This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E5F9/1AF23048F69111F0A0F488523A6F56BC/DF3673AAF69211F094F72B3C3B6F56BC.roa
File: DF3673AAF69211F094F72B3C3B6F56BC.roa (raw, json)
Hash identifier: 269AvhQolahpLCjVseaCjkBLW+7q9ILhGbenddbWthw=
Subject key identifier: ED:4B:8D:B6:D4:FB:D7:09:4C:A2:24:C2:B9:F1:AE:8D:53:5A:3A:11
Certificate issuer: /CN=A913E5F9/serialNumber=8DE765CA91D2B935362BA44C75B5C122B4A6CEF4
Certificate serial: 09
Authority key identifier: 8D:E7:65:CA:91:D2:B9:35:36:2B:A4:4C:75:B5:C1:22:B4:A6:CE:F4
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jedlypHSuTU2K6RMdbXBIrSmzvQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E5F9/1AF23048F69111F0A0F488523A6F56BC/DF3673AAF69211F094F72B3C3B6F56BC.roa
Signing time: Wed 21 Jan 2026 06:32:39 +0000
ROA not before: Wed 21 Jan 2026 06:32:39 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 134562
IP address blocks: 151.158.16.0/23 maxlen: 23
151.158.16.0/24 maxlen: 24
151.158.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E5F9/1AF23048F69111F0A0F488523A6F56BC/jedlypHSuTU2K6RMdbXBIrSmzvQ.crl
rsync://rpki.apnic.net/member_repository/A913E5F9/1AF23048F69111F0A0F488523A6F56BC/jedlypHSuTU2K6RMdbXBIrSmzvQ.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jedlypHSuTU2K6RMdbXBIrSmzvQ.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 07:12:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E5F9, serialNumber=8DE765CA91D2B935362BA44C75B5C122B4A6CEF4
Validity
Not Before: Jan 21 06:32:39 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69707306-b03f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5c:6f:21:ee:c4:eb:d8:02:6a:83:7b:1d:24:
15:90:f3:db:a7:f7:d7:03:cc:2a:fe:3f:39:20:18:
93:b7:05:ff:10:8d:34:82:39:87:8d:eb:3e:37:f1:
f7:17:cc:84:42:da:62:84:9d:4f:da:da:0a:cb:36:
41:46:65:cd:a9:00:44:24:1c:a2:fe:bc:bd:d3:1a:
f4:9a:65:65:e1:b1:e7:8b:f7:97:9d:5b:f3:0e:a1:
14:03:e5:fb:85:30:79:64:66:93:91:a2:ff:9b:87:
07:07:8d:30:f5:88:7a:4e:66:5b:ca:5d:df:ec:6a:
ce:91:49:de:81:4d:f0:35:e6:95:f8:59:8b:bd:f6:
75:ae:2c:f7:37:74:cf:fc:17:58:22:6b:49:9d:49:
c4:08:43:2a:84:91:4d:13:d8:d6:31:04:5b:a7:d5:
8a:34:61:d5:41:e4:aa:e4:95:b6:70:80:9b:e8:3b:
0c:a7:2b:02:25:19:d1:b2:ed:73:57:47:f8:12:f4:
7a:95:55:c5:41:71:4c:9c:be:78:68:ce:40:a7:83:
0f:38:04:25:30:d6:11:76:b5:b4:05:f3:5f:30:ef:
36:e4:d2:be:8d:0f:13:5c:7d:b6:a5:2b:2b:3b:95:
df:d9:09:c7:68:c4:d5:9b:81:a3:10:e9:3a:dd:e6:
44:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:4B:8D:B6:D4:FB:D7:09:4C:A2:24:C2:B9:F1:AE:8D:53:5A:3A:11
X509v3 Authority Key Identifier:
