Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/A3C2B7D25DBC11EE80E75075C4F9AE02.roa Signing time: Fri 02 Jan 2026 16:12:53 +0000 ROA not before: Fri 02 Jan 2026 16:12:53 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 132821 IP address blocks: 58.64.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 15:33:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10992 (0x2af0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Validity Not Before: Jan 2 16:12:53 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6957ee85-ffba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3d:83:50:b4:8e:20:cb:39:97:a9:17:f5:00: 4f:23:aa:bb:ef:69:68:26:2e:be:b5:da:d5:d1:04: 3f:17:70:12:6a:4b:a3:b2:3c:be:c2:3a:f6:40:6a: 5c:26:98:39:ee:e9:c5:96:1e:24:9b:bb:c5:57:e0: 42:98:8d:cd:ef:2c:6e:f4:55:9e:2a:67:dc:6c:74: 21:8d:2e:1e:32:01:91:27:ed:57:4b:9c:ab:ac:79: 6e:ff:4f:61:e1:07:30:89:bd:22:1e:62:c2:28:44: 43:7d:2b:f5:64:20:16:72:53:51:3d:24:9c:20:a8: e7:a2:a5:d1:c2:cd:f3:8c:9c:13:e7:14:5f:c1:4e: fe:48:ce:b7:bf:10:10:56:ed:58:3b:9f:fa:b5:5d: 9e:be:30:d3:1f:93:ab:26:df:91:b5:45:56:a6:c7: 8d:dd:8c:96:dc:32:af:d9:f5:df:e0:4f:ae:1a:83: 46:04:c9:0d:3f:38:42:01:d3:c2:69:15:a0:e1:8a: 65:44:39:ca:67:84:4e:d0:a2:14:ed:93:94:09:6c: 77:b3:72:de:21:65:0c:f1:91:90:ec:4c:78:4f:e9: c9:c5:09:cf:80:d2:ac:5c:50:41:44:92:fa:8f:61: 9d:ff:58:ba:c7:e1:63:11:b5:7d:77:97:6a:df:86: 8f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:D3:5B:B5:85:AA:D6:37:F7:B7:74:D1:D3:BB:D5:CF:FE:49:90:10 X509v3 Authority Key Identifier: keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/A3C2B7D25DBC11EE80E75075C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.64.36.0/24 Signature Algorithm: sha256WithRSAEncryption 88:38:2e:ac:4d:17:83:f1:15:0d:d5:ed:b3:30:b0:65:51:48: e8:68:9b:21:fd:07:63:3d:b3:9e:9f:9a:eb:a3:4d:1f:90:92: 87:ec:e3:de:5c:b0:31:c9:b9:8f:61:2f:37:b1:b3:12:ee:0d: e3:35:e4:aa:e9:94:8b:e5:ef:b1:bc:d5:56:8d:65:71:74:68: 3a:3f:01:78:01:33:9b:2d:b0:e2:0b:61:6b:4c:97:70:99:eb: cf:8a:f1:07:9d:75:d5:2a:58:8c:94:35:4f:18:4c:ce:c3:57: 0d:40:9e:32:43:16:f9:53:80:ed:a5:b7:3b:53:41:86:65:82: 79:9b:c3:b3:5f:57:b0:22:5b:b2:90:bc:25:03:c6:d2:d4:12: 95:d8:ba:03:d1:3e:f3:34:b9:fb:23:38:63:c1:33:6b:14:f2: 12:ba:2f:4c:a9:d9:27:cb:5a:9f:d5:2a:d0:e0:cc:9a:9b:b6: 07:27:01:c1:23:bf:39:5d:bf:2d:3d:a6:36:a6:df:5c:1d:19: c5:79:a7:84:d5:8b:6e:16:e2:fb:b4:8a:ba:7d:1e:05:12:d4: 82:ea:a2:4a:b1:17:4c:79:ef:cc:9e:0c:42:40:12:c7:e0:51: ec:4e:5c:73:41:08:52:07:90:77:90:fc:a6:a4:fd:bf:ca:a6: 12:a6:4c:94 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICKvAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx MUJENTQxMTAvBgNVBAUTKEJDRkFGOEQzM0YxOEE4RDM2MDIwMjlFQkNFREUxRTM2 QUYyMDcxNUMwHhcNMjYwMTAyMTYxMjUzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU3ZWU4NS1mZmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArD2DULSOIMs5l6kX9QBPI6q772loJi6+tdrV0QQ/F3ASakujsjy+wjr2QGpc Jpg57unFlh4km7vFV+BCmI3N7yxu9FWeKmfcbHQhjS4eMgGRJ+1XS5yrrHlu/09h 4Qcwib0iHmLCKERDfSv1ZCAWclNRPSScIKjnoqXRws3zjJwT5xRfwU7+SM63vxAQ Vu1YO5/6tV2evjDTH5OrJt+RtUVWpseN3YyW3DKv2fXf4E+uGoNGBMkNPzhCAdPC aRWg4YplRDnKZ4RO0KIU7ZOUCWx3s3LeIWUM8ZGQ7Ex4T+nJxQnPgNKsXFBBRJL6 j2Gd/1i6x+FjEbV9d5dq34aP3QIDAQABo4IClTCCApEwHQYDVR0OBBYEFMDTW7WF qtY397d00dO71c/+SZAQMB8GA1UdIwQYMBaAFLz6+NM/GKjTYCAp687eHjavIHFc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC8zRTI4MUM5ODAw NDkxMUU1QjRCNjRGNjNDNEY5QUUwMi92UHI0MHo4WXFOTmdJQ25yenQ0ZU5xOGdj VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZQcjQwejhZcU5OZ0lDbnJ6dDRlTnE4Z2NWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUJENTQvM0UyODFDOTgwMDQ5MTFFNUI0QjY0RjYzQzRGOUFFMDIvQTNDMkI3RDI1 REJDMTFFRTgwRTc1MDc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAA6QCQwDQYJKoZIhvcNAQELBQADggEBAIg4LqxNF4PxFQ3V 7bMwsGVRSOhomyH9B2M9s56fmuujTR+Qkofs495csDHJuY9hLzexsxLuDeM15Krp lIvl77G81VaNZXF0aDo/AXgBM5stsOILYWtMl3CZ68+K8QedddUqWIyUNU8YTM7D Vw1AnjJDFvlTgO2ltztTQYZlgnmbw7NfV7AiW7KQvCUDxtLUEpXYugPRPvM0ufsj OGPBM2sU8hK6L0yp2SfLWp/VKtDgzJqbtgcnAcEjvzldvy09pjam31wdGcV5p4TV i24W4vu0irp9HgUS1ILqokqxF0x578yeDEJAEsfgUexOXHNBCFIHkHeQ/Kak/b/K phKmTJQ= -----END CERTIFICATE-----Generated at Sun Jan 25 16:18:35 2026 by rpki-client