keyid:8D:E7:65:CA:91:D2:B9:35:36:2B:A4:4C:75:B5:C1:22:B4:A6:CE:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E5F9/1AF23048F69111F0A0F488523A6F56BC/jedlypHSuTU2K6RMdbXBIrSmzvQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jedlypHSuTU2K6RMdbXBIrSmzvQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E5F9/1AF23048F69111F0A0F488523A6F56BC/DF3673AAF69211F094F72B3C3B6F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
151.158.16.0/23
Signature Algorithm: sha256WithRSAEncryption
82:3e:5a:6c:48:4d:f9:43:cf:66:f8:21:d3:ce:24:c4:db:be:
db:ee:e7:08:c3:df:16:21:18:45:b8:c1:99:de:b4:0d:fd:09:
ff:f7:12:1b:8d:54:22:6f:8f:5f:7f:3a:70:4e:d6:97:b0:57:
d2:47:f2:1b:b2:3e:1b:d8:d1:94:39:0a:fe:28:f8:2b:5a:5c:
3a:84:03:d7:7c:53:38:86:85:7e:98:f8:b0:be:8e:ed:59:90:
18:a6:92:40:35:ac:1a:cf:5d:36:9d:1a:f4:97:32:d2:24:ce:
db:f8:26:1f:c1:f5:23:7c:8c:99:ae:1e:0f:10:43:ec:fd:e8:
d8:39:8e:ab:93:cf:a7:17:37:78:2d:0d:08:8a:42:4f:e8:a6:
0a:55:24:6d:e3:8a:31:c0:4a:0d:23:90:0c:d5:f4:7b:0c:94:
73:a7:b1:21:9b:eb:92:cc:c6:79:36:35:8b:dc:4e:92:76:77:
57:fb:9e:f5:0e:fd:bf:e3:95:e6:91:d5:53:16:c5:89:1f:c1:
7d:eb:45:a0:dc:08:e3:ca:0d:f2:e8:30:11:43:8d:8d:e1:fe:
ff:03:88:8c:96:13:14:5c:b6:fa:74:38:4a:ea:68:c2:d5:05:
15:fc:d5:24:e5:b6:21:27:30:25:8b:eb:07:ae:76:dc:3d:62:
e3:87:1b:e0
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTEz
RTVGOTExMC8GA1UEBRMoOERFNzY1Q0E5MUQyQjkzNTM2MkJBNDRDNzVCNUMxMjJC
NEE2Q0VGNDAeFw0yNjAxMjEwNjMyMzlaFw0yNzA1MDEwMDAwMDBaMBgxFjAUBgNV
BAMMDTY5NzA3MzA2LWIwM2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCWXG8h7sTr2AJqg3sdJBWQ89un99cDzCr+PzkgGJO3Bf8QjTSCOYeN6z438fcX
zIRC2mKEnU/a2grLNkFGZc2pAEQkHKL+vL3TGvSaZWXhseeL95edW/MOoRQD5fuF
MHlkZpORov+bhwcHjTD1iHpOZlvKXd/sas6RSd6BTfA15pX4WYu99nWuLPc3dM/8
F1gia0mdScQIQyqEkU0T2NYxBFun1Yo0YdVB5KrklbZwgJvoOwynKwIlGdGy7XNX
R/gS9HqVVcVBcUycvnhozkCngw84BCUw1hF2tbQF818w7zbk0r6NDxNcfbalKys7
ld/ZCcdoxNWbgaMQ6Trd5kSjAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU7UuNttT7
1wlMoiTCufGujVNaOhEwHwYDVR0jBBgwFoAUjedlypHSuTU2K6RMdbXBIrSmzvQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNFNUY5LzFBRjIzMDQ4RjY5
MTExRjBBMEY0ODg1MjNBNkY1NkJDL2plZGx5cEhTdVRVMks2Uk1kYlhCSXJTbXp2
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvamVkbHlwSFN1VFUySzZSTWRiWEJJclNtenZRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RTVGOS8xQUYyMzA0OEY2OTExMUYwQTBGNDg4NTIzQTZGNTZCQy9ERjM2NzNBQUY2
OTIxMUYwOTRGNzJCM0MzQjZGNTZCQy5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAZeeEDANBgkqhkiG9w0BAQsFAAOCAQEAgj5abEhN+UPPZvgh
084kxNu+2+7nCMPfFiEYRbjBmd60Df0J//cSG41UIm+PX386cE7Wl7BX0kfyG7I+
G9jRlDkK/ij4K1pcOoQD13xTOIaFfpj4sL6O7VmQGKaSQDWsGs9dNp0a9Jcy0iTO
2/gmH8H1I3yMma4eDxBD7P3o2DmOq5PPpxc3eC0NCIpCT+imClUkbeOKMcBKDSOQ
DNX0ewyUc6exIZvrkszGeTY1i9xOknZ3V/ue9Q79v+OV5pHVUxbFiR/BfetFoNwI
48oN8ugwEUONjeH+/wOIjJYTFFy2+nQ4SupowtUFFfzVJOW2IScwJYvrB6523D1i
44cb4A==
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:19:07 2026 by rpki-client